last executing test programs: 10.177860276s ago: executing program 0 (id=997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa030490781200183f25d1440000680000000100007f0000017f000001c15bdb1be5546038c337a5e00d22c130a0f4c879d4af750a3af5f07efd632239e73fdd9856ae68351345af6b00e5fe96fa59be6019812e6f004693a7a5f67151230ac699e46b76c285cf08045e93f8acf2d180ff495053654e627f29af9d8c098a3982b8d60ecd6364d61d50bfcefcffa5ddaf"], 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newtfilter={0x4f8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c0, 0x2, [@TCA_FLOWER_ACT={0x4b4, 0x3, [@m_police={0x4b0, 0x1f, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4f0, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x0, 0x9, 0x1, 0x0, 0x2, 0x200, 0xffffffff, 0xb9ef, 0x27f1eb2d, 0x401, 0x1, 0x80000000, 0x46, 0xcad, 0x80, 0x4, 0x2, 0x2, 0x10, 0x4, 0x9, 0x2, 0x9, 0x8, 0x800, 0x4, 0x6, 0x5, 0x9, 0x2, 0x2, 0x1, 0xfffffffd, 0x4, 0x6, 0x9, 0x2, 0x3, 0x7, 0x80000001, 0x559, 0xbd8, 0x0, 0x8, 0x8, 0xa0, 0x3, 0x5, 0xfffffff7, 0x80000001, 0x4a, 0x6, 0x3, 0x3ff, 0x0, 0x4, 0xfffffbff, 0x1, 0x3, 0x4, 0x9, 0x1, 0x5, 0x3ff, 0x6, 0xf, 0x1ff, 0x1, 0xff, 0x0, 0x3, 0x2, 0x3, 0xc8b6, 0x7, 0x5, 0x7, 0x1000, 0x6, 0x6, 0x0, 0xfffffffe, 0x9, 0x4, 0xcd, 0x3, 0x0, 0xaeda, 0x1, 0x3, 0x1, 0x10, 0x0, 0x2, 0x1, 0x2, 0x4, 0x1, 0x7fffffff, 0x9, 0x9, 0x8, 0x4, 0x5, 0x9, 0x7, 0x800, 0x5, 0x3, 0x1, 0x442, 0x81, 0x8c2, 0x9, 0x5, 0x2, 0x5, 0x8, 0x1, 0x7fffffff, 0x1, 0x8, 0x9d0f, 0x5fe, 0xca, 0x4, 0x1, 0x1000, 0x4, 0xffffffff, 0x2, 0x0, 0x10001, 0x8, 0x9, 0x3, 0x8, 0x2, 0xff, 0x8b, 0x7fffffff, 0x0, 0x2, 0xf, 0xe4, 0xf119, 0x7fff, 0x5, 0xe92, 0x1, 0xffffffec, 0x2, 0x8, 0x1, 0x3, 0xe2f4, 0x4, 0x2, 0x4, 0x5, 0x6, 0x3, 0xfffffff7, 0x800, 0x11de, 0x5, 0xd68, 0x8, 0x50, 0x4e2, 0x0, 0x6, 0x4, 0x7fffffff, 0x400, 0x2, 0x4, 0x6, 0xfff, 0x2, 0x7, 0x400, 0xe1, 0x2, 0x8, 0x8, 0xffff8a1c, 0x4, 0x6, 0x8, 0x4, 0x400, 0x7, 0x2, 0xf17c, 0x2, 0x48, 0x7fffffff, 0x1, 0x4, 0xfffffff9, 0x88, 0x9, 0x5, 0x4fa9, 0xfffc, 0x5, 0x10000, 0x8, 0x3, 0x10, 0x5, 0xab5, 0xffffffff, 0xe5, 0x4, 0x0, 0x7, 0xc, 0x10, 0x4, 0x7fffffff, 0x7, 0x1, 0x3, 0x1, 0x6923, 0x7fff, 0x9, 0x8, 0x4b, 0x7, 0xfffffffc, 0x401, 0x2, 0x8, 0x0, 0x2, 0xc216, 0x1, 0x4, 0xed3, 0x5, 0x1, 0x8, 0xb, 0xfffffff9, 0x6, 0x8, 0x3000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}]]}, {0x76, 0x6, "dc5ee37d51b22bbd70f76415b8a7a4072cd723b194957bfea5bc172a086e5dec1ac01dfaa9961869cb89ec76d152aa8123ef7a774996d01e07e998880f09689efba257be88def3ed47fd58e8a93402c4f7cc5f36b063c3df791cb70ee624ca91d9ae706edd75c1943ee655f785384a22037e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x600) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newqdisc={0x9c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x401, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0xffffffff, 0x2, 0x18, 0x1, 0x6, 0xe, {0xe389, 0x5, 0x5, 0x0, 0x9, 0xfffffffb}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x7, 0x9, 0xa8, 0x0, 0x2, 0x65}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000680)={'filter\x00', 0x0, 0x0, 0x0, [0x7468, 0x10, 0x314e, 0x62, 0x1, 0x1], 0x7, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b89f30b066afc2e42b39885da7710ad9619f486b51377d41cc5c1afa7f5215d8c0cf1c714ce6cd0015a1beeac8dbef599c1dcf03b1a58d0844a4c8449f5e90128c32382bb68fcb7fb22f548f86947060000000000000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0005000600000001100000"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x60000090) 9.870985814s ago: executing program 0 (id=1003): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 9.567523921s ago: executing program 0 (id=1005): unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000000000000000000000f9178b3eb18e62873bad7ce20b86a651a4640101"], 0x38}}, 0x40400c0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61f0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000895}, 0x880) socket(0x2d, 0x2, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20001090) 8.712228421s ago: executing program 2 (id=1014): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r2, &(0x7f0000000500)=""/4096, 0x1000) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfffffffffffffd7d}}, 0x0) close(r4) 8.407072522s ago: executing program 2 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001e0001002dbd7000fcdbdf25070000fd"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x18004) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'veth1_to_hsr\x00', {0xfffffffe}, 0x3}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8c0081, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x1}, 0x8) 8.35807038s ago: executing program 2 (id=1017): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x60}}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) 8.059667713s ago: executing program 2 (id=1019): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101}, {@multicast1}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.141695984s ago: executing program 3 (id=1026): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xffff981c, 0x8, 0x2011, 0x1000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x802, 0xd}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6ecbba59b6961981b3c559c40bf18f5f890eca2b725edabff02fc463d446645727c4d62813073d94f3495f85e906ce0b41e39f39a42755736c2f6456fd6707f2f5a9e48ff8c62e08d80b2d7cb7d5ab0adc5eae38a6ce5f78f4bda2c48eed119e5c7efc18efb7ea5c0e70b7f291e9d5cbbb2072c6fc4ca8b443cc89f2ee48c2d92f5690ee4600e7dfbbb3edcc76f4d2f510957160b01ec9c5eb9bbe00f32c6c3262783f0738e35adf035024d2d5", @ANYBLOB="78cd93e924f79da85891c43af454e2eb34ec34ff306b9cd0c091a1baec62dbddbeaddc4bb4d4240409e3fd78afc6330048708880de6e11dfed50640ba28d7434e2b52b2d9098d75b05e20000f291d69e44f487ffdedb393f163071d2f5d498c6762864972630adcd345e7ae46da898995d4828d5826ca42778b2fc0914fdc5216e9f4071bcbd5df66f9764bd", @ANYRESHEX=r1], 0x4c}}, 0x48895) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1000000010140400270500006e1a0c62"], 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r2, 0x29, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x6a040000) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x61d9, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 4.595066307s ago: executing program 0 (id=1030): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x38ba189384ac9c94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="e2", 0x1}], 0x1}}], 0x1, 0x8004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000ac0), 0x1}, 0x5}, {{&(0x7f0000000200)=@generic, 0xffffffffffffffb2, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=""/157, 0x9d}, 0x12d}], 0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x17, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x48}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x1) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006c5e06fb42510aca971bdcd1d29b72b48ddf19128953435f340e14ac65b7ca62879baf8da5fec22ed3e28d12f481856ff0dce0202dd77aab6665b74dd9f36399deea36df52e4241df4b75beaa311306f4816327c52f18e96c05d9db0975ec0e353f85de6a5d5eca9809491af960dad977954076eda34718fb94acf4efb75a2d12283c8a9e2d943967c9a45"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r4, 0x3) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.902223132s ago: executing program 1 (id=1035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000001c0)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x894a, &(0x7f0000000200)={'erspan0\x00', @ifru_map={0x27653801, 0x4a0c, 0x0, 0x5, 0x9, 0xfd}}) ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000540)="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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$sock_netdev_private(r4, 0x8910, &(0x7f0000000140)="80182bd582d322d70a1eacc747bfd8b091fd8db375c47bf659b803a6044a31d28ed2ada1f89dfa11cb339e32a52126b3") 3.895299593s ago: executing program 2 (id=1036): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000002820000004000000", @ANYRES32=r1, @ANYBLOB="70171a61dbb4994ecfed7bafe858ff12adf041dc3a19ae8454dd15fb8796f1445cef8575fcfed0bd02e9e8680a58e440e3dee9cb11228d09585416b900e8186ae12e5ce985a18e6557dbb041cd413629f73e66a136d5cda005b89bb461e9ffa29c1c2654453881c720fdd31dd1379e00e50a72b1114c5edc32043b2d0dd793b81a91801304764dfd80c706ba627a6d0253df440cec813d49210ae5e8f4effcdf17ee566cc1f7e7f24d155e13c562c18292b67deaa607ba1236892ee252ee050eeb699c9e6ef70212b7fb3d5e0f6dbde9", @ANYRES64=0x0], 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={r4, 0x2}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x4, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e24, 0x2, 'lblc\x00', 0x10, 0x5, 0x3b}, {@loopback, 0x4e21, 0x4, 0x5, 0x4, 0x7f53}}, 0x44) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc010000190001000000000320000000fc020000000000000000ba6a872e00000000000000000000000000000000010001000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500fc020000000000fd0000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000001000000003c00000002000000000000000000000000000000000000000000000001030000000000000000000000000000ff010000000000000000000000000001000000003c00000002000000fe800000000000000000000000000010000000000000000000000000030000000000000000000000000000000000000000000000000000002b00000002000000ac141400000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000006c00000000150000ff0200000000000000000000000000010000000004"], 0x1fc}}, 0x0) 3.669594318s ago: executing program 0 (id=1038): socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xe937e523a4a21171, 0x0, 0x1, 0x0, 0x0, 0x30024082}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@fallback, 0xffffffffffffffff, 0x7, 0x2002}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028004000100980000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c0002"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 3.567485276s ago: executing program 1 (id=1040): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000540)="04832c799a91a8e05ff472f5a6eff4684f432862d0f112a3ea078db2f7e44d398558b009e56774a76ca4ca7723eff08c35dddcff7538abff5c8fd89a2560e281857cb385408aa0d1a279ce1352476165ec6e613e92ea622a376596e1432f6ceedc756a0b68b345df") syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={'bond0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e200002907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffe2442762d00000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/57, 0x27, 0x39, 0x1, 0x47}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x1309, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 3.455892906s ago: executing program 0 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2.91926539s ago: executing program 2 (id=1042): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x7, 0x1000}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="59b488ab00da8948860fba245db95ff97d7374543d7de7b26eca8e4d03e9bf6cf0f6bc39c62e3082817c58e2837b0cbfaa731c95ebfdc170a40328a9df1e07"], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="de345ab9308b60b79a99fc69249d21fac4e98293591d6cd9f8946a595d"], 0x60}}, 0x8000) 2.859543741s ago: executing program 1 (id=1043): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r5, @ANYBLOB="128009000100626f6e64000000000c00028008000b00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 2.753359847s ago: executing program 3 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x8, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x311}]}, 0x1c}}, 0x0) 2.538859719s ago: executing program 3 (id=1046): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x1c}], 0x1, 0x0, 0x0, 0x4048001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f000800"/13, @ANYRES16=r1, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES8, @ANYRES64=r1], 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780b00001ce00003000306907c00fa00094570fff6650005010400030a050102ac1414aa9308d357c88541269eaa9f65ac065b3ea04ab2aac9101d8a233942c44a53b7c1bc8328205be0023ab2b49d6cb7b332fcb85bed10cfb04525df09006e988332680eb8b59d8d46d99336565ad56d09d97f79b4e31d368a9cd18449d96b9bdb9ac93767ba5a9a6b0f5aac2b6d3344c73188e9ed3d8b4b1882dba36db6f7fea8e524f9b384570682f80682192c4b8c2fd1b6"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x1, 0x6, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close(0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000002c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x52, 0x0, &(0x7f00000004c0)="9a23f6bc2b7848a60d0000000f321a32e2a5bb414283584b7f6f2321757aedd5f2d2116979a98345e4462db963c811b1e60cd97aabaa06317f3b669094cce551f6d1575c673193ddf0cd1f21e487c521cdd5", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0xc8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r8, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1b23a79daab4fc97}, 0x4004040) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r11) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r10, 0x11}, 0x14) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.238646505s ago: executing program 4 (id=1047): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000)='9', &(0x7f0000000080)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r1}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) sendto$l2tp(r7, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r7, 0x0, 0xc00, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000000}) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000)='9', &(0x7f0000000080)=@tcp6=r6, 0x2}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r1}, 0x20) (async) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$l2tp(r7, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r7, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) (async) recvfrom$l2tp(r7, 0x0, 0xc00, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40000000}) (async) 2.183729743s ago: executing program 1 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000780)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0x134, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val, @val={0x0, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_P2P_OPPPS={0x0, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BEACON_INTERVAL]}, 0x134}, 0x1, 0x0, 0x0, 0x4080}, 0x4048800) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6e92, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48005}, 0x80c5) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x44, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfdef) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x29000000, 0x0, 0x0, [0x4, 0x401, 0x80000001, 0x2, 0x3, 0x100000001]}, &(0x7f0000000080)=0x78) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18250000", @ANYRES32=r7, @ANYBLOB="00ff0000000000220da4fcffffffffff"], &(0x7f0000000640)='GPL\x00', 0x6, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x20, '\x00', r11, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x1addfb88, 0xa49e}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0x4, 0x8}, {0x3, 0x5, 0x826, 0x8}, {0x2, 0x4, 0x10, 0x6}], 0x10, 0x2}, 0x94) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280002002000000127bd7400fcdbdf250200800710000000010001000c000c400000000000000002"], 0x28}}, 0x0) 2.022648834s ago: executing program 3 (id=1049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f0000000380)="1c", 0x1, 0x48015, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000700d00000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a703000000000000850000000600000095"], &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040062f2b09a77dd0000feff0000000000000000aa55ef93c1dcf0101dc40aa07bea21f360d9a756217da71ec7b1"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b8000000000073019b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'bond_slave_1\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r8, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r7, &(0x7f0000000080)={0x11, 0x8, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5, 0xfff, 0x8, 0x0, 0xbe06, 0x5000000, r8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000008000000000047000000270000000112000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.992322831s ago: executing program 4 (id=1050): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x87}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.902743793s ago: executing program 1 (id=1051): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@newtfilter={0x4c, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_EMATCHES={0x18, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x2008c010) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001500)="0b9af5a201aff54372848fba1941e40a4f0c69633e372eeab0c4d3d5b8450ff420f0f6e8022ebb22f1ee12a3f3c055270f872d500c894b63f88adb8db72d9d5c5f595cef57ad187ae8", 0x49}, {&(0x7f0000001580)="f2433607e440d4cf0630bc61536c12e11fbd3cf83b164af5832002d7471df024e0eddc84148994a66fe5583ed39ee4013368c365efa9172f273d9a49e07b02c98e09f7465e8cc45e0d8c19a1023435ddf44b3462e7ede061318cfc10f9f7e61a279541", 0x63}, {&(0x7f0000000340)="55ef6a1b1f848f2b93c04c291085dfcc50d889806be57e7d37316bdbe8b02c392d43", 0x22}], 0x3}, 0x4048010) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r0, @ANYRES8=0x0, @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x28080) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES32=r8, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req={0x401, 0x0, 0x81, 0xfff}, 0x10) recvmmsg$unix(r10, &(0x7f0000000b00)=[{{0x0, 0x55, &(0x7f0000000300), 0xf}}], 0x1, 0x400122a0, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom$packet(r10, &(0x7f0000000040)=""/15, 0xf, 0x2140, 0x0, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$PPPIOCGIDLE32(r11, 0x8008743f, &(0x7f00000002c0)) 1.795426109s ago: executing program 4 (id=1052): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000082f3a736ff5312b40aa4e620f9ce2e5a5ebd8593b0aa089af74615b55f23c52dce6c480ffc3098f321645640ca70fc57fd8bbf1cd34fdcccb8b4aa3cbce80bd02ef800fb5f1ae9ca1fb2d97b955090530b81bf97d0e5a876e47c2059264f09c4d56f78d650a1e73723f5051af524c8eedea5ceaca5655d24ea0371abc15544fcbfa0e60b2ade53887955475064e71461b7efb50dc0c2e40f59c78457cfd920dd0343356847eb039874703b8d14e53b7791bc481561529e7d824824602d45b9f11ecc44ee18c8cd7104e4398e14354fccaa5bbd4fecf0ad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES8=r4], 0x10) close(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0xd75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r6, &(0x7f0000000200)}, 0x20) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@bcast, @default, @bcast, @remote, @netrom]}, &(0x7f0000000040)=0x40, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@struct={0xd, 0x3, 0x0, 0x4, 0x1, 0x4b6, [{0x3, 0x1}, {0x1, 0x1, 0x7ff}, {0x0, 0x0, 0x8}]}, @fwd={0x1}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x30, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000540)=""/180, 0x6a, 0xb4, 0x0, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffff7f000000000200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001849000005000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185800000100000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x38, &(0x7f0000000480)=""/56, 0x40f00, 0x89, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90}, 0x94) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) 1.664636137s ago: executing program 1 (id=1053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a80)={0x0, "86eb0d1920e1f9c6c6a12ef363e70dcf"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 1.654801437s ago: executing program 4 (id=1054): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1.255175129s ago: executing program 4 (id=1055): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x1, ':'}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.064043488s ago: executing program 3 (id=1056): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x9, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/173, &(0x7f0000000100)=0xad) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.01997274s ago: executing program 4 (id=1057): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r2 = socket(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x24008040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x1d, "4f27d9a3165cc31e2334c6dbf5b41771cbcf21603a1dc89c65c082ef73"}}) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x0, 0xfffffffa, {{0x6, 0x4, 0x2, 0x26, 0x18, 0x65, 0x0, 0x36, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@noop]}}}}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r4}, 0xc) close(r2) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) r6 = socket$inet6(0xa, 0x80802, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r7, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, r7, 0x4, r7}, 0x7) sendmmsg$inet6(r6, 0x0, 0x0, 0x1c000) ppoll(&(0x7f00000005c0)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) write(r6, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000840)=ANY=[@ANYBLOB="7649058d2ea4cadd33454075aaaaaaaaaaaa0180c200000008004500002a00000090789e32c52161a44e318195e7960b3b7a4791feee8ba1a5fe31c76a3ab88db5e230404a354a4767f8f8ffe7673d419ea7e2a496d73e0bb3b094e03cf4e311498c5f6ef56b6815773eca726733b4cc8ee0287a5386125b88bf33fa55474ad8062a86c4b90e725258a668c603be633a86fea02ead89788e6f0e690a87c7159a32d60bfbb023a536e88b8a713c9a177aa7a74042c9a3df18a6cc2d99cef6323c5a08aca7a0f7da31d0632ba982cd66448a55ae0be8d4bd6b4b9984aad4c8f4fd3d5803be590971d397", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400009078fffcc516"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 0s ago: executing program 3 (id=1058): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d0000000000950003"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001240000000080500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a6970246d656300"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001000030500004088ee25db4bce7c12", @ANYRES32, @ANYBLOB="1000020000000000600012800b00010065727370616e00005000028006000f00e6f2000008000700ff"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0), 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000008a000000000667d0218b000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65754f12bc7c30e}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07002dbd7000fbdbdf254b0000000e00a90066697273746e616d6500000008001c00000000004d074aaf2b1f4cad6f03127ae73840d37b07b6a15a2a827e945f6a18921597bd982958826507728b8bd0361f"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000002c0)={0x8, 'ip6_vti0\x00', {'ip6gre0\x00'}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 64.271783][ T5818] cgroup: Unknown subsys name 'net' [ 64.399576][ T5818] cgroup: Unknown subsys name 'cpuset' [ 64.408295][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.762516][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.022442][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.030796][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.038562][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.046762][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.085831][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.173493][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.182816][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.229168][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.239165][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.250663][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.257237][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.259131][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.265629][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.274039][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.279766][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.288075][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.300693][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.310851][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.311431][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.327567][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.360196][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.377666][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.384852][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.385831][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.400131][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.531509][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.814449][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.822275][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.829804][ T5830] bridge_slave_0: entered allmulticast mode [ 68.837237][ T5830] bridge_slave_0: entered promiscuous mode [ 68.857815][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.868810][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.876185][ T5830] bridge_slave_1: entered allmulticast mode [ 68.883173][ T5830] bridge_slave_1: entered promiscuous mode [ 68.931045][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.969358][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.114011][ T5830] team0: Port device team_slave_0 added [ 69.173396][ T5830] team0: Port device team_slave_1 added [ 69.223274][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.233488][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.282165][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.289354][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.315623][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.342309][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.349511][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.375892][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.439140][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 69.453912][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 69.557773][ T5830] hsr_slave_0: entered promiscuous mode [ 69.564218][ T5830] hsr_slave_1: entered promiscuous mode [ 69.619445][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.628109][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.635840][ T5834] bridge_slave_0: entered allmulticast mode [ 69.642795][ T5834] bridge_slave_0: entered promiscuous mode [ 69.671261][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.678696][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.685962][ T5834] bridge_slave_1: entered allmulticast mode [ 69.692928][ T5834] bridge_slave_1: entered promiscuous mode [ 69.744581][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.751927][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.759588][ T5837] bridge_slave_0: entered allmulticast mode [ 69.767033][ T5837] bridge_slave_0: entered promiscuous mode [ 69.812133][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.819371][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.826761][ T5837] bridge_slave_1: entered allmulticast mode [ 69.833659][ T5837] bridge_slave_1: entered promiscuous mode [ 69.874769][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.902272][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.909710][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.917287][ T5835] bridge_slave_0: entered allmulticast mode [ 69.924173][ T5835] bridge_slave_0: entered promiscuous mode [ 69.931402][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.938532][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.945796][ T5836] bridge_slave_0: entered allmulticast mode [ 69.952705][ T5836] bridge_slave_0: entered promiscuous mode [ 69.961846][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.987842][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.995035][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.002331][ T5835] bridge_slave_1: entered allmulticast mode [ 70.009507][ T5835] bridge_slave_1: entered promiscuous mode [ 70.016942][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.024088][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.031659][ T5836] bridge_slave_1: entered allmulticast mode [ 70.038688][ T5836] bridge_slave_1: entered promiscuous mode [ 70.072132][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.106074][ T5849] Bluetooth: hci0: command tx timeout [ 70.125876][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.151847][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.162823][ T5834] team0: Port device team_slave_0 added [ 70.189414][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.200534][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.211405][ T5834] team0: Port device team_slave_1 added [ 70.236986][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.269578][ T5837] team0: Port device team_slave_0 added [ 70.320551][ T5837] team0: Port device team_slave_1 added [ 70.344793][ T5836] team0: Port device team_slave_0 added [ 70.352473][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.359712][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.385904][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.414214][ T5835] team0: Port device team_slave_0 added [ 70.421864][ T5836] team0: Port device team_slave_1 added [ 70.428305][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.435433][ T5833] Bluetooth: hci4: command tx timeout [ 70.436024][ T5833] Bluetooth: hci3: command tx timeout [ 70.441172][ T5850] Bluetooth: hci1: command tx timeout [ 70.447248][ T5849] Bluetooth: hci2: command tx timeout [ 70.452031][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.483819][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.511189][ T5835] team0: Port device team_slave_1 added [ 70.536335][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.543327][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.569310][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.624229][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.631311][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.657584][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.679363][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.686366][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.712471][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.725489][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.732460][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.761929][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.794559][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.801567][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.828143][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.840068][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.847797][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.874089][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.939126][ T5834] hsr_slave_0: entered promiscuous mode [ 70.945852][ T5834] hsr_slave_1: entered promiscuous mode [ 70.952039][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 70.958250][ T5834] Cannot create hsr debugfs directory [ 71.032867][ T5837] hsr_slave_0: entered promiscuous mode [ 71.039360][ T5837] hsr_slave_1: entered promiscuous mode [ 71.045966][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 71.051699][ T5837] Cannot create hsr debugfs directory [ 71.100993][ T5835] hsr_slave_0: entered promiscuous mode [ 71.107479][ T5835] hsr_slave_1: entered promiscuous mode [ 71.113495][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 71.120360][ T5835] Cannot create hsr debugfs directory [ 71.142898][ T5836] hsr_slave_0: entered promiscuous mode [ 71.149325][ T5836] hsr_slave_1: entered promiscuous mode [ 71.156063][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 71.161787][ T5836] Cannot create hsr debugfs directory [ 