last executing test programs: 6.394319581s ago: executing program 2 (id=1235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x20000000000001bc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000020000000000000900000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000feffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 6.280356172s ago: executing program 2 (id=1238): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e0000140000000000000000000000030005000000000002000000ac1e00010000000000000000030006000000000002000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000004000300"/160], 0xa0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) (async) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.100343193s ago: executing program 2 (id=1240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000640)={0x1d, r3, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="f6d4af2c6b0c61abfaf55056c34f5e0ac3a3149b9a65e34515c2447f60f147536163a894911e9b6943e067ef8d96777b402186586517f9a93feb737672ffcea21e63dd2021214831deefead9880c9cba7a28291caccedc0536ff12c9ec2153a8a84f56526d6379b0b7c2be5ea29505b2"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5.970742367s ago: executing program 2 (id=1242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="95b80007000000c819307891b0b10265ef96ad7f45b8d41b041a9e2f437092fade372fb1822aa39db68f392190b66e59593717c0a4b0f575a421f819a0b473b7088e63144a1ea7d48acb460b5f4cbf9d1da0d08758072fe4fe8ff94665d7c95cd1d0fc"], &(0x7f0000000240)='syzkaller\x00', 0x100, 0x69, &(0x7f00000002c0)=""/105, 0x41100, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x5, 0xa}, {0x0, 0x3, 0xf, 0x8}, {0x1, 0x4, 0x1, 0x9}, {0x5, 0x1, 0xb}, {0x4, 0x2, 0x1, 0xc}, {0x0, 0x1, 0x7, 0x7}]}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r2, &(0x7f0000002480)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xd, 0xa}, {0xffe0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0x8084) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x0, 0x3, 0x0, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r10, 0x12}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)='Y', 0x1}], 0x1}, 0x8014) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012dbd7000ffdbdf252600000008000300", @ANYRES32=r14, @ANYBLOB="0800a000000b00000800220111028bc108002201b10200000800a1009e000000080027000000000008002700000000000500180116000000080026006c090000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x96, 0xd3, &(0x7f0000000540)="e00d258c545d7051a9ceb3f9f130d2b5487a28a3db9550e0331e6c1ddce13b51af051e9d342591004e14d0d5c110d8b3a00fda5ea128bc55f41c61bb0ad7c0f785c9a272e3ba5fe35bb93158242b18ba491bc5c0e2d5ff6712e38484af501a75e535e7bba37eb0303256ef513646502dcca1e1d937b88e210c6dbc0b4fdef26d2caa62460a6d4a7e668f6bf4b14ef07e76cc23dffe92", &(0x7f0000000640)=""/211, 0x200, 0x0, 0xa, 0xffffffffffffff80, &(0x7f0000000740)="4fa0164b140f8f6a12ee", &(0x7f0000000780)="8df62383cb19235c13f0b60205addd5641e4b9600818b6483c7495804fc4f35b18af8f49853ef2f889a2820e5581b2c1575dd694e0dc50b3ee60346e2ec2b6557e1019744e7bf5b7d7e301cc0a7066ebac8c9310a4c8b3f7ad5f8fec78c98797eb31c2555162ac2cd5e799df757cdbd93aa26f4e7fcba7cb9b51faf1cea21b8877", 0x4, 0x0, 0x5}, 0x50) 2.389586283s ago: executing program 4 (id=1253): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xf, 0x7, 0x8, 0x40540, 0xffffffffffffffff, 0x628, '\x00', r0, r1, 0x2, 0x1, 0x1, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.369628018s ago: executing program 2 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r1, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r2, 0x61d8, 0x0) 2.297970624s ago: executing program 0 (id=1255): unshare(0x20000400) bpf$MAP_CREATE(0x15, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.261985819s ago: executing program 3 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r8, &(0x7f0000000600)="ac71468c6e55aa85d8c1316e58e886dd0a4a95bd74463d1588f355bd8e1df52eb9317cdb6fd0cbfb08e28f89f85864ad7c8d6d171a4a394a888066677dacd4ecddbc62841dea2469279073218625ceb123d26656484fa7bd939ca2b8dfcb4ca095480bf8d442a682af15b62b16da53ee7f446e63749a17a9d36f79ebb50357190d3dc6207c7504732a92346309b3f97bb191272e87adbca86e3b0e89dd0af8c8fb45e94c8082d9040acca4fdce1dbad5", 0xb0, 0x34040014, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="261ecb59f1e211d90bd32bf387d0698bf6203784a21ba971a4165e87e61bee90b2d1c13c60205df91a7878ebfd034e", 0x0, 0x2}, 0x5f) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 2.165394846s ago: executing program 4 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.058295703s ago: executing program 0 (id=1259): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'sit0\x00', 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @bcast, @null, @remote, @null, @bcast, @null, @netrom]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000100)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_genetlink_get_family_id$ipvs(0x0, r3) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}], 0x1, 0x2090) 2.016819274s ago: executing program 4 (id=1260): socket(0x10, 0x3, 0xfffffffe) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000", @ANYRES64=r2, @ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) (async) close(r3) socket(0x28, 0x5, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0xb) (async) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0xb) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008022a25697aa000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmmsg$unix(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000003740)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000257", 0x4c}, {&(0x7f0000001a40)="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", 0xcdb}], 0x2}, 0x1800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}, 0x1, 0x0, 0x0, 0x40009}, 0x0) close(r1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0x4000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x52, 0x3, {{'deflate\x00'}, 0x50, "4995032d63c8f6f17652"}}, @replay_thresh={0x8, 0xb, 0x81}]}, 0x14c}}, 0x400c000) 1.576964123s ago: executing program 0 (id=1261): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3, 0x1, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000043, [0x2, 0x89ff]}}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r9}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f298590f", @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdbdf253b0000000800cd000300020004008e00"], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.506763373s ago: executing program 3 (id=1262): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x0, 0x13, r4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x20000000) close(0x3) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xa, &(0x7f0000000700)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x8, 0x4}, @ldst={0x0, 0x1, 0x1, 0x5, 0x6, 0x50, 0x8}, @map_val={0x18, 0xeb9d8df7adc25789, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xfffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x8054) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2c672, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.454266765s ago: executing program 0 (id=1263): socket(0x0, 0x80001, 0x100000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @random="eb59b5ec0037"}]}, 0x34}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x65, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000200ffffff7f0000090000001858000009002000000e000000000000185a00000800000000000000000000006860000101000000950000000100000014fd905e50620439adc0d7441b5ad1bf583699099811d73819684e3af1af8f85015bfd1adcc31f217f3412da4b9602ce9f3a8b9c10938a0c4a56a5efa08f51e04eae03ef6b3b098aa4d1dfd536c315dd6816d06b7226e2805e0384b451e7d7e9149a7cae5cf510c7a8b4650b68f0a94252ad2e6f0fe7bbe3ce8eedf75c01bb2f7ad3ac62ff48c43dbe5bd9c446fb"], &(0x7f0000000600)='GPL\x00', 0xc6d, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x1, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=[{0x4, 0x1, 0x1}, {0x2, 0x3, 0xc}], 0x10, 0x1000}, 0x94) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000b00)={0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r12, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x3}, 0x20) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x100002, 0x3}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x2, 0x8, 0x1, 0x4, 0x1, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x6, 0x4, 0x9, 0xc, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x12, '\x00', r4, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x9}, 0x10, r5, r6, 0x1, &(0x7f00000009c0)=[r7, r12, r13, 0x1, r14, r15, r16], &(0x7f0000000a00)=[{0x3, 0x5, 0x10, 0xc}], 0x10, 0x9}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r18 = openat$cgroup_procs(r17, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r18, &(0x7f00000000c0), 0x12) 1.182305797s ago: executing program 3 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 998.0904ms ago: executing program 0 (id=1265): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 997.801246ms ago: executing program 1 (id=1266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="8500001533ff200bae2272fc5fc0b4b7d49ece80890000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pread64(r4, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 911.881621ms ago: executing program 0 (id=1267): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x3000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r4, 0x1) listen(r4, 0x20) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r3, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) 784.130734ms ago: executing program 1 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x81b21000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001200)={&(0x7f0000000200)=""/4096, 0xa000, 0x0, 0x5}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000001000c0a9d36edcda9a1e84b08877ccf00630"], 0x6c}}, 0x0) 654.249079ms ago: executing program 3 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000240)=""/11, 0x200000, 0x400, 0x0, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000240)=""/11, 0x200000, 0x400, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000300)=0x4a00, 0x53) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0xaf44a000) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x5a, 0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x30, 0x0, 0x30, 0x5f]}}, &(0x7f00000000c0)=""/48, 0x53, 0x30, 0x0, 0x8, 0x10000, @value=r5}, 0x28) 653.650242ms ago: executing program 1 (id=1270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_request}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x18, 0x0, 0xc18895e) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) openat$cgroup_devices(r3, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, 0xffffffffffffffff, 0x952de000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x9, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) shutdown(r0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x2, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4}, {@in6=@dev, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x732f}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x144}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x7f, "39ab77c9bec22e4a30839da9f34dab621d415a8befd725c8fe685d67d6c318fb4a31aad81cc250c58559d3ee1cd55fe734b03ea03caeaa4a467a91bef3bb5fd4f05fd40b34dc1bf1d96acaef66bd79fda3236553653f86ba69d1b6fe817ded9f11dedc3bb80fb0ec10d4a84028286b44dd22566a3654b5edb352dbbdd0b3d7"}, &(0x7f0000000400)=0x87) 542.84655ms ago: executing program 4 (id=1271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "55f4b32d215d09ad34a54ecd392b645312028acf803a4be046ac0250a6ab00acdbbcc0a681ef62574eb95c3668168a2237f2cc488cf760d067868e8021f61308c6db4e4ac2ec40342736d4b782ed114b6e548109d0d25d975663c05ceaa64032471a805702a7a92bca01e7f16cfd7858b64cf7168d9220b64044c8dab5221c7a97fe9b875c33dfe30b850d7b07be151a84a139feeb514347d3e58683a3a7a624b0c79700622bbb5c8f573b27d294ff211faa3ef5d05472c85cd1ed4d7bdfbbe8aea77753e983bf2350c11b80e2e0c058bc01ebfe9e4faec45b78bb3d2551f3fec86fca5bea0668c9c98e75db02191cc525ec2d3f9a4db0895a3ff2b1931fa0da"}]}}]}, 0x134}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a3, &(0x7f0000000100)) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) 518.688203ms ago: executing program 1 (id=1272): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x40440, &(0x7f0000000040)={@align=0x7, {0x5, 0x8, 0x7, 0x1ff}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0xa6e}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) 394.059971ms ago: executing program 3 (id=1273): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4085, 0xff5}], 0x3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\t\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) recvmmsg(r0, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4085, 0xff5}], 0x3}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\t\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) recvmmsg(r0, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) (async) 377.857294ms ago: executing program 4 (id=1274): r0 = socket(0x23, 0x2, 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xcc, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xffffffffffffff51, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xcc}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) 358.949245ms ago: executing program 1 (id=1275): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 141.963313ms ago: executing program 1 (id=1276): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000240)={0x2, 0x16, 0x2, 0x2, 0x9, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x5, @local, 0x7e661c5b}, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x48}}, 0x40c0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000200)="083978bdb3a605c4d1188e99023cea31551eb0a4a171f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x30000000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 141.108354ms ago: executing program 2 (id=1277): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet(r1, &(0x7f0000000040)="2e1538c0de943e77d5021fe56c8f2a8a406745bbd82abfb55c03aeb9c0100e8b2cae02bcdde44d24c2b57e3d8c9eb9f01617dcf3db97118c7ed44ca651704bfe276f89f872624448710cca157fbe8f024bd632509911e15ff530a4bc3507a2201e8e2309c80c339a63d3b93d44a22b9e93fbbd34ae8eb5aef0093556ad0513d9ee0f97bb1fb83bdc3a018823a74cd1498b2ac37a826319cfe275069b3f880715093164254a6ca5dc2e46645002860f33071e14cd59acb5d97a1fa0d8523062e0f5f343ddd3a6f277af41c7204abb", 0xce, 0x4000040, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) 108.785684ms ago: executing program 4 (id=1278): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000000000010000000000000000701000002000000", @ANYRESHEX=r1, @ANYBLOB="44d3d4667039941d134da438ccc93e5a4001bb54b692b9ac02df93bb32af6e909cc772ae678440175176ead9debe74e6d14149790caf4e6ac0e8af6ddedfdaf3996576afa39db5efd19a487c50e6c1269f555eeef6fddbe068e32a0ca0044be6a79620697eff0dca379380225cac96ced0a952dcc1986ee8d011a6cf457b731cd9acdd51394b995c8859c7e34f54c0838462adb556a395fa36b0db47d0af19bcf6947e5dd882813565557c4d2eb0be2a6bb891e4fe1e4b81ceba"], 