last executing test programs: 5.085809792s ago: executing program 1 (id=650): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=0x0], 0x50) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x110, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe8c2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pimreg\x00'}) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x8, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r8], 0x5c}, 0x1, 0xba01}, 0x0) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.642332143s ago: executing program 1 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) socket$inet_sctp(0x2, 0x0, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800dd8d0000000000000000020000000000000600000000080005"], 0x2c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$can_j1939(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, {}, 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="23b0000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="e4c4760c81364d7d8862bbc4463c2307e646213134e8b8000fee95b0b29b70284ce7cf5f996c2d1f82c7f87ce3f5c6"], 0x3c}}, 0x0) 2.996477003s ago: executing program 3 (id=663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "79700efc584255e7", "acf80c67681784b21cedf882a06d7ff7", "aa9d1437", "23fc206fe8f5fd60"}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 2.93832392s ago: executing program 1 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000180)=""/26, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xfffffffffffffcef, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2, 0x8}, 0x1c) 2.767557906s ago: executing program 0 (id=666): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0xfffffffd, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r5 = socket(0x28, 0x5, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='H\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000010000000f00"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000140), 0xfffffff9, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r6}, 0x38) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket(0x3, 0x1, 0x3ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10}, 0x40000140) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0x113, 0xcf, &(0x7f0000000700)="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", 0x0, 0x92f, 0x0, 0x63, 0x0, &(0x7f00000003c0)="27c946640a2b4f1d5cb5b45c80c473e1bf32c5201621515adf3f485be369973f72cfe1403532e5381e020061cb6cb41d45181df2b666fdc62beceda99a5890424327ff39b36a18db331ba1b73c57a334c612b25e63d2f9749cd59c0926ab0b0ea24a6e", &(0x7f0000000300)="57238e7f0a1189373fe61877ed41e945b03650e206d3ca93", 0x0, 0x0, 0x8001d82}, 0x50) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c0001800600060088a80000100004"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) r13 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2.696753453s ago: executing program 3 (id=667): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x1f4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_ACT={0x1c4, 0x1, [@m_mirred={0x1c0, 0x2, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0x0, 0xfffffff7}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x800, 0x2, 0x2, 0xca3a}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x3, 0x2b26, 0x90}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x1, 0x2, 0x5}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x1, 0xa38d, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xdd34, 0x10000005, 0x2, 0x5}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x100, 0x8, 0x5, 0x2}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x7d, 0x5, 0x4, 0x10000}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb85, 0x6, 0x1, 0x8, 0x7f}, 0x3}}]}, {0x72, 0x6, "bd7064d089039c338ab5953baf1a949d94880460179fd041ee87a38b2b348e44c6e948ed1030a735ba371533df02ed835a49b3cbf53ae76bc8ab3c4174cf08315865e8eaff7ecc84e1b7032ceb9cf0b5e0579e9b235f022b1b5b169e3b0021b6f818d81d5ff65ab54be5788bcf9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1f4}}, 0x0) 2.690442785s ago: executing program 1 (id=668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'batadv_slave_1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000580)={0x40, 0xc, 0x46, 0xfd, 0xa, 0x9, 0xd, 0x8, 0x7d, 0x4, 0xfe, 0xd, 0x0, 0x8}, 0xe) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x4, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x4, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$kcm(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x4, r9}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.689520583s ago: executing program 4 (id=670): r0 = socket(0x2a, 0x2, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040600) close(r4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000708000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000190090001006c617374000000000400028010000180090001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 2.385437172s ago: executing program 3 (id=671): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000047c0000040008800c0001800800060028000000"], 0x24}}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) read(r5, &(0x7f0000000040)=""/50, 0x32) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r8, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) close(0x4) 2.286304291s ago: executing program 4 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000040000000000000000010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010063616966300000000000000000000000140000001000010000000000000000000000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 2.094627187s ago: executing program 4 (id=674): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x13, 0x0, &(0x7f0000000900)) r3 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001940)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x0, 0x10}, {0xffea, 0xa}}}, 0x24}}, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x7f000000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendto$inet6(r7, &(0x7f0000002380)='K', 0x1, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_int(r8, 0x29, 0x5, 0x0, 0xf) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001780)={'gre0\x00', &(0x7f00000026c0)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0x3, 0x3714, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x67, 0x0, 0x88, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @loopback}}}}) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c) close(0x3) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf250900000005000800120000000c00060001000000010000000500080012000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.683573072s ago: executing program 0 (id=676): r0 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x48, 0x110, 0x6, "a9f7f869b2df70a493c3f04123cb44551803a7b125a520526c19a481ac0fc38ef50323641d8a42eb7c9ee8775a0ce3243e165a32dc"}], 0x48}, 0x4810) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.458306772s ago: executing program 0 (id=678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0xd, 0x5, 0x40, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r5, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r6, 0x2, 0x2}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x20, 0x1, 0x2, 0xc01, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d5}, 0x8844) syz_emit_ethernet(0x4e, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$alg(0x26, 0x5, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x18, r11, 0x0, r7}, 0x10) 1.328016818s ago: executing program 3 (id=679): unshare(0x68060200) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000002ac0)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x800000, 0xffffffff, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}, @sadb_x_sec_ctx={0x1}]}, 0x88}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) (async) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) 1.277037218s ago: executing program 1 (id=680): unshare(0x62040200) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000006b119e00080000008510000002000000b7000000000000009500c2000000000095000012faffffff"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001a0093cf26bd7000fddbdf25ff7fd36b27d9a6bde300000000000000ff0100000000000000000000000000013d2200054e240002020000002c000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d332000000ac1e01010000000000000000"], 0xf0}}, 0x28008004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff"], 0x528}}, 0xc000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000002c0), 0x12) (async) unshare(0x22020400) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000640)=""/233, 0xe9}], 0x1, 0x2007ff, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000480)=0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x24000001) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.186325888s ago: executing program 2 (id=681): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x1f4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_ACT={0x1c4, 0x1, [@m_mirred={0x1c0, 0x2, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0x0, 0xfffffff7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x800, 0x2, 0x2, 0xca3a}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x3, 0x2b26, 0x90}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x1, 0x2, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x1, 0xa38d, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xdd34, 0x10000005, 0x2, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x100, 0x8, 0x5, 0x2}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x7d, 0x5, 0x4, 0x10000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb85, 0x6, 0x1, 0x8, 0x7f}, 0x3}}]}, {0x72, 0x6, "bd7064d089039c338ab5953baf1a949d94880460179fd041ee87a38b2b348e44c6e948ed1030a735ba371533df02ed835a49b3cbf53ae76bc8ab3c4174cf08315865e8eaff7ecc84e1b7032ceb9cf0b5e0579e9b235f022b1b5b169e3b0021b6f818d81d5ff65ab54be5788bcf9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1f4}}, 0x0) 1.121712355s ago: executing program 4 (id=682): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) close(r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FICLONERANGE(r4, 0x4020940d, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="70010000", @ANYRES16=r7, @ANYBLOB="04002cbd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a0023adadf2d195a0ba025ed35bd9f48bc1e9518ec52fccc8893c11f09f91c518c435199e5362a9f8d75905f6419899e7276657a3d2591544b64ba23938064c8d56c67233971bd0a44133e10c8391572da1bfefb5f66377a57318b89e4df04f8c0c78df2b483c1ab11c96e6847da19cc2cad16422d415176095", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x88c4}, 0x4000000) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001d004d5b96ee", @ANYRES32=r8, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) recvmsg$unix(r6, &(0x7f0000000040)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/104, 0x68}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000640)=""/251, 0xfb}], 0x9}, 0x2) (async) close(r9) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f00fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) 924.509367ms ago: executing program 4 (id=683): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x1, 0x1, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008100}, 0x0) 831.657564ms