71.209337][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.252649][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.289900][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.325832][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.482746][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.489320][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.642792][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.657431][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.673947][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.696256][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.761863][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.776322][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.791934][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.803700][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.903446][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.911307][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.938152][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.961913][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.987567][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.040100][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.068471][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.080940][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.088231][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.103721][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.126979][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.139514][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.146653][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.164510][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.185691][ T5849] Bluetooth: hci0: command tx timeout [ 72.224576][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.234274][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.307778][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.332251][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.364040][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.371259][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.391019][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.398239][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.424664][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.431941][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.450380][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.457592][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.506801][ T5833] Bluetooth: hci2: command tx timeout [ 72.506829][ T5850] Bluetooth: hci3: command tx timeout [ 72.512226][ T5840] Bluetooth: hci4: command tx timeout [ 72.530951][ T5849] Bluetooth: hci1: command tx timeout [ 72.603306][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.656881][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.687913][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.706948][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.737635][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.778424][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.785674][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.815260][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.822451][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.859018][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.866224][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.944172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.951399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.031242][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.067611][ T5830] veth0_vlan: entered promiscuous mode [ 73.113121][ T5830] veth1_vlan: entered promiscuous mode [ 73.141729][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.279779][ T5830] veth0_macvtap: entered promiscuous mode [ 73.324146][ T5830] veth1_macvtap: entered promiscuous mode [ 73.389151][ T5834] veth0_vlan: entered promiscuous mode [ 73.422376][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.464290][ T5834] veth1_vlan: entered promiscuous mode [ 73.496862][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.534317][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.551034][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.559263][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.583001][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.591897][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.644121][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.658005][ T5836] veth0_vlan: entered promiscuous mode [ 73.700273][ T5836] veth1_vlan: entered promiscuous mode [ 73.707913][ T5834] veth0_macvtap: entered promiscuous mode [ 73.733166][ T5834] veth1_macvtap: entered promiscuous mode [ 73.785136][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.807980][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.841232][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.853795][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.884093][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.892522][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.894201][ T5837] veth0_vlan: entered promiscuous mode [ 73.928901][ T5837] veth1_vlan: entered promiscuous mode [ 73.940506][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955666][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.968828][ T5835] veth0_vlan: entered promiscuous mode [ 73.990309][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.993196][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.006549][ T5835] veth1_vlan: entered promiscuous mode [ 74.029743][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.050984][ T5836] veth0_macvtap: entered promiscuous mode [ 74.094593][ T5836] veth1_macvtap: entered promiscuous mode [ 74.191587][ T5837] veth0_macvtap: entered promiscuous mode [ 74.209274][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.217949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.229947][ T5837] veth1_macvtap: entered promiscuous mode [ 74.242770][ T5835] veth0_macvtap: entered promiscuous mode [ 74.258100][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.265705][ T5849] Bluetooth: hci0: command tx timeout [ 74.296575][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.306793][ T5835] veth1_macvtap: entered promiscuous mode [ 74.327196][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.335719][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.353890][ T994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.390624][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.404082][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.419369][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.436427][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.459832][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.526314][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.533653][ T200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.582478][ T200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.608470][ T5849] Bluetooth: hci1: command tx timeout [ 74.608526][ T5833] Bluetooth: hci2: command tx timeout [ 74.613896][ T5850] Bluetooth: hci3: command tx timeout [ 74.619961][ T5840] Bluetooth: hci4: command tx timeout [ 74.657194][ T200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.687852][ T200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.711229][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.729489][ T5956] Zero length message leads to an empty skb [ 74.771152][ T200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.790654][ T200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.801059][ T200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.824644][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 74.835945][ T200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.857388][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.869426][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.934455][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.946500][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.991830][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.011441][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.067619][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.092042][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.164138][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.213558][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.362373][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.374276][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.037314][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 76.347584][ T5840] Bluetooth: hci0: command tx timeout [ 76.599858][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 76.666206][ T5833] Bluetooth: hci2: command tx timeout [ 76.671794][ T5840] Bluetooth: hci4: command tx timeout [ 76.680010][ T5840] Bluetooth: hci3: command tx timeout [ 76.685388][ T5833] Bluetooth: hci1: command tx timeout [ 76.769690][ T6040] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 77.422075][ T6058] Bluetooth: MGMT ver 1.23 [ 77.493450][ T6058] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 77.501753][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 77.512788][ T6058] netlink: 364 bytes leftover after parsing attributes in process `syz.0.27'. [ 77.530077][ T6058] netlink: 88 bytes leftover after parsing attributes in process `syz.0.27'. [ 77.541152][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 78.128697][ T6079] netlink: 'syz.2.33': attribute type 32 has an invalid length. [ 78.196051][ T6079] bond1: option coupled_control: invalid value (3) [ 78.208269][ T6079] bond1 (unregistering): Released all slaves [ 78.238069][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 78.482696][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.603775][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 80.140236][ T6121] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 80.167645][ T6121] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 80.368834][ T6131] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.437403][ T6133] netlink: 388 bytes leftover after parsing attributes in process `syz.0.47'. [ 80.567784][ T6136] sit0: entered promiscuous mode [ 80.589923][ T6136] netlink: 1 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.755959][ T6145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.786261][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 81.063218][ T6156] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 81.162609][ T6131] Cannot find set identified by id 0 to match [ 81.197530][ T6159] lo: entered promiscuous mode [ 81.203192][ T6159] tunl0: entered promiscuous mode [ 81.236582][ T6159] gre0: entered promiscuous mode [ 81.258167][ T6159] gretap0: entered promiscuous mode [ 81.298403][ T6159] erspan0: entered promiscuous mode [ 81.315034][ T6159] ip_vti0: entered promiscuous mode [ 81.340999][ T6159] ip6_vti0: entered promiscuous mode [ 81.352564][ T6159] sit0: entered promiscuous mode [ 81.372792][ T6159] ip6tnl0: entered promiscuous mode [ 81.389388][ T6159] ip6gre0: entered promiscuous mode [ 81.403350][ T6159] syz_tun: entered promiscuous mode [ 81.420920][ T6159] ip6gretap0: entered promiscuous mode [ 81.460996][ T6159] bridge0: entered promiscuous mode [ 81.476664][ T6159] vcan0: entered promiscuous mode [ 81.482619][ T6159] bond0: entered promiscuous mode [ 81.488716][ T6159] bond_slave_0: entered promiscuous mode [ 81.494714][ T6159] bond_slave_1: entered promiscuous mode [ 81.502610][ T6159] team0: entered promiscuous mode [ 81.535625][ T6159] team_slave_0: entered promiscuous mode [ 81.541611][ T6159] team_slave_1: entered promiscuous mode [ 81.553495][ T6159] dummy0: entered promiscuous mode [ 81.588210][ T6159] nlmon0: entered promiscuous mode [ 81.608104][ T6159] caif0: entered promiscuous mode [ 81.613332][ T6159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.631469][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.59'. [ 81.666888][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 81.791013][ T6172] hsr_slave_1 (unregistering): left promiscuous mode [ 81.810658][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.148735][ T6195] IPv6: addrconf: prefix option has invalid lifetime [ 82.381332][ T6205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.533614][ T6187] Cannot find add_set index 0 as target [ 82.821049][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.68'. [ 82.990732][ T6025] Set syz1 is full, maxelem 65536 reached [ 84.426013][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 84.436607][ T6276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.81'. [ 84.576057][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 85.122578][ T6311] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 85.136529][ T6301] tipc: Started in network mode [ 85.141509][ T6301] tipc: Node identity a6f2fa5e7852, cluster identity 4711 [ 85.149654][ T6301] tipc: Enabled bearer , priority 0 [ 85.190272][ T6293] tipc: Disabling bearer [ 85.392048][ T1221] cfg80211: failed to load regulatory.db [ 85.746755][ T6343] __nla_validate_parse: 2 callbacks suppressed [ 85.746774][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 85.765535][ T6345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.97'. [ 85.861852][ T6343] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 86.073890][ T6359] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 86.097061][ T6359] netlink: 'syz.1.100': attribute type 15 has an invalid length. [ 86.113093][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 86.490092][ T6373] warning: `syz.1.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.687968][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 86.718458][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 86.972788][ T6400] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.004683][ T6400] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.045794][ T6400] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.058029][ T6400] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.067557][ T6400] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.074399][ T6400] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.086431][ T6404] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 87.096644][ T6406] netlink: 220 bytes leftover after parsing attributes in process `syz.4.110'. [ 87.278477][ T6415] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.444912][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 87.620784][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 87.772979][ T6442] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 87.773867][ T6425] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 87.828029][ T6425] macvtap1: entered promiscuous mode [ 87.928083][ T6448] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 88.226364][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.236961][ T6456] batadv_slave_0: entered promiscuous mode [ 88.278283][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 88.329186][ T6448] netlink: 428 bytes leftover after parsing attributes in process `syz.1.121'. [ 88.376358][ T5960] hid (null): report_id 0 is invalid [ 88.391804][ T5960] hid (null): unknown global tag 0xd [ 88.407954][ T5960] hid (null): invalid report_size 24097 [ 88.416149][ T5960] hid (null): unknown global tag 0xd [ 88.425052][ T5960] hid (null): invalid report_count 1170904695 [ 88.437136][ T5960] hid (null): report_id 0 is invalid [ 88.442709][ T5960] hid (null): report_id 0 is invalid [ 88.476339][ T6476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.790555][ T6488] tipc: Started in network mode [ 88.815274][ T6488] tipc: Node identity 2e60d6d90e29, cluster identity 4711 [ 88.848656][ T6488] tipc: Enabled bearer , priority 0 [ 88.856658][ T6489] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 88.885874][ T6491] syzkaller0: entered promiscuous mode [ 88.902668][ T6491] syzkaller0: entered allmulticast mode [ 89.092087][ T6493] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 89.189181][ T6491] tipc: Resetting bearer [ 89.251823][ T6480] tipc: Resetting bearer [ 89.274868][ T6505] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 89.339106][ T6480] tipc: Disabling bearer [ 89.643770][ T6493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.741273][ T6526] netlink: 'syz.1.138': attribute type 13 has an invalid length. [ 89.771889][ T6498] bond1: (slave gretap2): making interface the new active one [ 89.788206][ T6498] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 