0x20}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) 0s ago: executing program 3 (id=1279): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYBLOB="1a8b9e523455b089f59acba9422cbd1f97", @ANYBLOB="38805f2cb2337fdb969a7c27b8934851ef9b34a92c73db84941d51a580992f205e080d77bb35ea8abe491ea3a94a8d948a0a78cc97c4f60422f95dd716a73e4c15c1619bfd2af0ae8bbe0dcd5deb814a8f9dabab0c9dab4a5728432a0c6d49fc7857bdb60831cbd4b35227761f518558d0d6313c8df9526797178c827d0508d58e617d2be9126a74561b4df1dce9bbb81ff01ad32905a1c0cbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8}, 0x94) bind$can_raw(r1, &(0x7f00000000c0), 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 65.092872][ T5812] cgroup: Unknown subsys name 'net' [ 65.206818][ T5812] cgroup: Unknown subsys name 'cpuset' [ 65.215581][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.600697][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.703999][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.724778][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.734278][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.744710][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.754770][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.757189][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.762367][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.774162][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.779610][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.793176][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.793934][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.801565][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.809971][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.816543][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.832163][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.832344][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.839644][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.850613][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.856687][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.875331][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.882101][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.890367][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.897899][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.908444][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.915616][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.475790][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.545345][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 69.615118][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.698365][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.792668][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.814859][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.822329][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.829638][ T5827] bridge_slave_0: entered allmulticast mode [ 69.837268][ T5827] bridge_slave_0: entered promiscuous mode [ 69.865801][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.873085][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.880892][ T5824] bridge_slave_0: entered allmulticast mode [ 69.887985][ T5824] bridge_slave_0: entered promiscuous mode [ 69.896323][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.903809][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.911659][ T5824] bridge_slave_1: entered allmulticast mode [ 69.918688][ T5824] bridge_slave_1: entered promiscuous mode [ 69.926372][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.933741][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.941091][ T5827] bridge_slave_1: entered allmulticast mode [ 69.948097][ T5827] bridge_slave_1: entered promiscuous mode [ 70.054593][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.067615][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.103096][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.114364][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.123655][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.130931][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.138105][ T5830] bridge_slave_0: entered allmulticast mode [ 70.145349][ T5830] bridge_slave_0: entered promiscuous mode [ 70.185667][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.192909][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.201150][ T5830] bridge_slave_1: entered allmulticast mode [ 70.208143][ T5830] bridge_slave_1: entered promiscuous mode [ 70.215242][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.222423][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.229597][ T5826] bridge_slave_0: entered allmulticast mode [ 70.237231][ T5826] bridge_slave_0: entered promiscuous mode [ 70.273573][ T5827] team0: Port device team_slave_0 added [ 70.287722][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.295068][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.302384][ T5826] bridge_slave_1: entered allmulticast mode [ 70.309300][ T5826] bridge_slave_1: entered promiscuous mode [ 70.327426][ T5824] team0: Port device team_slave_0 added [ 70.335228][ T5827] team0: Port device team_slave_1 added [ 70.357493][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.365109][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.373108][ T5825] bridge_slave_0: entered allmulticast mode [ 70.380138][ T5825] bridge_slave_0: entered promiscuous mode [ 70.390060][ T5824] team0: Port device team_slave_1 added [ 70.407157][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.429076][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.436775][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.444089][ T5825] bridge_slave_1: entered allmulticast mode [ 70.451650][ T5825] bridge_slave_1: entered promiscuous mode [ 70.476875][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.488715][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.500856][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.527326][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.534422][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.560495][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.600530][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.607647][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.634395][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.646209][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.653525][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.679737][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.714555][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.724807][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.732363][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.758773][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.778699][ T5830] team0: Port device team_slave_0 added [ 70.786742][ T5826] team0: Port device team_slave_0 added [ 70.795093][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.813641][ T5830] team0: Port device team_slave_1 added [ 70.821150][ T5826] team0: Port device team_slave_1 added [ 70.886893][ T5825] team0: Port device team_slave_0 added [ 70.931379][ T5836] Bluetooth: hci3: command tx timeout [ 70.933007][ T5825] team0: Port device team_slave_1 added [ 70.938010][ T5831] Bluetooth: hci0: command tx timeout [ 70.948971][ T5846] Bluetooth: hci2: command tx timeout [ 70.961955][ T5824] hsr_slave_0: entered promiscuous mode [ 70.968394][ T5824] hsr_slave_1: entered promiscuous mode [ 70.975652][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.982739][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.008974][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.020480][ T5831] Bluetooth: hci4: command tx timeout [ 71.026581][ T5846] Bluetooth: hci1: command tx timeout [ 71.031020][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.039008][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.065762][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.082306][ T5827] hsr_slave_0: entered promiscuous mode [ 71.088614][ T5827] hsr_slave_1: entered promiscuous mode [ 71.095153][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 71.101044][ T5827] Cannot create hsr debugfs directory [ 71.117278][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.124403][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.150751][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.162265][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.169293][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.195545][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.223915][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.231294][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.257550][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.300071][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.307314][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.333773][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.415108][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422493][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.459437][ T5830] hsr_slave_0: entered promiscuous mode [ 71.466159][ T5830] hsr_slave_1: entered promiscuous mode [ 71.472866][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.479148][ T5830] Cannot create hsr debugfs directory [ 71.489667][ T5826] hsr_slave_0: entered promiscuous mode [ 71.496136][ T5826] hsr_slave_1: entered promiscuous mode [ 71.502493][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 71.508229][ T5826] Cannot create hsr debugfs directory [ 71.581734][ T5825] hsr_slave_0: entered promiscuous mode [ 71.588144][ T5825] hsr_slave_1: entered promiscuous mode [ 71.594520][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 71.600315][ T5825] Cannot create hsr debugfs directory [ 72.013848][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.025736][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.033587][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.043991][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.053286][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.063211][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.071967][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.082262][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.157475][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.167257][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.176189][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.186192][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.198210][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.208522][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.227170][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.238791][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.315613][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.325682][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.333752][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.344569][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.352497][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.363110][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.371909][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.383320][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.488977][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.498517][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.507477][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.516839][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.524837][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.534569][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.551504][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.561524][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.606739][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.687217][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.708866][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.718866][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.727029][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.737523][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.746105][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.756036][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.773400][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.785749][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.807572][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.815286][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.841081][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.848286][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.863819][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.924945][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.950001][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.957141][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.978018][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.988672][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.995986][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.010362][ T5846] Bluetooth: hci2: command tx timeout [ 73.016343][ T5831] Bluetooth: hci0: command tx timeout [ 73.021839][ T5836] Bluetooth: hci3: command tx timeout [ 73.091345][ T5831] Bluetooth: hci1: command tx timeout [ 73.097348][ T5836] Bluetooth: hci4: command tx timeout [ 73.117085][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.126943][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.158292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.165606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.214359][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.233196][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.240535][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.302572][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.309827][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.347295][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.354911][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.405938][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.474180][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.515344][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.559371][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.574229][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.581491][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.607009][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.614367][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.695834][ T5827] veth0_vlan: entered