last executing test programs: 15.227326992s ago: executing program 3 (id=579): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0xe8, 0x8, 0x9}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r5}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, r2, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r6, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1}, {@in=@empty, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x87, 0x1, {{'sha256\x00'}, 0x1f8, "ca8bdaf566099b58b0085179e7b91acc5981a2f76db1cb781fe7cb575f642ed9d3ee2820e6be79e042344d8e2e779c6a0b7e0987ec26fe22919789f93ba510"}}]}, 0x178}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 14.89865686s ago: executing program 3 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 14.705175731s ago: executing program 3 (id=586): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) 14.475764516s ago: executing program 3 (id=590): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000001400)=0x3d74, 0x4) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000700), &(0x7f0000000780)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000061106d000000000018230000", @ANYRES32=r4, @ANYBLOB="0a3e01c144a6b044c1e4a40000aa2658"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0xa, 0x9) 14.284939714s ago: executing program 3 (id=592): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307da15, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x6}]}, @union={0xf, 0x1, 0x0, 0x5, 0x0, 0x3, [{0x10, 0x0, 0x5}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000140)=""/65, 0x63, 0x41, 0x1, 0x66, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) 3.033354644s ago: executing program 4 (id=691): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x10}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x404c881) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x16) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'netdevsim0\x00', 0x8000}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r6 = socket(0x2, 0x800, 0x7d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r8, {0xfff3}, {0xffff, 0xffff}, {0x8, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x878a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket(0x10, 0x2, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r10, 0x0, 0x1, 0x0, &(0x7f0000007880)) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0}, {0xa5e852e7ba710067, 0x4}, {0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x20031000) socket$kcm(0x29, 0x2, 0x0) 2.740699844s ago: executing program 4 (id=693): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$netlink(0x10, 0x3, 0x14) socket$kcm(0xa, 0x5, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r3, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f1}]}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="00010000", @ANYRES16=r7], 0x100}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="38000000031401000000000000000000000800410072786500140033006c6f00"/45], 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x7ca8e000) 2.606276479s ago: executing program 0 (id=696): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaa9aaaaaabb86dd6000000000283afffe880000000000000000000000000001ff020000001000000000000000000001890090"], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (fail_nth: 4) 2.581188514s ago: executing program 3 (id=592): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307da15, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x6}]}, @union={0xf, 0x1, 0x0, 0x5, 0x0, 0x3, [{0x10, 0x0, 0x5}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000140)=""/65, 0x63, 0x41, 0x1, 0x66, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}}, 0x0) 1.998975366s ago: executing program 0 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) r1 = socket(0x28, 0x1, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2000a212}) 1.742932196s ago: executing program 4 (id=700): bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x20000000, 0x2000000}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0xf0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0xd4}, @RTA_VIA={0x14, 0x12, {0x0, "e4a116ab26d92cda9c1fad4735bc"}}, @RTA_TTL_PROPAGATE={0x5}, @RTA_TTL_PROPAGATE={0x5}, @RTA_NEWDST={0x84}, @RTA_TTL_PROPAGATE={0x5}, @RTA_VIA={0x14, 0x12, {0x0, "95ad0fb74bd6977df0234e06ef6b"}}, @RTA_DST={0x8}]}, 0xf0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x11, r5, 0x180000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0x2}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0xffe0, 0xfff3}, {0x6, 0xc}}, [""]}, 0x24}}, 0x0) 1.592375472s ago: executing program 0 (id=701): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x95, 0xd8, 0x15280, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x8, @void, @value, @value=r1}, 0x50) (async) r3 = socket$netlink(0x10, 0x3, 0x1) (async, rerun: 32) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', r6, r0, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) shutdown(r3, 0x1) (rerun: 32) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000340), 0x9) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r9 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0xfffffffb, @private0, 0x9}}, 0x2, 0x401}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000600)="e69633edc087c94f18e85a6b3d2a5560ca8616cc22fb18405031fcd5a553060496f2d23f32196f7b4113864f6cadfeeddacfbbc6908ed0e6ca51f35a84becf0b5d016d58187ab7eb9f6a02d78b9d8042b8674f", 0x53, 0x0, &(0x7f0000000680)={0x11, 0x1c, r10, 0x1, 0x5, 0x6, @multicast}, 0x14) (async) r11 = accept4$rose(0xffffffffffffffff, &(0x7f00000006c0)=@full={0xb, @remote, @remote, 0x0, [@netrom, @null, @bcast, @null, @default, @null]}, &(0x7f0000000700)=0x40, 0x0) setsockopt$rose(r11, 0x104, 0x5, &(0x7f0000000740)=0x358, 0x4) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r3) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', r6, 0x2f, 0xf6, 0x3, 0x4, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x1, 0x7880, 0x0, 0x2}}) (async) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f00000008c0)={@private, @multicast2, 0x0}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x1a4, r12, 0x4, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x90}, 0x8014) (async) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x11, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5180000, 0x0, 0x0, 0x0, 0xdb5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='syzkaller\x00', 0x9, 0x9b, &(0x7f0000000cc0)=""/155, 0x40f00, 0x12, '\x00', r14, 0x0, r5, 0x8, &(0x7f0000000d80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x4, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000e00)=[r9, r0, r2, r0], &(0x7f0000000e40)=[{0x2, 0x5, 0xd, 0x4}, {0x4, 0x2, 0xd, 0x6}, {0x4, 0x5, 0x0, 0x1}, {0x3, 0x1, 0x3, 0x1}, {0x1, 0x1, 0x8}, {0x3, 0x3, 0x6, 0x6}, {0x5, 0x5, 0x3}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r16, 0x0, 0x82, 0xd4, &(0x7f0000000f80)="f7b563a16739fdad75cb647bb485b8792d044ccf42469ac29ddd225e1ffeecb2b002f1055e625c5e3c32f4b7f9721a0772e791de9816b2aaf80250be76240d6a32801f6c705abb6b21558a846491c6b6bd25752ccacd3282b2c9187d3dcdd3e29c4636d40b3457f6bdb3a31080b24f1fa27173089e734b37b3f7f857b428ddf5eb81", &(0x7f0000001040)=""/212, 0x3, 0x0, 0x69, 0x4f, &(0x7f0000001140)="fbb905e2468046678131c0fddede19767a1ba054e30866b891c8dd3edf69f408d735450a616d5eeeb93605d3ddb120af3273d988fd3544b89a2e088d46c18617241ccf1301bc705248f44ef14a845ec68f21fb40a67572ee686495bf9e464a0ab8482d5a8fdbc607e7", &(0x7f00000011c0)="d56b492b91ca66d4a6c2d0499c06c032b1d3362cabb8284d86100d061e053419e273e537bf171b346ced5821105d00c137f5d121c8b6c1df5e0a3a8336ce3ffa53c6c63cb3c1d6e69968c0283cb601", 0x4, 0x0, 0x5}, 0x50) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r17, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x49}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xec, r15, 0x700, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb37}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.438571555s ago: executing program 2 (id=702): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$unix(0x1, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10001, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xfff1, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.438029831s ago: executing program 1 (id=703): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x20, 0x0, "28116e9a"}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x5, 0xfd, 0x91, 0x0, 0x1}]}, 0x70}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x4be, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020000907800001e910f5a0195c8c5cfb88626313c336bd86643735f8452e3788153534353ddb42aaa76b5d147947bc359b70dcd28d6e92d8759ebcfaa5e46b5e6102a2c88e42c0d7e2a8e80a5c1a8fffcba05acaa6abd6472d9533d0523c3cd75cf6d9f141915f48bcc4962dd65f71da00cd0da8387ce910026b3896e927102587258e5a7690249aff7954f625072028b83da65feff0700003dfe3b6d32f1739344156ef081752eeb935c39d11cf02bb24651f6d144403db3e1fc934ab2dd9a7cbb36dd9fb338ccbffaefa1f3fbf649c883c8418a8e"], 0x0) 1.42663484s ago: executing program 0 (id=704): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0xa2f, 0xfffffffd, 0x0, {0x7, 0x0, 0x68, 0x0, 0x900, 0x2952}}, 0x20}}, 0x4050) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000000), 0x90) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x10, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x400c005) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xcd, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, '['}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xa6, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd27, 0x3506}]}, 0x90}, 0x1, 0x7}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = socket$igmp(0x2, 0x3, 0x2) (async) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@random="140132f51645", @random="a8b7e2aceda0", @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "0c36392b79fa2620"}}}}, &(0x7f0000000200)={0x0, 0x3, [0x467, 0xb19, 0xf9c, 0x38c]}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x24000, 0x0) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000280)=0x1) (async) r8 = syz_init_net_socket$ax25(0x3, 0x6, 0xc2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f00000002c0)={0x7, 'veth1_to_batadv\x00', {0xd6}, 0xfffc}) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000064c90100000002000000ac1414bbffffffff"], 0x18) 1.348317451s ago: executing program 4 (id=705): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) 1.23742754s ago: executing program 1 (id=706): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x20004800) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg(r5, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130", 0x69}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f", 0x23}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d00)="16127b5fb1a0692eed04e810bc663db40a44a3ae8e0ef55a7eaf7afbd52ce1e5ad852639443861b509802b57186dfd72c9bea0e3c17aa603dfde29ab4f0671853060ea0754bf7aadcc11452788dbc1692240299c3785696630fff7f58f89af59", 0x60}], 0x1, &(0x7f0000004a40)=ANY=[], 0x1450}}], 0x3, 0x0) (async) shutdown(r5, 0x1) (async) sendmsg$NLBL_CALIPSO_C_ADD(r3, 0x0, 0x11) (async) write$cgroup_pid(r0, &(0x7f0000000f80)=r1, 0x12) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00"], 0x20}}, 0x0) (async) epoll_create1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.236657202s ago: executing program 4 (id=707): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x1, @remote, @local, @empty, @remote}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x30) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001600010025bd7000ffdbdf250a0001fd", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000014000100200100"/33], 0x40}, 0x1, 0xba01}, 0x810) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x84, 0x1d, 0x2, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x10, 0xb0, 0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_MASTER={0x8, 0x9, 0x8}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_VNI={0x8, 0x7, 0xf9e1}, @NDA_SRC_VNI={0x8, 0xb, 0x8}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_FDB_EXT_ATTRS={0x20, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xc}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x10}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}]}, @NDA_IFINDEX={0x8, 0x8, r8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r9 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r9, &(0x7f0000000780)=""/148, 0x94) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0xd0, "c78cc831807607c699cbcc18c5c0d052c3a7380218b1f98638dbe39e106fdf535f0516502d807d6b37c98e233ad023e4f6cdaae217d6a59b2e9139e6e21ee7ae2767eeb16f5c62f222b38423d6e514830443bef8b2230dfd2d16801c40cf61e812125bbd93d8087256a312599e8a9a8fc6e737dcadc5eceb9d4d1a6244afc7386ae7866fb60c5f4d06286f662f85c3fbaa2cdf70c4101e5af4d549ba1390ddcee5426cefff9197b550ad8a5e10115114ca508858ea84c7aa780081d11b0351ae34a6fc0c85aa888cb8cfd730d0250ea9"}, &(0x7f00000005c0)=0xd8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000600)={r11, 0xe98}, &(0x7f0000000640)=0x8) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r12, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9}}, 0x420}}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4048000) sendmsg$nl_netfilter(r9, 0x0, 0x0) bind$vsock_stream(r9, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0x40020}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004850) 1.127561137s ago: executing program 1 (id=708): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaa9aaaaaabb86dd6000000000283afffe880000000000000000000000000001ff020000001000000000000000000001890090"], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (fail_nth: 5) 1.112332835s ago: executing program 0 (id=709): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86f2c696", 0xc}], 0x1}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r4, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.051798129s ago: executing program 2 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30409}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x4892) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000091401"], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) 