90.085169][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.115440][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.129621][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.153126][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.171314][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.183491][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.191582][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.200419][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.208447][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.245366][ T5960] hid-generic 0005:0B57:0401.0001: unknown main item tag 0x0 [ 90.265974][ T5960] hid-generic 0005:0B57:0401.0001: unexpected long global item [ 90.276225][ T5960] hid-generic 0005:0B57:0401.0001: probe with driver hid-generic failed with error -22 [ 90.355281][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.363686][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.442532][ T6558] tipc: Can't bind to reserved service type 1 [ 90.462394][ T6558] netlink: 'syz.0.144': attribute type 39 has an invalid length. [ 90.516727][ T6560] netlink: 'syz.0.144': attribute type 5 has an invalid length. [ 90.624741][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.903129][ T6534] netem: incorrect ge model size [ 90.908691][ T6534] netem: change failed [ 90.938427][ T6544] vxcan3: entered promiscuous mode [ 91.056724][ T200] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.094195][ T200] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.135272][ T200] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.144209][ T200] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.248431][ T6577] netlink: 'syz.2.147': attribute type 33 has an invalid length. [ 91.250555][ T6578] __nla_validate_parse: 8 callbacks suppressed [ 91.250570][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 91.259544][ T6577] netlink: 152 bytes leftover after parsing attributes in process `syz.2.147'. [ 91.368274][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 91.434369][ T6587] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 91.438464][ T6581] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.457907][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.461587][ T6588] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 91.503014][ T6588] !: entered promiscuous mode [ 91.541145][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 91.583235][ T6583] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 91.592569][ T6583] !: left promiscuous mode [ 92.304683][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 92.334392][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 92.376409][ T5996] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.393047][ T5996] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.422952][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 92.438985][ T5996] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.463433][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 92.484018][ T6626] netem: incorrect gi model size [ 92.552904][ T6626] netem: change failed [ 92.605910][ T2959] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.657975][ T6626] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.162'. [ 93.120488][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 93.319663][ T6658] tipc: Enabled bearer , priority 0 [ 93.533443][ T6658] syzkaller0: entered promiscuous mode [ 93.550738][ T6658] syzkaller0: entered allmulticast mode [ 93.561713][ T6658] tipc: Resetting bearer [ 93.588705][ T6657] tipc: Resetting bearer [ 94.636160][ T6657] tipc: Disabling bearer [ 94.662017][ T6566] tipc: Node number set to 541710041 [ 95.076071][ T6700] syzkaller1: entered promiscuous mode [ 95.081598][ T6700] syzkaller1: entered allmulticast mode [ 95.198669][ T6705] delete_channel: no stack [ 95.393938][ T6688] netlink: 'syz.1.177': attribute type 6 has an invalid length. [ 95.415459][ T6713] netlink: 'syz.0.183': attribute type 27 has an invalid length. [ 95.469867][ T6709] syzkaller0: entered promiscuous mode [ 95.479221][ T6709] syzkaller0: entered allmulticast mode [ 95.542127][ T6722] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 96.022336][ T6705] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 96.327534][ T6751] __nla_validate_parse: 3 callbacks suppressed [ 96.327551][ T6751] netlink: 52 bytes leftover after parsing attributes in process `syz.3.193'. [ 97.385514][ T6756] tipc: MTU too low for tipc bearer [ 97.405703][ T6757] netlink: 96 bytes leftover after parsing attributes in process `syz.1.191'. [ 97.448871][ T6748] syzkaller1: entered promiscuous mode [ 97.454391][ T6748] syzkaller1: entered allmulticast mode [ 98.074759][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.201'. [ 98.405672][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 98.568283][ T6820] netlink: 260 bytes leftover after parsing attributes in process `syz.3.209'. [ 98.629588][ T6818] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.695966][ T6818] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 99.325098][ T6850] netlink: 256 bytes leftover after parsing attributes in process `syz.0.216'. [ 99.441531][ T6856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.701685][ T6856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.854142][ T6856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.023963][ T6856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.060713][ T6885] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 100.208629][ T6885] bond2: entered promiscuous mode [ 100.214127][ T6885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.412412][ T3016] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.554258][ T3016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.653533][ T6910] netlink: 'syz.0.226': attribute type 13 has an invalid length. [ 100.696055][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 100.701296][ T3016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.874080][ T6917] : entered promiscuous mode [ 100.933094][ T200] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.410386][ T6942] bridge0: port 3(syz_tun) entered blocking state [ 101.436406][ T6942] bridge0: port 3(syz_tun) entered disabled state [ 101.452037][ T6942] syz_tun: entered allmulticast mode [ 101.464082][ T6942] syz_tun: entered promiscuous mode [ 101.472215][ T6942] bridge0: port 3(syz_tun) entered blocking state [ 101.478826][ T6942] bridge0: port 3(syz_tun) entered forwarding state [ 102.033075][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 102.042020][ T6960] tipc: Enabling of bearer rejected, failed to enable media [ 102.051119][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 102.119644][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 102.338120][ T6976] Bluetooth: MGMT ver 1.23 [ 102.351896][ T6976] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 102.596424][ T6984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.242'. [ 102.642393][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 102.689194][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 103.057637][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 103.489853][ T7040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.561726][ T7042] syzkaller0: create flow: hash 1412324601 index 1 [ 103.689841][ T7051] sctp: [Deprecated]: syz.3.254 (pid 7051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.689841][ T7051] Use struct sctp_sack_info instead [ 103.760056][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.254'. [ 103.774172][ T4366] syzkaller0: tun_net_xmit 76 [ 103.786649][ T4366] syzkaller0: tun_net_xmit 48 [ 103.795721][ T5944] syzkaller0: tun_net_xmit 76 [ 103.818640][ T7040] syzkaller0: delete flow: hash 1412324601 index 1 [ 103.859605][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 104.345346][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 104.359841][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 105.550710][ T7116] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 105.586413][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 105.625598][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 105.857629][ T7131] Bluetooth: MGMT ver 1.23 [ 106.104845][ T7149] netlink: 'syz.4.271': attribute type 15 has an invalid length. [ 106.528255][ T7174] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 106.545467][ T7174] bridge0: left promiscuous mode [ 106.566968][ T7174] bridge0: entered promiscuous mode [ 106.573150][ T7174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.612723][ T7181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.620231][ T7181] IPv6: NLM_F_CREATE should be set when creating new route [ 106.627539][ T7181] IPv6: NLM_F_CREATE should be set when creating new route [ 107.492739][ T7224] __nla_validate_parse: 3 callbacks suppressed [ 107.492758][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 107.519104][ T7224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.526416][ T7224] IPv6: NLM_F_CREATE should be set when creating new route [ 107.679058][ T7237] sctp: [Deprecated]: syz.0.289 (pid 7237) Use of int in maxseg socket option. [ 107.679058][ T7237] Use struct sctp_assoc_value instead [ 108.101876][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 108.193551][ T7249] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 108.456272][ T7263] nbd2: detected capacity change from 0 to 63 [ 108.492507][ T7267] bridge0: entered promiscuous mode [ 108.504541][ T7267] bridge0: port 3(macvtap2) entered blocking state [ 108.511946][ T7267] bridge0: port 3(macvtap2) entered disabled state [ 108.519904][ T7267] macvtap2: entered allmulticast mode [ 108.526348][ T7267] bridge0: entered allmulticast mode [ 108.540043][ T7267] macvtap2: left allmulticast mode [ 108.549433][ T7267] bridge0: left allmulticast mode [ 108.560015][ T7267] bridge0: left promiscuous mode [ 108.580633][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 108.664506][ T7272] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 108.681422][ T7272] bridge0: port 3(syz_tun) entered disabled state [ 108.709751][ T7272] syz_tun: left allmulticast mode [ 108.714846][ T7272] syz_tun: left promiscuous mode [ 108.722127][ T7272] bridge0: port 3(syz_tun) entered disabled state [ 108.741688][ T7272] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.919949][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.939399][ T7293] bond0: (slave rose0): Enslaving as an active interface with an up link [ 108.952664][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 108.964857][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 108.976123][ T7293] netlink: 348 bytes leftover after parsing attributes in process `syz.4.301'. [ 109.004105][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 109.043843][ T7293] netlink: 348 bytes leftover after parsing attributes in process `syz.4.301'. [ 109.056953][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 109.078983][ T5833] block nbd2: Receive control failed (result -104) [ 109.268259][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 109.380859][ T7316] lo speed is unknown, defaulting to 1000 [ 109.443343][ T7316] lo speed is unknown, defaulting to 1000 [ 109.520864][ T7316] lo speed is unknown, defaulting to 1000 [ 109.593039][ T7333] netlink: 'syz.1.306': attribute type 21 has an invalid length. [ 109.635149][ T7333] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.680364][ T7333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.687679][ T7333] IPv6: NLM_F_CREATE should be set when creating new route [ 109.694956][ T7333] IPv6: NLM_F_CREATE should be set when creating new route [ 109.702217][ T7333] IPv6: NLM_F_CREATE should be set when creating new route [ 109.871959][ T7350] : entered promiscuous mode [ 110.076484][ T7360] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 110.323381][ T7360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.399756][ T7316] infiniband syz0: set active [ 110.406474][ T7316] infiniband syz0: added lo [ 110.417196][ T7316] syz0: rxe_create_cq: returned err = -12 [ 110.437111][ T7316] infiniband syz0: Couldn't create ib_mad CQ [ 110.441839][ T7363] bond3: (slave ip6gretap1): making interface the new active one [ 110.445944][ T7316] infiniband syz0: Couldn't open port 1 [ 110.453234][ T7363] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.526286][ T7366] veth3: entered promiscuous mode [ 110.528769][ T7316] RDS/IB: syz0: added [ 110.543248][ T6552] lo speed is unknown, defaulting to 1000 [ 110.555742][ T7360] erspan0: entered allmulticast mode [ 110.568803][ T7316] smc: adding ib device syz0 with port count 1 [ 110.615562][ T7316] smc: ib device syz0 port 1 has no pnetid [ 110.739906][ T7316] lo speed is unknown, defaulting to 1000 [ 110.751577][ T6552] lo speed is unknown, defaulting to 1000 [ 111.073111][ T7401] netlink: 'syz.1.320': attribute type 22 has an invalid length. [ 111.181322][ T7401] netlink: 'syz.1.320': attribute type 22 has an invalid length. [ 111.190831][ T2959] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.218988][ T2959] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.249460][ T2959] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.276708][ T2959] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.365912][ T7316] lo speed is unknown, defaulting to 1000 [ 111.439991][ T7417] xt_TCPMSS: Only works on TCP SYN packets [ 111.457091][ T7417] openvswitch: netlink: Flow key attr not present in new flow. [ 111.629542][ T7427] netlink: 'syz.1.327': attribute type 3 has an invalid length. [ 111.987911][ T7446] syzkaller1: entered promiscuous mode [ 111.993445][ T7446] syzkaller1: entered allmulticast mode [ 112.139631][ T7316] lo speed is unknown, defaulting to 1000 [ 113.015956][ T7505] __nla_validate_parse: 29 callbacks suppressed [ 113.015973][ T7505] netlink: 5884 bytes leftover after parsing attributes in process `syz.4.344'. [ 113.057619][ T7505] openvswitch: netlink: Flow key attr not present in new flow. [ 113.086418][ T7508] Driver unsupported XDP return value 0 on prog (id 166) dev N/A, expect packet loss! [ 113.191540][ T7316] lo speed is unknown, defaulting to 1000 [ 113.297714][ T7518] tipc: Started in network mode [ 113.302636][ T7518] tipc: Node identity 2a14e2b31256, cluster identity 4711 [ 113.356522][ T7518] tipc: Enabled bearer , priority 0 [ 113.369419][ T7523] syzkaller0: entered promiscuous mode [ 113.375444][ T7525] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.386868][ T7523] syzkaller0: entered allmulticast mode [ 113.438855][ T7518] tipc: Resetting bearer [ 113.472543][ T7516] tipc: Resetting bearer [ 113.540288][ T7516] tipc: Disabling bearer [ 113.633799][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 113.710987][ T7540] bridge_slave_1: left allmulticast mode [ 113.758069][ T7540] bridge_slave_1: left promiscuous mode [ 113.764673][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.787556][ T7540] bridge_slave_0: left allmulticast mode [ 113.793249][ T7540] bridge_slave_0: left promiscuous mode [ 113.802734][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 113.811986][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.967864][ T7316] lo speed is unknown, defaulting to 1000 [ 114.126634][ T7316] lo speed is unknown, defaulting to 1000 [ 114.256798][ T7316] lo speed is unknown, defaulting to 1000 [ 114.546155][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 114.563099][ T7555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 114.593256][ T7555] netlink: 272 bytes leftover after parsing attributes in process `syz.2.353'. [ 115.025052][ T7553] syzkaller0: entered promiscuous mode [ 115.034223][ T7553] syzkaller0: entered allmulticast mode [ 115.257047][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 115.281330][ T7505] infiniband syz1: set active [ 115.310858][ T7581] Bluetooth: MGMT ver 1.23 [ 115.311054][ T7505] infiniband syz1: added syz_tun [ 115.329492][ T7505] syz1: rxe_create_cq: returned err = -12 [ 115.341812][ T7505] infiniband syz1: Couldn't create ib_mad CQ [ 115.348356][ T7505] infiniband syz1: Couldn't open port 1 [ 115.404979][ T7581] lo