promiscuous mode [ 73.772354][ T5827] veth1_vlan: entered promiscuous mode [ 73.799679][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.836608][ T5824] veth0_vlan: entered promiscuous mode [ 73.872554][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.919187][ T5824] veth1_vlan: entered promiscuous mode [ 73.983519][ T5827] veth0_macvtap: entered promiscuous mode [ 74.024321][ T5827] veth1_macvtap: entered promiscuous mode [ 74.053534][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.087420][ T5824] veth0_macvtap: entered promiscuous mode [ 74.112776][ T5824] veth1_macvtap: entered promiscuous mode [ 74.156320][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.201206][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.230120][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.258429][ T83] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.269806][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.283639][ T83] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.294727][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.316979][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.357901][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.365251][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.375997][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.385819][ T5830] veth0_vlan: entered promiscuous mode [ 74.402025][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.411402][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487375][ T5830] veth1_vlan: entered promiscuous mode [ 74.540446][ T5826] veth0_vlan: entered promiscuous mode [ 74.562131][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.573511][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.606324][ T5826] veth1_vlan: entered promiscuous mode [ 74.645636][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.655940][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.676752][ T5825] veth0_vlan: entered promiscuous mode [ 74.698887][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.707950][ T5825] veth1_vlan: entered promiscuous mode [ 74.714058][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.717717][ T5830] veth0_macvtap: entered promiscuous mode [ 74.753253][ T5830] veth1_macvtap: entered promiscuous mode [ 74.763518][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.784523][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.825858][ T5826] veth0_macvtap: entered promiscuous mode [ 74.865794][ T5826] veth1_macvtap: entered promiscuous mode [ 74.881422][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.884310][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.913770][ T5825] veth0_macvtap: entered promiscuous mode [ 74.938175][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.986097][ T5825] veth1_macvtap: entered promiscuous mode [ 75.004427][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.036925][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.054754][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.060189][ T5940] netlink: 'syz.3.4': attribute type 64 has an invalid length. [ 75.081648][ T5940] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.082840][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100707][ T5831] Bluetooth: hci2: command tx timeout [ 75.106204][ T5831] Bluetooth: hci0: command tx timeout [ 75.111858][ T5831] Bluetooth: hci3: command tx timeout [ 75.119937][ T5940] sctp: [Deprecated]: syz.3.4 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.119937][ T5940] Use struct sctp_sack_info instead [ 75.123666][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154039][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.185462][ T5846] Bluetooth: hci1: command tx timeout [ 75.185498][ T5831] Bluetooth: hci4: command tx timeout [ 75.291987][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.319208][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.339154][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.353880][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.397388][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.444839][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.513466][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.534934][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.544453][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.576828][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.593041][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.608370][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 75.624259][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 75.646909][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649398][ T5955] netlink: 'syz.1.8': attribute type 12 has an invalid length. [ 75.665137][ T5955] netlink: 'syz.1.8': attribute type 11 has an invalid length. [ 75.688823][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.705283][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.819922][ T5960] sctp: [Deprecated]: syz.3.11 (pid 5960) Use of int in max_burst socket option. [ 75.819922][ T5960] Use struct sctp_assoc_value instead [ 75.917915][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.953261][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.023223][ T5972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.082205][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.102254][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.143569][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.170123][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.187597][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.206881][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.573385][ T5986] ipt_REJECT: ECHOREPLY no longer supported. [ 76.630127][ T5990] ipt_REJECT: TCP_RESET invalid for non-tcp [ 76.689589][ T5990] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.768115][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.834374][ T5990] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 77.043603][ T6009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.21'. [ 77.113088][ T6015] nbd: must specify at least one socket [ 77.171443][ T5831] Bluetooth: hci3: command tx timeout [ 77.171616][ T5846] Bluetooth: hci0: command tx timeout [ 77.176963][ T5836] Bluetooth: hci2: command tx timeout [ 77.218461][ T6022] Zero length message leads to an empty skb [ 77.251361][ T5846] Bluetooth: hci1: command tx timeout [ 77.262676][ T5846] Bluetooth: hci4: command tx timeout [ 77.406765][ T6026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.683491][ T6041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.29'. [ 77.722649][ T6041] netlink: 64 bytes leftover after parsing attributes in process `syz.3.29'. [ 77.734523][ T6041] netlink: 'syz.3.29': attribute type 6 has an invalid length. [ 77.894165][ T6052] x_tables: duplicate underflow at hook 2 [ 77.903343][ T6054] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 78.060629][ T6059] Bluetooth: MGMT ver 1.23 [ 78.174046][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 78.215094][ T6070] nbd: illegal input index -346848256 [ 78.239009][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 78.796347][ T6099] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 78.816033][ T6096] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 78.968861][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.977259][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.168011][ T6117] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 79.307909][ T6123] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 79.364459][ T6124] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 79.979672][ T6156] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 80.003307][ T6156] netlink: 'syz.2.63': attribute type 2 has an invalid length. [ 80.199793][ T6172] sctp: [Deprecated]: syz.1.67 (pid 6172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.199793][ T6172] Use struct sctp_sack_info instead [ 80.242096][ T6174] __nla_validate_parse: 10 callbacks suppressed [ 80.242117][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 80.285972][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 81.060887][ T6216] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 82.422190][ T6281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.466733][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 82.778182][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 82.827883][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 82.899076][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 83.056533][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 83.077912][ T6313] netlink: 256 bytes leftover after parsing attributes in process `syz.4.105'. [ 83.089297][ T6308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.103'. [ 83.106015][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 83.150537][ T6316] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 83.159206][ T6310] netlink: 'syz.1.102': attribute type 15 has an invalid length. [ 83.242705][ T6313] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 83.265741][ T6313] team0 (unregistering): Port device team_slave_0 removed [ 83.308652][ T6313] team0 (unregistering): Failed to send options change via netlink (err -105) [ 83.346280][ T6313] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 83.377263][ T6313] team0 (unregistering): Port device team_slave_1 removed [ 83.414366][ T6320] 8021q: VLANs not supported on ipvlan1 [ 83.422539][ T6310] netlink: 'syz.1.102': attribute type 15 has an invalid length. [ 83.430485][ T6324] veth0_to_bridge: entered promiscuous mode [ 83.440052][ T83] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 83.563487][ T83] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 83.628219][ T83] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 83.655062][ T6324] veth0_to_bridge: left promiscuous mode [ 83.667075][ T83] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 84.684134][ T6374] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 85.452335][ T6427] __nla_validate_parse: 9 callbacks suppressed [ 85.452352][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 85.502727][ T6432] netlink: 96 bytes leftover after parsing attributes in process `syz.3.131'. [ 85.528672][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 85.547695][ T6432] 8021q: VLANs not supported on ip_vti0 [ 85.579154][ T980] IPVS: starting estimator thread 0... [ 85.693097][ T6439] IPVS: using max 35 ests per chain, 84000 per kthread [ 85.739816][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 85.784562][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'. [ 86.155924][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 86.239209][ T6479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.140'. [ 86.262600][ T6475] veth3: entered promiscuous mode [ 86.282867][ T6475] veth3: entered allmulticast mode [ 86.353256][ T6475] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 86.477714][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'. [ 86.745659][ T6506] : entered promiscuous mode [ 86.777239][ T6504] syz.0.146 uses obsolete (PF_INET,SOCK_PACKET) [ 86.802987][ T1544] cfg80211: failed to load regulatory.db [ 86.830368][ T6504] netlink: 'syz.0.146': attribute type 8 has an invalid length. [ 86.847284][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 86.900518][ T6504] bond0: entered promiscuous mode [ 86.917330][ T6504] bond_slave_0: entered promiscuous mode [ 86.948113][ T6504] bond_slave_1: entered promiscuous mode [ 86.990370][ T6504] gretap0: entered promiscuous mode [ 86.995897][ T6522] netlink: 236 bytes leftover after parsing attributes in process `syz.4.151'. [ 87.006333][ T6524] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 87.022334][ T6504] bond0: left promiscuous mode [ 87.038836][ T6504] bond_slave_0: left promiscuous mode [ 87.046151][ T6504] bond_slave_1: left promiscuous mode [ 87.064800][ T6504] gretap0: left promiscuous mode [ 87.078014][ T6531] IPv6: addrconf: prefix option has invalid lifetime [ 87.085575][ T6531] IPv6: addrconf: prefix option has invalid lifetime [ 87.437299][ T6547] block nbd0: Unsupported socket: should be TCP or UNIX. [ 87.977747][ T6579] lo speed is unknown, defaulting to 1000 [ 87.998186][ T6579] lo speed is unknown, defaulting to 1000 [ 88.038256][ T6579] lo speed is unknown, defaulting to 1000 [ 88.102287][ T6579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.144448][ T6579] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.208411][ T6579] lo speed is unknown, defaulting to 1000 [ 88.230972][ T6579] lo speed is unknown, defaulting to 1000 [ 88.254068][ T6579] lo speed is unknown, defaulting to 1000 [ 88.279105][ T6579] lo speed is unknown, defaulting to 1000 [ 88.294347][ T6591] netlink: 'syz.1.172': attribute type 20 has an invalid length. [ 88.303415][ T6579] lo speed is unknown, defaulting to 1000 [ 88.619141][ T6604] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 88.706364][ T6612] netlink: 'syz.1.177': attribute type 5 has an invalid length. [ 88.724872][ T6612] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 88.739748][ T6570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.789127][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.874015][ T6614] bridge_slave_0 (unregistering): left allmulticast mode [ 88.901625][ T6614] bridge_slave_0 (unregistering): left promiscuous mode [ 88.909773][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.957319][ T6620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.021652][ T6621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.061443][ T6630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.155763][ T6634] openvswitch: netlink: Message has 3 unknown bytes. [ 89.306896][ T6644] netlink: 'syz.1.187': attribute type 142 has an invalid length. [ 89.746395][ T6665] lo speed is unknown, defaulting to 1000 [ 89.805773][ T6659] nbd: device at index 64 is going down [ 89.918166][ T6678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.926633][ T6678] bridge0: port 3(bond1) entered blocking state [ 89.933883][ T6678] bridge0: port 3(bond1) entered disabled state [ 89.950063][ T6678] bond1: entered allmulticast mode [ 89.959619][ T6678] bond1: entered promiscuous mode [ 90.108020][ T5833] udevd[5833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 90.222327][ T6693] netlink: 'syz.2.200': attribute type 3 has an invalid length. [ 90.252424][ T6691] netlink: 'syz.0.202': attribute type 39 has an invalid length. [ 90.411283][ T6691] hsr_slave_1 (unregistering): left promiscuous mode [ 90.903549][ T6721] __nla_validate_parse: 12 callbacks suppressed [ 90.903564][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.210'. [ 90.965604][ T6723] openvswitch: netlink: IP tunnel dst address not specified [ 90.978875][ T6724] openvswitch: netlink: IP tunnel dst address not specified [ 90.998698][ T6723] sctp: [Deprecated]: syz.0.211 (pid 6723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.998698][ T6723] Use struct sctp_sack_info instead [ 91.081849][ T6728] bond1: (slave ip6tnl0): Device is not bonding slave [ 91.088646][ T6728] bond1: option active_slave: invalid value (ip6tnl0) [ 91.098816][ T6728] bond1 (unregistering): Released all slaves [ 91.122226][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 91.131392][ T6731] netlink: 'syz.1.212': attribute type 7 has an invalid length. [ 91.139060][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 92.996068][ T6684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.191748][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 93.206920][ T6744] netlink: 'syz.0.217': attribute type 4 has an invalid length. [ 93.222955][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 93.359220][ T6754] tipc: Started in network mode [ 93.389250][ T6754] tipc: Node identity , cluster identity 4711 [ 93.415537][ T6754] tipc: Failed to set node id, please configure manually [ 93.436286][ T6754] tipc: Enabling of bearer rejected, failed to enable media [ 93.917500][ T6790] netlink: 'syz.2.233': attribute type 8 has an invalid length. [ 93.986126][ T6793] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 94.036109][ T6793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.053995][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'. [ 94.233367][ T6807] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.267642][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 94.278626][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 94.288664][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 94.434874][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 94.491555][ T6813] netlink: 'syz.0.242': attribute type 11 has an invalid length. [ 94.705132][ T6816] syzkaller1: entered promiscuous mode [ 94.741860][ T6816] syzkaller1: entered allmulticast mode [ 95.002935][ T6840] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 95.017260][ T6840] netlink: 'syz.2.249': attribute type 2 has an invalid length. [ 95.150905][ T6844] netlink: 'syz.0.251': attribute type 3 has an invalid length. [ 95.844029][ T6886] warning: `syz.0.263' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.015692][ T6893] __nla_validate_parse: 7 callbacks suppressed [ 96.015709][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 96.031037][ T6895] netlink: 80 bytes leftover after parsing attributes in process `syz.1.265'. [ 96.031065][ T6895] netlink: 80 bytes leftover after parsing attributes in process `syz.1.265'. [ 96.062100][ T6887] lo speed is unknown, defaulting to 1000 [ 96.064353][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 96.090938][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 96.106888][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 96.158130][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 96.191326][ T6898] tipc: Enabling of bearer rejected, failed to enable media [ 96.245337][ T6905] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.268'. [ 96.613154][ T6912] syzkaller0: entered promiscuous mode [ 96.627516][ T6922] netlink: 'syz.2.273': attribute type 4 has an invalid length. [ 96.663037][ T6912] syzkaller0: entered allmulticast mode [ 96.741896][ T980] lo speed is unknown, defaulting to 1000 [ 96.764770][ T980] syz0: Port: 1 Link DOWN [ 96.883112][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 96.979917][ T6946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.281'. [ 97.007135][ T6940] batadv0: entered promiscuous mode [ 97.014094][ T6940] macsec1: entered promiscuous mode [ 97.021709][ T6940] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 97.257527][ T6962] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 97.291226][ T6962] netlink: 'syz.0.283': attribute type 18 has an invalid length. [ 97.341545][ T6965] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 97.367010][ T6965] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 97.399054][ T83] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.429323][ T83] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.462470][ T83] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.499705][ T83] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.310378][ T7020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.436370][ T7030] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 98.792325][ T7044] raw_sendmsg: syz.0.304 forgot to set AF_INET. Fix it! [ 98.828250][ T7050] syzkaller0: entered promiscuous mode [ 98.834007][ T7050] syzkaller0: entered allmulticast mode [ 98.884878][ T7057] validate_nla: 1 callbacks suppressed [ 98.884896][ T7057] netlink: 'syz.0.308': attribute type 2 has an invalid length. [ 98.898843][ T7057] netlink: 'syz.0.308': attribute type 2 has an invalid length. [ 99.374312][ T7088] netlink: 'syz.4.316': attribute type 3 has an invalid length. [ 99.831228][ T7108] syzkaller0: entered promiscuous mode [ 99.836791][ T7108] syzkaller0: entered allmulticast mode [ 100.045458][ T7110] lo speed is unknown, defaulting to 1000 [ 100.302495][ T7115] veth0_to_bond: entered allmulticast mode [ 102.187938][ T7075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.260130][ T7120] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 102.307249][ T7120] __nla_validate_parse: 14 callbacks suppressed [ 102.307266][ T7120] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.324'. [ 102.398389][ T7122] lo speed is unknown, defaulting to 1000 [ 102.863045][ T7155] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 102.875254][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.334'. [ 102.875782][ T7155] netlink: 212 bytes leftover after parsing attributes in process `syz.2.335'. [ 102.900615][ T7156] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 102.924565][ T7156] netlink: 212 bytes leftover after parsing attributes in process `syz.2.335'. [ 103.338152][ T7174] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.343'. [ 103.498789][ T7188] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 103.537094][ T7185] bond2: entered promiscuous mode [ 103.565329][ T7185] bond2: entered allmulticast mode [ 103.571663][ T7185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.648983][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 103.664373][ T7183] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 103.676199][ T7195] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 103.685867][ T7195] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 103.696505][ T7195] netlink: 'syz.1.348': attribute type 2 has an invalid length. [ 103.720609][ T7195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.348'. [ 103.738726][ T7185] C: renamed from lo (while UP) [ 103.754606][ T7185] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 103.940489][ T7207] netlink: 152 bytes leftover after parsing attributes in process `syz.3.353'. [ 103.980550][ T7207] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 104.011804][ T7207] netlink: 16143 bytes leftover after parsing attributes in process `syz.3.353'. [ 104.229947][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 104.420018][ T7235] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 105.070610][ T7274] netlink: 'syz.4.373': attribute type 32 has an invalid length. [ 105.156504][ T7274] bond2: option coupled_control: invalid value (192) [ 105.170492][ T7274] bond2 (unregistering): Released all slaves [ 105.267568][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.284707][ T7229] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 105.316670][ T7229] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 105.349141][ T7278] bridge_slave_0 (unregistering): left allmulticast mode [ 105.374126][ T7278] bridge_slave_0 (unregistering): left promiscuous mode [ 105.398704][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.470407][ T7294] veth0: entered promiscuous mode [ 105.537150][ T7293] veth0: left promiscuous mode [ 106.149838][ T7336] bridge1: entered promiscuous mode [ 106.199928][ T7336] bridge1: entered allmulticast mode [ 106.325062][ T7349] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 106.359748][ T7334] lo speed is unknown, defaulting to 1000 [ 106.426685][ T5938] IPVS: starting estimator thread 0... [ 106.432999][ T7349] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 106.433347][ T7350] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 106.540290][ T7354] IPVS: using max 33 ests per chain, 79200 per kthread [ 106.565263][ T7352] bond3: entered promiscuous mode [ 106.590670][ T7352] bond3: entered allmulticast mode [ 106.596400][ T7352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.116360][ T7381] Cannot find set identified by id 0 to match [ 107.308032][ T7388] netlink: 'syz.2.403': attribute type 11 has an invalid length. [ 107.584471][ T7394] tipc: Started in network mode [ 107.595440][ T7394] tipc: Node identity 0104000000000000cc, cluster identity 4711 [ 107.651630][ T7394] __nla_validate_parse: 3 callbacks suppressed [ 107.651650][ T7394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'. [ 107.679487][ T7400] netlink: 'syz.4.405': attribute type 30 has an invalid length. [ 107.827138][ T7403] netlink: 'syz.3.406': attribute type 21 has an invalid length. [ 107.889812][ T7403] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 108.320895][ T7429] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 108.496471][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 108.516008][ T7437] bond1: (slave geneve2): making interface the new active one [ 108.533246][ T7437] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.546511][ T997] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.572723][ T997] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.616039][ T7458] bridge1: entered promiscuous mode [ 108.642306][ T7458] bridge1: entered allmulticast mode [ 108.689023][ T7458] team0: Port device bridge1 added [ 108.705197][ T997] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.735428][ T997] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.792334][ T7466] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 108.828670][ T7466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.838377][ T7468] netlink: 84 bytes leftover after parsing attributes in process `syz.1.423'. [ 108.880250][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.935044][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 109.042375][ T7479] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 109.364197][ T7493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.366631][ T7494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.429'. [ 109.472599][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.431'. [ 109.513793][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 109.547913][ T7499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.548402][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 109.648672][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.656045][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.663657][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.670881][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.895900][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 109.994006][ T7531] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 110.279036][ T7546] unsupported nlmsg_type 40 [ 110.590897][ T5942] IPVS: starting estimator thread 0... [ 110.690464][ T7563] IPVS: using max 42 ests per chain, 100800 per kthread [ 110.779490][ T7568] gretap0: entered promiscuous mode [ 110.817892][ T7568] vlan2: entered promiscuous mode [ 111.285824][ T7608] netlink: 'syz.3.458': attribute type 16 has an invalid length. [ 111.328780][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.370369][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.478801][ T7610] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 111.621399][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.767826][ T7629] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.803701][ T7629] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 112.018430][ T7643] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 112.103995][ T7643] bond1: entered promiscuous mode [ 112.109528][ T7643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.117457][ T7643] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 112.180133][ T7645] bond1: (slave bridge1): making interface the new active one [ 112.199544][ T7645] bridge1: entered promiscuous mode [ 112.232161][ T7645] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.269952][ T7643] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 112.306732][ T7643] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 112.314550][ T7636] netlink: 'syz.3.468': attribute type 2 has an invalid length. [ 112.322434][ T7636] tipc: Started in network mode [ 112.327456][ T7636] tipc: Node identity 340008, cluster identity 4711 [ 112.334293][ T7636] tipc: Node number set to 3407880 [ 112.342341][ T7643] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 112.368324][ T7643] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 112.383724][ T7655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.689198][ T7667] bridge_slave_1: left allmulticast mode [ 112.719581][ T7667] bridge_slave_1: left promiscuous mode [ 112.735951][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.759516][ T7667] bond0: (slave bond_slave_0): Releasing backup interface [ 112.774318][ T7667] bond0: (slave bond_slave_1): Releasing backup interface [ 112.800859][ T7667] team0: Port device team_slave_0 removed [ 112.814693][ T7667] team0: Port device team_slave_1 removed [ 112.825438][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.833883][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.844354][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.852710][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.863364][ T7667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.979763][ T7679] __nla_validate_parse: 14 callbacks suppressed [ 112.979780][ T7679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.478'. [ 113.063547][ T7684] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.480'. [ 113.121596][ T7688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 113.336448][ T7697] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.483'. [ 113.501641][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 113.528523][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 113.558122][ T7712] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 113.562953][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 113.727657][ T7721] xt_time: unknown flags 0xf4 [ 113.747231][ T7718] bridge_slave_0: left allmulticast mode [ 113.762468][ T7721] atomic_op ffff8880287ec998 conn xmit_atomic 0000000000000000 [ 113.782499][ T7718] bridge_slave_0: left promiscuous mode [ 113.800864][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.492'. [ 113.818008][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.882807][ T7718] bridge_slave_1: left allmulticast mode [ 113.890936][ T7718] bridge_slave_1: left promiscuous mode [ 113.901254][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.911660][ T7718] bond1: left promiscuous mode [ 113.929907][ T7718] bond0: (slave bond_slave_0): Releasing backup interface [ 113.957980][ T7718] bond0: (slave bond_slave_1): Releasing backup interface [ 113.994784][ T7718] team0: Port device team_slave_0 removed [ 114.035921][ T7718] team0: Port device team_slave_1 removed [ 114.057934][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.071366][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.073565][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 114.089902][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.103382][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.122689][ T7718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.165548][ T7723] vlan0: entered promiscuous mode [ 114.210438][ T7723] team0: Port device vlan0 added [ 114.668218][ T7775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.000770][ T7809] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 115.179004][ T7818] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.515'. [ 115.226707][ T7825] openvswitch: netlink: Invalid VLAN frame [ 115.502060][ T7836] : renamed from bond0 (while UP) [ 115.544250][ T7839] validate_nla: 61 callbacks suppressed [ 115.544267][ T7839] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 115.585916][ T7839] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 115.638864][ T7847] netlink: 'syz.1.523': attribute type 2 has an invalid length. [ 115.662339][ T7847] netlink: 'syz.1.523': attribute type 2 has an invalid length. [ 115.696098][ T7842] syz_tun: entered promiscuous mode [ 115.726252][ T7842] vlan2: entered promiscuous mode [ 116.216984][ T7876] geneve2: entered promiscuous mode [ 116.231369][ T7876] geneve2: entered allmulticast mode [ 116.412091][ T7887] bond2: entered promiscuous mode [ 116.417593][ T7887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.704497][ T7906] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 116.757688][ T7911] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 116.809089][ T7906] bond2: (slave geneve2): making interface the new active one [ 116.821406][ T7906] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 116.830800][ T997] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.863135][ T997] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.895846][ T7914] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 116.928905][ T997] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.951729][ T997] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.286211][ T7932] bridge0: entered allmulticast mode [ 117.298945][ T7931] syzkaller1: entered promiscuous mode [ 117.315957][ T7931] syzkaller1: entered allmulticast mode [ 117.353649][ T7932] netlink: 'syz.2.549': attribute type 2 has an invalid length. [ 117.442448][ T7945] syzkaller1: entered promiscuous mode [ 117.459594][ T7945] syzkaller1: entered allmulticast mode [ 117.538460][ T7951] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 117.556716][ T7951] bond0: (slave wlan1): Opening slave failed [ 117.565231][ T7951] netlink: 'syz.3.556': attribute type 8 has an invalid length. [ 117.571634][ T7952] syzkaller0: entered promiscuous mode [ 117.578954][ T7952] syzkaller0: entered allmulticast mode [ 118.158454][ T7980] __nla_validate_parse: 15 callbacks suppressed [ 118.158467][ T7980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.562'. [ 120.734354][ T7959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.748618][ T7988] netlink: 256 bytes leftover after parsing attributes in process `syz.0.563'. [ 120.958996][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'. [ 121.052093][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'. [ 121.088685][ T8012] batadv_slave_1: entered promiscuous mode [ 121.171737][ T8017] netlink: 48 bytes leftover after parsing attributes in process `syz.3.570'. [ 121.229170][ T8008] batadv_slave_1: left promiscuous mode [ 121.317966][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 121.354708][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 121.679701][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.580'. [ 121.731946][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 121.799084][ T8045] netlink: 31 bytes leftover after parsing attributes in process `syz.2.580'. [ 121.887511][ T8045] netlink: 'syz.2.580': attribute type 2 has an invalid length. [ 122.272955][ T8085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 122.423629][ T8094] netlink: 'syz.4.592': attribute type 7 has an invalid length. [ 122.445748][ T8095] sctp: [Deprecated]: syz.0.588 (pid 8095) Use of int in maxseg socket option. [ 122.445748][ T8095] Use struct sctp_assoc_value instead [ 122.530946][ T8090] wireguard0: entered promiscuous mode [ 122.537029][ T8090] wireguard0: entered allmulticast mode [ 122.580990][ T8104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.935583][ T8129] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 123.377800][ T8159] __nla_validate_parse: 4 callbacks suppressed [ 123.377819][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 123.430376][ T8161] bond3: option min_links: invalid value (18446744073709551614) [ 123.438094][ T8161] bond3: option min_links: allowed values 0 - 2147483647 [ 123.447560][ T8161] bond3 (unregistering): Released all slaves [ 123.472562][ T8163] xt_hashlimit: size too large, truncated to 1048576 [ 123.755047][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.612'. [ 123.773819][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 124.165557][ T8190] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 124.189065][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 124.205666][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 124.313062][ T8169] SET target dimension over the limit! [ 124.321884][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.368237][ T8195] bond0: (slave geneve3): making interface the new active one [ 124.386706][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 124.412313][ T8195] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 124.459244][ T8199] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 124.482923][ T8206] ip6erspan0: entered promiscuous mode [ 124.665199][ T8213] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 124.703586][ T8213] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 124.722153][ T8225] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 124.747061][ T8213] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 124.779507][ T8224] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 124.924980][ T8234] netlink: 192 bytes leftover after parsing attributes in process `syz.3.623'. [ 124.985340][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 125.018943][ T8230] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 125.056104][ T8230] bond3 (unregistering): Released all slaves [ 125.104692][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 125.189823][ T8228] lo speed is unknown, defaulting to 1000 [ 125.211656][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 125.268068][ T8248] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 125.295162][ T8242] dummy0: entered promiscuous mode [ 125.302009][ T8242] macvtap1: entered promiscuous mode [ 125.308078][ T8242] macvtap1: entered allmulticast mode [ 125.315009][ T8242] dummy0: entered allmulticast mode [ 125.348779][ T8248] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 126.334147][ T8306] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 126.345320][ T8312] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 126.382405][ T8306] netlink: 'syz.2.646': attribute type 7 has an invalid length. [ 126.391018][ T8310] geneve2: entered promiscuous mode [ 126.391738][ T8306] netlink: 'syz.2.646': attribute type 8 has an invalid length. [ 126.405018][ T8306] NCSI netlink: No device for ifindex 65584 [ 126.423002][ T8317] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 126.855854][ T8334] tipc: Started in network mode [ 126.864808][ T8334] tipc: Node identity 862419691a4e, cluster identity 4711 [ 126.873374][ T8334] tipc: Enabled bearer , priority 0 [ 126.968296][ T8334] syzkaller0: entered promiscuous mode [ 126.974378][ T8334] syzkaller0: entered allmulticast mode [ 126.984771][ T8334] tipc: Resetting bearer [ 126.993038][ T8340] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.064110][ T8337] tipc: Resetting bearer [ 127.409774][ T8361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.574099][ T8337] tipc: Disabling bearer [ 128.652077][ T5910] tipc: Node number set to 2624199017 [ 128.830063][ T8374] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 128.877654][ T8378] netlink: 'syz.3.664': attribute type 30 has an invalid length. [ 128.888881][ T8374] bond3: entered promiscuous mode [ 128.895207][ T8374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.937307][ T8383] netem: unknown loss type 0 [ 128.944125][ T8383] netem: change failed [ 128.965196][ T8383] netlink: 'syz.2.665': attribute type 83 has an invalid length. [ 128.992740][ T8384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.016873][ T8384] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 129.028251][ T8384] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 129.059584][ T8384] bond3: (slave ip6gre1): making interface the new active one [ 129.076739][ T8384] ip6gre1: entered promiscuous mode [ 129.088263][ T8384] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 129.548077][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 129.618082][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 129.641909][ T8430] netlink: 'syz.3.676': attribute type 8 has an invalid length. [ 129.669302][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 129.784899][ T8436] __nla_validate_parse: 8 callbacks suppressed [ 129.784918][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 129.879217][ T8440] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 129.979590][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 130.066426][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 130.284334][ T8424] infiniband syz2: set active [ 130.294965][ T5910] vxcan1 speed is unknown, defaulting to 1000 [ 130.327206][ T8424] infiniband syz2: added vxcan1 [ 130.502736][ T8424] RDS/IB: syz2: added [ 130.527376][ T8424] smc: adding ib device syz2 with port count 1 [ 130.563835][ T8424] smc: ib device syz2 port 1 has no pnetid [ 130.592550][ T5910] vxcan1 speed is unknown, defaulting to 1000 [ 130.633246][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 130.785860][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 130.846302][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 131.147718][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 131.169604][ T8493] openvswitch: netlink: Flow key attr not present in new flow. [ 131.247399][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 131.368878][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 131.403261][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 131.617579][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 131.696765][ T8522] syzkaller0: entered promiscuous mode [ 131.710764][ T8522] syzkaller0: entered allmulticast mode [ 131.834164][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 131.869750][ T8526] ipvlan2: entered promiscuous mode [ 131.931703][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 132.629144][ T8561] syzkaller0: entered promiscuous mode [ 132.637315][ T8561] syzkaller0: entered allmulticast mode [ 132.715405][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 132.859655][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.868811][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.009672][ T8574] syzkaller1: entered promiscuous mode [ 133.016490][ T8574] syzkaller1: entered allmulticast mode [ 133.279400][ T8424] vxcan1 speed is unknown, defaulting to 1000 [ 133.285017][ T8586] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 133.518277][ T8598] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 133.564190][ T8597] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 133.875335][ T8610] syzkaller1: entered promiscuous mode [ 133.901307][ T8610] syzkaller1: entered allmulticast mode [ 133.922466][ T8610] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 134.289693][ T8638] netlink: 'syz.4.744': attribute type 16 has an invalid length. [ 134.330320][ T8638] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 134.373311][ T8638] nbd: couldn't find a device at index 1048580 [ 134.503432][ T8638] tipc: Enabled bearer , priority 0 [ 134.822599][ T8663] bridge_slave_0: left allmulticast mode [ 134.860142][ T8663] bridge_slave_0: left promiscuous mode [ 134.869979][ T8672] __nla_validate_parse: 11 callbacks suppressed [ 134.869996][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 134.885720][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.906155][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 134.908424][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 134.935244][ T8663] bridge_slave_1: left allmulticast mode [ 134.945045][ T8672] netlink: 'syz.0.755': attribute type 7 has an invalid length. [ 134.954387][ T8663] bridge_slave_1: left promiscuous mode [ 134.967203][ T8672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'. [ 134.973615][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.985832][ T8673] netlink: 'syz.0.755': attribute type 7 has an invalid length. [ 135.000062][ T8663] bond0: (slave bond_slave_0): Releasing backup interface [ 135.011045][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'. [ 135.042621][ T8663] bond0: (slave bond_slave_1): Releasing backup interface [ 135.077366][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.085150][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.096363][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.104220][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.116804][ T8663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.209825][ T8672] erspan0: entered promiscuous mode [ 135.237916][ T8672] gretap0: entered promiscuous mode [ 135.341489][ T8664] lo speed is unknown, defaulting to 1000 [ 135.387050][ T8664] vxcan1 speed is unknown, defaulting to 1000 [ 135.923778][ T8718] pim6reg1: entered promiscuous mode [ 135.943224][ T8718] pim6reg1: entered allmulticast