ago: executing program 2 (id=684): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004e000100000000000000000037f5"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000100829b020000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000200"/28], 0x50) 686.298251ms ago: executing program 3 (id=685): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7ff, @empty, 0x9}}, 0x8, 0x5, 0x3, 0xd408, 0xfff}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r2, 0x18, "0ee24fc1145b6a960331d224b1b687a92737b6a9bc39091d"}, &(0x7f0000000380)=0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a800000", @ANYRES32=r3, @ANYBLOB="140002000000000000000000000000000000000114000600081400000900"], 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x1400000000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a946e28c22bee3cc86416b5fc05bc843b9960c7468c0f6e9360aa9b7e427a911"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 583.686329ms ago: executing program 4 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000f900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c0000000000"], 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010008100000000008ac3626f2000000a20abb2064b2a589e76000000060a0b040000000000000000020000002e7c63b17825bf77"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x4000804) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1e8, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xbfdf, 0x71}}}}, [@NL80211_ATTR_IE={0x1b5, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x30, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0xffffffffffffff76, 0x1, 0x0, 0xd, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x2, 0x4}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @random={0x6, 0x26, "22364f9d53923e56e576e7cbc7b32c1ef982be63fe008da2a57142ce63312d99b7e90ac377ae"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @perr={0x84, 0x81, {0xdb, 0x7, [{{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x26}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x10}, {{0x0, 0x1}, @device_a, 0x80000001, @value, 0x14}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x3}, {{}, @device_a, 0x1, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x6686, @value, 0x15}]}}, @tim={0x5, 0xc4, {0x9, 0xfb, 0x8, "3caade5b6a4166e92276f05151fb6665d06619d6dd7ccf7f950fff134a52112e1e9befa9608df3e59e24e97523de8f382c8f4f56fae88ba17794dc1f08c1a559c31462dc88fc47e3f6de47f025e78ea9f684376fd173e0ffbfb18f8765cdbfbc683a656e4b2ccadb02cc7e9a7383a30d1e0d54fd950655c023d48eeff1a5981498939f6afc3f44fe423d9fbf11ccd7ad47e91c2ab38dc7d8603c0c67e218b5c852e28a2224ba785ee2ff2ef7889eed64163b7600f3f65acc3f7fd1c757b378ea9d"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1e8}}, 0x24000854) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14e15}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x7}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x6}]}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) 535.088175ms ago: executing program 1 (id=687): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000301010100000000000000000a0000030c0019800800020017000000300002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) close(r1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000000000000700", @ANYRESHEX=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080), &(0x7f0000000200)=0x4) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080089064820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8991, &(0x7f0000000700)={'bond0\x00', 0x800}) 534.59191ms ago: executing program 2 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) close(r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/215, 0xd7}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x62, 0x0) 446.758023ms ago: executing program 2 (id=689): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x10, 0x3, 0x0) accept$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x400045, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000002, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0x7, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x5, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x5, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x1, 0x800, 0x6, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x6, 0x100, 0xa, 0xca6, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x7, 0x44d, 0x7, 0x200, 0x8008, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x9, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x0, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd5c, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x0, 0x9, 0x1, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x43, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x7ff, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0xffffffff, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0x7, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x3, 0x7, 0x4, 0x3, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x656, 0x8, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x1, 0x8, 0x6, 0x401}, 0x20) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x50, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x1c) 398.412144ms ago: executing program 0 (id=690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000340)='\x00\x00\x00?', 0x4, 0x4000054, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x1e46d92f31d5e7c0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4140}, 0x4000800) 307.560316ms ago: executing program 0 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r1, 0x8918, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0xe00}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@dev, 0x0}, &(0x7f0000000200)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19a, 0x19a, 0x3, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @datasec={0xc, 0xa, 0x0, 0xf, 0x2, [{0x1, 0x4, 0x3d40}, {0x1, 0xe1c8, 0x65}, {0x1, 0x8, 0xb537}, {0x5, 0x0, 0x400}, {0x4, 0x80000001, 0x9}, {0x3, 0x3, 0x9}, {0x4, 0x32fe}, {0x2, 0x5, 0x10001}, {0x3, 0xfffff308, 0x80000001}, {0x1, 0x0, 0x2}], "42a9"}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @enum64={0xb, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x10, 0x2, 0x79}, {0x3, 0x6, 0x7f}, {0x7, 0xe03, 0xe}, {0x7, 0x1, 0x400}, {0xb, 0x5, 0x1}]}, @enum={0xe, 0xa, 0x0, 0x6, 0x4, [{0x0, 0xece}, {0xa, 0x6}, {0x6, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0xc, 0xffffffff}, {0x10, 0x400}, {0x8, 0xffff}, {0x6, 0x401}, {0x4, 0x1}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5}, @union={0x9b, 0x4, 0x0, 0x5, 0x0, 0xfffffc01, [{0xe, 0x4, 0x6}, {0x8, 0x2, 0x7d9}, {0xa, 0x4, 0x2}, {0x7, 0x5, 0x5}]}, @float={0xa, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000400)=""/223, 0x1b7, 0xdf, 0x1, 0xd04, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000040)=@raw=[@generic={0x1, 0xa, 0x5, 0xfffd}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x0, 0x1, 0x3, 0x8, 0x6, 0x10}, @ldst={0x2, 0x0, 0x2, 0x8, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @generic={0x0, 0x7, 0x9, 0x8, 0x101}, @alu={0x4, 0x1, 0x4, 0x9, 0x6, 0x4}, @map_idx={0x18, 0xb}], &(0x7f0000000100)='GPL\x00', 0x8, 0x77, &(0x7f0000000140)=""/119, 0x40f00, 0x40, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x4, 0x5, 0xc, 0xa}, {0x0, 0x4, 0x2, 0x2}], 0x10, 0x1ff, @void, @value}, 0x94) 233.768094ms ago: executing program 2 (id=692): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000102010100000000000000000a00ffbd3c0001800c000280050001002b0000002c0001800f0003eb7bccaa051375d600000000000000003500000000ffff64010102"], 0x50}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdcb) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) (async) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$nl_crypto(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000015000b"], 0xe8}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES8], 0x30}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="36ee82b03a3c2ac81e0566317dac6baa7dfb3871a8d07d0078aafe74c69fdda3e50e65fbf6acdb7c08b66eb1e75fc7906045620770bc669c8b518aeae413430ba2c4dde4f3aa70cf9842ca65dbd787c3dc4b0ce8241b60c39bac52016f0def79b5c2fc57fcccf958fc2269ad8964f8dcf2640cee0e4bd1dd7293334de28aea5abfceb68c6153e18e03ca7007959ce60cdac9a6f117c3b4e7d5d6b55e714e2a32d3c9cf7f4713aa7d", 0xa8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="b0000000000000001301000000040000e2836bcb4106e9326ac027f9524355103ca5c3feff2dee718adc35cbe2fe20ae0c7cc57b6287af5c010aa145d2ae595b9327e5f36b7e260b8d1d8a1f2553506a4432b7259d3b177f6de033b36f5777e4c092e34cde9f8047660af9fd589eb8a2be42497e0335315809e5b975a955f7127e450be2a32b93ab8965da0ec78e7f186a4917172dc26c3ed29da21735e1bc93122c897febc6588af5df280000000000ae0ac487c53ee39a1ea92ed98cf00126faf37642"], 0xb0}, 0x44044000) connect$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x3b, 0x6, 0x50, @local, @mcast2, 0x7800, 0x8000, 0x10000}}) 178.243071ms ago: executing program 3 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x48c1, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x80, @remote, 0x0, 0x4}, 0x20) 87.838166ms ago: executing program 2 (id=694): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x1f4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_ACT={0x1c4, 0x1, [@m_mirred={0x1c0, 0x2, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0x0, 0xfffffff7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x800, 0x2, 0x2, 0xca3a}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x3, 0x2b26, 0x90}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x1, 0x2, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x1, 0xa38d, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xdd34, 0x10000005, 0x2, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x100, 0x8, 0x5, 0x2}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x7d, 0x5, 0x4, 0x10000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb85, 0x6, 0x1, 0x8, 0x7f}, 0x3}}]}, {0x72, 0x6, "bd7064d089039c338ab5953baf1a949d94880460179fd041ee87a38b2b348e44c6e948ed1030a735ba371533df02ed835a49b3cbf53ae76bc8ab3c4174cf08315865e8eaff7ecc84e1b7032ceb9cf0b5e0579e9b235f022b1b5b169e3b0021b6f818d81d5ff65ab54be5788bcf9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1f4}}, 0x0) 0s ago: executing program 0 (id=695): r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x1a, 0xa0, &(0x7f0000000040)="7073fd759761d8af21c915d0f488f8bb9ee2772caa27c0b57e36", &(0x7f0000000240)=""/160, 0xe5, 0x0, 0x22, 0xf6, &(0x7f0000000180)="c2ddd87ba0245092572d4b1160facbec54d6082cdefb77f3e668cc30b8e46e8b6ee0", &(0x7f0000000300)="154c69f188048888ef07f5f81eecb64f19a006a5966f08a9eb3e60b908f592be18631ecc60f54454dff6e7c8c2bf823b2452aa13a03b6b082b9c394d3ba0a3c06ff36aabe5e7bff38248901b61f2b1a68567e5ce4ba7c0309f4eddffe9e8d1282c3298e0950028a614b2da8d47aeac33a6adfc77d7a32abeb4b408b4284c4251a5e6436373f0840aba9d0e2b9f3dd6d4b01ffe6e004c4926abf478c7e84a36d4cc0b537ea0e7400361600f441e4d6dcca44797217f58e074d4154a38823021c1a8f484e85996a71af2e733decdbf81d8c7bff26fb8e50417385a1f5f90e6f348ee1ca990602a686cb7982c85354da485cfb204725632", 0xd, 0x0, 0x444}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="686f6dadf0c64b0759c767ff"}}}}}}, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000007c0)=0x0) r6 = getuid() (async) r7 = getgid() ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000800)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) (async) socketpair(0x2b, 0x3, 0x3, &(0x7f00000008c0)={0xffffffffffffffff}) r11 = socket$inet(0x2b, 0x801, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0x20000003}) (async) sendto$inet(r11, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e1f, @remote}, 0x10) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) (async) r15 = getgid() (async) r16 = socket$inet6(0xa, 0xa, 0x4) (async) r17 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000980)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="aed46281d0ae480819e7641b8be62de0c4c2ee6206f27d71e11386498b18ce2a065c892b51ba38782e55ad3dbcffc360e26624b545d4f1d55d754ca63ca16791138b12df950feb87f1682c026008b708aa44ce4096be5520ef5dde240d4c4b2329cbfca8f66628f6b0cb502a3c8cd1df77e3bbc43964cc8c6f287f4b032959c5c4e9ee9229551164527d61f9055d8034499f27f60072af029aee6fcd8b380cae937f44649909d196e6ab8111b0dde21b540af92eb6b4852119e2540f6a7925b84ef625f37931b78f875002559426e01512470b8fcd25b02d4d1864666d9437f128d9e20a0eda45d04db3240c754f6d7920bcad99ed", 0xf5}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="e456a67dbc4aa9e87e22843d35d84a04bc0499312e6975680a5efaf815672d5cd700a9401b62787b67e6c3fd4bce8f078c5ec83fd5bd886e0b078073dd673bb0f69f75c34700119d9e6e7303382393ac2eb76340d874ab901c0674a7edf4e8e341a262d937d3fb8456043bc6fdb37beffdb1825efdbebb858c1165e0917734f97a1c6c1e44e2c9c8f111c61ff1dc9a9f7877a077574c04d9b3920220ab1cc1265770eb1b1e80bab90ed11a5908ad3839f92cfa753620656349037ec086cb08af274cabe5aec5150c4c93209efd77851defa915e8a8f7", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r4, @ANYRES32=r11, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x40844}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="82cb8055c79d4eb77006ec5ec14ccfd02e2e822a383d313ae31e52e6a98c16371366038fcc4926610d6c18603fc53a19893bc0ddc3e5581b3d5fcc2d4f0b86aa", 0x40}], 0x1, &(0x7f0000000e40)=[@rights={{0x2c, 0x1, 0x1, [r16, r1, r1, r17, r0, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r18}}}], 0x50}}], 0x2, 0x20008810) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 68.858009][ T5822] cgroup: Unknown subsys name 'net' [ 69.009567][ T5822] cgroup: Unknown subsys name 'cpuset' [ 69.018318][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.586293][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.669254][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.675873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.385811][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.398207][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.424377][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.433949][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.443044][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.453019][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.461737][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.469562][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.483041][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.507883][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.516533][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.525373][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.527149][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.536257][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.540595][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.555140][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.556817][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.563894][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.569276][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.578053][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.585195][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.598401][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.605295][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.605882][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.613679][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.620844][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.639025][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.639505][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.661512][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.670790][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.130369][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 75.194546][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 75.223503][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 75.246891][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 75.318052][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 75.393555][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.405197][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.413572][ T5842] bridge_slave_0: entered allmulticast mode [ 75.421596][ T5842] bridge_slave_0: entered promiscuous mode [ 75.462122][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.469469][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.476828][ T5842] bridge_slave_1: entered allmulticast mode [ 75.483624][ T5842] bridge_slave_1: entered promiscuous mode [ 75.559166][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.566625][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.573820][ T5843] bridge_slave_0: entered allmulticast mode [ 75.581023][ T5843] bridge_slave_0: entered promiscuous mode [ 75.603382][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.610731][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.618564][ T5832] bridge_slave_0: entered allmulticast mode [ 75.625315][ T5832] bridge_slave_0: entered promiscuous mode [ 75.653485][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.661266][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.668638][ T5843] bridge_slave_1: entered allmulticast mode [ 75.675454][ T5843] bridge_slave_1: entered promiscuous mode [ 75.691400][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.698701][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.706032][ T5832] bridge_slave_1: entered allmulticast mode [ 75.712768][ T5832] bridge_slave_1: entered promiscuous mode [ 75.722051][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.769360][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.777068][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.784260][ T5836] bridge_slave_0: entered allmulticast mode [ 75.791673][ T5836] bridge_slave_0: entered promiscuous mode [ 75.818654][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.839099][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.846761][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.854024][ T5837] bridge_slave_0: entered allmulticast mode [ 75.861099][ T5837] bridge_slave_0: entered promiscuous mode [ 75.869228][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.876455][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.883669][ T5837] bridge_slave_1: entered allmulticast mode [ 75.891523][ T5837] bridge_slave_1: entered promiscuous mode [ 75.900539][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.910375][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.918129][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.925407][ T5836] bridge_slave_1: entered allmulticast mode [ 75.932867][ T5836] bridge_slave_1: entered promiscuous mode [ 75.941259][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.954600][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.983085][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.027762][ T5842] team0: Port device team_slave_0 added [ 76.065085][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.077677][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.098064][ T5832] team0: Port device team_slave_0 added [ 76.105980][ T5842] team0: Port device team_slave_1 added [ 76.113917][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.127856][ T5843] team0: Port device team_slave_0 added [ 76.143846][ T5832] team0: Port device team_slave_1 added [ 76.180049][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.200910][ T5843] team0: Port device team_slave_1 added [ 76.236613][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.243588][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.270655][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.304117][ T5836] team0: Port device team_slave_0 added [ 76.315194][ T5836] team0: Port device team_slave_1 added [ 76.322009][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.329349][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.355650][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.367386][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.374455][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.401319][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.415320][ T5837] team0: Port device team_slave_0 added [ 76.424343][ T5837] team0: Port device team_slave_1 added [ 76.431085][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.438288][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.464309][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.477188][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.484172][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.510238][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.531490][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.538679][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.564703][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.607673][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.614775][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.626785][ T5848] Bluetooth: hci4: command tx timeout [ 76.647469][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.660954][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.668205][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.694205][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.711176][ T5848] Bluetooth: hci2: command tx timeout [ 76.711184][ T5838] Bluetooth: hci3: command tx timeout [ 76.711625][ T5838] Bluetooth: hci0: command tx timeout [ 76.717335][ T5848] Bluetooth: hci1: command tx timeout [ 76.736880][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.743859][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.769900][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.815394][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.822607][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.848682][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.892175][ T5832] hsr_slave_0: entered promiscuous mode [ 76.898873][ T5832] hsr_slave_1: entered promiscuous mode [ 76.943985][ T5837] hsr_slave_0: entered promiscuous mode [ 76.950531][ T5837] hsr_slave_1: entered promiscuous mode [ 76.957174][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.965024][ T5837] Cannot create hsr debugfs directory [ 76.984463][ T5842] hsr_slave_0: entered promiscuous mode [ 76.991033][ T5842] hsr_slave_1: entered promiscuous mode [ 76.997785][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.005396][ T5842] Cannot create hsr debugfs directory [ 77.024637][ T5843] hsr_slave_0: entered promiscuous mode [ 77.031470][ T5843] hsr_slave_1: entered promiscuous mode [ 77.037873][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.045467][ T5843] Cannot create hsr debugfs directory [ 77.075287][ T5836] hsr_slave_0: entered promiscuous mode [ 77.082031][ T5836] hsr_slave_1: entered promiscuous mode [ 77.088477][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.096210][ T5836] Cannot create hsr debugfs directory [ 77.482868][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.498299][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.512634][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.531469][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.579146][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.596374][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.606549][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.623898][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.689097][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.702993][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.713485][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.733695][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.816316][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.826556][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.864020][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.888739][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.917280][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.948628][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.958506][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.974543][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.994232][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.049830][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.076413][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.121613][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.129037][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.149871][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.157058][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.171166][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.182719][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.213616][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.240398][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.247631][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.274904][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.298691][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.305894][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.316467][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.323686][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.333082][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.340528][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.357841][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.429113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.436304][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.463241][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.470428][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.491701][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.527613][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.562980][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.570172][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.591665][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.665757][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.672934][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.706125][ T5848] Bluetooth: hci4: command tx timeout [ 78.786226][ T5848] Bluetooth: hci3: command tx timeout [ 78.791958][ T5848] Bluetooth: hci0: command tx timeout [ 78.792985][ T5835] Bluetooth: hci2: command tx timeout [ 78.798767][ T5848] Bluetooth: hci1: command tx timeout [ 78.949052][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.104302][ T5832] veth0_vlan: entered promiscuous mode [ 79.139927][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.166992][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.179702][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.211665][ T5832] veth1_vlan: entered promiscuous mode [ 79.322737][ T5832] veth0_macvtap: entered promiscuous mode [ 79.331560][ T5843] veth0_vlan: entered promiscuous mode [ 79.349656][ T5832] veth1_macvtap: entered promiscuous mode [ 79.395097][ T5837] veth0_vlan: entered promiscuous mode [ 79.405238][ T5843] veth1_vlan: entered promiscuous mode [ 79.438292][ T5837] veth1_vlan: entered promiscuous mode [ 79.454406][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.464791][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.491896][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.522553][ T5843] veth0_macvtap: entered promiscuous mode [ 79.552774][ T5843] veth1_macvtap: entered promiscuous mode [ 79.564455][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.574169][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.584765][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.594411][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.627704][ T5842] veth0_vlan: entered promiscuous mode [ 79.653505][ T5837] veth0_macvtap: entered promiscuous mode [ 79.689280][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.704485][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.723489][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.733822][ T5837] veth1_macvtap: entered promiscuous mode [ 79.768521][ T5842] veth1_vlan: entered promiscuous mode [ 79.783950][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.795044][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.807052][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.825277][ T5836] veth0_vlan: entered promiscuous mode [ 79.843397][ T5836] veth1_vlan: entered promiscuous mode [ 79.855467][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.864454][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.873627][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.882727][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.893830][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.904900][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.916047][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.927490][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.939860][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.976556][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.984668][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.000986][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.011780][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.022427][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.033156][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.044636][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.061767][ T5842] veth0_macvtap: entered promiscuous mode [ 80.078642][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.089453][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.099130][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.108425][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.137208][ T5842] veth1_macvtap: entered promiscuous mode [ 80.162789][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.171868][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.238573][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.254993][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.257340][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.267005][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.293150][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.303187][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.315304][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.326402][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.343551][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.356737][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.366747][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.377248][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.387378][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.398792][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.410080][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.448632][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.484669][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.500497][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.510061][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.519321][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528351][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.554978][ T5836] veth0_macvtap: entered promiscuous mode [ 80.599856][ T5836] veth1_macvtap: entered promiscuous mode [ 80.654385][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.687698][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.720880][ T5917] batadv_slave_1: entered promiscuous mode [ 80.733681][ T5916] batadv_slave_1: left promiscuous mode [ 80.755812][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.763698][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.782807][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.786144][ T5848] Bluetooth: hci4: command tx timeout [ 80.825337][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.839821][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.861760][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.866496][ T5848] Bluetooth: hci1: command tx timeout [ 80.871881][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.877223][ T5848] Bluetooth: hci2: command tx timeout [ 80.877259][ T5848] Bluetooth: hci0: command tx timeout [ 80.877293][ T5848] Bluetooth: hci3: command tx timeout [ 80.905839][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.915836][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.926551][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.936630][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.947373][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951851][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 80.958610][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.152541][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.167876][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.200338][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.216572][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.234980][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.259419][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.273092][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.290282][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.302873][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.315311][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.330969][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.373040][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.411771][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.434801][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.471914][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.497237][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.540629][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.756228][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.018160][ T5954] netlink: 416 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.133164][ T5950] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.182121][ T5953] bond0: entered promiscuous mode [ 82.210699][ T5953] bond_slave_0: entered promiscuous mode [ 82.231952][ T5953] bond_slave_1: entered promiscuous mode [ 82.289821][ T5953] bond0: left promiscuous mode [ 82.294914][ T5953] bond_slave_0: left promiscuous mode [ 82.317370][ T5953] bond_slave_1: left promiscuous mode [ 82.459071][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.505993][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.693710][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.777639][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.888327][ T5838] Bluetooth: hci4: command tx timeout [ 82.946604][ T5838] Bluetooth: hci3: command tx timeout [ 82.952087][ T5838] Bluetooth: hci0: command tx timeout [ 82.958277][ T5848] Bluetooth: hci2: command tx timeout [ 82.963736][ T5848] Bluetooth: hci1: command tx timeout [ 83.198198][ T5976] Zero length message leads to an empty skb [ 83.427399][ T5983] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 84.012356][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.276571][ T6026] pim6reg: entered allmulticast mode [ 84.311228][ T6026] pim6reg: left allmulticast mode [ 84.419812][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.430947][ T6035] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 84.453023][ T6040] Cannot find set identified by id 0 to match [ 84.476977][ T6039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26'. [ 84.699755][ T6045] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 85.194559][ T6069] netlink: 64 bytes leftover after parsing attributes in process `syz.2.33'. [ 85.659383][ T6099] xt_hashlimit: size too large, truncated to 1048576 [ 85.674993][ T6101] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 85.689179][ T6101] netlink: 'syz.3.44': attribute type 2 has an invalid length. [ 85.697965][ T6099] xt_hashlimit: max too large, truncated to 1048576 [ 85.717110][ T6099] xt_hashlimit: overflow, try lower: 0/0 [ 85.736362][ T6103] Bluetooth: MGMT ver 1.23 [ 85.744404][ T6104] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 85.751746][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 85.759319][ T6104] netlink: 'syz.3.44': attribute type 2 has an invalid length. [ 86.512295][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 86.645077][ T6096] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET) [ 87.073874][ T974] cfg80211: failed to load regulatory.db [ 87.316347][ T6162] syzkaller1: entered promiscuous mode [ 87.321914][ T6162] syzkaller1: entered allmulticast mode [ 87.382193][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 87.424528][ T6168] netlink: 276 bytes leftover after parsing attributes in process `syz.1.62'. [ 87.452455][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 88.056527][ T6183] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 88.163306][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 88.213429][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 88.272994][ T6189] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 88.333734][ T6199] xt_CT: No such helper "netbios-ns" [ 88.482851][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 88.512453][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 88.563988][ T6205] netlink: 44 bytes leftover after parsing attributes in process `syz.3.72'. [ 89.057331][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.130188][ T6226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.146687][ T6228] xt_TCPMSS: Only works on TCP SYN packets [ 89.533935][ T6241] netlink: 76 bytes leftover after parsing attributes in process `syz.1.84'. [ 92.041751][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079a86000: rx timeout, send abort [ 92.051574][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079a85c00: rx timeout, send abort [ 92.061675][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079a86000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.076970][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079a85c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.622060][ T6333] __nla_validate_parse: 3 callbacks suppressed [ 92.622113][ T6333] netlink: 52 bytes leftover after parsing attributes in process `syz.4.110'. [ 92.877588][ T6341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'. [ 92.924499][ T6346] netlink: 'syz.3.114': attribute type 34 has an invalid length. [ 93.275288][ T6360] netlink: 'syz.0.118': attribute type 101 has an invalid length. [ 93.292756][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 93.476341][ T6367] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 93.603998][ T6378] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 93.624311][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.123'. [ 93.648026][ T6376] : entered promiscuous mode [ 93.784960][ T6381] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 93.911342][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.126'. [ 93.945835][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 93.964199][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 94.032208][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 94.084254][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 94.328288][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 94.457000][ T6403] vlan0: entered promiscuous mode [ 94.483145][ T6403] vlan0: entered allmulticast mode [ 95.111195][ T6429] 0·: renamed from hsr_slave_1 (while UP) [ 95.149994][ T6429] 0·: entered allmulticast mode [ 95.157170][ T6429] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 95.239551][ T6436] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 95.290926][ T6436] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 95.447596][ T6444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.528835][ T6441] batadv0: entered promiscuous mode [ 95.556092][ T6440] batadv0: left promiscuous mode [ 95.701384][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.756043][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.797639][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.825880][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.984024][ T6462] tc_dump_action: action bad kind [ 96.291002][ T6469] netlink: 'syz.2.145': attribute type 2 has an invalid length. [ 96.573984][ T6478] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 96.690677][ T6478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.737214][ T6485] bond2: (slave veth3): Enslaving as an active interface with a down link [ 96.989406][ T974] IPVS: starting estimator thread 0... [ 96.999482][ T6492] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 97.145762][ T6499] IPVS: using max 20 ests per chain, 48000 per kthread [ 97.638470][ T6526] bridge0: port 3(gretap0) entered blocking state [ 97.649717][ T6526] bridge0: port 3(gretap0) entered disabled state [ 97.683696][ T6526] gretap0: entered allmulticast mode [ 97.707814][ T6525] netlink: 'syz.4.155': attribute type 10 has an invalid length. [ 97.745574][ T6526] gretap0: entered promiscuous mode [ 97.758800][ T6526] bridge0: port 3(gretap0) entered blocking state [ 97.765833][ T6526] bridge0: port 3(gretap0) entered forwarding state [ 97.785748][ T6530] netlink: 'syz.4.155': attribute type 10 has an invalid length. [ 97.793551][ T6530] __nla_validate_parse: 6 callbacks suppressed [ 97.793569][ T6530] netlink: 2 bytes leftover after parsing attributes in process `syz.4.155'. [ 97.850567][ T6536] gretap0: left allmulticast mode [ 97.870398][ T6536] gretap0: left promiscuous mode [ 97.894718][ T6536] bridge0: port 3(gretap0) entered disabled state [ 97.966619][ T6530] team0: entered promiscuous mode [ 97.996562][ T6530] team_slave_0: entered promiscuous mode [ 98.017040][ T6530] team_slave_1: entered promiscuous mode [ 98.054450][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.076984][ T6530] bridge0: port 3(team0) entered blocking state [ 98.084255][ T6530] bridge0: port 3(team0) entered disabled state [ 98.103859][ T6530] team0: entered allmulticast mode [ 98.112809][ T6530] team_slave_0: entered allmulticast mode [ 98.124375][ T6530] team_slave_1: entered allmulticast mode [ 98.152373][ T6530] bridge0: port 3(team0) entered blocking state [ 98.158982][ T6530] bridge0: port 3(team0) entered forwarding state [ 98.198571][ T6545] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 98.475284][ T6545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.737615][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 98.759589][ T6562] netlink: 'syz.4.165': attribute type 6 has an invalid length. [ 98.792450][ T6563] IPVS: Error joining to the multicast group [ 98.821867][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 99.010383][ T6575] netlink: 72 bytes leftover after parsing attributes in process `syz.0.167'. [ 99.063712][ T6575] batadv1: entered promiscuous mode [ 99.098476][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.731015][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 99.808247][ T6610] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 99.838313][ T6610] macvlan2: entered allmulticast mode [ 99.844041][ T6610] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 99.857870][ T6610] bridge2: port 1(macvlan2) entered blocking state [ 99.869008][ T6610] bridge2: port 1(macvlan2) entered disabled state [ 99.880041][ T6610] macvlan2: entered promiscuous mode [ 99.898585][ T9] hid-generic 0005:7FFF:0008.0001: unknown main item tag 0x0 [ 99.929697][ T6610] bridge2: port 1(macvlan2) entered blocking state [ 99.936622][ T6610] bridge2: port 1(macvlan2) entered forwarding state [ 99.955322][ T9] hid-generic 0005:7FFF:0008.0001: unknown main item tag 0x0 [ 99.992525][ T9] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 100.304408][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 100.335172][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 100.673812][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 100.705132][ T6650] openvswitch: netlink: Message has 8 unknown bytes. [ 100.859414][ T6658] netlink: 68 bytes leftover after parsing attributes in process `syz.0.185'. [ 101.632337][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'. [ 101.740280][ T6700] bridge0: entered promiscuous mode [ 101.773391][ T6700] bridge0: port 4(macsec1) entered blocking state [ 101.795021][ T6700] bridge0: port 4(macsec1) entered disabled state [ 101.818162][ T6700] macsec1: entered allmulticast mode [ 101.851438][ T6700] bridge0: entered allmulticast mode [ 101.898813][ T6700] macsec1: left allmulticast mode [ 101.935941][ T6700] bridge0: left allmulticast mode [ 101.987773][ T6700] bridge0: left promiscuous mode [ 102.594651][ T6747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.812555][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.900498][ T6765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.908076][ T6765] IPv6: NLM_F_CREATE should be set when creating new route [ 102.915521][ T6765] IPv6: NLM_F_CREATE should be set when creating new route [ 103.033002][ T6768] __nla_validate_parse: 