speed is unknown, defaulting to 1000 [ 115.460663][ T7505] RDS/IB: syz1: added [ 115.497324][ T7505] smc: adding ib device syz1 with port count 1 [ 115.503541][ T7505] smc: ib device syz1 port 1 has no pnetid [ 115.750598][ T7582] lo speed is unknown, defaulting to 1000 [ 116.173018][ T7601] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 116.402556][ T7610] tipc: Started in network mode [ 116.410345][ T7610] tipc: Node identity 080211, cluster identity 4711 [ 116.435468][ T7610] tipc: Enabled bearer , priority 0 [ 116.568487][ T7610] tipc: Resetting bearer [ 117.283784][ T7612] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 117.427863][ T7627] netlink: 64 bytes leftover after parsing attributes in process `syz.0.373'. [ 117.455646][ T7627] block nbd0: not configured, cannot reconfigure [ 117.545933][ T937] tipc: Node number set to 134353152 [ 117.619066][ T7632] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 117.820943][ T7642] tipc: Enabled bearer , priority 0 [ 117.870134][ T7642] syzkaller0: entered promiscuous mode [ 117.875831][ T7642] syzkaller0: entered allmulticast mode [ 117.887366][ T7642] tipc: Resetting bearer [ 118.717331][ T2959] tipc: Resetting bearer [ 118.744603][ T7635] lo speed is unknown, defaulting to 1000 [ 118.757000][ T7642] tipc: Resetting bearer [ 120.138468][ T7642] tipc: Disabling bearer [ 120.171239][ T7653] syz.4.380: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.189567][ T7653] CPU: 1 UID: 0 PID: 7653 Comm: syz.4.380 Not tainted syzkaller #0 PREEMPT(full) [ 120.189591][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.189610][ T7653] Call Trace: [ 120.189621][ T7653] [ 120.189629][ T7653] dump_stack_lvl+0x189/0x250 [ 120.189664][ T7653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.189683][ T7653] ? __pfx__printk+0x10/0x10 [ 120.189706][ T7653] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.189733][ T7653] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.189758][ T7653] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 120.189784][ T7653] warn_alloc+0x214/0x310 [ 120.189812][ T7653] ? __pfx_warn_alloc+0x10/0x10 [ 120.189844][ T7653] ? __get_vm_area_node+0x28f/0x300 [ 120.189866][ T7653] ? xp_create_and_assign_umem+0x197/0xd10 [ 120.189892][ T7653] __vmalloc_node_range_noprof+0x690/0x12d0 [ 120.189915][ T7653] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 120.189963][ T7653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.189986][ T7653] ? xp_create_and_assign_umem+0x197/0xd10 [ 120.190009][ T7653] ? rcu_is_watching+0x15/0xb0 [ 120.190029][ T7653] ? xp_create_and_assign_umem+0x197/0xd10 [ 120.190050][ T7653] __kvmalloc_node_noprof+0x670/0x910 [ 120.190073][ T7653] ? xp_create_and_assign_umem+0x197/0xd10 [ 120.190094][ T7653] ? xp_create_and_assign_umem+0xa9/0xd10 [ 120.190123][ T7653] xp_create_and_assign_umem+0x197/0xd10 [ 120.190154][ T7653] ? dev_get_by_index+0x22/0x2e0 [ 120.190180][ T7653] ? dev_get_by_index+0x22/0x2e0 [ 120.190205][ T7653] xsk_bind+0x42d/0xf90 [ 120.190222][ T7653] ? apparmor_socket_bind+0xff/0x1d0 [ 120.190254][ T7653] __sys_bind+0x2c6/0x3e0 [ 120.190279][ T7653] ? __pfx___sys_bind+0x10/0x10 [ 120.190324][ T7653] __x64_sys_bind+0x7a/0x90 [ 120.190347][ T7653] do_syscall_64+0xfa/0xf80 [ 120.190369][ T7653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.190386][ T7653] ? clear_bhb_loop+0x60/0xb0 [ 120.190407][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.190423][ T7653] RIP: 0033:0x7f5b4758f749 [ 120.190444][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.190459][ T7653] RSP: 002b:00007f5b457f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 120.190478][ T7653] RAX: ffffffffffffffda RBX: 00007f5b477e6180 RCX: 00007f5b4758f749 [ 120.190490][ T7653] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 120.190501][ T7653] RBP: 00007f5b47613f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.190512][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.190522][ T7653] R13: 00007f5b477e6218 R14: 00007f5b477e6180 R15: 00007ffce6e4e338 [ 120.190553][ T7653] [ 120.190567][ T7653] Mem-Info: [ 120.344248][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 120.348284][ T7653] active_anon:6759 inactive_anon:0 isolated_anon:0 [ 120.348284][ T7653] active_file:2697 inactive_file:39890 isolated_file:0 [ 120.348284][ T7653] unevictable:768 dirty:129 writeback:0 [ 120.348284][ T7653] slab_reclaimable:10855 slab_unreclaimable:131847 [ 120.348284][ T7653] mapped:30260 shmem:1380 pagetables:1260 [ 120.348284][ T7653] sec_pagetables:0 bounce:0 [ 120.348284][ T7653] kernel_misc_reclaimable:0 [ 120.348284][ T7653] free:1290925 free_pcp:13492 free_cma:0 [ 120.524074][ T7653] Node 0 active_anon:27236kB inactive_anon:0kB active_file:10788kB inactive_file:159356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121040kB dirty:516kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13380kB pagetables:5004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.556312][ T7653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.587747][ T7665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.598213][ T7653] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.634983][ T7653] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 120.646910][ T7653] Node 0 DMA32 free:1256608kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27336kB inactive_anon:0kB active_file:10788kB inactive_file:159356kB unevictable:1536kB writepending:516kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:32784kB local_pcp:20596kB free_cma:0kB [ 120.682019][ T7653] lowmem_reserve[]: 0 0 0 0 0 [ 120.687819][ T7653] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.720004][ T7653] lowmem_reserve[]: 0 0 0 0 0 [ 120.724884][ T7653] Node 1 Normal free:3891060kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21064kB local_pcp:10632kB free_cma:0kB [ 120.763456][ T7653] lowmem_reserve[]: 0 0 0 0 0 [ 120.768493][ T7653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.781375][ T7653] Node 0 DMA32: 656*4kB (UME) 420*8kB (UME) 74*16kB (UME) 168*32kB (UME) 71*64kB (UME) 39*128kB (UME) 27*256kB (UME) 15*512kB (M) 5*1024kB (M) 7*2048kB (UM) 293*4096kB (M) = 1256256kB [ 120.799832][ T7653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 120.811391][ T7653] Node 1 Normal: 197*4kB (UE) 72*8kB (UME) 44*16kB (UME) 59*32kB (UME) 12*64kB (UME) 6*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3891060kB [ 120.829995][ T7653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.839641][ T7653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.848983][ T7653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.858560][ T7653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.868000][ T7653] 43965 total pagecache pages [ 120.872696][ T7653] 0 pages in swap cache [ 120.876927][ T7653] Free swap = 124996kB [ 120.881083][ T7653] Total swap = 124996kB [ 120.885318][ T7653] 2097051 pages RAM [ 120.889121][ T7653] 0 pages HighMem/MovableOnly [ 120.893782][ T7653] 424280 pages reserved [ 120.897977][ T7653] 0 pages cma reserved [ 121.134328][ T7671] netlink: 72 bytes leftover after parsing attributes in process `syz.4.384'. [ 121.480074][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 121.522856][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 121.575478][ T7692] netlink: 'syz.0.391': attribute type 7 has an invalid length. [ 121.796300][ T7712] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 122.071023][ T7725] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 122.092850][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 122.130394][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 122.130434][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.172153][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.181660][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.216822][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.398544][ T7731] tipc: Enabled bearer , priority 0 [ 122.425154][ T7731] syzkaller0: entered promiscuous mode [ 122.431333][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 122.441099][ T7731] syzkaller0: entered allmulticast mode [ 122.472899][ T7731] tipc: Resetting bearer [ 122.482436][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 122.561289][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.588209][ T7730] tipc: Resetting bearer [ 122.627346][ T7730] tipc: Disabling bearer [ 122.661740][ T7748] IPv6: sit1: Disabled Multicast RS [ 122.788180][ T7756] tipc: Enabled bearer , priority 0 [ 122.807945][ T7756] syzkaller0: entered promiscuous mode [ 122.826389][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 122.839011][ T7765] openvswitch: netlink: Message has 8 unknown bytes. [ 122.846028][ T7756] syzkaller0: entered allmulticast mode [ 122.863631][ T7765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.896773][ T7756] tipc: Resetting bearer [ 122.941931][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 123.052556][ T7778] pim6reg: entered allmulticast mode [ 123.214268][ T7786] netlink: zone id is out of range [ 123.221502][ T7787] netlink: zone id is out of range [ 123.228553][ T7787] netlink: zone id is out of range [ 123.233877][ T7787] netlink: zone id is out of range [ 123.259484][ T7786] netlink: zone id is out of range [ 123.281090][ T7786] netlink: zone id is out of range [ 123.299515][ T7756] tipc: Resetting bearer [ 123.304615][ T7787] netlink: zone id is out of range [ 123.367296][ T7756] tipc: Disabling bearer [ 123.403299][ T7799] tipc: Enabling of bearer rejected, already enabled [ 123.751833][ T7819] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 123.947429][ T7827] syzkaller0: entered promiscuous mode [ 123.981277][ T7827] syzkaller0: entered allmulticast mode [ 124.066999][ T7832] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 124.093980][ T7832] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 124.123636][ T7832] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 124.310013][ T7858] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 124.329860][ T7861] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 124.364326][ T7861] batadv_slave_1: entered promiscuous mode [ 124.371472][ T7861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.390096][ T7861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.750213][ T7884] netlink: 'syz.4.443': attribute type 6 has an invalid length. [ 124.927235][ T7852] xt_hashlimit: size too large, truncated to 1048576 [ 124.934183][ T7852] xt_hashlimit: max too large, truncated to 1048576 [ 124.998626][ T7852] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.999187][ T7891] vlan2: entered allmulticast mode [ 125.124086][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.137615][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.397371][ T7890] __nla_validate_parse: 14 callbacks suppressed [ 125.397390][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 125.423624][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 125.804244][ T7922] netlink: 348 bytes leftover after parsing attributes in process `syz.3.450'. [ 126.458486][ T7964] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20004 [ 126.559205][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.468'. [ 126.568445][ T7971] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 126.842134][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.473'. [ 127.084880][ T8003] macvlan2: entered promiscuous mode [ 127.298568][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'. [ 127.392650][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 127.452890][ T8030] sctp: [Deprecated]: syz.3.484 (pid 8030) Use of int in max_burst socket option deprecated. [ 127.452890][ T8030] Use struct sctp_assoc_value instead [ 127.557579][ T8032] xt_hashlimit: size too large, truncated to 1048576 [ 127.596771][ T8039] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 127.619884][ T8039] netlink: 104 bytes leftover after parsing attributes in process `syz.1.486'. [ 127.645780][ T8039] net_ratelimit: 101 callbacks suppressed [ 127.645799][ T8039] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 127.649529][ T8032] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.692638][ T5895] IPVS: starting estimator thread 0... [ 127.797769][ T8044] IPVS: using max 34 ests per chain, 81600 per kthread [ 127.918148][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 128.175927][ T8067] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.604960][ T8079] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 128.620583][ T8079] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.635141][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 128.696684][ T8048] lo speed is unknown, defaulting to 1000 [ 128.931195][ T8094] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 129.084624][ T8107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.563368][ T8127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.809585][ T8142] vxcan1: tx address claim with dlc 0 [ 130.742524][ T8192] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 130.775330][ T8192] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 130.783355][ T8192] __nla_validate_parse: 9 callbacks suppressed [ 130.783373][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 131.292322][ T8211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.419233][ T8211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.440616][ T8225] netlink: 'syz.1.527': attribute type 21 has an invalid length. [ 131.455853][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 131.464880][ T8225] netlink: 156 bytes leftover after parsing attributes in process `syz.1.527'. [ 131.497090][ T8220] openvswitch: netlink: IP tunnel dst address not specified [ 131.513996][ T8211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.541209][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 131.661577][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 131.701815][ T8211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.742112][ T8241] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 131.760255][ T8232] ip6tnl1: entered promiscuous mode [ 131.817856][ T8241] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.048684][ T200] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.130967][ T200] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.153567][ T200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.185657][ T200] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.203897][ T8268] netlink: 'syz.3.537': attribute type 3 has an invalid length. [ 132.262203][ T8268] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.569286][ T8286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.544'. [ 132.619323][ T8286] syz.0.544 uses old SIOCAX25GETINFO [ 132.739206][ T8298] netlink: 666 bytes leftover after parsing attributes in process `syz.4.548'. [ 132.775886][ T8300] netlink: 666 bytes leftover after parsing attributes in process `syz.4.548'. [ 132.828653][ T8304] lo speed is unknown, defaulting to 1000 [ 132.846135][ T8298] bond0: entered promiscuous mode [ 132.865309][ T8298] bond_slave_0: entered promiscuous mode [ 132.895459][ T8298] bond_slave_1: entered promiscuous mode [ 132.901334][ T8298] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 132.918353][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924752][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.013042][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 134.947126][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.560'. [ 135.373934][ T8371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.607999][ T8383] tipc: Enabling of bearer rejected, failed to enable media [ 135.637629][ T8379] lo speed is unknown, defaulting to 1000 [ 136.062191][ T8408] __nla_validate_parse: 2 callbacks suppressed [ 136.062208][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 136.447055][ T8422] tipc: Enabled bearer , priority 0 [ 136.472562][ T8422] tipc: Resetting bearer [ 136.515918][ T8394] netlink: 'syz.3.569': attribute type 6 has an invalid length. [ 136.602394][ T8419] lo speed is unknown, defaulting to 1000 [ 136.673757][ T8433] tipc: Enabled bearer , priority 0 [ 136.681617][ T8433] syzkaller0: entered promiscuous mode [ 136.705293][ T8433] syzkaller0: entered allmulticast mode [ 136.839430][ T8437] netlink: 'syz.4.584': attribute type 12 has an invalid length. [ 136.853620][ T8437] netlink: 'syz.4.584': attribute type 29 has an invalid length. [ 136.879747][ T8437] netlink: 148 bytes leftover after parsing attributes in process `syz.4.584'. [ 136.889543][ T8437] netlink: 'syz.4.584': attribute type 2 has an invalid length. [ 136.897664][ T8437] netlink: 3 bytes leftover after parsing attributes in process `syz.4.584'. [ 136.917966][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 136.935642][ T8436] tipc: Resetting bearer [ 136.966146][ T8433] tipc: Resetting bearer [ 137.036731][ T8433] tipc: Disabling bearer [ 137.265519][ T8420] tipc: Disabling bearer [ 137.316644][ T8453] syzkaller1: entered allmulticast mode [ 137.456928][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 137.505499][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 137.944004][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 137.974733][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.597'. [ 137.998668][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.597'. [ 138.173658][ T8480] vlan2: entered allmulticast mode [ 138.179941][ T8480] dummy0: entered allmulticast mode [ 138.250810][ T8489] SET target dimension over the limit! [ 138.422379][ T8496] xt_l2tp: v2 doesn't support IP mode [ 138.431461][ T8493] sctp: [Deprecated]: syz.0.600 (pid 8493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.431461][ T8493] Use struct sctp_sack_info instead [ 138.670414][ T25] block nbd2: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 30 seconds [ 138.683598][ T25] block nbd2: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 30 seconds [ 138.695520][ T25] block nbd2: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 30 seconds [ 138.707067][ T25] block nbd2: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 30 seconds [ 139.101035][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.611'. [ 139.179147][ T8521] netlink: 'syz.1.610': attribute type 12 has an invalid length. [ 139.487922][ T8544] xfrm1: entered promiscuous mode [ 139.497521][ T8544] xfrm1: entered allmulticast mode [ 139.802163][ T8564] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 140.254250][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.436141][ T8608] lo speed is unknown, defaulting to 1000 [ 140.497431][ T8619] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 140.803014][ T8619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.821347][ T8619] bond4: (slave dummy0): making interface the new active one [ 140.831372][ T8619] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 140.844631][ T8624] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 140.909563][ T8628] veth0: entered promiscuous mode [ 140.917065][ T8628] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 141.132515][ T8631] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 141.221311][ T8623] tipc: Resetting bearer [ 141.291161][ T2959] tipc: Resetting bearer [ 141.480417][ T8644] netlink: 'syz.4.646': attribute type 7 has an invalid length. [ 141.525312][ T8646] __nla_validate_parse: 8 callbacks suppressed [ 141.525332][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 142.049028][ T8671] tipc: Enabling of bearer rejected, failed to enable media [ 142.417416][ T8692] netlink: 'syz.3.658': attribute type 39 has an invalid length. [ 142.772134][ T8702] veth1: entered promiscuous mode [ 143.107127][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 143.212410][ T8716] lo speed is unknown, defaulting to 1000 [ 143.914740][ T8756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.673'. [ 144.157253][ T8756] syzkaller0: entered promiscuous mode [ 144.183309][ T8756] syzkaller0: entered allmulticast mode [ 145.495607][ T5833] Bluetooth: hci2: link tx timeout [ 145.501098][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.701838][ T5833] Bluetooth: hci2: link tx timeout [ 145.710399][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.737719][ T8778] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 145.746749][ T5833] Bluetooth: hci2: link tx timeout [ 145.752079][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.840725][ T8778] bond1: entered promiscuous mode [ 145.848719][ T8778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.873772][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 145.886021][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 145.937176][ T8793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.944639][ T8793] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 145.974894][ T8793] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 145.986736][ T8793] bond1: (slave gre1): Opening slave failed [ 146.023129][ T5833] Bluetooth: hci2: link tx timeout [ 146.028438][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.327827][ T8823] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 146.358482][ T5833] Bluetooth: hci2: link tx timeout [ 146.363686][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.756076][ T8842] veth7: entered promiscuous mode [ 146.763617][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 146.918284][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.926044][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.938263][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.689'. [ 147.388447][ T5833] Bluetooth: hci2: link tx timeout [ 147.393620][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.443096][ T5833] Bluetooth: hci2: link tx timeout [ 147.448798][ T5833] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.547076][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 147.673535][ T8896] lo speed is unknown, defaulting to 1000 [ 147.680677][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 147.833960][ T8917] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 147.894728][ T8926] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 147.959098][ T8929] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 148.079128][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.137783][ T8914] lo speed is unknown, defaulting to 1000 [ 148.144976][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.603761][ T5895] lo speed is unknown, defaulting to 1000 [ 149.997723][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 150.087452][ T8957] lo: entered allmulticast mode [ 150.107853][ T8957] lo: left allmulticast mode [ 150.123844][ T8959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.716'. [ 150.519672][ T8969] netlink: 68 bytes leftover after parsing attributes in process `syz.1.719'. [ 150.738726][ T8974] lo speed is unknown, defaulting to 1000 [ 150.787579][ T8977] netlink: 'syz.1.721': attribute type 6 has an invalid length. [ 150.795505][ T8977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'. [ 151.222162][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 151.319802][ T8988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.725'. [ 152.088888][ T9029] netlink: 'syz.1.735': attribute type 6 has an invalid length. [ 152.102466][ T9029] netlink: 176 bytes leftover after parsing attributes in process `syz.1.735'. [ 152.151530][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 152.160610][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 153.176231][ T9066] netlink: 'syz.0.748': attribute type 3 has an invalid length. [ 153.193530][ T9066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.748'. [ 153.212316][ T9066] syzkaller0: entered promiscuous mode [ 153.221217][ T9066] syzkaller0: entered allmulticast mode [ 153.508259][ T9075] macvtap2: entered promiscuous mode [ 153.526367][ T9075] vlan0: entered promiscuous mode [ 153.546142][ T9075] vlan0: left promiscuous mode [ 153.646419][ T9080] syzkaller0: entered promiscuous mode [ 153.652165][ T9080] syzkaller0: entered allmulticast mode [ 153.837130][ T9089] netlink: 'syz.1.756': attribute type 2 has an invalid length. [ 153.852057][ T9091] rdma_rxe: rxe_newlink: failed to add bond0 [ 153.962491][ T9089] !: entered promiscuous mode [ 154.165132][ T9094] lo speed is unknown, defaulting to 1000 [ 154.359663][ T9108] tipc: Enabled bearer , priority 0 [ 154.508700][ T9112] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 154.564465][ T9108] syzkaller0: entered promiscuous mode [ 154.670000][ T9108] syzkaller0: entered allmulticast mode [ 154.685081][ T9108] tipc: Resetting bearer [ 154.877403][ T9107] tipc: Resetting bearer [ 156.391533][ T9107] tipc: Disabling bearer [ 156.451949][ T9115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.463715][ T9115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.497100][ T9126] lo speed is unknown, defaulting to 1000 [ 156.588665][ T9115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.599452][ T9115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.767733][ T9115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.788073][ T9115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.919562][ T9115] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.929816][ T9115] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.968527][ T9143] tipc: Enabled bearer , priority 0 [ 156.991142][ T9143] syzkaller0: entered promiscuous mode [ 157.008786][ T9143] syzkaller0: entered allmulticast mode [ 157.070948][ T9143] tipc: Resetting bearer [ 157.118410][ T9142] tipc: Resetting bearer [ 157.146633][ T9142] tipc: Disabling bearer [ 157.189023][ T9151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.207909][ T9152] netlink: 156 bytes leftover after parsing attributes in process `syz.3.771'. [ 157.280631][ T3024] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.309070][ T3024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.381175][ T9151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.588159][ T9151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.616480][ T3024] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.631491][ T3024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.678279][ T3024] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.690267][ T3024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.722481][ T9151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.749427][ T9163] ªªªªªª: renamed from wg2 [ 157.761085][ T3024] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.800718][ T3024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.919616][ T9173] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 157.937842][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 158.119578][ T9173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.317613][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 158.351241][ T9178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.365832][ T9178] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.422454][ T9178] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 158.433855][ T6552] IPVS: starting estimator thread 0... [ 158.534033][ T9195] IPVS: using max 35 ests per chain, 84000 per kthread [ 158.566683][ T9179] veth3: entered promiscuous mode [ 158.585353][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.593806][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.620722][ T9198] IPVS: Error connecting to the multicast addr [ 158.653240][ T1145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.687685][ T2959] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.702203][ T9194] lo speed is unknown, defaulting to 1000 [ 158.727883][ T1145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.781776][ T5983] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.800878][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 158.836175][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 158.927266][ T9211] netlink: 'syz.2.782': attribute type 2 has an invalid length. [ 158.965469][ T9211] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 158.984701][ T9211] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 159.059206][ T9215] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 159.204620][ T9222] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 159.227624][ T9228] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 159.407797][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 159.485672][ T9226] lo speed is unknown, defaulting to 1000 [ 160.057544][ T9199] lo speed is unknown, defaulting to 1000 [ 160.068613][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 160.387080][ T9257] lo speed is unknown, defaulting to 1000 [ 160.768576][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.795'. [ 160.924569][ T9288] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 160.932648][ T9288] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 160.943427][ T9288] netlink: 'syz.0.797': attribute type 2 has an invalid length. [ 160.951820][ T9288] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 160.961298][ T9288] netlink: 184 bytes leftover after parsing attributes in process `syz.0.797'. [ 161.345567][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 161.534617][ T9299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.559894][ T9299] bond_slave_0: entered promiscuous mode [ 161.565883][ T9299] bond_slave_1: entered promiscuous mode [ 161.572400][ T9299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.582517][ T9299] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 162.073077][ T9310] bond3 (unregistering): Released all slaves [ 162.360365][ T9315] __nla_validate_parse: 2 callbacks suppressed [ 162.360385][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.805'. [ 162.746373][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 162.769917][ T9334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 162.810583][ T9326] syzkaller0: entered promiscuous mode [ 162.823671][ T9326] syzkaller0: entered allmulticast mode [ 162.834476][ T9338] netlink: 'syz.4.809': attribute type 39 has an invalid length. [ 163.000026][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 163.050467][ T9347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.090597][ T9347] lo speed is unknown, defaulting to 1000 [ 163.128413][ T9358] netlink: 92 bytes leftover after parsing attributes in process `syz.3.817'. [ 163.143846][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.817'. [ 163.157766][ T9358] netlink: 17 bytes leftover after parsing attributes in process `syz.3.817'. [ 163.174708][ T9358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.817'. [ 163.366635][ T9361] lo speed is unknown, defaulting to 1000 [ 164.928883][ T9364] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.026974][ T9364] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.093343][ T9379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 165.106761][ T9381] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 165.129172][ T9364] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.155733][ T9379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.823'. [ 165.231845][ T9379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 165.242652][ T9385] bridge0: port 3(veth0_to_bridge) entered blocking state [ 165.253422][ T9385] bridge0: port 3(veth0_to_bridge) entered disabled state [ 165.261597][ T9385] veth0_to_bridge: entered allmulticast mode [ 165.285629][ T9385] veth0_to_bridge: entered promiscuous mode [ 165.303577][ T9364] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.513748][ T9390] lo speed is unknown, defaulting to 1000 [ 165.724475][ T5983] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.790817][ T5983] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.821468][ T5983] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.851642][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.375909][ T9413] trusted_key: syz.0.833 sent an empty control message without MSG_MORE. [ 166.506536][ T9425] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 