mode [ 136.287288][ T8731] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 136.363196][ T8744] IPv6: sit1: Disabled Multicast RS [ 136.379784][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.768'. [ 136.391038][ T8730] syzkaller0: entered promiscuous mode [ 136.396732][ T8730] syzkaller0: entered allmulticast mode [ 136.920587][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 136.964176][ T8757] macvtap1: entered promiscuous mode [ 136.969503][ T8757] vlan0: entered promiscuous mode [ 136.975205][ T8757] macvtap1: entered allmulticast mode [ 136.980854][ T8757] vlan0: entered allmulticast mode [ 136.986006][ T8757] veth0_vlan: entered allmulticast mode [ 137.285949][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.293810][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.435521][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.449803][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.802387][ T8764] vlan0: left allmulticast mode [ 137.807398][ T8764] veth0_vlan: left allmulticast mode [ 137.813396][ T8764] vlan0: left promiscuous mode [ 137.835456][ T1335] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.848270][ T1335] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 137.857703][ T1335] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.866983][ T1335] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 137.886875][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.896592][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 137.906803][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.915916][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.191887][ T8736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.422773][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 139.671904][ T8808] bridge_slave_0: invalid flags given to default FDB implementation [ 139.685214][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 139.745284][ T8816] netlink: 232 bytes leftover after parsing attributes in process `syz.2.782'. [ 139.881356][ T8825] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 139.959077][ T8825] bond3: entered promiscuous mode [ 139.982744][ T8825] bond3: entered allmulticast mode [ 140.002937][ T8825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.031591][ T8820] macvlan2: entered promiscuous mode [ 140.036976][ T8820] macvlan2: entered allmulticast mode [ 140.045896][ T8820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.339211][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 140.408345][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 140.595303][ T8854] sch_tbf: burst 12 is lower than device bridge2 mtu (1514) ! [ 140.619584][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.797'. [ 140.821960][ T8867] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.799'. [ 141.034843][ T8882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.202929][ T8890] netlink: 88 bytes leftover after parsing attributes in process `syz.0.806'. [ 141.215240][ T8889] netlink: 'syz.2.800': attribute type 83 has an invalid length. [ 141.228374][ T8890] netem: invalid attributes len -24 [ 141.500100][ T8903] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 141.513989][ T8903] netlink: 228 bytes leftover after parsing attributes in process `syz.4.812'. [ 141.538717][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 141.864411][ T8929] tipc: Enabled bearer , priority 14 [ 142.145650][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 142.194053][ T8947] ipt_REJECT: ECHOREPLY no longer supported. [ 142.207144][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 142.268475][ T8963] vcan0: tx address claim with dlc 1 [ 142.525518][ T8971] syzkaller0: entered promiscuous mode [ 142.561908][ T8971] syzkaller0: entered allmulticast mode [ 142.910508][ T8995] netlink: 'syz.2.833': attribute type 11 has an invalid length. [ 143.153303][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 143.320399][ T9020] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 143.341904][ T9020] netlink: 'syz.0.839': attribute type 2 has an invalid length. [ 143.365355][ T9021] openvswitch: netlink: EtherType 50a is less than min 600 [ 143.379687][ T9020] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 144.312635][ T9065] bond4 (unregistering): Released all slaves [ 144.921984][ T9093] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 145.193826][ T9101] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 145.246835][ T9101] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 146.399463][ T9152] openvswitch: netlink: Message has 1 unknown bytes. [ 146.408909][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.422979][ T9152] __nla_validate_parse: 13 callbacks suppressed [ 146.422991][ T9152] netlink: 96 bytes leftover after parsing attributes in process `syz.2.875'. [ 146.438808][ T9152] 8021q: VLANs not supported on ip_vti0 [ 148.251200][ T9105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.275175][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 148.466394][ T9161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.742843][ T9177] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 148.895858][ T9188] Cannot find map_set index 65533 as target [ 148.904770][ T9181] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 148.957564][ T9181] bond2 (unregistering): Released all slaves [ 149.062635][ T9177] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.353706][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 149.560725][ T9220] pim6reg: entered allmulticast mode [ 149.608054][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 149.644686][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 149.657486][ T9229] netlink: 2 bytes leftover after parsing attributes in process `syz.2.896'. [ 149.670654][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 149.698533][ T9229] netlink: 2 bytes leftover after parsing attributes in process `syz.2.896'. [ 149.771972][ T9233] erspan0: entered promiscuous mode [ 149.994734][ T9251] netlink: 256 bytes leftover after parsing attributes in process `syz.3.903'. [ 150.030341][ T9251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.903'. [ 150.122562][ T9259] syzkaller0: entered promiscuous mode [ 150.131954][ T9259] syzkaller0: entered allmulticast mode [ 150.146420][ T9259] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 150.171702][ T9259] veth0_vlan: left promiscuous mode [ 150.193679][ T9259] veth0_vlan: entered promiscuous mode [ 150.219315][ T9259] team0: Device veth0_vlan failed to register rx_handler [ 151.013500][ T9312] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 151.110048][ T9314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.280117][ T9308] syz.0.914 (9308) used greatest stack depth: 17784 bytes left [ 151.439081][ T9309] syz.0.914 (9309) used greatest stack depth: 17560 bytes left [ 151.517060][ T9347] __nla_validate_parse: 2 callbacks suppressed [ 151.517079][ T9347] netlink: 56 bytes leftover after parsing attributes in process `syz.2.921'. [ 151.550793][ T9343] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 151.643478][ T5490] veth1_macvtap: left promiscuous mode [ 151.776116][ T9334] vlan0: entered promiscuous mode [ 151.803807][ T9351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.922'. [ 152.122266][ T9381] wg1: entered promiscuous mode [ 152.144185][ T9381] wg1: entered allmulticast mode [ 152.417071][ T9396] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 152.487539][ T9396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.594966][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 152.818880][ T9416] veth3: entered promiscuous mode [ 152.834789][ T9416] veth3: entered allmulticast mode [ 153.027618][ T9433] netlink: 156 bytes leftover after parsing attributes in process `syz.2.941'. [ 153.058154][ T9433] netlink: 156 bytes leftover after parsing attributes in process `syz.2.941'. [ 153.375278][ T9403] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 153.618567][ T9458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.946'. [ 154.092123][ T9485] bond0: (slave bridge_slave_1): Releasing backup interface [ 154.119147][ T9485] bond0: (slave bridge_slave_1): the permanent HWaddr of slave - 86:a8:ed:43:2e:d6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 154.144314][ T9485] bond0: (slave bond_slave_1): Releasing backup interface [ 154.155819][ T9485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.185169][ T9493] tap0: tun_chr_ioctl cmd 1074025678 [ 154.192823][ T9493] tap0: group set to 0 [ 154.236967][ T9488] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 154.509584][ T9512] netlink: 'syz.2.963': attribute type 8 has an invalid length. [ 154.531045][ T5846] Bluetooth: hci0: command 0x080f tx timeout [ 154.544563][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 154.566699][ T9516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.965'. [ 154.591775][ T9512] bond0: entered promiscuous mode [ 154.599889][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 154.620825][ T9512] geneve3: entered promiscuous mode [ 154.628902][ T9512] ip6gretap0: entered promiscuous mode [ 154.636260][ T9512] debugfs: 'hsr1' already exists in 'hsr' [ 154.642536][ T9512] Cannot create hsr debugfs directory [ 154.648030][ T9512] hsr1: entered promiscuous mode [ 155.015919][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.971'. [ 155.124947][ T9542] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.142820][ T9538] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.404034][ T9552] sctp: [Deprecated]: syz.3.972 (pid 9552) Use of int in max_burst socket option. [ 155.404034][ T9552] Use struct sctp_assoc_value instead [ 155.736605][ T8772] IPVS: starting estimator thread 0... [ 155.840293][ T9570] IPVS: using max 30 ests per chain, 72000 per kthread [ 155.906221][ T9577] syzkaller1: entered promiscuous mode [ 155.912201][ T9577] syzkaller1: entered allmulticast mode [ 156.309503][ T9596] Cannot find add_set index 2 as target [ 156.369334][ T9598] ieee802154 phy0 wpan0: encryption failed: -90 [ 156.645070][ T9602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.686173][ T9604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.788356][ T9629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.797167][ T9629] IPv6: NLM_F_CREATE should be set when creating new route [ 156.804672][ T9629] IPv6: NLM_F_CREATE should be set when creating new route [ 156.910017][ T9634] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 156.918652][ T9631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.930410][ T9634] tipc: Started in network mode [ 156.949235][ T9634] tipc: Node identity 340008, cluster identity 4711 [ 156.961624][ T9634] tipc: Node number set to 3407880 [ 157.119711][ T9649] netlink: 'syz.3.1008': attribute type 39 has an invalid length. [ 157.155379][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.200058][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.234578][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.267938][ T9654] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 157.284590][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.295721][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.306037][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.316498][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.327442][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.500458][ T9648] net_ratelimit: 1235 callbacks suppressed [ 157.500478][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.524898][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.535136][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.545558][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.555955][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.566493][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.577118][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.587207][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.597655][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.607696][ T9648] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 158.625426][ T9654] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 159.092952][ T9695] __nla_validate_parse: 8 callbacks suppressed [ 159.092971][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 159.142143][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1022'. [ 159.197325][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 159.226907][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 159.642026][ T9724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1033'. [ 159.816447][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 159.826289][ T9728] syzkaller0: entered promiscuous mode [ 159.837242][ T9728] syzkaller0: entered allmulticast mode [ 159.845266][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 159.859998][ T9728] xt_CONNSECMARK: invalid mode: 0 [ 159.875211][ T9732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.007823][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 160.125133][ T9749] netlink: 'syz.2.1041': attribute type 21 has an invalid length. [ 160.134426][ T1137] smc: removing ib device syz2 [ 160.162345][ T5910] vxcan1 speed is unknown, defaulting to 1000 [ 160.171321][ T9751] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1042'. [ 160.184321][ T9749] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1041'. [ 160.187038][ T9748] tipc: Enabled bearer , priority 0 [ 160.193835][ T5910] syz2: Port: 1 Link DOWN [ 160.254601][ T9748] syzkaller0: entered promiscuous mode [ 160.300338][ T9748] syzkaller0: entered allmulticast mode [ 160.418553][ T9749] tipc: Resetting bearer [ 160.440131][ T9747] tipc: Resetting bearer [ 160.521163][ T9747] tipc: Disabling bearer [ 160.570868][ T9775] tipc: Enabling of bearer rejected, failed to enable media [ 162.332698][ T9840] netlink: 'syz.1.1059': attribute type 21 has an invalid length. [ 162.408166][ T9845] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 162.949413][ T9854] bond5 (unregistering): Released all slaves [ 163.294257][ T9888] xt_hashlimit: max too large, truncated to 1048576 [ 163.335286][ T9884] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 163.348865][ T9893] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.949541][ T9924] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 164.055468][ T9904] trusted_key: syz.1.1069 sent an empty control message without MSG_MORE. [ 164.086863][ T9924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.123774][ T9929] bond2: (slave veth0_to_bond): making interface the new active one [ 164.130686][ T9924] __nla_validate_parse: 8 callbacks suppressed [ 164.130706][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 164.148343][ T9929] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 