last executing test programs: 10.079984051s ago: executing program 0 (id=307): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffc1, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x68}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 9.545511824s ago: executing program 2 (id=308): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x1000, r4, 0x0, 0x11000000}, 0x38) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 9.320856937s ago: executing program 0 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 8.663935808s ago: executing program 0 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) 7.300844584s ago: executing program 0 (id=316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a0200000000001801000020207825"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffdc1, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400004}, @in6={0xa, 0x4e22, 0x4, @remote, 0x1}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r5, 0x2, 0x1, "17"}, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r7, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 6.710441412s ago: executing program 4 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000020000008510", @ANYRES32, @ANYBLOB="000000000000100066000200f8ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa1000000000000070100"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xfde1, 0x0, &(0x7f0000000340)="6121eed4cd50bb2f01e841acce1a814914d71400bdb1d1ac5ca929e3b0684cfb459b9a09b267088acae739f9f592037101c2c5e68001317a5109a5d7ee97620fe9e13527aa251f778ed1ce6e95bdb74ce14fb38decb7efeffd37718490c0df9ce524e562c5768aaf9eb9f4637753806a2722be7177b225a3eb61d0c0991a4ccdcfbda41b34e3baad4de494", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) 6.212824512s ago: executing program 1 (id=320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) 5.843189674s ago: executing program 4 (id=321): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8d45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 5.47095237s ago: executing program 1 (id=322): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 5.285717414s ago: executing program 3 (id=323): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000000000000000e000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002c000000000000000000000007000000441c13c1ac14"], 0x50}, 0x0) 4.987723743s ago: executing program 2 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.830289633s ago: executing program 4 (id=325): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="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", 0x5a2, 0x5, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020445, 0x0, 0x0) 4.396989263s ago: executing program 1 (id=326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 3.809583226s ago: executing program 4 (id=327): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x114, 0xe}, {0x18, 0x110, 0xe, "c76a"}], 0x28}, 0x0) close(r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000380)=0x4) ioctl$SIOCGIFHWADDR(r10, 0x8927, &(0x7f0000000100)={'syz_tun\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000240)=@srh={0x3a, 0x8, 0x4, 0x4, 0x6, 0x10, 0x6, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x48) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 3.636467113s ago: executing program 2 (id=328): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='virtio_transport_alloc_pkt\x00', r0, 0x0, 0x8}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000500000000000000800000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200008647c72381bf721c000000008514f14b8a92d9ef00000086753642905c6aa5d5b90c3be0686fdf7d5d8ee61ccc9893d90f5ebaa0226a129837563704c4f4b024416f8472923b30c7162eabaf76a0c4129e6eeefbd515ea991d2778919bf28471ed", @ANYRES32=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010101, 0xffffffffffffffff, "6b15a9b50ce7bd8824bb1b00641f8b8cacd32756ac8bd7c63139fbc5fff344be", 0xe100, 0x1, 0x8e, 0xf}, 0x3c) 3.200367642s ago: executing program 3 (id=329): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x90) 2.657598595s ago: executing program 1 (id=330): socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000000)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0xd3, 0x23, &(0x7f0000000040)="020c0000098011e8", 0x8) 2.657287397s ago: executing program 2 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 2.437143517s ago: executing program 3 (id=332): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) 2.137039082s ago: executing program 4 (id=333): epoll_create(0x7) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$l2tp(0x2, 0x2, 0x73) close(r6) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r9, 0x0, 0xffffffff000) socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, 0x0, 0x0) 1.998018872s ago: executing program 2 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$FIONCLEX(r0, 0x5450) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x0, 0x148, 0x0, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x6c, 0x2, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x129, 0x40000, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x24}}, 0x0) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000000000000008850000008700000085000000a000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) listen(r7, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="0ce34d61d19475fbfdaf7f406525", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000200), 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.780557794s ago: executing program 1 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0, 0x1328}], 0x2, 0x0, 0x0, 0x41}, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.725065375s ago: executing program 3 (id=336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.189265943s ago: executing program 0 (id=337): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="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", 0x5a2, 0x5, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020445, 0x0, 0x0) 922.23086ms ago: executing program 3 (id=338): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 593.223846ms ago: executing program 2 (id=339): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 570.177736ms ago: executing program 0 (id=340): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0x2, 0x5) accept4(r0, 0x0, 0x0, 0x800) 424.440632ms ago: executing program 4 (id=341): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000000)="a347bc83a2f9669c9ce0b409c534a50e0394046aecf1040e9fd3bd76de7777cec25a8da895265a4a4f5a", 0x2a}, {&(0x7f0000000440)}, {&(0x7f0000000540)="194fad0990def5baf56e278df0d61f1e0eafe4f2a3281051dcf1ee90018fd227a633472296c64e2b422a88d7c95c895ed6f6abc1ff67cd13b6879ee6651a397b", 