918.977525ms ago: executing program 1 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_to_bridge\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a00df0214f9f407000904001f000000ff", 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) close(0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xfffffffe}, 0x10) getsockopt(r6, 0x1, 0x4, &(0x7f00000000c0)=""/159, &(0x7f0000000040)=0x9f) r7 = socket(0x18, 0x0, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) sendmsg$xdp(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="62bf71e06e3a", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0x4004000}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100feffffff000000001200000008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000000000008001180040007000e59b111e85adfbaaae36ed4cbc35e1fa6a93c80308595501b0e7390fcb345d5eea803ea4b52055d9dca427b5f"], 0x30}}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x403, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0xff}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0xba01, 0x0, 0x4005}, 0x4000) 918.713397ms ago: executing program 4 (id=712): r0 = socket(0xf, 0x3, 0x2) write(r0, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e255e1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "005ff9297d003f1392000100"}]}}}}}}, 0x0) 572.452739ms ago: executing program 2 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0x6}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) listen(r0, 0x2800000) 101.556652ms ago: executing program 1 (id=714): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) sendmmsg$alg(r2, &(0x7f0000005b00)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="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", 0xfd}, {&(0x7f0000000700)="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", 0x3d4}], 0x2, 0x0, 0x0, 0x20008055}], 0x1, 0x4) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01000000000000040000000000000800040000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696067650000100002d288a476cd2eab63aaaabb0000"], 0x40}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b000400"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2400fabe", @ANYRES16=r13, @ANYBLOB="0100000000000000000007000000080004000000000008000500e0000002"], 0x24}}, 0x20040040) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x74, r13, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 100.965185ms ago: executing program 2 (id=715): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x20000400) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x9, r5}, 0x38) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd", 0x21) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x24}}, 0x4000) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}}, 0x24044880) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000002c0)=0x8) (async) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}, 0x40) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0xfff, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r11, 0x0, &(0x7f00000005c0)=""/255}, 0x20) 100.193421ms ago: executing program 1 (id=716): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)={@cgroup, 0xffffffffffffffff, 0x6, 0x0, 0x0, @void, @value}, 0x9) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) 98.772977ms ago: executing program 2 (id=717): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) 97.834424ms ago: executing program 2 (id=718): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00010027bd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="5bd507"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014", @ANYRES16=r3, @ANYRES8=r2, @ANYRESDEC=r2], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='tlb_flush\x00', r8, 0x0, 0x20000000000}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7, 0xffffffffffffffff}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000004c0)={0x20000002}) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="376cd986b39285495ddf4bd643ae6e1941265eda7926884d6d4cc781a3b510578cd2000000000000eaab3115dba8f520bb23254f6503ef5510e4cf21bd348a4e32b9a738009784b2b3573bdb54a73e7257b1e9c17143f91c81d0a56517f3efdb6392dc3838f26eebeea878e98ce9cc07e304d25383bdb9dd769020eec32c591ebfdccd92497456259f06173c18", 0x8d}], 0x1}, 0x0) 0s ago: executing program 0 (id=719): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf250d00000008000d000000000008000c000600000008000d00010000000c000600010000000100000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="0b00010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x44840}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) pipe(&(0x7f0000002740)) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 55.010542][ T5820] cgroup: Unknown subsys name 'net' [ 55.138007][ T5820] cgroup: Unknown subsys name 'cpuset' [ 55.146212][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.519429][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.674255][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.682186][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.690437][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.699153][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.707419][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.714863][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.723336][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.731491][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.750759][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.754927][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.763004][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.774826][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.775343][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.783335][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.795932][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.797159][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.804944][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.812823][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.825205][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.826395][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.832990][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.850191][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.859049][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.873815][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.883731][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.887425][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.891742][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.905311][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.913642][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.921362][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.278856][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 61.385120][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 61.427103][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 61.477678][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 61.498184][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 61.566508][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.573825][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.581437][ T5843] bridge_slave_0: entered allmulticast mode [ 61.588477][ T5843] bridge_slave_0: entered promiscuous mode [ 61.604833][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.612387][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.619694][ T5843] bridge_slave_1: entered allmulticast mode [ 61.626626][ T5843] bridge_slave_1: entered promiscuous mode [ 61.716193][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.723407][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.730902][ T5831] bridge_slave_0: entered allmulticast mode [ 61.738249][ T5831] bridge_slave_0: entered promiscuous mode [ 61.746415][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.753512][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.761551][ T5831] bridge_slave_1: entered allmulticast mode [ 61.768443][ T5831] bridge_slave_1: entered promiscuous mode [ 61.798665][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.810882][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.843456][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.850897][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.858371][ T5830] bridge_slave_0: entered allmulticast mode [ 61.866609][ T5830] bridge_slave_0: entered promiscuous mode [ 61.902468][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.909765][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.917413][ T5830] bridge_slave_1: entered allmulticast mode [ 61.924832][ T5830] bridge_slave_1: entered promiscuous mode [ 61.940129][ T5843] team0: Port device team_slave_0 added [ 61.948345][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.958383][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.965847][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.972981][ T5832] bridge_slave_0: entered allmulticast mode [ 61.980173][ T5832] bridge_slave_0: entered promiscuous mode [ 62.003379][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.011049][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.018949][ T5841] bridge_slave_0: entered allmulticast mode [ 62.026242][ T5841] bridge_slave_0: entered promiscuous mode [ 62.034847][ T5843] team0: Port device team_slave_1 added [ 62.042145][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.060920][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.068120][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.075361][ T5832] bridge_slave_1: entered allmulticast mode [ 62.081952][ T5832] bridge_slave_1: entered promiscuous mode [ 62.091218][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.102338][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.109543][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.116863][ T5841] bridge_slave_1: entered allmulticast mode [ 62.123417][ T5841] bridge_slave_1: entered promiscuous mode [ 62.168029][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.203576][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.210788][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.237380][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.253095][ T5831] team0: Port device team_slave_0 added [ 62.260738][ T5831] team0: Port device team_slave_1 added [ 62.269024][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.282065][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.302229][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.322088][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.329343][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.355775][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.394864][ T5830] team0: Port device team_slave_0 added [ 62.402227][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.436035][ T5830] team0: Port device team_slave_1 added [ 62.445019][ T5832] team0: Port device team_slave_0 added [ 62.470196][ T5841] team0: Port device team_slave_0 added [ 62.479686][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.487005][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.513477][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.541227][ T5832] team0: Port device team_slave_1 added [ 62.564323][ T5841] team0: Port device team_slave_1 added [ 62.570708][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.579128][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.605467][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.620082][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.627737][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.654345][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.666214][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.673189][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.699363][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.721157][ T5843] hsr_slave_0: entered promiscuous mode [ 62.727695][ T5843] hsr_slave_1: entered promiscuous mode [ 62.766522][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.773497][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.799738][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.813145][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.820412][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.846538][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.859312][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.866608][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.892944][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.919307][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.927292][ T5844] Bluetooth: hci2: command tx timeout [ 62.928145][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.959293][ T5844] Bluetooth: hci4: command tx timeout [ 62.959713][ T5844] Bluetooth: hci0: command tx timeout [ 62.964908][ T5842] Bluetooth: hci1: command tx timeout [ 62.973408][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.004236][ T5842] Bluetooth: hci3: command tx timeout [ 63.020442][ T5830] hsr_slave_0: entered promiscuous mode [ 63.027464][ T5830] hsr_slave_1: entered promiscuous mode [ 63.033474][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.041487][ T5830] Cannot create hsr debugfs directory [ 63.090043][ T5832] hsr_slave_0: entered promiscuous mode [ 63.096640][ T5832] hsr_slave_1: entered promiscuous mode [ 63.102780][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.110770][ T5832] Cannot create hsr debugfs directory [ 63.132853][ T5831] hsr_slave_0: entered promiscuous mode [ 63.139560][ T5831] hsr_slave_1: entered promiscuous mode [ 63.145707][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.153285][ T5831] Cannot create hsr debugfs directory [ 63.222346][ T5841] hsr_slave_0: entered promiscuous mode [ 63.228752][ T5841] hsr_slave_1: entered promiscuous mode [ 63.234897][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.242472][ T5841] Cannot create hsr debugfs directory [ 63.526683][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.538353][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.547887][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.570142][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.621571][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.632561][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.643116][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.664270][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.709717][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.721182][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.742304][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.751385][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.812941][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.826753][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.839207][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.865680][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.953704][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.968436][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.988610][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.996622][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.006858][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.029624][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.050189][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.071888][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.093787][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.101142][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.136222][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.143288][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.153203][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.160340][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.180773][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.187950][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.261718][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.325633][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.368766][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.411346][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.467723][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.489775][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.496951][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.510516][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.517707][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.538123][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.565868][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.572998][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.595993][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.625485][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.632596][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.677044][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.684761][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.695817][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.702901][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.732019][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.776404][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.861239][ T5843] veth0_vlan: entered promiscuous mode [ 64.928818][ T5843] veth1_vlan: entered promiscuous mode [ 64.947043][ T5831] veth0_vlan: entered promiscuous mode [ 65.000754][ T5831] veth1_vlan: entered promiscuous mode [ 65.006423][ T5842] Bluetooth: hci0: command tx timeout [ 65.008493][ T5844] Bluetooth: hci4: command tx timeout [ 65.011826][ T5842] Bluetooth: hci2: command tx timeout [ 65.017505][ T55] Bluetooth: hci1: command tx timeout [ 65.085448][ T5842] Bluetooth: hci3: command tx timeout [ 65.107698][ T5843] veth0_macvtap: entered promiscuous mode [ 65.136304][ T5843] veth1_macvtap: entered promiscuous mode [ 65.150925][ T5831] veth0_macvtap: entered promiscuous mode [ 65.170926][ T5831] veth1_macvtap: entered promiscuous mode [ 65.188919][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.201740][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.231046][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.244450][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.253335][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.263142][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.272210][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.286463][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.297764][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.309573][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.329961][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.352082][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.369592][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.380718][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.393403][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.443404][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.459994][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.468963][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.477905][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.611067][ T5832] veth0_vlan: entered promiscuous mode [ 65.627948][ T5830] veth0_vlan: entered promiscuous mode [ 65.648519][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.662645][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.690187][ T5832] veth1_vlan: entered promiscuous mode [ 65.699827][ T5830] veth1_vlan: entered promiscuous mode [ 65.743145][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.752390][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.783785][ T5830] veth0_macvtap: entered promiscuous mode [ 65.807768][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.825233][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.827990][ T5830] veth1_macvtap: entered promiscuous mode [ 65.851700][ T5832] veth0_macvtap: entered promiscuous mode [ 65.864926][ T5841] veth0_vlan: entered promiscuous mode [ 65.876730][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.892563][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.904313][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.913041][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.923705][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.937225][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.949725][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.959001][ T5832] veth1_macvtap: entered promiscuous mode [ 65.971811][ T5841] veth1_vlan: entered promiscuous mode [ 65.988166][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.000578][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.010929][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.021722][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.033284][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.042361][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.081684][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.091369][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.101444][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.110390][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.123143][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.134292][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.144798][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.155705][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.166046][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.176863][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.188701][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.216756][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.232908][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.243353][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.268647][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.281461][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.290074][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.297542][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.312187][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.328411][ T5919] bridge_slave_1: left allmulticast mode [ 66.334736][ T5919] bridge_slave_1: left promiscuous mode [ 66.343445][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.391792][ T5919] bridge_slave_0: left allmulticast mode [ 66.398627][ T5919] bridge_slave_0: left promiscuous mode [ 66.403008][ T5922] raw_sendmsg: syz.2.3 forgot to set AF_INET. Fix it! [ 66.404783][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.476060][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.491289][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.501771][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.519397][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.592118][ T5841] veth0_macvtap: entered promiscuous mode [ 66.603517][ T5927] team0: entered promiscuous mode [ 66.611991][ T5927] team_slave_0: entered promiscuous mode [ 66.618773][ T5927] team_slave_1: entered promiscuous mode [ 66.662769][ T5841] veth1_macvtap: entered promiscuous mode [ 66.710426][ T5926] team0: left promiscuous mode [ 66.719073][ T5926] team_slave_0: left promiscuous mode [ 66.728920][ T5926] team_slave_1: left promiscuous mode [ 66.806914][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.823014][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.835820][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.854495][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.870904][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.887936][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.899995][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.916089][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.927486][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.972202][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.983746][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.021574][ T5938] syzkaller0: entered promiscuous mode [ 67.029243][ T5938] syzkaller0: entered allmulticast mode [ 67.057982][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.073446][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.084469][ T5842] Bluetooth: hci2: command tx timeout [ 67.086064][ T5837] Bluetooth: hci1: command tx timeout [ 67.090199][ T5842] Bluetooth: hci0: command tx timeout [ 67.095404][ T5844] Bluetooth: hci4: command tx timeout [ 67.102014][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.117404][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.128002][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.138932][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.149528][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.160186][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.171561][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.177225][ T5844] Bluetooth: hci3: command tx timeout [ 67.227714][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.240093][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.788478][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.798771][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.818706][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.828138][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.877175][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.901049][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.949674][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.963514][ T5955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.976557][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.088800][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.115470][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.170016][ T5842] Bluetooth: hci4: command tx timeout [ 69.170051][ T55] Bluetooth: hci2: command tx timeout [ 69.175607][ T5844] Bluetooth: hci0: command tx timeout [ 69.186259][ T5837] Bluetooth: hci1: command tx timeout [ 69.244704][ T5844] Bluetooth: hci3: command tx timeout [ 69.290520][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.389907][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.390569][ T5970] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 69.583299][ T5975] ip6gretap0: entered promiscuous mode [ 69.599991][ T5975] macsec1: entered allmulticast mode [ 69.611561][ T5975] ip6gretap0: entered allmulticast mode [ 69.660149][ T5975] ip6gretap0: left allmulticast mode [ 69.667781][ T5975] ip6gretap0: left promiscuous mode [ 69.932032][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 70.228490][ T6008] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 71.072219][ T6038] bridge_slave_0: left allmulticast mode [ 71.091537][ T6038] bridge_slave_0: left promiscuous mode [ 71.116254][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.173692][ T6038] bridge_slave_1: left allmulticast mode [ 71.194889][ T6038] bridge_slave_1: left promiscuous mode [ 71.201399][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.244728][ T6038] bond0: (slave bond_slave_0): Releasing backup interface [ 71.275522][ T6038] bond0: (slave bond_slave_1): Releasing backup interface [ 71.317615][ T6038] team0: Port device team_slave_0 removed [ 71.338663][ T6038] team0: Port device team_slave_1 removed [ 71.356034][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.366204][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.380037][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.388985][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.651029][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.658164][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.841838][ T6072] team0: entered promiscuous mode [ 71.849896][ T6072] team_slave_0: entered promiscuous mode [ 71.857729][ T6072] team_slave_1: entered promiscuous mode [ 71.863685][ T6072] team0: entered allmulticast mode [ 71.876894][ T6072] team_slave_0: entered allmulticast mode [ 71.892240][ T6072] team_slave_1: entered allmulticast mode [ 71.963206][ T6072] team0: Cannot enslave team device to itself [ 72.333874][ T6089] dummy0: entered promiscuous mode [ 72.393488][ T6089] macvlan2: entered promiscuous mode [ 72.422212][ T6089] dummy0: left promiscuous mode [ 72.569877][ T6091] netlink: 'syz.2.49': attribute type 29 has an invalid length. [ 72.592680][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 73.354844][ T6138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.430066][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 73.476100][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 73.611320][ T6141] bridge0: entered promiscuous mode [ 73.646689][ T6141] erspan0: entered promiscuous mode [ 73.695796][ T6141] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 74.573976][ T6165] Zero length message leads to an empty skb [ 74.715590][ T6140] No such timeout policy "syz0" [ 74.729611][ T6171] warning: `syz.0.