3 callbacks suppressed [ 103.033028][ T6768] netlink: 144 bytes leftover after parsing attributes in process `syz.1.205'. [ 103.073378][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 103.209860][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.316540][ T6783] xt_HMARK: proto mask must be zero with L3 mode [ 103.335183][ T6786] xt_hashlimit: size too large, truncated to 1048576 [ 103.342662][ T6787] xt_hashlimit: size too large, truncated to 1048576 [ 103.394923][ T6788] : renamed from bond0 (while UP) [ 103.414378][ T6786] syz.0.210: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.469391][ T6794] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 103.482814][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.0.210 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 103.493498][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.503614][ T6786] Call Trace: [ 103.506950][ T6786] [ 103.509931][ T6786] dump_stack_lvl+0x241/0x360 [ 103.514686][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.519961][ T6786] ? __pfx__printk+0x10/0x10 [ 103.524718][ T6786] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 103.531210][ T6786] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 103.537823][ T6786] warn_alloc+0x278/0x410 [ 103.542208][ T6786] ? __pfx_warn_alloc+0x10/0x10 [ 103.547089][ T6786] ? htable_create+0x102/0x880 [ 103.551891][ T6786] ? __get_vm_area_node+0x1c8/0x2d0 [ 103.557162][ T6786] ? __get_vm_area_node+0x25c/0x2d0 [ 103.562397][ T6786] __vmalloc_node_range_noprof+0x62f/0x1380 [ 103.568334][ T6786] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.574679][ T6786] ? hashlimit_mt_check_common+0x691/0xa40 [ 103.580520][ T6786] ? htable_create+0x102/0x880 [ 103.585308][ T6786] vmalloc_noprof+0x79/0x90 [ 103.589835][ T6786] ? htable_create+0x102/0x880 [ 103.594676][ T6786] htable_create+0x102/0x880 [ 103.599300][ T6786] hashlimit_mt_check_common+0x710/0xa40 [ 103.604969][ T6786] hashlimit_mt_check_v1+0x2ea/0x540 [ 103.610367][ T6786] ? __pfx_lock_release+0x10/0x10 [ 103.615418][ T6786] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 103.621248][ T6786] ? trace_contention_end+0x3c/0x120 [ 103.626590][ T6786] ? static_key_slow_inc+0x21/0x30 [ 103.631736][ T6786] xt_check_match+0x368/0xa40 [ 103.636438][ T6786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.642446][ T6786] ? __pfx_xt_check_match+0x10/0x10 [ 103.647676][ T6786] ? xt_find_match+0x1d3/0x210 [ 103.652475][ T6786] translate_table+0x1671/0x2330 [ 103.657465][ T6786] ? __pfx_translate_table+0x10/0x10 [ 103.662819][ T6786] ? __might_fault+0xaa/0x120 [ 103.667517][ T6786] ? __pfx_lock_release+0x10/0x10 [ 103.672569][ T6786] ? __virt_addr_valid+0x183/0x530 [ 103.677704][ T6786] ? __might_fault+0xc6/0x120 [ 103.682401][ T6786] ? _copy_from_user+0x99/0xc0 [ 103.687207][ T6786] ? copy_from_sockptr_offset+0x6b/0xb0 [ 103.692785][ T6786] do_ip6t_set_ctl+0xe4c/0x1270 [ 103.697665][ T6786] ? __pfx___mutex_trylock_common+0x10/0x10 [ 103.703585][ T6786] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 103.708895][ T6786] ? __pfx_lock_release+0x10/0x10 [ 103.713940][ T6786] ? rcu_is_watching+0x15/0xb0 [ 103.718730][ T6786] ? trace_contention_end+0x3c/0x120 [ 103.724051][ T6786] ? __mutex_unlock_slowpath+0x21e/0x790 [ 103.729711][ T6786] ? __pfx___mutex_lock+0x10/0x10 [ 103.734761][ T6786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.740781][ T6786] nf_setsockopt+0x295/0x2c0 [ 103.745402][ T6786] rawv6_setsockopt+0x327/0x740 [ 103.750272][ T6786] ? __pfx_aa_sk_perm+0x10/0x10 [ 103.755154][ T6786] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 103.760548][ T6786] ? __pfx_lock_acquire+0x10/0x10 [ 103.765613][ T6786] ? aa_sock_opt_perm+0x79/0x120 [ 103.770568][ T6786] ? sock_common_setsockopt+0x37/0xc0 [ 103.775964][ T6786] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.781903][ T6786] do_sock_setsockopt+0x3af/0x720 [ 103.787071][ T6786] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 103.792644][ T6786] ? __fget_files+0x395/0x410 [ 103.797343][ T6786] ? __fget_files+0x2a/0x410 [ 103.801960][ T6786] __x64_sys_setsockopt+0x1ee/0x280 [ 103.807189][ T6786] do_syscall_64+0xf3/0x230 [ 103.811721][ T6786] ? clear_bhb_loop+0x35/0x90 [ 103.816436][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.822390][ T6786] RIP: 0033:0x7f0c00385d29 [ 103.826838][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.846468][ T6786] RSP: 002b:00007f0c011c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.855083][ T6786] RAX: ffffffffffffffda RBX: 00007f0c00575fa0 RCX: 00007f0c00385d29 [ 103.863084][ T6786] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 103.871081][ T6786] RBP: 00007f0c00401b08 R08: 00000000000004c0 R09: 0000000000000000 [ 103.879074][ T6786] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000000 [ 103.887069][ T6786] R13: 0000000000000000 R14: 00007f0c00575fa0 R15: 00007ffc7d6fa878 [ 103.895081][ T6786] [ 103.955873][ T6786] Mem-Info: [ 103.959593][ T6786] active_anon:7908 inactive_anon:0 isolated_anon:0 [ 103.959593][ T6786] active_file:1334 inactive_file:38256 isolated_file:0 [ 103.959593][ T6786] unevictable:768 dirty:222 writeback:0 [ 103.959593][ T6786] slab_reclaimable:9788 slab_unreclaimable:99553 [ 103.959593][ T6786] mapped:30734 shmem:4429 pagetables:795 [ 103.959593][ T6786] sec_pagetables:0 bounce:0 [ 103.959593][ T6786] kernel_misc_reclaimable:0 [ 103.959593][ T6786] free:1338736 free_pcp:514 free_cma:0 [ 104.078700][ T6786] Node 0 active_anon:31532kB inactive_anon:0kB active_file:5336kB inactive_file:152952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114536kB dirty:888kB writeback:0kB shmem:16180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11152kB pagetables:3080kB sec_pagetables:0kB all_unreclaimable? no [ 104.111619][ T6786] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 104.184123][ T6786] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.218307][ T6786] lowmem_reserve[]: 0 2465 2466 0 0 [ 104.243101][ T6786] Node 0 DMA32 free:1432656kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:24292kB inactive_anon:0kB active_file:5336kB inactive_file:152116kB unevictable:1536kB writepending:888kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:7352kB local_pcp:800kB free_cma:0kB [ 104.283663][ T6786] lowmem_reserve[]: 0 0 0 0 0 [ 104.289762][ T6786] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.335309][ T6786] lowmem_reserve[]: 0 0 0 0 0 [ 104.355441][ T6786] Node 1 Normal free:3909984kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 104.396714][ T6786] lowmem_reserve[]: 0 0 0 0 0 [ 104.404258][ T6786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.418670][ T6786] Node 0 DMA32: 529*4kB (UM) 483*8kB (UME) 519*16kB (UME) 93*32kB (UME) 77*64kB (UME) 64*128kB (UME) 27*256kB (UM) 7*512kB (UE) 8*1024kB (UME) 6*2048kB (UME) 337*4096kB (M) = 1441708kB [ 104.438439][ T6786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.450352][ T6786] Node 1 Normal: 230*4kB (UE) 65*8kB (UME) 48*16kB (UME) 212*32kB (UME) 103*64kB (UME) 31*128kB (UME) 13*256kB (UM) 12*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3909984kB [ 104.471791][ T6786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.482104][ T6786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.491904][ T6786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.501794][ T6786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.515366][ T6786] 41038 total pagecache pages [ 104.522070][ T6786] 0 pages in swap cache [ 104.526834][ T6786] Free swap = 124996kB [ 104.531099][ T6786] Total swap = 124996kB [ 104.535340][ T6786] 2097051 pages RAM [ 104.537399][ T6808] bridee_slave_0: renamed from lo (while UP) [ 104.539529][ T6786] 0 pages HighMem/MovableOnly [ 104.550438][ T6786] 427013 pages reserved [ 104.554767][ T6786] 0 pages cma reserved [ 104.630860][ T6810] Cannot find del_set index 0 as target [ 104.730444][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 104.758686][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 105.092320][ T6836] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.095809][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 105.152011][ T6833] Bluetooth: MGMT ver 1.23 [ 105.358992][ T6846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.226'. [ 105.474978][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 105.509857][ T6852] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.878770][ T6871] netlink: 'syz.2.237': attribute type 2 has an invalid length. [ 106.053015][ T6883] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 106.074218][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.095232][ T6886] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 106.342304][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 106.404894][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 106.620806][ T6917] veth0_to_batadv: entered promiscuous mode [ 106.647845][ T6917] veth0_to_batadv: entered allmulticast mode [ 106.708610][ T6920] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 106.861682][ T6928] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 106.906626][ T6927] delete_channel: no stack [ 107.145300][ T6936] netlink: 'syz.3.255': attribute type 21 has an invalid length. [ 107.795237][ T6970] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 108.131074][ T6976] atomic_op ffff888024ab7998 conn xmit_atomic 0000000000000000 [ 108.143541][ T6976] __nla_validate_parse: 7 callbacks suppressed [ 108.143561][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.263'. [ 108.242430][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 108.772633][ T7007] netlink: 80 bytes leftover after parsing attributes in process `syz.2.270'. [ 109.038373][ T7018] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 109.070287][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 109.334155][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 109.379640][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 109.443687][ T7039] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 109.490284][ T7039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 109.631784][ T7045] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 109.641920][ T7041] veth1_macvtap: left promiscuous mode [ 110.186471][ T7072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'. [ 110.232467][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 110.251759][ T7066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.265187][ T7078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.283'. [ 110.307077][ T7078] 0·: left allmulticast mode [ 110.487870][ T7086] netlink: 'syz.4.284': attribute type 21 has an invalid length. [ 110.495865][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 110.650218][ T7101] vlan2: entered allmulticast mode [ 110.808167][ T7103] syzkaller1: entered promiscuous mode [ 110.813726][ T7103] syzkaller1: entered allmulticast mode [ 111.265258][ T7115] dvmrp8: entered allmulticast mode [ 111.795301][ T7134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.041451][ T7134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.259229][ T7134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.395169][ T7134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.466993][ T7171] syzkaller1: entered promiscuous mode [ 112.472755][ T7171] syzkaller1: entered allmulticast mode [ 112.644703][ T7134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.715119][ T7134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.758708][ T7134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.810994][ T7134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.944012][ T7196] Cannot find set identified by id 0 to match [ 113.536868][ T7219] __nla_validate_parse: 9 callbacks suppressed [ 113.536892][ T7219] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.317'. [ 113.799502][ T7234] dccp_invalid_packet: P.Data Offset(4) too small [ 113.946099][ T7244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.324'. [ 114.272535][ T7255] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 114.313835][ T7255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.335683][ T7261] bond2: (slave gretap1): making interface the new active one [ 114.347792][ T7261] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 114.480298][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 114.551164][ T7264] bridge0: port 3(vlan3) entered blocking state [ 114.596577][ T7264] bridge0: port 3(vlan3) entered disabled state [ 114.616743][ T7264] vlan3: entered allmulticast mode [ 114.642401][ T7264] batadv0: entered allmulticast mode [ 114.657230][ T7264] vlan3: entered promiscuous mode [ 114.668115][ T7264] batadv0: entered promiscuous mode [ 114.683338][ T7264] bridge0: port 3(vlan3) entered blocking state [ 114.689809][ T7264] bridge0: port 3(vlan3) entered forwarding state [ 114.724600][ T7274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.757701][ T7271] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 114.928078][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 114.942847][ T7271] veth1_vlan: entered allmulticast mode [ 114.984252][ T7280] vlan3: entered allmulticast mode [ 115.010047][ T7280] veth1: entered allmulticast mode [ 115.028304][ T7280] veth1: left allmulticast mode [ 115.079065][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 115.101268][ T7295] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 115.241176][ T7297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 115.309017][ T7297] : entered promiscuous mode [ 115.999425][ T7324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.343'. [ 116.215389][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.284717][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.383356][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.446967][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.589768][ T7354] tipc: Enabling of bearer rejected, failed to enable media [ 116.934245][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 116.954578][ T7379] netlink: 152 bytes leftover after parsing attributes in process `syz.3.355'. [ 116.969718][ T7383] netlink: 104 bytes leftover after parsing attributes in process `syz.2.353'. [ 117.322757][ T7389] xt_l2tp: wrong L2TP version: 0 [ 117.749248][ T7409] : entered promiscuous mode [ 119.131173][ T7450] netlink: 'syz.0.375': attribute type 34 has an invalid length. [ 119.379224][ T7453] __nla_validate_parse: 15 callbacks suppressed [ 119.379246][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 119.483860][ T7455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.377'. [ 119.589579][ T7457] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.986431][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 120.054361][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 120.279962][ T7476] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 121.089220][ T7496] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.516410][ T7506] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 121.556083][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'. [ 121.656083][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 122.129437][ T7416] Set syz1 is full, maxelem 65536 reached [ 122.154557][ T7540] dccp_invalid_packet: P.Data Offset(4) too small [ 122.594384][ T7554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'. [ 122.607289][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 122.623228][ T7554] netlink: 43 bytes leftover after parsing attributes in process `syz.2.402'. [ 122.639981][ T7554] netlink: 'syz.2.402': attribute type 6 has an invalid length. [ 122.655881][ T7554] netlink: 'syz.2.402': attribute type 5 has an invalid length. [ 122.665166][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 122.978849][ T7577] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 123.131654][ T7584] openvswitch: netlink: Message has 2 unknown bytes. [ 123.163068][ T7584] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.213658][ T7627] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.686482][ T7649] netlink: 'syz.4.422': attribute type 10 has an invalid length. [ 124.704580][ T7649] __nla_validate_parse: 9 callbacks suppressed [ 124.704602][ T7649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.422'. [ 124.814107][ T7655] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 124.843333][ T7655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.070468][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 125.083555][ T7670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.093524][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.138449][ T7670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.156658][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.294518][ T7675] ip6tnl1: entered allmulticast mode [ 125.310620][ T7691] SET target dimension over the limit! [ 125.355593][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 125.370408][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 125.589690][ T7681] ieee80211 phy17: Failed to add default virtual iface [ 125.870340][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 125.905835][ T7711] sctp: [Deprecated]: syz.3.437 (pid 7711) Use of int in max_burst socket option. [ 125.905835][ T7711] Use struct sctp_assoc_value instead [ 126.156780][ T7726] netlink: 'syz.0.441': attribute type 11 has an invalid length. [ 126.206608][ T7726] netlink: 224 bytes leftover after parsing attributes in process `syz.0.441'. [ 126.240807][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 127.196808][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 127.411544][ T7781] veth0_vlan: left promiscuous mode [ 128.001782][ T7814] xt_bpf: check failed: parse error [ 128.488195][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 128.873827][ T7856] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 129.134514][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 129.772102][ T7899] openvswitch: netlink: Key type 263 is out of range max 32 [ 129.802775][ T7897] xt_CT: No such helper "netbios-ns" [ 129.816406][ T7899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.112838][ T7920] __nla_validate_parse: 1 callbacks suppressed [ 130.112861][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 130.247009][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 130.337370][ T7928] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 130.629068][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 131.380194][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.494'. [ 131.516933][ T7985] netlink: 'syz.2.495': attribute type 29 has an invalid length. [ 131.542990][ T7985] netlink: 'syz.2.495': attribute type 29 has an invalid length. [ 131.578342][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.495'. [ 131.638002][ T7985] netlink: 72 bytes leftover after parsing attributes in process `syz.2.495'. [ 131.685837][ T7985] netlink: 92 bytes leftover after parsing attributes in process `syz.2.495'. [ 131.694780][ T7985] netlink: 92 bytes leftover after parsing attributes in process `syz.2.495'. [ 132.072097][ T8008] xt_connbytes: Forcing CT accounting to be enabled [ 132.239054][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.504'. [ 132.252762][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.504'. [ 132.442758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.863648][ T8036] C: renamed from team_slave_0 (while UP) [ 132.899835][ T8036] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 132.929800][ T8036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 133.110472][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119725][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.324664][ T8109] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.349220][ T8109] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.383841][ T8109] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.409280][ T8109] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.530202][ T8123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.746318][ T8176] netlink: 'syz.2.534': attribute type 5 has an invalid length. [ 135.746437][ T8178] tipc: Invalid UDP bearer configuration [ 135.753999][ T8176] __nla_validate_parse: 5 callbacks suppressed [ 135.754017][ T8176] netlink: 980 bytes leftover after parsing attributes in process `syz.2.534'. [ 135.785090][ T8178] tipc: Enabling of bearer rejected, failed to enable media [ 135.832183][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 135.961480][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 4 [ 136.233772][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 136.364042][ T8201] x_tables: unsorted entry at hook 3 [ 136.366847][ T8199] ip6t_rpfilter: unknown options [ 136.384682][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 136.944836][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 137.817915][ T8267] syzkaller0: entered promiscuous mode [ 137.832522][ T8267] syzkaller0: entered allmulticast mode [ 137.868615][ T8264] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 137.882228][ T8264] netlink: 224 bytes leftover after parsing attributes in process `syz.2.550'. [ 138.223039][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 138.303343][ T8279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.449282][ T8296] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 138.526270][ T8300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.538260][ T8300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.554'. [ 138.664430][ T8290] syz_tun: refused to change device tx_queue_len [ 138.671351][ T8290] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 138.726481][ T8296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.901524][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 138.991368][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 139.209669][ T8324] vlan1: entered allmulticast mode [ 139.580078][ T8346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.985404][ T8368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.006168][ T8372] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 140.103294][ T8372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.143224][ T8379] bond1: (slave gretap1): making interface the new active one [ 140.171103][ T8379] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.279592][ T8372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.375255][ T8368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.603529][ T8368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.762028][ T8368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.942776][ T8368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.991029][ T8368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.015182][ T8368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.040257][ T8368] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.206986][ T8440] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.241101][ T8440] __nla_validate_parse: 10 callbacks suppressed [ 141.241125][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.597'. [ 141.675358][ T8458] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 142.140369][ T8473] netlink: 'syz.4.605': attribute type 21 has an invalid length. [ 142.172028][ T8473] netlink: 152 bytes leftover after parsing attributes in process `syz.4.605'. [ 142.690180][ T8490] ip6gretap1: entered promiscuous mode [ 142.696150][ T8490] ip6gretap1: entered allmulticast mode [ 143.223520][ T8503] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 143.418635][ T8503] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 143.435219][ T8503] team0: Port device netdevsim0 added [ 144.018612][ T8512] netlink: 'syz.0.617': attribute type 16 has an invalid length. [ 144.057018][ T8512] netlink: 'syz.0.617': attribute type 3 has an invalid length. [ 144.102199][ T8512] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.617'. [ 144.984820][ T8536] netlink: 448 bytes leftover after parsing attributes in process `syz.0.622'. [ 145.931578][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 146.103222][ T8551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.277803][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 147.673997][ T8588] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 147.707529][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 147.736050][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 147.762985][ T8590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.770022][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 147.880730][ T8592] vlan3: entered promiscuous mode [ 147.899013][ T8605] netlink: 'syz.0.644': attribute type 2 has an invalid length. [ 147.907652][ T8592] bridge0: entered promiscuous mode [ 147.949274][ T8592] bridge0: port 3(vlan3) entered blocking state [ 147.956200][ T8592] bridge0: port 3(vlan3) entered disabled state [ 147.960888][ T8606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.962817][ T8592] vlan3: entered allmulticast mode [ 147.976260][ T8592] bridge0: entered allmulticast mode [ 147.991979][ T8592] vlan3: left allmulticast mode [ 147.998961][ T8592] bridge0: left allmulticast mode [ 148.005359][ T8592] bridge0: left promiscuous mode [ 148.068278][ T8605] Tq€: entered promiscuous mode [ 148.474401][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 148.602302][ T8635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.932012][ T8653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.650'. [ 149.412072][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 149.485181][ T8664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.782656][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 150.308147][ T8699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 150.757652][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 150.783841][ T8722] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 150.813095][ T5848] Bluetooth: hci4: link tx timeout [ 150.822217][ T8722] netlink: 'syz.2.669': attribute type 2 has an invalid length. [ 150.823925][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.844086][ T5848] Bluetooth: hci4: link tx timeout [ 150.851030][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.876315][ T8730] openvswitch: netlink: Key type 16132 is out of range max 32 [ 150.893558][ T8717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.214256][ T8740] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 151.412984][ T8755] __nla_validate_parse: 1 callbacks suppressed [ 151.413005][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.675'. [ 151.723238][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 151.842734][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 151.861142][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.399759][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 152.447232][ T8790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.651415][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 152.865641][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 152.974216][ T8820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.687'. [ 152.996867][ T8816] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 153.202574][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 153.368809][ T5918] ------------[ cut here ]------------ [ 153.374332][ T5918] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 153.374450][ T5918] WARNING: CPU: 1 PID: 5918 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 153.389878][ T5918] Modules linked in: [ 153.393846][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 153.404787][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.413502][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 153.414908][ T5918] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 153.430058][ T5918] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 153.450035][ T5918] RSP: 0018:ffffc900049af920 EFLAGS: 00010246 [ 153.456455][ T5918] RAX: 1840b340cc1f5900 RBX: ffff8880296b8cb0 RCX: ffff8880273a0000 [ 153.464839][ T5918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.473122][ T5918] RBP: ffffc900049afab0 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 153.481299][ T5918] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 153.489374][ T5918] R13: 0000000000000000 R14: 1ffff92000935f38 R15: dffffc0000000000 [ 153.497442][ T5918] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 153.506468][ T5918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.513104][ T5918] CR2: 00007f6ce80a7d60 CR3: 000000002978e000 CR4: 00000000003526f0 [ 153.521400][ T5918] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.529687][ T5918] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.537755][ T5918] Call Trace: [ 153.541070][ T5918] [ 153.544040][ T5918] ? __warn+0x165/0x4d0 [ 153.548317][ T5918] ? __mutex_lock+0xdac/0xee0 [ 153.553051][ T5918] ? report_bug+0x2b3/0x500 [ 153.557654][ T5918] ? __mutex_lock+0xdac/0xee0 [ 153.562391][ T5918] ? handle_bug+0x60/0x90 [ 153.566835][ T5918] ? exc_invalid_op+0x1a/0x50 [ 153.571825][ T5918] ? asm_exc_invalid_op+0x1a/0x20 [ 153.576971][ T5918] ? __warn_printk+0x292/0x360 [ 153.581802][ T5918] ? __mutex_lock+0xdac/0xee0 [ 153.586660][ T5918] ? free_netdev+0x2d9/0x610 [ 153.591316][ T5918] ? __pfx___mutex_lock+0x10/0x10 [ 153.596428][ T5918] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 153.601773][ T5918] ? dev_addr_check+0x6f/0x240 [ 153.603612][ T8839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 153.606625][ T5918] ? dev_addr_flush+0x192/0x210 [ 153.606661][ T5918] free_netdev+0x2d9/0x610 [ 153.606694][ T5918] netdev_run_todo+0xf21/0x10d0 [ 153.606727][ T5918] ? __pfx_netdev_run_todo+0x10/0x10 [ 153.606756][ T5918] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 153.606785][ T5918] ? down_write+0x18c/0x220 [ 153.606816][ T5918] ? __pfx_down_write+0x10/0x10 [ 153.606853][ T5918] bnep_session+0x2e3c/0x3030 [ 153.606892][ T5918] ? __pfx_bnep_session+0x10/0x10 [ 153.606915][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.606943][ T5918] ? __pfx_woken_wake_function+0x10/0x10 [ 153.606973][ T5918] ? __kthread_parkme+0x169/0x1d0 [ 153.615320][ T8853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.618463][ T5918] ? __pfx_bnep_session+0x10/0x10 [ 153.618497][ T5918] kthread+0x2f0/0x390 [ 153.618525][ T5918] ? __pfx_bnep_session+0x10/0x10 [ 153.700366][ T5918] ? __pfx_kthread+0x10/0x10 [ 153.705016][ T5918] ret_from_fork+0x4b/0x80 [ 153.709528][ T5918] ? __pfx_kthread+0x10/0x10 [ 153.714167][ T5918] ret_from_fork_asm+0x1a/0x30 [ 153.719053][ T5918] [ 153.722127][ T5918] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.729440][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 153.740334][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.750422][ T5918] Call Trace: [ 153.753718][ T5918] [ 153.756660][ T5918] dump_stack_lvl+0x241/0x360 [ 153.761362][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.766580][ T5918] ? __pfx__printk+0x10/0x10 [ 153.771183][ T5918] ? _printk+0xd5/0x120 [ 153.775359][ T5918] ? __init_begin+0x41000/0x41000 [ 153.780413][ T5918] ? vscnprintf+0x5d/0x90 [ 153.784756][ T5918] panic+0x349/0x880 [ 153.788668][ T5918] ? __warn+0x174/0x4d0 [ 153.792843][ T5918] ? __pfx_panic+0x10/0x10 [ 153.797280][ T5918] ? ret_from_fork_asm+0x1a/0x30 [ 153.802231][ T5918] __warn+0x344/0x4d0 [ 153.806227][ T5918] ? __mutex_lock+0xdac/0xee0 [ 153.810921][ T5918] report_bug+0x2b3/0x500 [ 153.815271][ T5918] ? __mutex_lock+0xdac/0xee0 [ 153.819972][ T5918] handle_bug+0x60/0x90 [ 153.824148][ T5918] exc_invalid_op+0x1a/0x50 [ 153.828670][ T5918] asm_exc_invalid_op+0x1a/0x20 [ 153.833541][ T5918] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 153.838847][ T5918] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 153.858474][ T5918] RSP: 0018:ffffc900049af920 EFLAGS: 00010246 [ 153.864559][ T5918] RAX: 1840b340cc1f5900 RBX: ffff8880296b8cb0 RCX: ffff8880273a0000 [ 153.872540][ T5918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.880521][ T5918] RBP: ffffc900049afab0 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 153.888502][ T5918] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 153.896484][ T5918] R13: 0000000000000000 R14: 1ffff92000935f38 R15: dffffc0000000000 [ 153.904471][ T5918] ? __warn_printk+0x292/0x360 [ 153.909262][ T5918] ? free_netdev+0x2d9/0x610 [ 153.913870][ T5918] ? __pfx___mutex_lock+0x10/0x10 [ 153.918912][ T5918] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 153.924229][ T5918] ? dev_addr_check+0x6f/0x240 [ 153.929009][ T5918] ? dev_addr_flush+0x192/0x210 [ 153.933876][ T5918] free_netdev+0x2d9/0x610 [ 153.938320][ T5918] netdev_run_todo+0xf21/0x10d0 [ 153.943192][ T5918] ? __pfx_netdev_run_todo+0x10/0x10 [ 153.948496][ T5918] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 153.954755][ T5918] ? down_write+0x18c/0x220 [ 153.959280][ T5918] ? __pfx_down_write+0x10/0x10 [ 153.964151][ T5918] bnep_session+0x2e3c/0x3030 [ 153.968853][ T5918] ? __pfx_bnep_session+0x10/0x10 [ 153.973891][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.980235][ T5918] ? __pfx_woken_wake_function+0x10/0x10 [ 153.985888][ T5918] ? __kthread_parkme+0x169/0x1d0 [ 153.990928][ T5918] ? __pfx_bnep_session+0x10/0x10 [ 153.995972][ T5918] kthread+0x2f0/0x390 [ 154.000057][ T5918] ? __pfx_bnep_session+0x10/0x10 [ 154.005090][ T5918] ? __pfx_kthread+0x10/0x10 [ 154.009695][ T5918] ret_from_fork+0x4b/0x80 [ 154.014126][ T5918] ? __pfx_kthread+0x10/0x10 [ 154.018732][ T5918] ret_from_fork_asm+0x1a/0x30 [ 154.023515][ T5918] [ 154.026843][ T5918] Kernel Offset: disabled [ 154.031224][ T5918] Rebooting in 86400 seconds..