166.525609][ T30] audit: type=1800 audit(1766099566.358:2): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.837" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=863 res=0 errno=0 [ 166.585498][ T30] audit: type=1804 audit(1766099566.358:3): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.837" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=863 res=1 errno=0 [ 167.518263][ T9483] __nla_validate_parse: 3 callbacks suppressed [ 167.518281][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.850'. [ 167.533745][ T9483] netlink: 108 bytes leftover after parsing attributes in process `syz.3.850'. [ 167.543815][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.850'. [ 168.031723][ T9510] netlink: 'syz.3.858': attribute type 3 has an invalid length. [ 168.324412][ T9538] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.344368][ T9540] 8021q: VLANs not supported on ip_vti0 [ 168.367046][ T9538] netlink: 'syz.4.868': attribute type 2 has an invalid length. [ 168.374835][ T9538] netlink: 'syz.4.868': attribute type 9 has an invalid length. [ 168.383328][ T9538] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.868'. [ 168.530962][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 168.747010][ T25] block nbd2: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 60 seconds [ 168.757916][ T25] block nbd2: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 60 seconds [ 168.769165][ T25] block nbd2: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 60 seconds [ 168.782025][ T25] block nbd2: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 60 seconds [ 168.790269][ T9564] tipc: Enabling of bearer rejected, already enabled [ 168.861360][ T9566] tipc: New replicast peer: 255.255.255.255 [ 168.869076][ T9566] tipc: Enabled bearer , priority 10 [ 168.903046][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 168.912966][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 168.934716][ T9570] openvswitch: netlink: Invalid VLAN frame [ 168.943431][ T9570] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 169.023160][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'. [ 169.196639][ T9584] lo speed is unknown, defaulting to 1000 [ 173.181032][ T5207] udevd[5207]: worker [5848] /devices/virtual/block/nbd2 is taking a long time [ 191.306778][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 191.307803][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 191.315852][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 194.350643][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.827017][ T25] block nbd2: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 90 seconds [ 198.837861][ T25] block nbd2: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 90 seconds [ 198.848921][ T25] block nbd2: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 90 seconds [ 198.859859][ T25] block nbd2: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 90 seconds [ 209.196311][ T5833] Bluetooth: hci2: link tx timeout [ 209.201460][ T5833] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.235353][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 228.916597][ T25] block nbd2: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 120 seconds [ 228.927410][ T25] block nbd2: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 120 seconds [ 228.938416][ T25] block nbd2: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 120 seconds [ 228.949405][ T25] block nbd2: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 120 seconds [ 255.798461][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.996278][ T25] block nbd2: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 150 seconds [ 259.007090][ T25] block nbd2: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 150 seconds [ 259.018278][ T25] block nbd2: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 150 seconds [ 259.029297][ T25] block nbd2: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 150 seconds [ 266.650226][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 266.671263][ T9715] lo speed is unknown, defaulting to 1000 [ 266.724735][ T9735] ip6tnl3: entered promiscuous mode [ 266.738227][ T9735] netlink: 732 bytes leftover after parsing attributes in process `syz.4.889'. [ 266.747650][ T9735] netlink: 732 bytes leftover after parsing attributes in process `syz.4.889'. [ 266.983042][ T9750] netlink: 'syz.4.891': attribute type 6 has an invalid length. [ 267.008670][ T9750] netlink: 'syz.4.891': attribute type 7 has an invalid length. [ 267.023043][ T9750] netlink: 'syz.4.891': attribute type 8 has an invalid length. [ 267.068456][ T9750] ip6gre1: entered promiscuous mode [ 267.074014][ T9750] ip6gre1: entered allmulticast mode [ 267.141892][ T9713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.296527][ T9760] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 267.387521][ T9760] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 267.751588][ T9783] lo speed is unknown, defaulting to 1000 [ 268.411787][ T9801] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 268.502119][ T9801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.593673][ T9804] bond3: (slave gretap1): making interface the new active one [ 268.621420][ T9804] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 268.667446][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.903'. [ 268.870189][ T9801] lo speed is unknown, defaulting to 1000 [ 269.546998][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 269.630594][ T9847] vlan2: entered allmulticast mode [ 269.635901][ T9847] bridge0: entered allmulticast mode [ 269.641613][ T9847] bridge0: port 1(vlan2) entered blocking state [ 269.648690][ T9847] bridge0: port 1(vlan2) entered disabled state [ 269.683752][ T9851] tipc: Resetting bearer [ 269.734039][ T9851] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 269.754320][ T9817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.901434][ T5502] veth0_vlan: left promiscuous mode [ 269.975162][ T5502] veth0_vlan: entered promiscuous mode [ 270.094676][ T9860] tipc: Enabled bearer , priority 0 [ 270.316125][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.915'. [ 270.344957][ T9860] tipc: Disabling bearer [ 271.024880][ T9894] lo speed is unknown, defaulting to 1000 [ 271.337725][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 271.558393][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.922'. [ 271.708596][ T9924] netlink: 'syz.0.923': attribute type 21 has an invalid length. [ 271.728948][ T9924] netlink: 128 bytes leftover after parsing attributes in process `syz.0.923'. [ 271.777062][ T9924] netlink: 'syz.0.923': attribute type 5 has an invalid length. [ 271.793150][ T9924] netlink: 'syz.0.923': attribute type 6 has an invalid length. [ 271.817296][ T9924] netlink: 3 bytes leftover after parsing attributes in process `syz.0.923'. [ 272.061338][ T9901] lo speed is unknown, defaulting to 1000 [ 272.313276][ T9948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.928'. [ 272.573826][ T9961] netlink: 'syz.3.931': attribute type 3 has an invalid length. [ 272.575125][ T9962] openvswitch: netlink: Missing key (keys=40, expected=100) [ 272.616519][ T9962] openvswitch: netlink: Missing key (keys=40, expected=100) [ 272.662215][ T9962] openvswitch: netlink: Missing key (keys=40, expected=100) [ 272.681485][ T9962] openvswitch: netlink: Missing key (keys=40, expected=100) [ 272.717547][ T9962] openvswitch: netlink: Missing key (keys=40, expected=100) [ 272.819304][ T9968] netlink: 'syz.3.932': attribute type 30 has an invalid length. [ 272.890004][ T9970] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 273.240731][ T9981] netlink: 96 bytes leftover after parsing attributes in process `syz.1.933'. [ 273.421236][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 273.821236][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 273.852960][ T9995] netlink: 52 bytes leftover after parsing attributes in process `syz.0.937'. [ 274.002975][T10006] netlink: 7 bytes leftover after parsing attributes in process `syz.1.940'. [ 274.143153][ T9997] veth1: entered promiscuous mode [ 274.213937][T10004] team0: Port device bridge1 added [ 274.233854][T10002] erspan0: entered allmulticast mode [ 274.313819][T10015] syzkaller1: entered allmulticast mode [ 274.413648][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 274.479203][T10021] bond0: (slave syz_tun): Releasing backup interface [ 274.561497][T10028] tipc: New replicast peer: 0.0.0.0 [ 274.572871][T10028] tipc: Enabled bearer , priority 10 [ 274.592038][T10028] tipc: New replicast peer: 172.30.1.3 [ 274.612298][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 274.858767][T10045] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 274.999049][T10062] syzkaller1: entered promiscuous mode [ 275.004570][T10062] syzkaller1: entered allmulticast mode [ 275.083035][T10066] syzkaller1: left promiscuous mode [ 275.105634][T10066] syzkaller1: left allmulticast mode [ 275.112304][T10067] netlink: 'syz.1.958': attribute type 4 has an invalid length. [ 275.194242][T10069] pimreg: entered allmulticast mode [ 275.680108][T10086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.695737][ T983] tipc: Node number set to 943907507 [ 276.651699][T10133] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 276.665695][T10133] syzkaller1: linktype set to 825 [ 276.712369][T10144] Can't find ip_set type hash€ [ 276.938652][T10167] __nla_validate_parse: 7 callbacks suppressed [ 276.938671][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 277.142201][T10177] netlink: 'syz.3.983': attribute type 21 has an invalid length. [ 277.183146][T10177] netlink: 128 bytes leftover after parsing attributes in process `syz.3.983'. [ 277.219013][T10174] lo speed is unknown, defaulting to 1000 [ 277.234895][T10177] netlink: 'syz.3.983': attribute type 4 has an invalid length. [ 277.270905][T10177] netlink: 'syz.3.983': attribute type 3 has an invalid length. [ 277.519570][T10190] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 277.537560][T10190] netlink: 228 bytes leftover after parsing attributes in process `syz.1.987'. [ 277.621939][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 277.634663][T10196] tipc: Enabling of bearer rejected, already enabled [ 277.646326][T10195] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 277.841324][T10206] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 277.870688][T10206] netlink: 14343 bytes leftover after parsing attributes in process `syz.0.991'. [ 278.078996][T10217] netlink: 9 bytes leftover after parsing attributes in process `syz.3.995'. [ 278.123778][T10217] .70·: renamed from hsr0 (while UP) [ 278.151008][T10217] .70·: entered allmulticast mode [ 278.161428][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 278.164390][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 278.170453][T10217] hsr_slave_0: entered allmulticast mode [ 278.170478][T10217] hsr_slave_1: entered allmulticast mode [ 278.170963][T10217] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 278.245906][T10213] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 278.276696][T10220] lo speed is unknown, defaulting to 1000 [ 278.967285][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 279.077906][T10243] xt_TCPMSS: Only works on TCP SYN packets [ 279.167247][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1002'. [ 279.211052][T10246] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 279.271570][T10246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.289049][T10246] batadv0: entered promiscuous mode [ 279.296789][T10246] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 279.364046][T10249] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 279.422033][T10249] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 279.596253][T10256] lo speed is unknown, defaulting to 1000 [ 279.990682][T10276] syzkaller1: entered allmulticast mode [ 280.008717][T10257] lo speed is unknown, defaulting to 1000 [ 280.702961][T10299] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1536) ! [ 281.163737][T10303] lo speed is unknown, defaulting to 1000 [ 281.424896][T10319] erspan0: left allmulticast mode [ 281.624754][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.641454][T10319] batadv_slave_1: left promiscuous mode [ 281.669209][T10319] .70·: left allmulticast mode [ 281.674051][T10319] hsr_slave_0: left allmulticast mode [ 281.680574][T10319] hsr_slave_1: left allmulticast mode [ 281.732985][T10319] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 281.740437][T10319] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 281.748095][T10319] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 281.779450][ T1145] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.795647][ T1145] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.853734][T10329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.882934][ T1145] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.910914][ T1145] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.978589][T10329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.014002][T10333] netlink: 'syz.3.1026': attribute type 33 has an invalid length. [ 282.036552][T10333] __nla_validate_parse: 6 callbacks suppressed [ 282.036571][T10333] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1026'. [ 282.101196][T10329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.178333][T10329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.207213][T10335] lo speed is unknown, defaulting to 1000 [ 282.494059][ T1129] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.660058][ T1129] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.736564][T10345] syzkaller0: entered promiscuous mode [ 282.742166][T10345] syzkaller0: entered allmulticast mode [ 282.794392][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.125719][ T5983] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.320650][T10364] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 284.354060][T10364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1029'. [ 284.441628][T10364] team0: Port device geneve0 added [ 284.623088][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1031'. [ 284.656188][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 284.857856][ T30] audit: type=1804 audit(1766099684.698:4): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1033" name="/newroot/180/cgroup.controllers" dev="tmpfs" ino=939 res=1 errno=0 [ 284.894030][T10394] syzkaller1: entered promiscuous mode [ 284.900048][T10394] syzkaller1: entered allmulticast mode [ 284.947128][ T30] audit: type=1800 audit(1766099684.698:5): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1033" name="cgroup.controllers" dev="tmpfs" ino=939 res=0 errno=0 [ 285.257012][T10407] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 285.279410][T10408] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 285.457362][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 285.483501][T10414] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1039'. [ 285.547886][T10420] xt_hashlimit: size too large, truncated to 1048576 [ 286.228978][T10440] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 286.276660][T10437] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 286.290681][T10445] xt_bpf: check failed: parse error [ 286.328292][T10445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.698816][T10440] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 286.827120][T10470] netlink: 'syz.3.1046': attribute type 10 has an invalid length. [ 286.863190][T10444] lo speed is unknown, defaulting to 1000 [ 286.920337][T10474] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 286.928249][T10474] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1048'. [ 287.192831][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'. [ 288.092748][T10518] pim6reg: entered allmulticast mode [ 289.200688][ T25] block nbd2: Possible stuck request ffff888024d65080: control (read@0,1024B). Runtime 180 seconds [ 289.211773][ T25] block nbd2: Possible