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.817065][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.963294][ T6182] netlink: 'syz.4.68': attribute type 27 has an invalid length. [ 75.583895][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 75.681885][ T6216] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 75.733051][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 76.120908][ T6228] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 76.532216][ T6251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.861478][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 76.880901][ T6267] xt_time: unknown flags 0x4 [ 77.033487][ T6284] openvswitch: netlink: EtherType 0 is less than min 600 [ 77.727374][ T6324] netlink: 56 bytes leftover after parsing attributes in process `syz.3.105'. [ 78.204519][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 78.397782][ T6352] tipc: Can't bind to reserved service type 2 [ 78.570932][ T6345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.593053][ T6345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.611214][ T6345] bond0 (unregistering): Released all slaves [ 79.214534][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 79.453054][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 79.592186][ T6390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'. [ 79.940387][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 79.995442][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 80.035582][ T6404] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 80.044228][ T6404] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 80.060758][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 80.091416][ T6412] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 80.133437][ T6412] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 80.612842][ T6379] x_tables: duplicate underflow at hook 1 [ 80.715847][ T6432] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 80.759956][ T6440] netlink: 248 bytes leftover after parsing attributes in process `syz.1.128'. [ 80.787366][ T6440] NCSI netlink: No device for ifindex 0 [ 80.808092][ T6446] xt_CT: No such helper "pptp" [ 80.936517][ T6377] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 80.949890][ T6455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.131'. [ 81.003551][ T6457] netlink: 'syz.0.132': attribute type 3 has an invalid length. [ 81.011530][ T6457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'. [ 81.571755][ T6465] netlink: 'syz.0.132': attribute type 15 has an invalid length. [ 81.895142][ T25] cfg80211: failed to load regulatory.db [ 82.420505][ T6496] team0 (unregistering): Port device team_slave_0 removed [ 82.438721][ T6496] team0 (unregistering): Port device team_slave_1 removed [ 82.560146][ T6520] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 83.097534][ T6534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.106306][ T6543] __nla_validate_parse: 3 callbacks suppressed [ 83.106324][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 83.170559][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 83.261898][ T6534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.332074][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 83.409241][ T6534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.536347][ T6534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.683993][ T6559] netem: incorrect gi model size [ 83.704232][ T6559] netem: change failed [ 83.723707][ T6563] netem: incorrect gi model size [ 83.734657][ T6563] netem: change failed [ 83.976801][ T6534] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.022546][ T6534] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118923][ T6534] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.176587][ T6534] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.423472][ T6590] netlink: 'syz.0.157': attribute type 10 has an invalid length. [ 84.478371][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 84.686468][ T5884] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 84.706462][ T5884] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 84.844596][ T6590] syz_tun: entered promiscuous mode [ 85.527162][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 86.624600][ T6651] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 86.659803][ T6651] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 86.972537][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 87.001496][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 87.018876][ T6659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.172'. [ 87.118794][ T6659] nbd0: detected capacity change from 0 to 256 [ 87.152700][ T5844] block nbd0: Receive control failed (result -104) [ 87.380194][ T6672] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.175'. [ 87.436282][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 87.540082][ T6676] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 87.567393][ T6676] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 87.623891][ T6677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.229623][ T6701] macvlan0: entered promiscuous mode [ 88.267675][ T6701] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 88.300731][ T6701] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 88.503119][ T6706] netlink: 'syz.4.186': attribute type 10 has an invalid length. [ 88.541048][ T6704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.565861][ T6711] netlink: 'syz.4.186': attribute type 10 has an invalid length. [ 88.605443][ T6706] hsr0: entered promiscuous mode [ 88.641104][ T6706] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 88.683056][ T6706] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.723573][ T6720] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20002 [ 88.732230][ T6706] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 88.766781][ T6711] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 88.834649][ T6711] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.871083][ T6711] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 88.878274][ T6715] __nla_validate_parse: 4 callbacks suppressed [ 88.883416][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 89.044587][ T6731] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 89.056497][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 89.089832][ T6735] bond_slave_0: entered promiscuous mode [ 89.095861][ T6735] bond_slave_1: entered promiscuous mode [ 89.113843][ T6735] macvtap1: entered promiscuous mode [ 89.119569][ T6735] bond0: entered promiscuous mode [ 89.126542][ T6735] macvtap1: entered allmulticast mode [ 89.132541][ T6735] bond0: entered allmulticast mode [ 89.139417][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 89.150580][ T6735] bond_slave_0: entered allmulticast mode [ 89.156995][ T6735] bond_slave_1: entered allmulticast mode [ 89.165320][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 89.176205][ T6735] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.206512][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 89.208327][ T6732] bridge1: entered promiscuous mode [ 89.223154][ T6732] bridge1: entered allmulticast mode [ 89.226438][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 89.234866][ T6732] team0: Port device bridge1 added [ 89.246915][ T6742] macvtap1: left promiscuous mode [ 89.252187][ T6742] bond0: left promiscuous mode [ 89.262019][ T6742] macvtap1: left allmulticast mode [ 89.267351][ T6742] bond0: left allmulticast mode [ 89.272198][ T6742] bond_slave_0: left allmulticast mode [ 89.277935][ T6742] bond_slave_1: left allmulticast mode [ 89.466707][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 89.547637][ T6756] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 89.555425][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 89.576001][ T6752] macvtap2: entered promiscuous mode [ 89.581343][ T6752] bond0: entered promiscuous mode [ 89.602375][ T6752] macvtap2: entered allmulticast mode [ 89.612133][ T6752] bond0: entered allmulticast mode [ 89.652750][ T6752] bond_slave_0: entered allmulticast mode [ 89.661180][ T6752] bond_slave_1: entered allmulticast mode [ 89.675092][ T6752] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 89.694101][ T6757] macvtap2: left promiscuous mode [ 89.699780][ T6757] bond0: left promiscuous mode [ 89.758108][ T6757] macvtap2: left allmulticast mode [ 89.775455][ T6757] bond0: left allmulticast mode [ 89.808400][ T6757] bond_slave_0: left allmulticast mode [ 89.818928][ T6757] bond_slave_1: left allmulticast mode [ 89.867776][ T6755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.197'. [ 90.572587][ T6794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.596671][ T6794] gtp0: entered promiscuous mode [ 90.601844][ T6794] gtp0: entered allmulticast mode [ 90.738367][ T6798] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 90.802637][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 91.150754][ T6811] sctp: [Deprecated]: syz.4.213 (pid 6811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.150754][ T6811] Use struct sctp_sack_info instead [ 91.496417][ T6827] delete_channel: no stack [ 91.820457][ T6854] tipc: Started in network mode [ 91.836521][ T6854] tipc: Node identity ca3b5597d472, cluster identity 4711 [ 91.861909][ T6854] tipc: Enabled bearer , priority 10 [ 92.457236][ T6876] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 92.484930][ T6876] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 92.985807][ T3077] tipc: Node number set to 508122519 [ 93.011723][ T6908] Cannot find set identified by id 0 to match [ 93.021330][ T6909] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.101748][ T6901] infiniband syz1: set down [ 93.106678][ T6901] infiniband syz1: added team_slave_0 [ 93.148165][ T6901] RDS/IB: syz1: added [ 93.152969][ T6901] smc: adding ib device syz1 with port count 1 [ 93.172606][ T6901] smc: ib device syz1 port 1 has pnetid [ 93.195531][ T6908] pim6reg: entered allmulticast mode [ 93.413124][ T6899] sctp: [Deprecated]: syz.3.235 (pid 6899) Use of int in maxseg socket option. [ 93.413124][ T6899] Use struct sctp_assoc_value instead [ 93.804654][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 93.921058][ T6935] __nla_validate_parse: 7 callbacks suppressed [ 93.921076][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 93.980563][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 94.034483][ T6934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.096451][ T6942] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 94.109762][ T6942] netlink: 'syz.4.246': attribute type 2 has an invalid length. [ 94.175955][ T6934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.488349][ T6961] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 94.498060][ T6961] Bluetooth: MGMT ver 1.23 [ 94.593767][ T6934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.783894][ T6934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.945915][ T6934] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.991769][ T6934] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005334][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.262'. [ 95.013967][ T6934] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.038847][ T6934] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.614622][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 95.884085][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 95.987314][ T7035] netlink: 'syz.2.278': attribute type 5 has an invalid length. [ 96.109013][ T7044] vlan2: entered promiscuous mode [ 96.117875][ T7044] vlan0: entered promiscuous mode [ 96.167236][ T7044] vlan0: left promiscuous mode [ 96.471377][ T7072] xt_hashlimit: max too large, truncated to 1048576 [ 96.501984][ T7072] Cannot find set identified by id 0 to match [ 96.534152][ T7064] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 96.557644][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 97.191695][ T7091] netlink: 'syz.0.290': attribute type 10 has an invalid length. [ 97.209948][ T7091] netlink: 2 bytes leftover after parsing attributes in process `syz.0.290'. [ 97.233813][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.245838][ T7091] bridge0: port 3(team0) entered blocking state [ 97.269541][ T7091] bridge0: port 3(team0) entered disabled state [ 97.306602][ T7091] bridge0: port 3(team0) entered blocking state [ 97.313131][ T7091] bridge0: port 3(team0) entered forwarding state [ 97.478361][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 97.501025][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 97.547093][ T7114] x_tables: duplicate underflow at hook 3 [ 97.710757][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 97.735689][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 97.800967][ T7125] openvswitch: netlink: Missing key (keys=40, expected=100) [ 98.274950][ T7151] x_tables: duplicate underflow at hook 2 [ 99.206880][ T7205] netlink: 'syz.2.321': attribute type 4 has an invalid length. [ 99.302090][ T7219] ip6t_srh: unknown srh invflags 4000 [ 99.449161][ T7221] netlink: 'syz.1.324': attribute type 2 has an invalid length. [ 99.458384][ T7221] nbd: must specify at least one socket [ 99.546838][ T7223] __nla_validate_parse: 4 callbacks suppressed [ 99.546857][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 100.101980][ T7250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.118197][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 100.179759][ T7250] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 100.195024][ T7257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.337'. [ 100.204648][ T7257] netlink: 'syz.2.337': attribute type 9 has an invalid length. [ 100.474215][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 100.613231][ T7281] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 100.698523][ T7281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.182355][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 101.214310][ T7315] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 101.390041][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 101.425518][ T7323] bond0: (slave bond_slave_0): Releasing backup interface [ 101.517116][ T7332] Illegal XDP return value 1243809278 on prog (id 113) dev N/A, expect packet loss! [ 101.527561][ T7323] bond0: (slave bond_slave_1): Releasing backup interface [ 101.555273][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 101.566503][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 101.615423][ T7323] team0: Port device team_slave_0 removed [ 101.634896][ T7323] team0: Port device team_slave_1 removed [ 101.641746][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.649678][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.662251][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.670358][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.747090][ T7339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.363'. [ 101.967402][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 101.969858][ T7346] vlan2: entered promiscuous mode [ 102.197890][ T7359] vlan2: entered promiscuous mode [ 102.202976][ T7359] ip6gretap0: entered promiscuous mode [ 102.215619][ T7359] ip6gretap0: left promiscuous mode [ 102.413887][ T7370] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 102.450785][ T7370] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 102.470592][ T7370] team0: Failed to send options change via netlink (err -105) [ 102.485865][ T7370] team0: Port device geneve0 added [ 102.685726][ T7380] wireguard: wg2: Could not create IPv6 socket [ 102.693987][ T7380] wg2: entered promiscuous mode [ 102.704265][ T7380] wg2: entered allmulticast mode [ 104.031338][ T7447] netlink: 'syz.4.401': attribute type 7 has an invalid length. [ 104.566993][ T7487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 104.669677][ T7490] bridge_slave_0: left allmulticast mode [ 104.731060][ T7490] bridge_slave_0: left promiscuous mode [ 104.757969][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.848875][ T7490] bridge_slave_1: left allmulticast mode [ 104.879949][ T7490] bridge_slave_1: left promiscuous mode [ 104.892493][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.945346][ T7490] bond0: (slave bond_slave_0): Releasing backup interface [ 104.979055][ T7490] bond0: (slave bond_slave_1): Releasing backup interface [ 104.990962][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.998768][ T7490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.049278][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.061012][ T7490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.106455][ T7498] bridge0: port 4(netdevsim2) entered blocking state [ 105.128125][ T7498] bridge0: port 4(netdevsim2) entered disabled state [ 105.135964][ T7498] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 105.152515][ T7498] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 105.162662][ T7498] bridge0: port 4(netdevsim2) entered blocking state [ 105.169505][ T7498] bridge0: port 4(netdevsim2) entered forwarding state [ 105.192146][ T7499] syz_tun: left promiscuous mode [ 105.238990][ T7499] bridge0: port 3(team0) entered disabled state [ 105.494466][ T7510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.510179][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.710708][ T7504] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.724529][ T7504] __nla_validate_parse: 16 callbacks suppressed [ 105.724547][ T7504] netlink: 1 bytes leftover after parsing attributes in process `syz.4.418'. [ 105.747831][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 105.909121][ T7523] Cannot find set identified by id 0 to match [ 105.947732][ T7520] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 106.118438][ T7524] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 106.780137][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.430'. [ 106.839087][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 108.192394][ T7559] IPVS: Unknown mcast interface: veth°ñ [ 108.212953][ T7562] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.294357][ T7562] netlink: 734 bytes leftover after parsing attributes in process `syz.2.435'. [ 108.316683][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 108.387485][ T7575] ip6tnl1: entered promiscuous mode [ 108.403000][ T7575] ip6tnl1: entered allmulticast mode [ 108.507177][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 108.521749][ T7582] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 108.534030][ T7583] netlink: 'syz.0.442': attribute type 30 has an invalid length. [ 108.550976][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 108.563792][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.765942][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 108.795948][ T7598] bridge0: entered promiscuous mode [ 108.812140][ T7598] macvtap1: entered promiscuous mode [ 108.822968][ T7598] macvtap1: entered allmulticast mode [ 108.823123][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 108.846144][ T7598] bridge0: entered allmulticast mode [ 108.890685][ T7600] macvtap1: left promiscuous mode [ 108.924503][ T7600] macvtap1: left allmulticast mode [ 108.929944][ T7600] bridge0: left allmulticast mode [ 109.070842][ T7613] skbuff: bad partial csum: csum=65506/2 headroom=176 headlen=65526 [ 109.476507][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.482969][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.504186][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.524678][ T7630] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.544960][ T7630] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.589983][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.614673][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.621793][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.628865][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.645610][ T7630] wg1 speed is unknown, defaulting to 1000 [ 109.665311][ T7630] wg1 speed is unknown, defaulting to 1000 [ 110.328238][ T7609] wg1 speed is unknown, defaulting to 1000 [ 110.933720][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.195534][ T7673] __nla_validate_parse: 6 callbacks suppressed [ 111.195553][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 111.363226][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 111.551872][ T7683] can: request_module (can-proto-3) failed. [ 111.600699][ T7682] can: request_module (can-proto-3) failed. [ 111.641870][ T7682] syz.2.469: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.667904][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.2.469 Not tainted 6.14.0-rc3-syzkaller-00699-ge6a532185daa #0 [ 111.667927][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.667940][ T7682] Call Trace: [ 111.667949][ T7682] [ 111.667957][ T7682] dump_stack_lvl+0x241/0x360 [ 111.667990][ T7682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.668008][ T7682] ? __pfx__printk+0x10/0x10 [ 111.668026][ T7682] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 111.668044][ T7682] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 111.668065][ T7682] warn_alloc+0x278/0x410 [ 111.668087][ T7682] ? __pfx_warn_alloc+0x10/0x10 [ 111.668108][ T7682] ? hash_ip_create+0x801/0x1670 [ 111.668124][ T7682] ? __get_vm_area_node+0x1c8/0x2d0 [ 111.668145][ T7682] ? __get_vm_area_node+0x25c/0x2d0 [ 111.668170][ T7682] __vmalloc_node_range_noprof+0x62f/0x1380 [ 111.668213][ T7682] ? rcu_is_watching+0x15/0xb0 [ 111.668231][ T7682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.668254][ T7682] ? rcu_is_watching+0x15/0xb0 [ 111.668271][ T7682] ? trace_kmalloc+0x1f/0xd0 [ 111.668288][ T7682] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 111.668307][ T7682] ? __kvmalloc_node_noprof+0x72/0x190 [ 111.668332][ T7682] __kvmalloc_node_noprof+0x142/0x190 [ 111.668355][ T7682] ? hash_ip_create+0x801/0x1670 [ 111.668373][ T7682] hash_ip_create+0x801/0x1670 [ 111.668392][ T7682] ? __pfx_lock_acquire+0x10/0x10 [ 111.668421][ T7682] ? __pfx_hash_ip_create+0x10/0x10 [ 111.668439][ T7682] ? __nla_parse+0x40/0x60 [ 111.668456][ T7682] ? __pfx_hash_ip_create+0x10/0x10 [ 111.668474][ T7682] ip_set_create+0xa78/0x1960 [ 111.668497][ T7682] ? ip_set_create+0x48a/0x1960 [ 111.668522][ T7682] ? __pfx_ip_set_create+0x10/0x10 [ 111.668571][ T7682] ? nfnetlink_rcv_msg+0x225/0x1180 [ 111.668593][ T7682] nfnetlink_rcv_msg+0xbec/0x1180 [ 111.668622][ T7682] ? nfnetlink_rcv_msg+0x225/0x1180 [ 111.668662][ T7682] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.668680][ T7682] ? stack_trace_save+0x118/0x1d0 [ 111.668721][ T7682] ? dev_hard_start_xmit+0x27a/0x7d0 [ 111.668741][ T7682] ? __dev_queue_xmit+0x1b73/0x3f40 [ 111.668761][ T7682] ? __netlink_deliver_tap+0x561/0x7f0 [ 111.668776][ T7682] ? netlink_deliver_tap+0x19d/0x1b0 [ 111.668792][ T7682] ? netlink_unicast+0x7c4/0x990 [ 111.668812][ T7682] ? netlink_sendmsg+0x8de/0xcb0 [ 111.668827][ T7682] ? __sock_sendmsg+0x221/0x270 [ 111.668844][ T7682] ? ____sys_sendmsg+0x53a/0x860 [ 111.668863][ T7682] ? __sys_sendmsg+0x269/0x350 [ 111.668897][ T7682] netlink_rcv_skb+0x206/0x480 [ 111.668916][ T7682] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.668938][ T7682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.668969][ T7682] ? apparmor_capable+0x13b/0x1b0 [ 111.668989][ T7682] ? bpf_lsm_capable+0x9/0x10 [ 111.669010][ T7682] ? security_capable+0x7e/0x2d0 [ 111.669036][ T7682] nfnetlink_rcv+0x297/0x2ab0 [ 111.669062][ T7682] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 111.669087][ T7682] ? __dev_queue_xmit+0x2f4/0x3f40 [ 111.669111][ T7682] ? __dev_queue_xmit+0x1775/0x3f40 [ 111.669132][ T7682] ? kasan_save_track+0x51/0x80 [ 111.669155][ T7682] ? ____sys_sendmsg+0x53a/0x860 [ 111.669179][ T7682] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.669199][ T7682] ? __dev_queue_xmit+0x2f4/0x3f40 [ 111.669225][ T7682] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.669264][ T7682] ? ref_tracker_free+0x643/0x7e0 [ 111.669286][ T7682] ? __asan_memcpy+0x40/0x70 [ 111.669301][ T7682] ? __pfx_ref_tracker_free+0x10/0x10 [ 111.669321][ T7682] ? __skb_clone+0x5c/0x6c0 [ 111.669356][ T7682] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.669372][ T7682] ? skb_clone+0x240/0x390 [ 111.669386][ T7682] ? __pfx_lock_release+0x10/0x10 [ 111.669406][ T7682] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 111.669428][ T7682] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.669444][ T7682] netlink_unicast+0x7f6/0x990 [ 111.669469][ T7682] ? __pfx_netlink_unicast+0x10/0x10 [ 111.669486][ T7682] ? __virt_addr_valid+0x45f/0x530 [ 111.669500][ T7682] ? __phys_addr_symbol+0x2f/0x70 [ 111.669518][ T7682] ? __check_object_size+0x47a/0x730 [ 111.669538][ T7682] netlink_sendmsg+0x8de/0xcb0 [ 111.669561][ T7682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.669578][ T7682] ? aa_sock_msg_perm+0x91/0x160 [ 111.669607][ T7682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.669620][ T7682] __sock_sendmsg+0x221/0x270 [ 111.669637][ T7682] ____sys_sendmsg+0x53a/0x860 [ 111.669661][ T7682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.669678][ T7682] ? __fget_files+0x2a/0x410 [ 111.669697][ T7682] ? __fget_files+0x2a/0x410 [ 111.669720][ T7682] __sys_sendmsg+0x269/0x350 [ 111.669738][ T7682] ? __pfx_futex_wake+0x10/0x10 [ 111.669758][ T7682] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.669806][ T7682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.669825][ T7682] ? do_syscall_64+0x100/0x230 [ 111.669844][ T7682] ? do_syscall_64+0xb6/0x230 [ 111.669863][ T7682] do_syscall_64+0xf3/0x230 [ 111.669880][ T7682] ? clear_bhb_loop+0x35/0x90 [ 111.669899][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.669916][ T7682] RIP: 0033:0x7f9452b8d169 [ 111.669935][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.669945][ T7682] RSP: 002b:00007f9453a08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.669960][ T7682] RAX: ffffffffffffffda RBX: 00007f9452da5fa0 RCX: 00007f9452b8d169 [ 111.669970][ T7682] RDX: 0000000000000084 RSI: 0000400000000040 RDI: 000000000000000c [ 111.669979][ T7682] RBP: 00007f9452c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.669987][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.669995][ T7682] R13: 0000000000000000 R14: 00007f9452da5fa0 R15: 00007fffd5d06418 [ 111.670016][ T7682] [ 111.670030][ T7682] Mem-Info: [ 111.702105][ T7696] sctp: [Deprecated]: syz.0.471 (pid 7696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.702105][ T7696] Use struct sctp_sack_info instead [ 111.715661][ T7682] active_anon:11571 inactive_anon:0 isolated_anon:0 [ 111.715661][ T7682] active_file:1444 inactive_file:38313 isolated_file:0 [ 111.715661][ T7682] unevictable:769 dirty:180 writeback:0 [ 111.715661][ T7682] slab_reclaimable:10647 slab_unreclaimable:101297 [ 111.715661][ T7682] mapped:31721 shmem:4350 pagetables:806 [ 111.715661][ T7682] sec_pagetables:0 bounce:0 [ 111.715661][ T7682] kernel_misc_reclaimable:0 [ 111.715661][ T7682] free:1327306 free_pcp:1181 free_cma:0 [ 111.885961][ T7701] netlink: 88 bytes leftover after parsing attributes in process `syz.0.471'. [ 111.892165][ T7682] Node 0 active_anon:45984kB inactive_anon:0kB active_file:5776kB inactive_file:153180kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:119184kB