164.160621][ T9883] x_tables: duplicate entry at hook 3 [ 164.169239][ T9931] bond2: entered promiscuous mode [ 164.177093][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 164.201334][ T9931] veth0_to_bond: entered promiscuous mode [ 164.223091][ T9931] bond2: entered allmulticast mode [ 164.239129][ T9931] veth0_to_bond: entered allmulticast mode [ 164.282073][ T9924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.411366][ T9938] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 164.447873][ T9938] bond6 (unregistering): Released all slaves [ 164.585345][ T9957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1081'. [ 164.605819][ T9957] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1081'. [ 164.645292][ T9957] netlink: 'syz.0.1081': attribute type 5 has an invalid length. [ 164.672845][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 164.702376][ T9957] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1081'. [ 164.776858][ T9963] ipvlan2: entered allmulticast mode [ 164.812412][ T9963] syz_tun: entered allmulticast mode [ 164.970713][ T9984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.696304][ T9964] syzkaller0: entered promiscuous mode [ 165.710483][ T9964] syzkaller0: entered allmulticast mode [ 167.926162][T10002] tipc: Started in network mode [ 167.931451][T10002] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 167.938749][T10002] tipc: Enabled bearer , priority 24 [ 168.209673][T10032] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1091'. [ 168.233388][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 168.245921][T10036] netlink: 'syz.3.1092': attribute type 11 has an invalid length. [ 168.283630][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 168.288272][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 168.527157][T10046] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 168.620111][T10052] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 168.631025][T10047] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 168.678368][T10046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.731310][T10046] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 168.779530][T10057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.804504][T10058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.817173][T10058] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 168.828991][T10058] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 168.851814][T10058] bond6: (slave xfrm1): making interface the new active one [ 168.875774][T10058] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 168.902486][T10052] batadv0: entered promiscuous mode [ 168.917586][T10052] batadv0: entered allmulticast mode [ 168.949093][T10052] bond0: (slave batadv0): Releasing backup interface [ 168.977518][T10052] bridge0: port 1(batadv0) entered blocking state [ 168.998460][T10052] bridge0: port 1(batadv0) entered disabled state [ 169.094505][T10084] net_ratelimit: 4571 callbacks suppressed [ 169.094526][T10084] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 169.141563][ T8777] tipc: Node number set to 10005162 [ 169.194882][T10084] sctp: [Deprecated]: syz.4.1099 (pid 10084) Use of int in maxseg socket option. [ 169.194882][T10084] Use struct sctp_assoc_value instead [ 169.446228][T10095] __nla_validate_parse: 7 callbacks suppressed [ 169.446245][T10095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'. [ 169.550512][ T83] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 169.561520][ T83] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 169.799682][T10117] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1110'. [ 170.113711][T10130] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 170.149474][T10130] bond4 (unregistering): Released all slaves [ 170.363526][T10152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1119'. [ 170.398817][T10154] tipc: Enabling of bearer rejected, failed to enable media [ 170.449606][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 170.509295][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 170.802980][T10174] syzkaller0: entered promiscuous mode [ 170.827778][T10174] syzkaller0: entered allmulticast mode [ 170.839362][T10182] netlink: 'syz.3.1129': attribute type 11 has an invalid length. [ 170.946912][T10174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1126'. [ 171.060111][T10174] bond0: entered promiscuous mode [ 171.084413][T10174] bond_slave_0: entered promiscuous mode [ 171.095684][T10202] netlink: 'syz.3.1132': attribute type 16 has an invalid length. [ 171.113612][T10174] bond_slave_1: entered promiscuous mode [ 171.131068][T10202] netlink: 'syz.3.1132': attribute type 17 has an invalid length. [ 171.157572][T10174] bond0: left promiscuous mode [ 171.178349][T10174] bond_slave_0: left promiscuous mode [ 171.185476][T10174] bond_slave_1: left promiscuous mode [ 171.216502][T10202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.237449][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 171.393537][T10210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1135'. [ 171.406461][T10210] sit0: entered promiscuous mode [ 171.418609][T10210] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 171.428420][T10210] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1135'. [ 171.544729][T10219] lo: entered allmulticast mode [ 171.611641][T10219] tunl0: entered allmulticast mode [ 171.621406][T10219] gre0: entered allmulticast mode [ 171.650363][T10219] gretap0: entered allmulticast mode [ 171.677953][T10219] erspan0: entered allmulticast mode [ 171.691784][T10219] ip_vti0: entered allmulticast mode [ 171.698908][T10219] ip6_vti0: entered allmulticast mode [ 171.705954][T10219] sit0: entered allmulticast mode [ 171.722816][T10219] ip6tnl0: entered allmulticast mode [ 171.739603][T10219] ip6gre0: entered allmulticast mode [ 171.767364][T10219] syz_tun: entered allmulticast mode [ 171.788825][T10219] ip6gretap0: entered allmulticast mode [ 171.803389][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 171.822120][T10219] bridge0: entered allmulticast mode [ 171.843865][T10219] vcan0: entered allmulticast mode [ 171.853755][T10219] bond0: entered allmulticast mode [ 171.867417][T10219] dummy0: entered allmulticast mode [ 171.883538][T10219] nlmon0: entered allmulticast mode [ 171.893591][T10219] caif0: entered allmulticast mode [ 171.898963][T10219] batadv0: entered allmulticast mode [ 171.914360][T10219] vxcan0: entered allmulticast mode [ 171.921114][T10219] vxcan1: entered allmulticast mode [ 171.927299][T10219] veth0: entered allmulticast mode [ 171.937692][T10219] veth1: entered allmulticast mode [ 171.945800][T10219] wg0: entered allmulticast mode [ 171.953501][T10219] wg1: entered allmulticast mode [ 171.961624][T10219] wg2: entered allmulticast mode [ 171.968025][T10219] veth1_to_bridge: entered allmulticast mode [ 171.977312][T10219] bridge_slave_1: entered allmulticast mode [ 171.983489][T10219] veth0_to_bond: entered allmulticast mode [ 171.989482][T10219] bond_slave_0: entered allmulticast mode [ 171.997131][T10219] veth1_to_bond: entered allmulticast mode [ 172.005092][T10219] bond_slave_1: entered allmulticast mode [ 172.011775][T10219] veth0_to_team: entered allmulticast mode [ 172.020957][T10219] team_slave_0: entered allmulticast mode [ 172.027174][T10219] veth1_to_team: entered allmulticast mode [ 172.035955][T10219] team_slave_1: entered allmulticast mode [ 172.042591][T10219] veth0_to_batadv: entered allmulticast mode [ 172.052043][T10219] batadv_slave_0: entered allmulticast mode [ 172.061601][T10219] veth1_to_batadv: entered allmulticast mode [ 172.082843][T10219] batadv_slave_1: entered allmulticast mode [ 172.104060][T10219] xfrm0: entered allmulticast mode [ 172.113025][T10219] veth0_to_hsr: entered allmulticast mode [ 172.123538][T10219] hsr_slave_0: entered allmulticast mode [ 172.131875][T10219] veth1_to_hsr: entered allmulticast mode [ 172.141136][T10219] hsr_slave_1: entered allmulticast mode [ 172.149630][T10219] hsr0: entered allmulticast mode [ 172.158606][T10219] veth1_virt_wifi: entered allmulticast mode [ 172.176524][T10219] veth0_virt_wifi: entered allmulticast mode [ 172.186834][T10219] virt_wifi0: entered allmulticast mode [ 172.195486][T10219] veth1_vlan: entered allmulticast mode [ 172.204530][T10219] veth0_vlan: entered allmulticast mode [ 172.214648][T10219] vlan0: entered allmulticast mode [ 172.220033][T10219] vlan1: entered allmulticast mode [ 172.228108][T10219] macvlan0: entered allmulticast mode [ 172.239916][T10219] macvlan1: entered allmulticast mode [ 172.247325][T10219] ipvlan0: entered allmulticast mode [ 172.253748][T10219] ipvlan1: entered allmulticast mode [ 172.259398][T10219] veth0_macvtap: entered allmulticast mode [ 172.267743][T10219] macvtap0: entered allmulticast mode [ 172.275481][T10219] geneve0: entered allmulticast mode [ 172.283824][T10219] geneve1: entered allmulticast mode [ 172.292162][T10219] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 172.303819][T10219] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 172.316276][T10219] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 172.329061][T10219] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 172.338115][T10219] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 172.345621][T10219] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 172.353105][T10219] vxlan0: entered allmulticast mode [ 172.359300][T10219] vxlan1: entered allmulticast mode [ 172.366853][T10219] gre1: entered allmulticast mode [ 172.373765][T10219] bond1: left promiscuous mode [ 172.378718][T10219] bridge1: left promiscuous mode [ 172.384095][T10219] bond1: entered allmulticast mode [ 172.389354][T10219] bridge1: entered allmulticast mode [ 172.397378][T10219] geneve2: left promiscuous mode [ 172.404463][T10219] bond2: left promiscuous mode [ 172.409290][T10219] bond2: entered allmulticast mode [ 172.415472][T10219] sit1: entered allmulticast mode [ 172.421410][T10219] bond3: left promiscuous mode [ 172.426214][T10219] ip6gre1: left promiscuous mode [ 172.431805][T10219] bond3: entered allmulticast mode [ 172.437054][T10219] ip6gre1: entered allmulticast mode [ 172.445072][T10219] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 172.453164][T10219] sit2: entered allmulticast mode [ 172.472650][T10219] bridge2: entered allmulticast mode [ 172.479388][T10219] veth2: entered allmulticast mode [ 172.485406][T10219] veth3: left promiscuous mode [ 172.490986][T10219] ipip0: entered allmulticast mode [ 172.496496][T10219] bridge3: entered allmulticast mode [ 172.505829][T10219] bridge4: entered allmulticast mode [ 172.512860][T10219] gtp0: entered allmulticast mode [ 172.518209][T10219] sit3: entered allmulticast mode [ 172.536336][T10219] gtp1: entered allmulticast mode [ 172.542800][T10219] gtp2: entered allmulticast mode [ 172.688317][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 172.716022][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.750671][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 172.772147][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.915569][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 172.957795][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.008330][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 173.049655][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.172486][T10273] syzkaller0: entered promiscuous mode [ 173.202919][T10273] syzkaller0: entered allmulticast mode [ 173.360146][T10305] netlink: zone id is out of range [ 173.394341][T10305] netlink: zone id is out of range [ 173.414051][T10305] netlink: zone id is out of range [ 173.431315][T10308] netlink: 'syz.2.1151': attribute type 8 has an invalid length. [ 173.441094][T10305] netlink: zone id is out of range [ 173.636133][T10305] netlink: set zone limit has 4 unknown bytes [ 173.669664][T10314] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 173.817114][T10314] bond6: entered promiscuous mode [ 173.823808][T10314] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.874163][T10322] macvtap1: entered allmulticast mode [ 174.034646][T10314] bond6: (slave bridge8): making interface the new active one [ 174.064312][T10314] bridge8: entered promiscuous mode [ 174.085522][T10314] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 174.180539][T10343] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 174.188646][T10343] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 174.208232][T10322] tipc: Resetting bearer [ 174.249515][T10340] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 174.406378][T10355] netlink: 'syz.4.1162': attribute type 3 has an invalid length. [ 174.699025][T10367] netlink: 'syz.4.1164': attribute type 11 has an invalid length. [ 174.746911][T10367] __nla_validate_parse: 9 callbacks suppressed [ 174.746931][T10367] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1164'. [ 174.913023][T10392] tipc: Can't bind to reserved service type 1 [ 175.084323][T10382] syzkaller0: entered promiscuous mode [ 175.109291][T10382] syzkaller0: entered allmulticast mode [ 177.910847][T10444] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 177.951475][T10444] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 178.004358][T10453] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.006678][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'. [ 178.782874][T10493] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 178.947991][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1192'. [ 178.963088][T10500] tipc: Enabling of bearer rejected, failed to enable media [ 179.238652][T10512] tipc: Resetting bearer [ 179.323803][T10512] tipc: Disabling bearer [ 179.346230][T10518] block nbd0: Unsupported socket: should be TCP or UNIX. [ 179.543658][T10512] team0: Port device vlan0 removed [ 179.792867][T10539] vlan2: entered allmulticast mode [ 179.819828][T10540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1201'. [ 179.857710][T10539] bond0: entered allmulticast mode [ 179.865853][T10539] geneve3: entered allmulticast mode [ 179.874162][T10535] syzkaller1: entered promiscuous mode [ 179.880045][T10535] syzkaller1: entered allmulticast mode [ 179.916675][T10540]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.975185][T10540]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.021627][T10540]  (unregistering): Released all slaves [ 180.492118][T10570] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 180.521988][T10570] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 180.776009][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1213'. [ 181.031804][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 181.173226][T10613] nbd: must specify a device to reconfigure [ 181.275552][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 