0x40}, {0x0}, {&(0x7f0000000640)}, {0x0}, {&(0x7f0000000a40)}], 0x7}, 0x0) 334.036544ms ago: executing program 1 (id=342): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 0s ago: executing program 3 (id=343): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)='i\f', 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 194.425468][ T5779] cgroup: Unknown subsys name 'net' [ 194.613742][ T5779] cgroup: Unknown subsys name 'cpuset' [ 194.630089][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.688228][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 208.367062][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.376955][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.395268][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.405258][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.410891][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.417022][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.422859][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.435135][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.441398][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.447975][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.452005][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.465237][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.469812][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.477871][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.492957][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.543293][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.560213][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.576991][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.608942][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.626584][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.653975][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.664844][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.678747][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.696097][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.715568][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.327691][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 210.353583][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 210.607360][ T5095] Bluetooth: hci2: command tx timeout [ 210.610706][ T5804] Bluetooth: hci0: command tx timeout [ 210.613229][ T51] Bluetooth: hci1: command tx timeout [ 210.738819][ T5804] Bluetooth: hci3: command tx timeout [ 210.850125][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 210.975023][ T5804] Bluetooth: hci4: command tx timeout [ 211.110223][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 211.435855][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 211.769454][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.777260][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.785237][ T5800] bridge_slave_0: entered allmulticast mode [ 211.795818][ T5800] bridge_slave_0: entered promiscuous mode [ 211.955904][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.967596][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.977781][ T5800] bridge_slave_1: entered allmulticast mode [ 212.000821][ T5800] bridge_slave_1: entered promiscuous mode [ 212.061353][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.071002][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.081934][ T5798] bridge_slave_0: entered allmulticast mode [ 212.105994][ T5798] bridge_slave_0: entered promiscuous mode [ 212.656827][ T5804] Bluetooth: hci2: command tx timeout [ 212.663473][ T5804] Bluetooth: hci0: command tx timeout [ 212.669533][ T5804] Bluetooth: hci1: command tx timeout [ 212.829413][ T5804] Bluetooth: hci3: command tx timeout [ 212.864827][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.873643][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.883610][ T5798] bridge_slave_1: entered allmulticast mode [ 212.909756][ T5798] bridge_slave_1: entered promiscuous mode [ 212.990612][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.118113][ T5804] Bluetooth: hci4: command tx timeout [ 213.247319][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.356878][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.364625][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.372335][ T5795] bridge_slave_0: entered allmulticast mode [ 213.382380][ T5795] bridge_slave_0: entered promiscuous mode [ 213.549463][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.560753][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.568773][ T5795] bridge_slave_1: entered allmulticast mode [ 213.579318][ T5795] bridge_slave_1: entered promiscuous mode [ 213.638607][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.648901][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.656918][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.664755][ T5809] bridge_slave_0: entered allmulticast mode [ 213.674061][ T5809] bridge_slave_0: entered promiscuous mode [ 213.891708][ T5800] team0: Port device team_slave_0 added [ 213.942244][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.955985][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.965984][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.977134][ T5809] bridge_slave_1: entered allmulticast mode [ 213.995942][ T5809] bridge_slave_1: entered promiscuous mode [ 214.188576][ T5800] team0: Port device team_slave_1 added [ 214.310591][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.321876][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.329619][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.337404][ T5811] bridge_slave_0: entered allmulticast mode [ 214.347262][ T5811] bridge_slave_0: entered promiscuous mode [ 214.370299][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.534236][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.541815][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.549933][ T5811] bridge_slave_1: entered allmulticast mode [ 214.559722][ T5811] bridge_slave_1: entered promiscuous mode [ 214.646782][ T5798] team0: Port device team_slave_0 added [ 214.666166][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.716899][ T5795] team0: Port device team_slave_0 added [ 214.763704][ T5804] Bluetooth: hci1: command tx timeout [ 214.763797][ T51] Bluetooth: hci0: command tx timeout [ 214.763903][ T51] Bluetooth: hci2: command tx timeout [ 214.786117][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.793393][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.819804][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.846678][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.864862][ T5798] team0: Port device team_slave_1 added [ 214.882921][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.902892][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.922217][ T51] Bluetooth: hci3: command tx timeout [ 214.961244][ T5795] team0: Port device team_slave_1 added [ 215.084356][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.091478][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.117878][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.132884][ T51] Bluetooth: hci4: command tx timeout [ 215.175119][ T5811] team0: Port device team_slave_0 added [ 215.319437][ T5811] team0: Port device team_slave_1 added [ 215.333435][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.340603][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.368531][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.385405][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.393109][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.419569][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.440468][ T5809] team0: Port device team_slave_0 added [ 215.459819][ T5809] team0: Port device team_slave_1 added [ 215.512192][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.519638][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.548119][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.563302][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.570453][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.597026][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.757459][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.764872][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.791264][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.902935][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.910112][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.936696][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.974553][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.981752][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.008584][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.037082][ T5800] hsr_slave_0: entered promiscuous mode [ 216.046597][ T5800] hsr_slave_1: entered promiscuous mode [ 216.153932][ T5795] hsr_slave_0: entered promiscuous mode [ 216.166990][ T5795] hsr_slave_1: entered promiscuous mode [ 216.176032][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 216.181964][ T5795] Cannot create hsr debugfs directory [ 216.191124][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.198558][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.224993][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.354654][ T5798] hsr_slave_0: entered promiscuous mode [ 216.365639][ T5798] hsr_slave_1: entered promiscuous mode [ 216.374922][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 216.381019][ T5798] Cannot create hsr debugfs directory [ 216.731821][ T5811] hsr_slave_0: entered promiscuous mode [ 216.743327][ T5811] hsr_slave_1: entered promiscuous mode [ 216.751465][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 216.758835][ T5811] Cannot create hsr debugfs directory [ 216.812767][ T51] Bluetooth: hci2: command tx timeout [ 216.818426][ T51] Bluetooth: hci1: command tx timeout [ 216.825748][ T51] Bluetooth: hci0: command tx timeout [ 216.865631][ T5809] hsr_slave_0: entered promiscuous mode [ 216.876001][ T5809] hsr_slave_1: entered promiscuous mode [ 216.885139][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 216.891058][ T5809] Cannot create hsr debugfs directory [ 216.988841][ T5095] Bluetooth: hci3: command tx timeout [ 217.222982][ T5095] Bluetooth: hci4: command tx timeout [ 218.377249][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.424302][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.446581][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.486432][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.617931][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.657140][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.685295][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.765225][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.880262][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.931349][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.001762][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.131784][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.187444][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.259475][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.307529][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.337496][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.690224][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.851305][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.898865][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.910248][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.987017][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.195903][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.233067][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.314466][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.322058][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.455725][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.463579][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.568103][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.656504][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.664165][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.850368][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.858034][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.969099][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.225212][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.354233][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.398395][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.406133][ T3948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.423087][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.430671][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.630988][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.719498][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.846003][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.853673][ T3948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.872934][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.880499][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.084977][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.209455][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.217225][ T3948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.310191][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.317882][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.135755][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.705512][ T5800] veth0_vlan: entered promiscuous mode [ 223.753642][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.850716][ T5800] veth1_vlan: entered promiscuous mode [ 224.217860][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.274105][ T5800] veth0_macvtap: entered promiscuous mode [ 224.377687][ T5800] veth1_macvtap: entered promiscuous mode [ 224.411458][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.702163][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.816730][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.878734][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.934538][ T4238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.961813][ T5798] veth0_vlan: entered promiscuous mode [ 224.993787][ T4238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.034150][ T4238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.081813][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.112221][ T5798] veth1_vlan: entered promiscuous mode [ 225.222216][ T5809] veth0_vlan: entered promiscuous mode [ 225.340251][ T5809] veth1_vlan: entered promiscuous mode [ 225.670890][ T5811] veth0_vlan: entered promiscuous mode [ 225.680718][ T5798] veth0_macvtap: entered promiscuous mode [ 225.739913][ T5798] veth1_macvtap: entered promiscuous mode [ 225.772294][ T5809] veth0_macvtap: entered promiscuous mode [ 225.794776][ T5811] veth1_vlan: entered promiscuous mode [ 225.850499][ T5809] veth1_macvtap: entered promiscuous mode [ 225.957726][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.058981][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.073428][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.137171][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.199726][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.278985][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.341126][ T5811] veth0_macvtap: entered promiscuous mode [ 226.378802][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.435830][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.502152][ T5811] veth1_macvtap: entered promiscuous mode [ 226.518869][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.615092][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.643548][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.664488][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.794135][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.869056][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.006377][ T4238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.054568][ T5795] veth0_vlan: entered promiscuous mode [ 227.082025][ T4238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.138946][ T4238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.188440][ T4238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.256315][ T5795] veth1_vlan: entered promiscuous mode [ 227.661758][ T5795] veth0_macvtap: entered promiscuous mode [ 227.771059][ T5795] veth1_macvtap: entered promiscuous mode [ 228.105771][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.198244][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.319865][ T3922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.377179][ T3922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.393667][ T3922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.409523][ T3979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.162272][ T3948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.170543][ T3948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.455679][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.467523][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.942240][ T5800] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 233.184038][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.192990][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.443056][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.451134][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.669794][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.680997][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.942165][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.953690][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.261012][ T3922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.269644][ T3922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.500311][ T3948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.508648][ T3948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.186226][ T3948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.194908][ T3948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.411435][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.418508][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.440919][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.449789][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.215150][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 237.230084][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 237.329001][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 237.338516][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 237.409239][ T6010] Zero length message leads to an empty skb [ 237.553832][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.206010][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 238.238647][ T1599] IPVS: starting estimator thread 0... [ 238.315979][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 238.360497][ T6023] IPVS: using max 192 ests per chain, 9600 per kthread [ 238.467557][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 239.449602][ T6033] tipc: Started in network mode [ 239.455301][ T6033] tipc: Node identity 9a33d69d91db, cluster identity 4711 [ 239.463785][ T6033] tipc: Enabled bearer , priority 0 [ 239.671394][ T6033] syzkaller0: entered promiscuous mode [ 239.683824][ T6033] syzkaller0: entered allmulticast mode [ 239.810468][ T6025] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 239.815675][ T30] audit: type=1800 audit(1764448433.990:2): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 239.820730][ T6025] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 239.851337][ T6025] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 240.009141][ T6042] tipc: Resetting bearer [ 240.236188][ T6025] syz.3.14 (6025) used greatest stack depth: 2536 bytes left [ 240.359520][ T6032] tipc: Resetting bearer [ 240.549286][ T6032] tipc: Disabling bearer [ 240.623144][ T1599] tipc: Node number set to 199808669 [ 240.769784][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 242.639970][ T6067] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 244.275331][ T6079] netlink: 84 bytes leftover after parsing attributes in process `syz.1.31'. [ 244.356402][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 244.410226][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 245.036891][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 245.920010][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'. [ 246.577764][ T6104] syzkaller0: entered promiscuous mode [ 246.583768][ T6104] syzkaller0: entered allmulticast mode [ 247.493550][ T6112] Bluetooth: MGMT ver 1.23 [ 247.910174][ T6112] can: request_module (can-proto-5) failed. [ 248.397203][ T6119] netlink: 'syz.4.46': attribute type 24 has an invalid length. [ 249.312052][ T6127] netlink: 480 bytes leftover after parsing attributes in process `syz.3.48'. [ 250.887338][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 252.136433][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 252.239470][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 252.290221][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.503813][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.012065][ T6168] netlink: 'syz.1.62': attribute type 3 has an invalid length. [ 254.071626][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.68'. [ 254.121537][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.68'. [ 254.920761][ T6185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.673318][ T6198] netlink: 220 bytes leftover after parsing attributes in process `syz.0.73'. [ 255.682953][ T6198] netlink: 'syz.0.73': attribute type 5 has an invalid length. [ 258.484819][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 258.644374][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 258.647350][ T6235] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 258.780527][ T6238] warning: `syz.4.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 258.910488][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 258.986803][ T6235] netlink: 'syz.4.85': attribute type 10 has an invalid length. [ 259.020553][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.85'. [ 259.199739][ T6241] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 259.321908][ T6241] bond1 (unregistering): Released all slaves [ 259.771966][ T6234] syz.0.84 (6234) used greatest stack depth: 2344 bytes left [ 260.420018][ T6255] netlink: 56 bytes leftover after parsing attributes in process `syz.2.92'. [ 264.867181][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.877557][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.193350][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.226768][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.046110][ T4238] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.077860][ T4238] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.125387][ T4238] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.146647][ T4238] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.359985][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 267.369585][ T6314] bridge_slave_1: left allmulticast mode [ 267.377079][ T6314] bridge_slave_1: left promiscuous mode [ 267.384336][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.499632][ T6314] bridge_slave_0: left allmulticast mode [ 267.506141][ T6314] bridge_slave_0: left promiscuous mode [ 267.514088][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.856888][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 268.706855][ T6325] nbd3: detected capacity change from 0 to 63 [ 268.756022][ T6331] block nbd3: NBD_DISCONNECT [ 268.763610][ T6331] block nbd3: Disconnected due to user request. [ 268.770132][ T6331] block nbd3: shutting down sockets [ 268.932673][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.942186][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 268.950703][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.960247][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 268.968464][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.978038][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 268.986391][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.995946][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 269.033734][ T5981] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.043552][ T5981] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.051804][ T5981] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.061565][ T5981] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.075936][ T5981] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.087113][ T5981] Buffer I/O error on dev nbd3, logical block 2, async page read [ 269.095572][ T5981] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.105161][ T5981] Buffer I/O error on dev nbd3, logical block 3, async page read [ 269.113590][ T5981] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.123465][ T5981] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.131717][ T5981] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.141350][ T5981] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.153791][ T5981] ldm_validate_partition_table(): Disk read failed. [ 269.163799][ T5981] Dev nbd3: unable to read RDB block 0 [ 269.176581][ T5981] nbd3: unable to read partition table [ 269.204898][ T5981] ldm_validate_partition_table(): Disk read failed. [ 269.215249][ T5981] Dev nbd3: unable to read RDB block 0 [ 269.224361][ T5981] nbd3: unable to read partition table [ 271.364977][ T6372] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 271.374825][ T6372] netlink: 'syz.3.129': attribute type 2 has an invalid length. [ 271.805703][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 272.089532][ T6381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.389864][ T6381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.583589][ T6381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.742643][ T6381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.118376][ T4165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.238441][ T3948] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.254060][ T3948] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.317819][ T3948] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.471653][ T6397] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 273.784130][ T6398] tipc: Started in network mode [ 273.789344][ T6398] tipc: Node identity ac14142f, cluster identity 4711 [ 273.798937][ T6398] tipc: New replicast peer: 0.0.0.0 [ 