dirty:720kB writeback:0kB shmem:15864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10932kB pagetables:3324kB sec_pagetables:0kB all_unreclaimable? no [ 112.290515][ T7707] tipc: Enabled bearer , priority 10 [ 112.333085][ T7682] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.485056][ T7682] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.559292][ T7682] lowmem_reserve[]: 0 2490 2490 0 0 [ 112.579242][ T7682] Node 0 DMA32 free:1396744kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:36788kB inactive_anon:0kB active_file:5776kB inactive_file:152868kB unevictable:1536kB writepending:720kB present:3129332kB managed:2549844kB mlocked:0kB bounce:0kB free_pcp:5604kB local_pcp:5132kB free_cma:0kB [ 112.614449][ T7682] lowmem_reserve[]: 0 0 0 0 0 [ 112.631291][ T7682] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 112.693287][ T7682] lowmem_reserve[]: 0 0 0 0 0 [ 112.724170][ T7682] Node 1 Normal free:3904656kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.777290][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 112.804429][ T7682] lowmem_reserve[]: 0 0 0 0 0 [ 112.820369][ T7682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.833781][ T7721] trusted_key: syz.0.481 sent an empty control message without MSG_MORE. [ 112.871522][ T7682] Node 0 DMA32: 1*4kB (E) 49*8kB (UME) 133*16kB (ME) 157*32kB (UME) 181*64kB (UM) 134*128kB (UM) 48*256kB (UME) 29*512kB (UM) 20*1024kB (UM) 11*2048kB (UME) 316*4096kB (UM) = 1400764kB [ 112.984183][ T7725] netlink: 'syz.4.482': attribute type 32 has an invalid length. [ 112.993011][ T7682] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 113.003908][ T7704] wg1 speed is unknown, defaulting to 1000 [ 113.008818][ T7682] Node 1 Normal: 196*4kB (UE) 36*8kB (UME) 50*16kB (UME) 250*32kB (UME) 110*64kB (UME) 23*128kB (UM) 17*256kB (UME) 7*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3904656kB [ 113.113987][ T7682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.137975][ T7682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.157267][ T7682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.169804][ T7682] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.214068][ T7682] 42878 total pagecache pages [ 113.219790][ T7682] 0 pages in swap cache [ 113.229171][ T7682] Free swap = 124996kB [ 113.234164][ T7682] Total swap = 124996kB [ 113.238766][ T7682] 2097051 pages RAM [ 113.242751][ T7682] 0 pages HighMem/MovableOnly [ 113.255571][ T7682] 427868 pages reserved [ 113.259893][ T7682] 0 pages cma reserved [ 113.565222][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 113.731507][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.489'. [ 113.859508][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 114.210622][ T5887] IPVS: starting estimator thread 0... [ 114.262744][ T7771] netlink: 48 bytes leftover after parsing attributes in process `syz.2.501'. [ 114.297297][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 114.314919][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 114.334143][ T7768] IPVS: using max 22 ests per chain, 52800 per kthread [ 114.354223][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 114.783306][ T7793] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.792408][ T7793] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.801118][ T7793] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.809528][ T7793] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.827239][ T7793] vxlan0: entered promiscuous mode [ 114.833633][ T7793] vxlan0: entered allmulticast mode [ 114.857121][ T7793] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.865835][ T7793] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.874396][ T7793] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.882765][ T7793] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.962252][ T7795] netlink: 'syz.3.510': attribute type 39 has an invalid length. [ 115.211007][ T7801] wg1 speed is unknown, defaulting to 1000 [ 115.718081][ T7804] wg1 speed is unknown, defaulting to 1000 [ 115.883183][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.890531][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.922427][ T7835] bond_slave_0: left promiscuous mode [ 115.928604][ T7835] bond_slave_1: left promiscuous mode [ 115.977480][ T7835] wg2: left promiscuous mode [ 115.982131][ T7835] wg2: left allmulticast mode [ 116.043033][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.069231][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.104705][ T7835] hsr0: left promiscuous mode [ 116.170175][ T7835] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.183062][ T7835] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.192671][ T7835] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.205590][ T7835] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.588088][ T7874] __nla_validate_parse: 9 callbacks suppressed [ 116.588106][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 116.631026][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 116.661827][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.525'. [ 116.696981][ T7876] netlink: 'syz.1.526': attribute type 11 has an invalid length. [ 116.758599][ T7878] netlink: 'syz.4.528': attribute type 2 has an invalid length. [ 116.786338][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 117.656478][ T7911] bond0: entered promiscuous mode [ 117.707946][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 117.734145][ T43] block nbd0: Possible stuck request ffff888025b40000: control (read@0,4096B). Runtime 30 seconds [ 117.868579][ T7923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.917551][ T7903] wg1 speed is unknown, defaulting to 1000 [ 118.007476][ T29] audit: type=1800 audit(1740222336.129:2): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.542" name="memory.events" dev="tmpfs" ino=580 res=0 errno=0 [ 118.362926][ T7932] wg1 speed is unknown, defaulting to 1000 [ 118.680722][ T7945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.051561][ T7956] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 119.075851][ T7956] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 119.082993][ T7956] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 119.117421][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 119.131970][ T7956] team0: Port device wlan1 added [ 119.442805][ T7966] netlink: 44 bytes leftover after parsing attributes in process `syz.3.552'. [ 119.454742][ T7966] netlink: 80 bytes leftover after parsing attributes in process `syz.3.552'. [ 119.495786][ T7966] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 119.523098][ T7966] bond2: entered promiscuous mode [ 119.555175][ T7973] netlink: 3 bytes leftover after parsing attributes in process `syz.3.552'. [ 119.555225][ T7966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.619769][ T7973] batadv1: entered allmulticast mode [ 119.636686][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.663412][ T7973] bond2: (slave batadv1): making interface the new active one [ 119.679300][ T7973] batadv1: entered promiscuous mode [ 119.686947][ T7973] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 120.064789][ T7998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.072827][ T7998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.094084][ T7998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.101546][ T7998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.171033][ T7997] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 120.476697][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 120.564207][ T8015] unknown channel width for channel at 909000KHz? [ 120.647023][ T7995] wg1 speed is unknown, defaulting to 1000 [ 120.821436][ T8021] tunl0: entered promiscuous mode [ 120.867725][ T8021] vlan2: entered promiscuous mode [ 120.872938][ T8021] vlan2: entered allmulticast mode [ 120.894298][ T8021] tunl0: entered allmulticast mode [ 120.901660][ T8021] tunl0: left allmulticast mode [ 120.937761][ T8021] tunl0: left promiscuous mode [ 121.028170][ T8024] tunl0: entered promiscuous mode [ 121.050531][ T8024] vlan2: entered promiscuous mode [ 121.069019][ T8024] vlan2: entered allmulticast mode [ 121.084741][ T8024] tunl0: entered allmulticast mode [ 121.091814][ T8024] tunl0: left allmulticast mode [ 121.110019][ T8024] tunl0: left promiscuous mode [ 121.221595][ T5887] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1 [ 121.273749][ T5887] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22 [ 121.400444][ T8049] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 121.593842][ T8058] netlink: 'syz.0.580': attribute type 2 has an invalid length. [ 121.881556][ T8072] xt_ecn: cannot match TCP bits for non-tcp packets [ 121.957225][ T8052] wg1 speed is unknown, defaulting to 1000 [ 122.708918][ T53] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.815431][ T53] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.854886][ T8054] __nla_validate_parse: 2 callbacks suppressed [ 122.854905][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 122.960459][ T53] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.071381][ T53] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.097086][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.111208][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.121867][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.130618][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.138822][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.146502][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.395727][ T8116] wg1 speed is unknown, defaulting to 1000 [ 123.455468][ T8138] netem: change failed [ 123.589876][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 123.661326][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 123.713014][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 123.767443][ T8153] No such timeout policy "syz1" [ 123.990141][ T53] erspan0 (unregistering): left promiscuous mode [ 124.048285][ T53] team0: Port device geneve0 removed [ 124.067777][ T53] bridge0 (unregistering): left promiscuous mode [ 124.229170][ T53] bond0 (unregistering): Released all slaves [ 124.345497][ T53] bond1 (unregistering): Released all slaves [ 124.452742][ T53] bond2 (unregistering): (slave batadv1): Releasing active interface [ 124.461265][ T53] batadv1: left promiscuous mode [ 124.472514][ T53] bond2 (unregistering): Released all slaves [ 124.491154][ T8125] wg1 speed is unknown, defaulting to 1000 [ 124.858347][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 125.193753][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.214148][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.244826][ T5844] Bluetooth: hci0: command tx timeout [ 125.254187][ T8125] bridge_slave_0: entered allmulticast mode [ 125.275232][ T8125] bridge_slave_0: entered promiscuous mode [ 125.296548][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.330854][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.371064][ T8125] bridge_slave_1: entered allmulticast mode [ 125.394105][ T8125] bridge_slave_1: entered promiscuous mode [ 125.612468][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 125.714159][ T8173] wg1 speed is unknown, defaulting to 1000 [ 125.758149][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 125.939672][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.956560][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.126277][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 126.179912][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'. [ 126.218499][ T8125] team0: Port device team_slave_0 added [ 126.284644][ T8125] team0: Port device team_slave_1 added [ 126.454317][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.510052][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.582665][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.617324][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.648506][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.715260][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.327783][ T5844] Bluetooth: hci0: command tx timeout [ 127.481894][ T8125] hsr_slave_0: entered promiscuous mode [ 127.495633][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 127.498817][ T8125] hsr_slave_1: entered promiscuous mode [ 127.504808][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 127.528181][ T8125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.536326][ T8125] Cannot create hsr debugfs directory [ 127.546585][ T8235] team0: Device sit1 is of different type [ 127.895163][ T8258] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 127.924290][ T53] hsr_slave_0: left promiscuous mode [ 127.933096][ T53] hsr_slave_1: left promiscuous mode [ 127.988964][ T53] veth1_macvtap: left promiscuous mode [ 128.003406][ T53] veth0_macvtap: left promiscuous mode [ 128.018752][ T53] veth1_vlan: left promiscuous mode [ 128.025074][ T53] veth0_vlan: left promiscuous mode [ 128.600329][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.640'. [ 129.136174][ T8279] team0: Device ipvlan3 failed to register rx_handler [ 129.418875][ T5844] Bluetooth: hci0: command tx timeout [ 130.026004][ T8309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.186581][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.653'. [ 130.187184][ T8309] bridge0: port 4(netdevsim2) entered disabled state [ 130.244856][ T8309] netdevsim netdevsim0 netdevsim2 (unregistering): left allmulticast mode [ 130.269123][ T8309] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 130.284026][ T8309] bridge0: port 4(netdevsim2) entered disabled state [ 130.305834][ T8309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.367766][ T8326] netlink: 'syz.4.654': attribute type 21 has an invalid length. [ 130.378957][ T8333] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.656'. [ 130.389357][ T8326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.654'. [ 130.397035][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 130.412636][ T8335] nbd: must specify at least one socket [ 130.515875][ T8309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.685721][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 130.711686][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.661'. [ 130.738451][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 130.762543][ T8309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.882290][ T8349] netlink: 112 bytes leftover after parsing attributes in process `syz.4.661'. [ 130.951196][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 130.972078][ T8125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.038469][ T8125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.058696][ T8125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.110888][ T8359] netlink: 'syz.1.664': attribute type 7 has an invalid length. [ 131.134232][ T8125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.229040][ T8309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.278924][ T8369] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 131.298599][ T8309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.345924][ T8309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.389940][ T8309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.484133][ T5844] Bluetooth: hci0: command tx timeout [ 131.533677][ T8380] vxlan0: entered allmulticast mode [ 131.641349][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.681416][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.700545][ T8387] nbd: must specify at least one socket [ 131.730777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.737998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.791487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.798688][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.817582][ T8390] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 131.851419][ T8390] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 132.140902][ T8404] siw: device registration error -23 [ 132.185080][ T8404] siw: device registration error -23 [ 132.216055][ T8404] siw: device registration error -23 [ 132.273779][ T8404] siw: device registration error -23 [ 132.282336][ T8404] siw: device registration error -23 [ 132.290754][ T8404] siw: device registration error -23 [ 132.302598][ T8404] siw: device registration error -23 [ 132.308448][ T8404] siw: device registration error -23 [ 132.316220][ T8404] siw: device registration error -23 [ 132.321964][ T8404] siw: device registration error -23 [ 132.347608][ T8404] siw: device registration error -23 [ 132.353265][ T8404] siw: device registration error -23 [ 132.377329][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.394581][ T8404] siw: device registration error -23 [ 132.410342][ T8404] siw: device registration error -23 [ 132.429772][ T8404] siw: device registration error -23 [ 132.448805][ T8404] siw: device registration error -23 [ 132.460843][ T8404] siw: device registration error -23 [ 132.473192][ T8404] siw: device registration error -23 [ 132.501959][ T8404] siw: device registration error -23 [ 132.508128][ T8125] veth0_vlan: entered promiscuous mode [ 132.514311][ T8404] siw: device registration error -23 [ 132.523749][ T8125] veth1_vlan: entered promiscuous mode [ 132.529304][ T8404] siw: device registration error -23 [ 132.550835][ T8404] siw: device registration error -23 [ 132.565406][ T8404] siw: device registration error -23 [ 132.574954][ T8404] siw: device registration error -23 [ 132.592912][ T8404] siw: device registration error -23 [ 132.635738][ T8404] siw: device registration error -23 [ 132.641372][ T8404] siw: device registration error -23 [ 132.647198][ T8125] veth0_macvtap: entered promiscuous mode [ 132.674390][ T8404] siw: device registration error -23 [ 132.680042][ T8404] siw: device registration error -23 [ 132.694392][ T8125] veth1_macvtap: entered promiscuous mode [ 132.735712][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.762349][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.788752][ T8125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.813868][ T8125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.837624][ T8125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.859180][ T8125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.966505][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.982754][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.023068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.042130][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.090165][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.105559][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.161291][ T8415] wg1 speed is unknown, defaulting to 1000 [ 133.251056][ T8431] macvtap3: entered promiscuous mode [ 133.257013][ T8431] bond0: entered promiscuous mode [ 133.262402][ T8431] bond_slave_0: entered promiscuous mode [ 133.270014][ T8431] bond_slave_1: entered promiscuous mode [ 133.276732][ T8431] macvtap3: entered allmulticast mode [ 133.282387][ T8431] bond0: entered allmulticast mode [ 133.288006][ T8431] bond_slave_0: entered allmulticast mode [ 133.293882][ T8431] bond_slave_1: entered allmulticast mode [ 133.301332][ T8431] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 133.369917][ T8435] macvtap3: left promiscuous mode [ 133.384344][ T8435] bond0: left promiscuous mode [ 133.389167][ T8435] bond_slave_0: left promiscuous mode [ 133.417793][ T8435] bond_slave_1: left promiscuous mode [ 133.434112][ T8435] macvtap3: left allmulticast mode [ 133.439466][ T8435] bond0: left allmulticast mode [ 133.450936][ T8435] bond_slave_0: left allmulticast mode [ 133.457307][ T8435] bond_slave_1: left allmulticast mode [ 133.526756][ T8446] pim6reg: entered allmulticast mode [ 133.571725][ T8444] netlink: 'syz.1.689': attribute type 5 has an invalid length. [ 133.687382][ T8440] pim6reg: left allmulticast mode [ 134.071278][ T8468] FAULT_INJECTION: forcing a failure. [ 134.071278][ T8468] name failslab, interval 1, probability 0, space 0, times 1 [ 134.115482][ T8468] CPU: 1 UID: 0 PID: 8468 Comm: syz.0.696 Not tainted 6.14.0-rc3-syzkaller-00699-ge6a532185daa #0 [ 134.115508][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.115518][ T8468] Call Trace: [ 134.115524][ T8468] [ 134.115531][ T8468] dump_stack_lvl+0x241/0x360 [ 134.115557][ T8468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.115574][ T8468] ? __pfx__printk+0x10/0x10 [ 134.115591][ T8468] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 134.115612][ T8468] ? __pfx___might_resched+0x10/0x10 [ 134.115633][ T8468] should_fail_ex+0x40a/0x550 [ 134.115656][ T8468] should_failslab+0xac/0x100 [ 134.115679][ T8468] __kmalloc_node_noprof+0xe1/0x4d0 [ 134.115696][ T8468] ? __kvmalloc_node_noprof+0x72/0x190 [ 134.115723][ T8468] __kvmalloc_node_noprof+0x72/0x190 [ 134.115746][ T8468] bpf_test_run_xdp_live+0x21d/0x2220 [ 134.115764][ T8468] ? __pfx_lock_release+0x10/0x10 [ 134.115791][ T8468] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 134.115810][ T8468] ? __pfx___might_resched+0x10/0x10 [ 134.115832][ T8468] ? __mutex_unlock_slowpath+0x227/0x800 [ 134.115862][ T8468] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.115877][ T8468] ? synchronize_rcu+0x11b/0x360 [ 134.115895][ T8468] ? __pfx_synchronize_rcu+0x10/0x10 [ 134.115933][ T8468] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 134.115955][ T8468] ? 0xffffffffa0001cdc [ 134.115988][ T8468] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.116030][ T8468] ? _copy_from_user+0x95/0xb0 [ 134.116051][ T8468] ? bpf_test_init+0x15a/0x180 [ 134.116066][ T8468] ? xdp_convert_md_to_buff+0x5b/0x330 [ 134.116085][ T8468] bpf_prog_test_run_xdp+0x805/0x11e0 [ 134.116109][ T8468] ? __pfx_lock_release+0x10/0x10 [ 134.116138][ T8468] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.116156][ T8468] ? __fget_files+0x2a/0x410 [ 134.116180][ T8468] ? __fget_files+0x2a/0x410 [ 134.116204][ T8468] ? fput+0x21b/0x290 [ 134.116223][ T8468] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.116242][ T8468] bpf_prog_test_run+0x2e4/0x360 [ 134.116267][ T8468] __sys_bpf+0x487/0x820 [ 134.116289][ T8468] ? __pfx___sys_bpf+0x10/0x10 [ 134.116321][ T8468] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.116346][ T8468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.116369][ T8468] ? do_syscall_64+0x100/0x230 [ 134.116393][ T8468] __x64_sys_bpf+0x7c/0x90 [ 134.116413][ T8468] do_syscall_64+0xf3/0x230 [ 134.116433][ T8468] ? clear_bhb_loop+0x35/0x90 [ 134.116456][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.116475][ T8468] RIP: 0033:0x7f671678d169 [ 134.116489][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.116501][ T8468] RSP: 002b:00007f67176d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.116519][ T8468] RAX: ffffffffffffffda RBX: 00007f67169a5fa0 RCX: 00007f671678d169 [ 134.116530][ T8468] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 134.116540][ T8468] RBP: 00007f67176d2090 R08: 0000000000000000 R09: 0000000000000000 [ 134.116550][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.116559][ T8468] R13: 0000000000000000 R14: 00007f67169a5fa0 R15: 00007ffdb7d7f6e8 [ 134.116585][ T8468] [ 134.466170][ T8474] __nla_validate_parse: 28 callbacks suppressed [ 134.466190][ T8474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'. [ 134.649858][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 134.873267][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.874058][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.895284][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.904415][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.924353][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.932859][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.940352][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.970152][ T8492] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 135.111053][ T8486] wg1 speed is unknown, defaulting to 1000 [ 135.225867][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 135.292864][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 135.306302][ T8505] bridge_slave_1: entered promiscuous mode [ 135.319456][ T8505] macvtap1: entered promiscuous mode [ 135.328581][ T8505] bond0: entered promiscuous mode [ 135.336458][ T8505] macvtap1: entered allmulticast mode [ 135.341873][ T8505] bond0: entered allmulticast mode [ 135.352236][ T8505] bridge_slave_1: entered allmulticast mode [ 135.360770][ T8505] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 135.369138][ T8511] macvtap1: left promiscuous mode [ 135.374393][ T8511] bond0: left promiscuous mode [ 135.379589][ T8511] macvtap1: left allmulticast mode [ 135.387793][ T8511] bond0: left allmulticast mode [ 135.392693][ T8511] bridge_slave_1: left allmulticast mode [ 135.433177][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.524190][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 135.539994][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 135.553611][ T8521] FAULT_INJECTION: forcing a failure. [ 135.553611][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 135.567588][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.1.708 Not tainted 6.14.0-rc3-syzkaller-00699-ge6a532185daa #0 [ 135.567612][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.567621][ T8521] Call Trace: [ 135.567627][ T8521] [ 135.567634][ T8521] dump_stack_lvl+0x241/0x360 [ 135.567660][ T8521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.567677][ T8521] ? __pfx__printk+0x10/0x10 [ 135.567696][ T8521] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 135.567717][ T8521] ? __pfx___might_resched+0x10/0x10 [ 135.567740][ T8521] should_fail_ex+0x40a/0x550 [ 135.567765][ T8521] should_failslab+0xac/0x100 [ 135.567786][ T8521] __kmalloc_node_noprof+0xe1/0x4d0 [ 135.567805][ T8521] ? __kvmalloc_node_noprof+0x72/0x190 [ 135.567832][ T8521] __kvmalloc_node_noprof+0x72/0x190 [ 135.567862][ T8521] bpf_test_run_xdp_live+0x290/0x2220 [ 135.567880][ T8521] ? __pfx_lock_release+0x10/0x10 [ 135.567907][ T8521] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.567925][ T8521] ? __pfx___might_resched+0x10/0x10 [ 135.567948][ T8521] ? __mutex_unlock_slowpath+0x227/0x800 [ 135.567977][ T8521] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.567992][ T8521] ? synchronize_rcu+0x11b/0x360 [ 135.568010][ T8521] ? __pfx_synchronize_rcu+0x10/0x10 [ 135.568048][ T8521] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 135.568070][ T8521] ? 