181.382675][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 181.540843][T10635] xt_hashlimit: size too large, truncated to 1048576 [ 181.906386][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1234'. [ 182.192775][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 182.250093][T10662] syzkaller1: entered promiscuous mode [ 182.259623][T10662] syzkaller1: entered allmulticast mode [ 182.300609][T10664] vlan2: entered promiscuous mode [ 182.330377][T10664] bridge0: entered promiscuous mode [ 182.457284][T10678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1241'. [ 182.475919][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 182.683011][T10679] syzkaller0: entered promiscuous mode [ 182.689132][T10679] syzkaller0: entered allmulticast mode [ 182.697975][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 182.943650][T10705] netlink: 'syz.4.1249': attribute type 7 has an invalid length. [ 182.954239][T10705] netlink: 'syz.4.1249': attribute type 8 has an invalid length. [ 184.040936][ T5910] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 184.068690][ T5910] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 185.926075][T10701] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 185.934014][T10704] __nla_validate_parse: 2 callbacks suppressed [ 185.934031][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 186.318798][T10741] bond0: entered promiscuous mode [ 186.364919][T10741] batadv0: entered promiscuous mode [ 186.402602][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 186.421653][T10741] debugfs: 'hsr1' already exists in 'hsr' [ 186.457767][T10741] Cannot create hsr debugfs directory [ 186.485368][T10741] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 186.531601][T10741] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 186.570990][T10741] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 186.608482][T10741] bond0: left promiscuous mode [ 186.631932][T10741] batadv0: left promiscuous mode [ 186.758243][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.780061][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.790535][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.875931][T10756] lo speed is unknown, defaulting to 1000 [ 187.316944][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 187.575210][ T76] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.584782][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 187.787992][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 187.798744][T10760] mpoa:mpoad_close: () going down [ 187.808380][T10809] openvswitch: netlink: Missing key (keys=40, expected=80) [ 187.816531][ T76] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.036622][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.068878][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.098487][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.161268][T10823] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1274'. [ 188.174589][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.215613][T10824] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.249673][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.284453][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.301241][T10817] netlink: 'syz.3.1273': attribute type 29 has an invalid length. [ 188.353767][ T8769] ================================================================== [ 188.361978][ T8769] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 188.369898][ T8769] Read of size 8 at addr ffff888059634ec0 by task kworker/0:9/8769 [ 188.377796][ T8769] [ 188.380162][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 188.380184][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 188.380195][ T8769] Workqueue: mld mld_ifc_work [ 188.380235][ T8769] Call Trace: [ 188.380247][ T8769] [ 188.380253][ T8769] dump_stack_lvl+0xe8/0x150 [ 188.380275][ T8769] print_report+0xba/0x230 [ 188.380291][ T8769] ? sock_def_readable+0x1cb/0x550 [ 188.380305][ T8769] kasan_report+0x117/0x150 [ 188.380319][ T8769] ? sock_def_readable+0x1cb/0x550 [ 188.380336][ T8769] sock_def_readable+0x1cb/0x550 [ 188.380350][ T8769] ? sock_def_readable+0xae/0x550 [ 188.380364][ T8769] ? send_to_lecd+0x26d/0x830 [ 188.380379][ T8769] send_to_lecd+0x3e7/0x830 [ 188.380396][ T8769] lec_start_xmit+0xe52/0x2890 [ 188.380415][ T8769] dev_hard_start_xmit+0x2cd/0x830 [ 188.380433][ T8769] sch_direct_xmit+0x251/0x4c0 [ 188.380453][ T8769] ? __pfx_sch_direct_xmit+0x10/0x10 [ 188.380472][ T8769] __dev_queue_xmit+0x180f/0x3950 [ 188.380488][ T8769] ? __dev_queue_xmit+0x2b6/0x3950 [ 188.380506][ T8769] ? __pfx___dev_queue_xmit+0x10/0x10 [ 188.380519][ T8769] ? neigh_resolve_output+0x438/0x750 [ 188.380536][ T8769] ? eth_header+0x11b/0x200 [ 188.380548][ T8769] ? __asan_memcpy+0x40/0x70 [ 188.380573][ T8769] ? ip6_output+0x126/0x550 [ 188.380589][ T8769] ip6_output+0x340/0x550 [ 188.380604][ T8769] ? __pfx_ip6_output+0x10/0x10 [ 188.380620][ T8769] NF_HOOK+0x177/0x4f0 [ 188.380638][ T8769] ? __pfx_NF_HOOK+0x10/0x10 [ 188.380653][ T8769] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 188.380667][ T8769] ? __local_bh_enable_ip+0xd0/0x130 [ 188.380685][ T8769] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.380701][ T8769] ? __local_bh_enable_ip+0xd0/0x130 [ 188.380717][ T8769] ? icmp6_dst_alloc+0x3a6/0x440 [ 188.380735][ T8769] mld_sendpack+0x8b4/0xe40 [ 188.380757][ T8769] ? mld_sendpack+0x213/0xe40 [ 188.380771][ T8769] ? __pfx_mld_sendpack+0x10/0x10 [ 188.380794][ T8769] mld_ifc_work+0x835/0xe70 [ 188.380811][ T8769] ? process_scheduled_works+0xa70/0x1860 [ 188.380829][ T8769] process_scheduled_works+0xb5d/0x1860 [ 188.380859][ T8769] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.380879][ T8769] ? assign_work+0x3d5/0x5e0 [ 188.380896][ T8769] worker_thread+0xa53/0xfc0 [ 188.380923][ T8769] kthread+0x388/0x470 [ 188.380936][ T8769] ? __pfx_worker_thread+0x10/0x10 [ 188.380953][ T8769] ? __pfx_kthread+0x10/0x10 [ 188.380966][ T8769] ret_from_fork+0x514/0xb70 [ 188.380988][ T8769] ? __pfx_ret_from_fork+0x10/0x10 [ 188.381007][ T8769] ? __switch_to+0xc79/0x1410 [ 188.381023][ T8769] ? __pfx_kthread+0x10/0x10 [ 188.381036][ T8769] ret_from_fork_asm+0x1a/0x30 [ 188.381065][ T8769] [ 188.381070][ T8769] [ 188.640984][ T8769] Allocated by task 10731: [ 188.645391][ T8769] kasan_save_track+0x3e/0x80 [ 188.650066][ T8769] __kasan_slab_alloc+0x6c/0x80 [ 188.654899][ T8769] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 188.660806][ T8769] sock_alloc_inode+0x2c/0x190 [ 188.665556][ T8769] alloc_inode+0x6a/0x1b0 [ 188.669871][ T8769] __sock_create+0x12d/0x9d0 [ 188.674498][ T8769] __sys_socket+0xd6/0x1b0 [ 188.678939][ T8769] __x64_sys_socket+0x7a/0x90 [ 188.683618][ T8769] do_syscall_64+0x15f/0xf80 [ 188.688207][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.694089][ T8769] [ 188.696397][ T8769] Freed by task 5195: [ 188.700363][ T8769] kasan_save_track+0x3e/0x80 [ 188.705032][ T8769] kasan_save_free_info+0x46/0x50 [ 188.710041][ T8769] __kasan_slab_free+0x5c/0x80 [ 188.714795][ T8769] kmem_cache_free+0x180/0x630 [ 188.719724][ T8769] rcu_core+0x7cd/0x1070 [ 188.723959][ T8769] handle_softirqs+0x22a/0x840 [ 188.728720][ T8769] __irq_exit_rcu+0xca/0x220 [ 188.733410][ T8769] irq_exit_rcu+0x9/0x30 [ 188.737728][ T8769] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 188.743432][ T8769] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.749441][ T8769] [ 188.751764][ T8769] Last potentially related work creation: [ 188.757457][ T8769] kasan_save_stack+0x3e/0x60 [ 188.762233][ T8769] kasan_record_aux_stack+0xbd/0xd0 [ 188.767564][ T8769] call_rcu+0xee/0x890 [ 188.771690][ T8769] evict+0x95b/0xb10 [ 188.775584][ T8769] __dentry_kill+0x1a2/0x5e0 [ 188.780353][ T8769] finish_dput+0xc9/0x480 [ 188.785037][ T8769] __fput+0x691/0xa60 [ 188.789340][ T8769] task_work_run+0x1d9/0x270 [ 188.793962][ T8769] get_signal+0x11eb/0x1330 [ 188.798576][ T8769] arch_do_signal_or_restart+0xbc/0x830 [ 188.804404][ T8769] exit_to_user_mode_loop+0x86/0x480 [ 188.809825][ T8769] do_syscall_64+0x33e/0xf80 [ 188.814721][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.820613][ T8769] [ 188.822965][ T8769] The buggy address belongs to the object at ffff888059634e00 [ 188.822965][ T8769] which belongs to the cache sock_inode_cache of size 1408 [ 188.837729][ T8769] The buggy address is located 192 bytes inside of [ 188.837729][ T8769] freed 1408-byte region [ffff888059634e00, ffff888059635380) [ 188.851704][ T8769] [ 188.854025][ T8769] The buggy address belongs to the physical page: [ 188.860433][ T8769] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59630 [ 188.869213][ T8769] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 188.877705][ T8769] memcg:ffff88802919df01 [ 188.881935][ T8769] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 188.889569][ T8769] page_type: f5(slab) [ 188.893540][ T8769] raw: 00fff00000000040 ffff88801f6c2000 dead000000000100 dead000000000122 [ 188.902138][ T8769] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88802919df01 [ 188.910728][ T8769] head: 00fff00000000040 ffff88801f6c2000 dead000000000100 dead000000000122 [ 188.919387][ T8769] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88802919df01 [ 188.928069][ T8769] head: 00fff00000000003 ffffea0001658c01 00000000ffffffff 00000000ffffffff [ 188.936739][ T8769] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 188.945435][ T8769] page dumped because: kasan: bad access detected [ 188.951870][ T8769] page_owner tracks the page as allocated [ 188.957574][ T8769] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 74314560441, free_ts 21266364128 [ 188.980743][ T8769] post_alloc_hook+0x231/0x280 [ 188.985516][ T8769] get_page_from_freelist+0x24dc/0x2580 [ 188.991045][ T8769] __alloc_frozen_pages_noprof+0x18d/0x380 [ 188.996967][ T8769] allocate_slab+0x77/0x660 [ 189.001473][ T8769] refill_objects+0x331/0x3c0 [ 189.006225][ T8769] __pcs_replace_empty_main+0x2e6/0x730 [ 189.011842][ T8769] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 189.017639][ T8769] sock_alloc_inode+0x2c/0x190 [ 189.022393][ T8769] alloc_inode+0x6a/0x1b0 [ 189.026721][ T8769] __sock_create+0x12d/0x9d0 [ 189.031308][ T8769] __sys_socket+0xd6/0x1b0 [ 189.035824][ T8769] __x64_sys_socket+0x7a/0x90 [ 189.040530][ T8769] do_syscall_64+0x15f/0xf80 [ 189.045140][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.051120][ T8769] page last free pid 1 tgid 1 stack trace: [ 189.056911][ T8769] __free_frozen_pages+0xc2b/0xdb0 [ 189.062067][ T8769] free_contig_range+0xbb/0x170 [ 189.066948][ T8769] destroy_args+0x4e5/0x570 [ 189.071468][ T8769] debug_vm_pgtable+0x3f8/0x410 [ 189.076338][ T8769] do_one_initcall+0x250/0x870 [ 189.081098][ T8769] do_initcall_level+0x104/0x190 [ 189.086130][ T8769] do_initcalls+0x59/0xa0 [ 189.090562][ T8769] kernel_init_freeable+0x2a6/0x3e0 [ 189.095770][ T8769] kernel_init+0x1d/0x1d0 [ 189.100199][ T8769] ret_from_fork+0x514/0xb70 [ 189.104808][ T8769] ret_from_fork_asm+0x1a/0x30 [ 189.109574][ T8769] [ 189.111883][ T8769] Memory state around the buggy address: [ 189.117516][ T8769] ffff888059634d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.125585][ T8769] ffff888059634e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.133637][ T8769] >ffff888059634e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.141766][ T8769] ^ [ 189.147933][ T8769] ffff888059634f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.156088][ T8769] ffff888059634f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.164167][ T8769] ================================================================== [ 189.172243][ T8769] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.179475][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 189.189071][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.199592][ T8769] Workqueue: mld mld_ifc_work [ 189.204375][ T8769] Call Trace: [ 189.207653][ T8769] [ 189.210592][ T8769] vpanic+0x56c/0xa60 [ 189.214683][ T8769] ? __pfx_vpanic+0x10/0x10 [ 189.219243][ T8769] panic+0xc5/0xd0 [ 189.223003][ T8769] ? __pfx_panic+0x10/0x10 [ 189.227431][ T8769] ? sock_def_readable+0x1cb/0x550 [ 189.232558][ T8769] ? rcu_is_watching+0x15/0xb0 [ 189.237338][ T8769] ? sock_def_readable+0x1cb/0x550 [ 189.242443][ T8769] ? sock_def_readable+0x1cb/0x550 [ 189.247543][ T8769] check_panic_on_warn+0x89/0xb0 [ 189.252469][ T8769] ? sock_def_readable+0x1cb/0x550 [ 189.257567][ T8769] end_report+0x73/0x170 [ 189.261814][ T8769] ? sock_def_readable+0x1cb/0x550 [ 189.266942][ T8769] kasan_report+0x128/0x150 [ 189.271457][ T8769] ? sock_def_readable+0x1cb/0x550 [ 189.276563][ T8769] sock_def_readable+0x1cb/0x550 [ 189.282229][ T8769] ? sock_def_readable+0xae/0x550 [ 189.287364][ T8769] ? send_to_lecd+0x26d/0x830 [ 189.292063][ T8769] send_to_lecd+0x3e7/0x830 [ 189.296584][ T8769] lec_start_xmit+0xe52/0x2890 [ 189.301368][ T8769] dev_hard_start_xmit+0x2cd/0x830 [ 189.306581][ T8769] sch_direct_xmit+0x251/0x4c0 [ 189.311368][ T8769] ? __pfx_sch_direct_xmit+0x10/0x10 [ 189.316666][ T8769] __dev_queue_xmit+0x180f/0x3950 [ 189.321773][ T8769] ? __dev_queue_xmit+0x2b6/0x3950 [ 189.326909][ T8769] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.332424][ T8769] ? neigh_resolve_output+0x438/0x750 [ 189.337868][ T8769] ? eth_header+0x11b/0x200 [ 189.342365][ T8769] ? __asan_memcpy+0x40/0x70 [ 189.347080][ T8769] ? ip6_output+0x126/0x550 [ 189.351601][ T8769] ip6_output+0x340/0x550 [ 189.355965][ T8769] ? __pfx_ip6_output+0x10/0x10 [ 189.360819][ T8769] NF_HOOK+0x177/0x4f0 [ 189.365002][ T8769] ? __pfx_NF_HOOK+0x10/0x10 [ 189.369608][ T8769] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 189.375424][ T8769] ? __local_bh_enable_ip+0xd0/0x130 [ 189.380760][ T8769] ? lockdep_hardirqs_on+0x7a/0x110 [ 189.386242][ T8769] ? __local_bh_enable_ip+0xd0/0x130 [ 189.391648][ T8769] ? icmp6_dst_alloc+0x3a6/0x440 [ 189.396652][ T8769] mld_sendpack+0x8b4/0xe40 [ 189.401869][ T8769] ? mld_sendpack+0x213/0xe40 [ 189.406647][ T8769] ? __pfx_mld_sendpack+0x10/0x10 [ 189.411690][ T8769] mld_ifc_work+0x835/0xe70 [ 189.416213][ T8769] ? process_scheduled_works+0xa70/0x1860 [ 189.422102][ T8769] process_scheduled_works+0xb5d/0x1860 [ 189.427675][ T8769] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.433734][ T8769] ? assign_work+0x3d5/0x5e0 [ 189.438341][ T8769] worker_thread+0xa53/0xfc0 [ 189.442963][ T8769] kthread+0x388/0x470 [ 189.447062][ T8769] ? __pfx_worker_thread+0x10/0x10 [ 189.452166][ T8769] ? __pfx_kthread+0x10/0x10 [ 189.456745][ T8769] ret_from_fork+0x514/0xb70 [ 189.461325][ T8769] ? __pfx_ret_from_fork+0x10/0x10 [ 189.466425][ T8769] ? __switch_to+0xc79/0x1410 [ 189.471088][ T8769] ? __pfx_kthread+0x10/0x10 [ 189.475665][ T8769] ret_from_fork_asm+0x1a/0x30 [ 189.480434][ T8769] [ 189.483851][ T8769] Kernel Offset: disabled [ 189.488373][ T8769] Rebooting in 86400 seconds..