stuck request ffff888024d65240: control (read@1024,1024B). Runtime 180 seconds [ 289.212114][T10534] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1058'. [ 289.223353][ T25] block nbd2: Possible stuck request ffff888024d65400: control (read@2048,1024B). Runtime 180 seconds [ 289.246057][ T25] block nbd2: Possible stuck request ffff888024d655c0: control (read@3072,1024B). Runtime 180 seconds [ 289.721700][ T5207] udevd[5207]: worker [5848] /devices/virtual/block/nbd2 timeout; kill it [ 289.749057][ T5207] udevd[5207]: seq 12478 '/devices/virtual/block/nbd2' killed [ 289.935822][T10523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.007339][T10523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.329009][T10523] veth0_vlan: left promiscuous mode [ 290.638395][T10523] ------------[ cut here ]------------ [ 290.644235][T10523] WARNING: net/mac80211/tx.c:6303 at ieee80211_tx_skb_tid+0x3b4/0x470, CPU#1: syz.4.1057/10523 [ 290.654673][T10523] Modules linked in: [ 290.658922][T10523] CPU: 1 UID: 0 PID: 10523 Comm: syz.4.1057 Not tainted syzkaller #0 PREEMPT(full) [ 290.668348][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.678470][T10523] RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470 [ 290.684484][T10523] Code: 3a d5 f6 e9 b1 fe ff ff e8 09 0e f8 f6 90 0f 0b 90 e9 e2 fe ff ff e8 fb 0d f8 f6 90 0f 0b 90 e9 2a fe ff ff e8 ed 0d f8 f6 90 <0f> 0b 90 e8 c4 e1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 290.704197][T10523] RSP: 0018:ffffc9001a5d6418 EFLAGS: 00010246 [ 290.710321][T10523] RAX: ffffffff8ac93c73 RBX: ffffffff8ac938ef RCX: 0000000000080000 [ 290.718356][T10523] RDX: ffffc90010556000 RSI: 000000000007ffff RDI: 0000000000080000 [ 290.726372][T10523] RBP: 00000000ffffffff R08: ffffffff8ac938ef R09: ffffffff8df41cc0 [ 290.734358][T10523] R10: dffffc0000000000 R11: ffffed100adf02e6 R12: ffff8880270f4d80 [ 290.742411][T10523] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 290.750621][T10523] FS: 00007f5b457f66c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 290.759616][T10523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.766242][T10523] CR2: 0000200000d1c030 CR3: 0000000046ebc000 CR4: 00000000003526f0 [ 290.774230][T10523] Call Trace: [ 290.777578][T10523] [ 290.780530][T10523] mesh_plink_frame_tx+0x734/0xc10 [ 290.785704][T10523] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 290.791350][T10523] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 290.797597][T10523] mesh_plink_deactivate+0x18e/0x2f0 [ 290.802906][T10523] mesh_sta_cleanup+0x42/0x150 [ 290.807741][T10523] cleanup_single_sta+0x40f/0x660 [ 290.812790][T10523] __sta_info_flush+0x5e4/0x710 [ 290.817718][T10523] ? __pfx___sta_info_flush+0x10/0x10 [ 290.823116][T10523] ieee80211_do_stop+0x397/0x1f70 [ 290.828207][T10523] ? do_raw_spin_lock+0x121/0x290 [ 290.833253][T10523] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 290.838693][T10523] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 290.844182][T10523] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 290.850155][T10523] ? lockdep_hardirqs_on+0x98/0x140 [ 290.855415][T10523] ? wiphy_work_cancel+0x1db/0x3b0 [ 290.860550][T10523] ieee80211_stop+0x1b1/0x240 [ 290.865283][T10523] ? __pfx_ieee80211_stop+0x10/0x10 [ 290.870503][T10523] __dev_close_many+0x344/0x6b0 [ 290.875429][T10523] ? __pfx___dev_close_many+0x10/0x10 [ 290.880825][T10523] __dev_change_flags+0x2be/0x680 [ 290.885926][T10523] ? __pfx___dev_change_flags+0x10/0x10 [ 290.891495][T10523] ? netif_state_change+0x241/0x380 [ 290.896774][T10523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.902778][T10523] ? __pfx_netif_state_change+0x10/0x10 [ 290.908426][T10523] netif_change_flags+0x88/0x1a0 [ 290.913396][T10523] do_setlink+0xc55/0x41c0 [ 290.917888][T10523] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 290.924068][T10523] ? __pfx_do_setlink+0x10/0x10 [ 290.929032][T10523] ? __pfx_stack_trace_save+0x10/0x10 [ 290.934448][T10523] ? __mutex_trylock_common+0x153/0x260 [ 290.940067][T10523] ? __pfx___mutex_trylock_common+0x10/0x10 [ 290.946018][T10523] ? rcu_is_watching+0x15/0xb0 [ 290.950804][T10523] ? trace_contention_end+0x39/0x100 [ 290.956158][T10523] ? __mutex_lock+0x335/0x1350 [ 290.960950][T10523] ? rtnl_newlink+0x8ec/0x1c90 [ 290.965796][T10523] ? __pfx___mutex_lock+0x10/0x10 [ 290.970847][T10523] ? ns_capable+0x8a/0xf0 [ 290.975253][T10523] rtnl_newlink+0x14b0/0x1c90 [ 290.979971][T10523] ? __pfx_rtnl_newlink+0x10/0x10 [ 290.985013][T10523] ? do_syscall_64+0xfa/0xf80 [ 290.989757][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.995914][T10523] ? kasan_quarantine_put+0xdd/0x220 [ 291.001237][T10523] ? lockdep_hardirqs_on+0x98/0x140 [ 291.006510][T10523] ? kmem_cache_free+0x197/0x620 [ 291.011466][T10523] ? nlmon_xmit+0xb0/0x100 [ 291.015961][T10523] ? __lock_acquire+0x6b6/0x2cf0 [ 291.020940][T10523] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.026745][T10523] ? __dev_queue_xmit+0x289/0x3140 [ 291.031876][T10523] ? __dev_queue_xmit+0x289/0x3140 [ 291.037064][T10523] ? __dev_queue_xmit+0x289/0x3140 [ 291.042219][T10523] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.047316][T10523] rtnetlink_rcv_msg+0x7cf/0xb70 [ 291.052292][T10523] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 291.057479][T10523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.062959][T10523] ? ref_tracker_free+0x63a/0x7d0 [ 291.068056][T10523] ? __asan_memcpy+0x40/0x70 [ 291.072664][T10523] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.078153][T10523] netlink_rcv_skb+0x208/0x470 [ 291.082937][T10523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.088477][T10523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.093789][T10523] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.099059][T10523] netlink_unicast+0x82f/0x9e0 [ 291.103854][T10523] ? __pfx_netlink_unicast+0x10/0x10 [ 291.109221][T10523] ? netlink_sendmsg+0x642/0xb30 [ 291.114185][T10523] ? skb_put+0x11b/0x210 [ 291.118517][T10523] netlink_sendmsg+0x805/0xb30 [ 291.123310][T10523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.128688][T10523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.133641][T10523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.139014][T10523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.144325][T10523] __sock_sendmsg+0x21c/0x270 [ 291.149069][T10523] ____sys_sendmsg+0x505/0x820 [ 291.153887][T10523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.159276][T10523] ? import_iovec+0x74/0xa0 [ 291.163813][T10523] ___sys_sendmsg+0x21f/0x2a0 [ 291.168600][T10523] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.173825][T10523] ? futex_wake+0x4b2/0x560 [ 291.178415][T10523] ? __fget_files+0x2a/0x420 [ 291.183018][T10523] ? __fget_files+0x3a0/0x420 [ 291.187782][T10523] __x64_sys_sendmsg+0x19b/0x260 [ 291.192745][T10523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.198291][T10523] ? do_syscall_64+0xbe/0xf80 [ 291.202988][T10523] do_syscall_64+0xfa/0xf80 [ 291.207567][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.213663][T10523] ? clear_bhb_loop+0x60/0xb0 [ 291.218404][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.224314][T10523] RIP: 0033:0x7f5b4758f749 [ 291.228814][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.248480][T10523] RSP: 002b:00007f5b457f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.256976][T10523] RAX: ffffffffffffffda RBX: 00007f5b477e6180 RCX: 00007f5b4758f749 [ 291.264959][T10523] RDX: 0000000004040c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 291.273002][T10523] RBP: 00007f5b47613f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.281026][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.289070][T10523] R13: 00007f5b477e6218 R14: 00007f5b477e6180 R15: 00007ffce6e4e338 [ 291.297108][T10523] [ 291.300152][T10523] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.307439][T10523] CPU: 1 UID: 0 PID: 10523 Comm: syz.4.1057 Not tainted syzkaller #0 PREEMPT(full) [ 291.316821][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.326893][T10523] Call Trace: [ 291.330189][T10523] [ 291.333133][T10523] dump_stack_lvl+0x99/0x250 [ 291.337746][T10523] ? __asan_memcpy+0x40/0x70 [ 291.342358][T10523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.347580][T10523] ? __pfx__printk+0x10/0x10 [ 291.352213][T10523] vpanic+0x237/0x6d0 [ 291.356220][T10523] ? __pfx_vpanic+0x10/0x10 [ 291.360743][T10523] ? is_bpf_text_address+0x292/0x2b0 [ 291.366050][T10523] ? is_bpf_text_address+0x26/0x2b0 [ 291.371285][T10523] panic+0xb9/0xc0 [ 291.375030][T10523] ? __pfx_panic+0x10/0x10 [ 291.379494][T10523] __warn+0x317/0x4b0 [ 291.383494][T10523] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 291.388898][T10523] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 291.394297][T10523] __report_bug+0x288/0x500 [ 291.398833][T10523] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 291.404242][T10523] ? __pfx___report_bug+0x10/0x10 [ 291.409290][T10523] ? __lock_acquire+0x6b6/0x2cf0 [ 291.414255][T10523] ? __build_skb_around+0x22d/0x3c0 [ 291.419486][T10523] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 291.424893][T10523] report_bug+0x16a/0x220 [ 291.429241][T10523] ? ieee80211_tx_skb_tid+0x3b4/0x470 [ 291.434637][T10523] ? ieee80211_tx_skb_tid+0x3b6/0x470 [ 291.440036][T10523] handle_bug+0x98/0x200 [ 291.444309][T10523] exc_invalid_op+0x1a/0x50 [ 291.448853][T10523] asm_exc_invalid_op+0x1a/0x20 [ 291.453732][T10523] RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470 [ 291.459745][T10523] Code: 3a d5 f6 e9 b1 fe ff ff e8 09 0e f8 f6 90 0f 0b 90 e9 e2 fe ff ff e8 fb 0d f8 f6 90 0f 0b 90 e9 2a fe ff ff e8 ed 0d f8 f6 90 <0f> 0b 90 e8 c4 e1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 291.479367][T10523] RSP: 0018:ffffc9001a5d6418 EFLAGS: 00010246 [ 291.485456][T10523] RAX: ffffffff8ac93c73 RBX: ffffffff8ac938ef RCX: 0000000000080000 [ 291.493447][T10523] RDX: ffffc90010556000 RSI: 000000000007ffff RDI: 0000000000080000 [ 291.501437][T10523] RBP: 00000000ffffffff R08: ffffffff8ac938ef R09: ffffffff8df41cc0 [ 291.509431][T10523] R10: dffffc0000000000 R11: ffffed100adf02e6 R12: ffff8880270f4d80 [ 291.517423][T10523] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 291.525427][T10523] ? ieee80211_tx_skb_tid+0x2f/0x470 [ 291.530742][T10523] ? ieee80211_tx_skb_tid+0x2f/0x470 [ 291.536057][T10523] ? ieee80211_tx_skb_tid+0x3b3/0x470 [ 291.541462][T10523] ? ieee80211_tx_skb_tid+0x3b3/0x470 [ 291.546862][T10523] mesh_plink_frame_tx+0x734/0xc10 [ 291.552008][T10523] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 291.557657][T10523] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 291.563846][T10523] mesh_plink_deactivate+0x18e/0x2f0 [ 291.569167][T10523] mesh_sta_cleanup+0x42/0x150 [ 291.573957][T10523] cleanup_single_sta+0x40f/0x660 [ 291.579007][T10523] __sta_info_flush+0x5e4/0x710 [ 291.583890][T10523] ? __pfx___sta_info_flush+0x10/0x10 [ 291.589289][T10523] ieee80211_do_stop+0x397/0x1f70 [ 291.594339][T10523] ? do_raw_spin_lock+0x121/0x290 [ 291.599384][T10523] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.604780][T10523] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 291.610268][T10523] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 291.616186][T10523] ? lockdep_hardirqs_on+0x98/0x140 [ 291.621416][T10523] ? wiphy_work_cancel+0x1db/0x3b0 [ 291.626554][T10523] ieee80211_stop+0x1b1/0x240 [ 291.631251][T10523] ? __pfx_ieee80211_stop+0x10/0x10 [ 291.636468][T10523] __dev_close_many+0x344/0x6b0 [ 291.641345][T10523] ? __pfx___dev_close_many+0x10/0x10 [ 291.646752][T10523] __dev_change_flags+0x2be/0x680 [ 291.651806][T10523] ? __pfx___dev_change_flags+0x10/0x10 [ 291.657371][T10523] ? netif_state_change+0x241/0x380 [ 291.662586][T10523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.668593][T10523] ? __pfx_netif_state_change+0x10/0x10 [ 291.674173][T10523] netif_change_flags+0x88/0x1a0 [ 291.679144][T10523] do_setlink+0xc55/0x41c0 [ 291.683578][T10523] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.689793][T10523] ? __pfx_do_setlink+0x10/0x10 [ 291.694663][T10523] ? __pfx_stack_trace_save+0x10/0x10 [ 291.700077][T10523] ? __mutex_trylock_common+0x153/0x260 [ 291.705648][T10523] ? __pfx___mutex_trylock_common+0x10/0x10 [ 291.711569][T10523] ? rcu_is_watching+0x15/0xb0 [ 291.716356][T10523] ? trace_contention_end+0x39/0x100 [ 291.721678][T10523] ? __mutex_lock+0x335/0x1350 [ 291.726476][T10523] ? rtnl_newlink+0x8ec/0x1c90 [ 291.731265][T10523] ? __pfx___mutex_lock+0x10/0x10 [ 291.736323][T10523] ? ns_capable+0x8a/0xf0 [ 291.740673][T10523] rtnl_newlink+0x14b0/0x1c90 [ 291.745381][T10523] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.750423][T10523] ? do_syscall_64+0xfa/0xf80 [ 291.755119][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.761234][T10523] ? kasan_quarantine_put+0xdd/0x220 [ 291.766547][T10523] ? lockdep_hardirqs_on+0x98/0x140 [ 291.771774][T10523] ? kmem_cache_free+0x197/0x620 [ 291.776728][T10523] ? nlmon_xmit+0xb0/0x100 [ 291.781166][T10523] ? __lock_acquire+0x6b6/0x2cf0 [ 291.786118][T10523] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.791864][T10523] ? __dev_queue_xmit+0x289/0x3140 [ 291.796993][T10523] ? __dev_queue_xmit+0x289/0x3140 [ 291.802116][T10523] ? __dev_queue_xmit+0x289/0x3140 [ 291.807283][T10523] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.812321][T10523] rtnetlink_rcv_msg+0x7cf/0xb70 [ 291.817280][T10523] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 291.822407][T10523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.827887][T10523] ? ref_tracker_free+0x63a/0x7d0 [ 291.832930][T10523] ? __asan_memcpy+0x40/0x70 [ 291.837535][T10523] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.842934][T10523] netlink_rcv_skb+0x208/0x470 [ 291.847713][T10523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.853194][T10523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.858508][T10523] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.863732][T10523] netlink_unicast+0x82f/0x9e0 [ 291.868530][T10523] ? __pfx_netlink_unicast+0x10/0x10 [ 291.873840][T10523] ? netlink_sendmsg+0x642/0xb30 [ 291.878798][T10523] ? skb_put+0x11b/0x210 [ 291.883066][T10523] netlink_sendmsg+0x805/0xb30 [ 291.887862][T10523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.893180][T10523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.898139][T10523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.903445][T10523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.908750][T10523] __sock_sendmsg+0x21c/0x270 [ 291.913453][T10523] ____sys_sendmsg+0x505/0x820 [ 291.918249][T10523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.923572][T10523] ? import_iovec+0x74/0xa0 [ 291.928120][T10523] ___sys_sendmsg+0x21f/0x2a0 [ 291.932831][T10523] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.938069][T10523] ? futex_wake+0x4b2/0x560 [ 291.942622][T10523] ? __fget_files+0x2a/0x420 [ 291.947224][T10523] ? __fget_files+0x3a0/0x420 [ 291.951927][T10523] __x64_sys_sendmsg+0x19b/0x260 [ 291.956892][T10523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.962394][T10523] ? do_syscall_64+0xbe/0xf80 [ 291.967093][T10523] do_syscall_64+0xfa/0xf80 [ 291.971622][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.977701][T10523] ? clear_bhb_loop+0x60/0xb0 [ 291.982403][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.988313][T10523] RIP: 0033:0x7f5b4758f749 [ 291.992745][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.012366][T10523] RSP: 002b:00007f5b457f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.020800][T10523] RAX: ffffffffffffffda RBX: 00007f5b477e6180 RCX: 00007f5b4758f749 [ 292.028795][T10523] RDX: 0000000004040c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 292.036792][T10523] RBP: 00007f5b47613f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.044806][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.052794][T10523] R13: 00007f5b477e6218 R14: 00007f5b477e6180 R15: 00007ffce6e4e338 [ 292.060781][T10523] [ 292.064151][T10523] Kernel Offset: disabled [ 292.068471][T10523] Rebooting in 86400 seconds..