0xffffffffa0001b14 [ 135.568102][ T8521] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.568135][ T8521] ? _copy_from_user+0x95/0xb0 [ 135.568154][ T8521] ? bpf_test_init+0x15a/0x180 [ 135.568169][ T8521] ? xdp_convert_md_to_buff+0x5b/0x330 [ 135.568188][ T8521] bpf_prog_test_run_xdp+0x805/0x11e0 [ 135.568211][ T8521] ? __pfx_lock_release+0x10/0x10 [ 135.568241][ T8521] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.568259][ T8521] ? __fget_files+0x2a/0x410 [ 135.568283][ T8521] ? __fget_files+0x2a/0x410 [ 135.568306][ T8521] ? fput+0x21b/0x290 [ 135.568325][ T8521] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.568343][ T8521] bpf_prog_test_run+0x2e4/0x360 [ 135.568368][ T8521] __sys_bpf+0x487/0x820 [ 135.568390][ T8521] ? __pfx___sys_bpf+0x10/0x10 [ 135.568422][ T8521] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.568446][ T8521] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.568468][ T8521] ? do_syscall_64+0x100/0x230 [ 135.568492][ T8521] __x64_sys_bpf+0x7c/0x90 [ 135.568511][ T8521] do_syscall_64+0xf3/0x230 [ 135.568530][ T8521] ? clear_bhb_loop+0x35/0x90 [ 135.568554][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.568573][ T8521] RIP: 0033:0x7f377b98d169 [ 135.568588][ T8521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.568600][ T8521] RSP: 002b:00007f37797f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.568618][ T8521] RAX: ffffffffffffffda RBX: 00007f377bba5fa0 RCX: 00007f377b98d169 [ 135.568629][ T8521] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 135.568640][ T8521] RBP: 00007f37797f6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.568649][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.568659][ T8521] R13: 0000000000000000 R14: 00007f377bba5fa0 R15: 00007ffdcf1e5008 [ 135.568684][ T8521] [ 135.581632][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 135.928516][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.063683][ T8529] openvswitch: netlink: IP tunnel dst address not specified [ 136.133374][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.154225][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 136.324665][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.337865][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.351769][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.359694][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.371775][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.375466][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.386626][ T8486] bridge_slave_0: entered allmulticast mode [ 136.394365][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.401795][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.409761][ T8486] bridge_slave_0: entered promiscuous mode [ 136.419514][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.431358][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.438742][ T8486] bridge_slave_1: entered allmulticast mode [ 136.446255][ T8486] bridge_slave_1: entered promiscuous mode [ 136.506795][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.543004][ T5843] ================================================================== [ 136.550410][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.551088][ T5843] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 136.567472][ T5843] Write of size 8 at addr ffff888065a305a0 by task syz-executor/5843 [ 136.575554][ T5843] [ 136.577889][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00699-ge6a532185daa #0 [ 136.577911][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.577921][ T5843] Call Trace: [ 136.577928][ T5843] [ 136.577935][ T5843] dump_stack_lvl+0x241/0x360 [ 136.577957][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.577974][ T5843] ? __pfx__printk+0x10/0x10 [ 136.577989][ T5843] ? _printk+0xd5/0x120 [ 136.578004][ T5843] ? __virt_addr_valid+0x183/0x530 [ 136.578020][ T5843] ? __virt_addr_valid+0x183/0x530 [ 136.578041][ T5843] print_report+0x16e/0x5b0 [ 136.578060][ T5843] ? __virt_addr_valid+0x183/0x530 [ 136.578074][ T5843] ? __virt_addr_valid+0x183/0x530 [ 136.578088][ T5843] ? __virt_addr_valid+0x45f/0x530 [ 136.578102][ T5843] ? __phys_addr+0xba/0x170 [ 136.578123][ T5843] ? sco_conn_put+0xad/0x210 [ 136.578141][ T5843] kasan_report+0x143/0x180 [ 136.578159][ T5843] ? sco_conn_put+0xad/0x210 [ 136.578179][ T5843] sco_conn_put+0xad/0x210 [ 136.578196][ T5843] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 136.578214][ T5843] hci_conn_hash_flush+0x1be/0x350 [ 136.578238][ T5843] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 136.578260][ T5843] ? drain_workqueue+0x2d3/0x3a0 [ 136.578281][ T5843] ? hci_discovery_set_state+0x57/0x180 [ 136.578302][ T5843] hci_dev_close_sync+0xa8b/0x1260 [ 136.578324][ T5843] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 136.578343][ T5843] ? rcu_is_watching+0x15/0xb0 [ 136.578364][ T5843] hci_unregister_dev+0x20b/0x510 [ 136.578382][ T5843] vhci_release+0x80/0xd0 [ 136.578400][ T5843] ? __pfx_vhci_release+0x10/0x10 [ 136.578418][ T5843] __fput+0x3e9/0x9f0 [ 136.578444][ T5843] task_work_run+0x24f/0x310 [ 136.578463][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 136.578478][ T5843] ? do_exit+0xa25/0x28e0 [ 136.578498][ T5843] ? do_exit+0xa25/0x28e0 [ 136.578519][ T5843] do_exit+0xa2a/0x28e0 [ 136.578542][ T5843] ? __pfx_do_exit+0x10/0x10 [ 136.578560][ T5843] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.578582][ T5843] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.578607][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.578624][ T5843] ? lockdep_hardirqs_on+0x99/0x150 [ 136.578644][ T5843] do_group_exit+0x207/0x2c0 [ 136.578666][ T5843] __x64_sys_exit_group+0x3f/0x40 [ 136.578686][ T5843] x64_sys_call+0x26a8/0x26b0 [ 136.578703][ T5843] do_syscall_64+0xf3/0x230 [ 136.578722][ T5843] ? clear_bhb_loop+0x35/0x90 [ 136.578745][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.578764][ T5843] RIP: 0033:0x7f9452b8d169 [ 136.578778][ T5843] Code: Unable to access opcode bytes at 0x7f9452b8d13f. [ 136.578786][ T5843] RSP: 002b:00007fffd5d05f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 136.578803][ T5843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9452b8d169 [ 136.578815][ T5843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 136.578824][ T5843] RBP: 00007f9452beaad8 R08: 00007fffd5d03d37 R09: 00000000000927c0 [ 136.578835][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.578845][ T5843] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007fffd5d06830 [ 136.578863][ T5843] [ 136.578869][ T5843] [ 136.880483][ T5843] Allocated by task 8125: [ 136.884798][ T5843] kasan_save_track+0x3f/0x80 [ 136.889467][ T5843] __kasan_kmalloc+0x98/0xb0 [ 136.894043][ T5843] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 136.900443][ T5843] kmalloc_reserve+0x111/0x2a0 [ 136.905197][ T5843] pskb_expand_head+0x1ee/0x1440 [ 136.910119][ T5843] netlink_trim+0x1d6/0x2e0 [ 136.914611][ T5843] netlink_broadcast_filtered+0x76/0x12a0 [ 136.920320][ T5843] nlmsg_notify+0xfb/0x1c0 [ 136.924727][ T5843] __dev_notify_flags+0xf7/0x400 [ 136.929678][ T5843] dev_change_flags+0xf0/0x1a0 [ 136.934431][ T5843] do_setlink+0xcca/0x4300 [ 136.938842][ T5843] rtnl_newlink+0x15af/0x1da0 [ 136.943505][ T5843] rtnetlink_rcv_msg+0x791/0xcf0 [ 136.948426][ T5843] netlink_rcv_skb+0x206/0x480 [ 136.953260][ T5843] netlink_unicast+0x7f6/0x990 [ 136.958017][ T5843] netlink_sendmsg+0x8de/0xcb0 [ 136.962767][ T5843] __sock_sendmsg+0x221/0x270 [ 136.967428][ T5843] __sys_sendto+0x363/0x4c0 [ 136.971942][ T5843] __x64_sys_sendto+0xde/0x100 [ 136.976709][ T5843] do_syscall_64+0xf3/0x230 [ 136.981202][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.987084][ T5843] [ 136.989390][ T5843] Freed by task 8125: [ 136.993348][ T5843] kasan_save_track+0x3f/0x80 [ 136.998015][ T5843] kasan_save_free_info+0x40/0x50 [ 137.003027][ T5843] __kasan_slab_free+0x59/0x70 [ 137.007779][ T5843] kfree+0x196/0x430 [ 137.011662][ T5843] skb_release_data+0x6a0/0x8a0 [ 137.016503][ T5843] consume_skb+0x9f/0xf0 [ 137.020738][ T5843] netlink_broadcast_filtered+0x116d/0x12a0 [ 137.026621][ T5843] nlmsg_notify+0xfb/0x1c0 [ 137.031020][ T5843] __dev_notify_flags+0xf7/0x400 [ 137.035949][ T5843] dev_change_flags+0xf0/0x1a0 [ 137.040700][ T5843] do_setlink+0xcca/0x4300 [ 137.045107][ T5843] rtnl_newlink+0x15af/0x1da0 [ 137.049769][ T5843] rtnetlink_rcv_msg+0x791/0xcf0 [ 137.054693][ T5843] netlink_rcv_skb+0x206/0x480 [ 137.059439][ T5843] netlink_unicast+0x7f6/0x990 [ 137.064189][ T5843] netlink_sendmsg+0x8de/0xcb0 [ 137.068937][ T5843] __sock_sendmsg+0x221/0x270 [ 137.073597][ T5843] __sys_sendto+0x363/0x4c0 [ 137.078087][ T5843] __x64_sys_sendto+0xde/0x100 [ 137.082871][ T5843] do_syscall_64+0xf3/0x230 [ 137.087363][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.093245][ T5843] [ 137.095555][ T5843] The buggy address belongs to the object at ffff888065a30000 [ 137.095555][ T5843] which belongs to the cache kmalloc-2k of size 2048 [ 137.109593][ T5843] The buggy address is located 1440 bytes inside of [ 137.109593][ T5843] freed 2048-byte region [ffff888065a30000, ffff888065a30800) [ 137.123550][ T5843] [ 137.125863][ T5843] The buggy address belongs to the physical page: [ 137.132257][ T5843] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65a30 [ 137.141014][ T5843] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.149501][ T5843] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 137.157468][ T5843] page_type: f5(slab) [ 137.161433][ T5843] raw: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001 [ 137.170013][ T5843] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 137.178582][ T5843] head: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001 [ 137.187234][ T5843] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 137.195887][ T5843] head: 00fff00000000003 ffffea0001968c01 ffffffffffffffff 0000000000000000 [ 137.204537][ T5843] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 137.213187][ T5843] page dumped because: kasan: bad access detected [ 137.219593][ T5843] page_owner tracks the page as allocated [ 137.225288][ T5843] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (kworker/1:3), ts 61134447596, free_ts 15965383431 [ 137.246547][ T5843] post_alloc_hook+0x1f4/0x240 [ 137.251303][ T5843] get_page_from_freelist+0x365c/0x37a0 [ 137.256834][ T5843] __alloc_frozen_pages_noprof+0x292/0x710 [ 137.262720][ T5843] alloc_pages_mpol+0x311/0x660 [ 137.267557][ T5843] allocate_slab+0x8f/0x3a0 [ 137.272043][ T5843] ___slab_alloc+0xc27/0x14a0 [ 137.276711][ T5843] __slab_alloc+0x58/0xa0 [ 137.281026][ T5843] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 137.287426][ T5843] kmalloc_reserve+0x111/0x2a0 [ 137.292176][ T5843] __alloc_skb+0x1f3/0x440 [ 137.296576][ T5843] mld_newpack+0x17c/0xc70 [ 137.300981][ T5843] add_grec+0x1492/0x19a0 [ 137.305297][ T5843] mld_send_initial_cr+0x228/0x4b0 [ 137.310397][ T5843] mld_dad_work+0x44/0x500 [ 137.314814][ T5843] process_scheduled_works+0xabe/0x18e0 [ 137.320356][ T5843] worker_thread+0x870/0xd30 [ 137.324935][ T5843] page last free pid 1 tgid 1 stack trace: [ 137.330722][ T5843] free_frozen_pages+0xe0d/0x10e0 [ 137.335740][ T5843] free_contig_range+0x14c/0x430 [ 137.340665][ T5843] destroy_args+0x94/0x4b0 [ 137.345070][ T5843] debug_vm_pgtable+0x551/0x590 [ 137.349904][ T5843] do_one_initcall+0x248/0x930 [ 137.354650][ T5843] do_initcall_level+0x157/0x210 [ 137.359575][ T5843] do_initcalls+0x71/0xd0 [ 137.363892][ T5843] kernel_init_freeable+0x435/0x5d0 [ 137.369077][ T5843] kernel_init+0x1d/0x2b0 [ 137.373393][ T5843] ret_from_fork+0x4b/0x80 [ 137.377796][ T5843] ret_from_fork_asm+0x1a/0x30 [ 137.382546][ T5843] [ 137.384855][ T5843] Memory state around the buggy address: [ 137.390573][ T5843] ffff888065a30480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.398629][ T5843] ffff888065a30500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 137.406683][ T5843] >ffff888065a30580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.414736][ T5843] ^ [ 137.419831][ T5843] ffff888065a30600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.427889][ T5843] ffff888065a30680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.435934][ T5843] ================================================================== [ 137.467476][ T5844] Bluetooth: hci0: command tx timeout [ 137.539015][ T5843] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.546251][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00699-ge6a532185daa #0 [ 137.557105][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.567170][ T5843] Call Trace: [ 137.570450][ T5843] [ 137.573384][ T5843] dump_stack_lvl+0x241/0x360 [ 137.578073][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.583281][ T5843] ? __pfx__printk+0x10/0x10 [ 137.587876][ T5843] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.593914][ T5843] ? vscnprintf+0x5d/0x90 [ 137.598268][ T5843] panic+0x349/0x880 [ 137.602160][ T5843] ? check_panic_on_warn+0x21/0xb0 [ 137.607275][ T5843] ? __pfx_panic+0x10/0x10 [ 137.611692][ T5843] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 137.617666][ T5843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 137.623996][ T5843] check_panic_on_warn+0x86/0xb0 [ 137.628939][ T5843] ? sco_conn_put+0xad/0x210 [ 137.633520][ T5843] end_report+0x77/0x160 [ 137.637752][ T5843] kasan_report+0x154/0x180 [ 137.642244][ T5843] ? sco_conn_put+0xad/0x210 [ 137.646827][ T5843] sco_conn_put+0xad/0x210 [ 137.651232][ T5843] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 137.656507][ T5843] hci_conn_hash_flush+0x1be/0x350 [ 137.661631][ T5843] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 137.667273][ T5843] ? drain_workqueue+0x2d3/0x3a0 [ 137.672203][ T5843] ? hci_discovery_set_state+0x57/0x180 [ 137.677736][ T5843] hci_dev_close_sync+0xa8b/0x1260 [ 137.682838][ T5843] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 137.688371][ T5843] ? rcu_is_watching+0x15/0xb0 [ 137.693139][ T5843] hci_unregister_dev+0x20b/0x510 [ 137.698165][ T5843] vhci_release+0x80/0xd0 [ 137.702494][ T5843] ? __pfx_vhci_release+0x10/0x10 [ 137.707513][ T5843] __fput+0x3e9/0x9f0 [ 137.711520][ T5843] task_work_run+0x24f/0x310 [ 137.716124][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 137.721230][ T5843] ? do_exit+0xa25/0x28e0 [ 137.725554][ T5843] ? do_exit+0xa25/0x28e0 [ 137.729894][ T5843] do_exit+0xa2a/0x28e0 [ 137.734056][ T5843] ? __pfx_do_exit+0x10/0x10 [ 137.738744][ T5843] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.744728][ T5843] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.751139][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.756327][ T5843] ? lockdep_hardirqs_on+0x99/0x150 [ 137.761514][ T5843] do_group_exit+0x207/0x2c0 [ 137.766098][ T5843] __x64_sys_exit_group+0x3f/0x40 [ 137.771114][ T5843] x64_sys_call+0x26a8/0x26b0 [ 137.775784][ T5843] do_syscall_64+0xf3/0x230 [ 137.780277][ T5843] ? clear_bhb_loop+0x35/0x90 [ 137.784944][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.790825][ T5843] RIP: 0033:0x7f9452b8d169 [ 137.795226][ T5843] Code: Unable to access opcode bytes at 0x7f9452b8d13f. [ 137.802223][ T5843] RSP: 002b:00007fffd5d05f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 137.810641][ T5843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9452b8d169 [ 137.818610][ T5843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 137.826575][ T5843] RBP: 00007f9452beaad8 R08: 00007fffd5d03d37 R09: 00000000000927c0 [ 137.834552][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.842518][ T5843] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007fffd5d06830 [ 137.850488][ T5843] [ 137.853632][ T5843] Kernel Offset: disabled [ 137.857941][ T5843] Rebooting in 86400 seconds..