273.807728][ T6398] tipc: Enabled bearer , priority 10 [ 273.835223][ T6400] tipc: New replicast peer: 172.30.1.2 [ 274.051508][ T6403] Illegal XDP return value 4294967262 on prog (id 30) dev N/A, expect packet loss! [ 274.923127][ T42] tipc: Node number set to 2886997039 [ 276.633379][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 276.993582][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 277.712360][ T6441] pim6reg: entered allmulticast mode [ 277.802031][ T6441] pim6reg: left allmulticast mode [ 280.620911][ T6486] syz.2.171 (6486) used obsolete PPPIOCDETACH ioctl [ 284.620671][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.764832][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.181'. [ 285.927250][ T6555] bond1: (slave ip_vti0): Device is not bonding slave [ 285.938242][ T6555] bond1: option active_slave: invalid value (ip_vti0) [ 286.075642][ T6555] bond1 (unregistering): Released all slaves [ 286.174115][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 287.086786][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 289.426021][ T6596] sctp: [Deprecated]: syz.0.215 (pid 6596) Use of int in max_burst socket option. [ 289.426021][ T6596] Use struct sctp_assoc_value instead [ 289.474632][ T6598] Set syz0 is full, maxelem 0 reached [ 289.812900][ T6609] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 290.225422][ T6609] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 290.238161][ T6609] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 290.249691][ T6609] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 291.110880][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 291.273372][ T6629] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 291.281352][ T6629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 291.333204][ T6629] dummy0: entered promiscuous mode [ 291.342976][ T6629] bridge0: port 3(dummy0) entered blocking state [ 291.349901][ T6629] bridge0: port 3(dummy0) entered disabled state [ 291.357178][ T6629] dummy0: entered allmulticast mode [ 291.369443][ T6629] bridge0: port 3(dummy0) entered blocking state [ 291.376526][ T6629] bridge0: port 3(dummy0) entered forwarding state [ 291.966925][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 293.100775][ T6660] netlink: 25 bytes leftover after parsing attributes in process `syz.1.235'. [ 293.423346][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 293.490313][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.235'. [ 293.685449][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 293.757788][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 293.803144][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 294.807918][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.818192][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.122283][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.159865][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.653761][ T35] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.678944][ T35] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.703090][ T35] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.745764][ T35] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.870760][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.054247][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 302.406680][ T6727] netlink: 112 bytes leftover after parsing attributes in process `syz.2.263'. [ 306.714361][ T6781] netlink: 71 bytes leftover after parsing attributes in process `syz.4.283'. [ 308.035087][ T6797] syzkaller0: entered promiscuous mode [ 308.041182][ T6797] syzkaller0: entered allmulticast mode [ 310.868684][ T6841] tipc: Started in network mode [ 310.874579][ T6841] tipc: Node identity , cluster identity 4711 [ 310.880868][ T6841] tipc: Failed to obtain node identity [ 310.886922][ T6841] tipc: Enabling of bearer rejected, failed to enable media [ 310.973752][ T6846] syzkaller0: entered promiscuous mode [ 310.979587][ T6846] syzkaller0: entered allmulticast mode [ 311.962123][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 312.221007][ T6858] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 312.343382][ T6858] bond1 (unregistering): Released all slaves [ 312.855637][ T6865] gre0: entered promiscuous mode [ 312.861079][ T6865] gre0: entered allmulticast mode [ 313.513228][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 313.925041][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 313.991470][ T1599] IPVS: starting estimator thread 0... [ 314.024602][ T6875] netlink: 'syz.1.317': attribute type 33 has an invalid length. [ 314.133942][ T6877] IPVS: using max 192 ests per chain, 9600 per kthread [ 315.345147][ T6890] netlink: 112 bytes leftover after parsing attributes in process `syz.4.321'. [ 316.185151][ T6900] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 316.219083][ T6900] bond1 (unregistering): Released all slaves [ 319.169679][ T6928] ipvlan2: entered promiscuous mode [ 320.118357][ T6938] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 320.211612][ T6938] bond1 (unregistering): Released all slaves [ 320.848669][ T5449] ===================================================== [ 320.856542][ T5449] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 320.864526][ T5449] _copy_to_iter+0xef3/0x33f0 [ 320.869419][ T5449] __skb_datagram_iter+0x196/0x12c0 [ 320.875187][ T5449] skb_copy_datagram_iter+0x5b/0x1e0 [ 320.882918][ T5449] netlink_recvmsg+0x4bb/0xfe0 [ 320.887954][ T5449] sock_recvmsg+0x2df/0x390 [ 320.893689][ T5449] ____sys_recvmsg+0x193/0x610 [ 320.898713][ T5449] ___sys_recvmsg+0x20b/0x850 [ 320.903767][ T5449] __x64_sys_recvmsg+0x20e/0x3d0 [ 320.908952][ T5449] x64_sys_call+0x35f0/0x3e30 [ 320.914080][ T5449] do_syscall_64+0xd9/0xfa0 [ 320.918815][ T5449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.926695][ T5449] [ 320.929126][ T5449] Uninit was stored to memory at: [ 320.934776][ T5449] pskb_expand_head+0x310/0x1610 [ 320.940043][ T5449] netlink_trim+0x496/0x500 [ 320.945340][ T5449] netlink_broadcast_filtered+0x80/0x28f0 [ 320.951389][ T5449] nlmsg_notify+0x15b/0x2f0 [ 320.957799][ T5449] rtnl_notify+0xba/0x100 [ 320.962578][ T5449] wireless_nlevent_process+0xfe/0x290 [ 320.968252][ T5449] process_scheduled_works+0xb91/0x1d80 [ 320.974310][ T5449] worker_thread+0xedf/0x1590 [ 320.979234][ T5449] kthread+0xd5c/0xf00 [ 320.985747][ T5449] ret_from_fork+0x1f5/0x4c0 [ 320.990565][ T5449] ret_from_fork_asm+0x1a/0x30 [ 320.996351][ T5449] [ 320.998785][ T5449] Uninit was stored to memory at: [ 321.004275][ T5449] wireless_send_event+0x67f/0x1530 [ 321.009667][ T5449] ioctl_standard_iw_point+0x12b0/0x13f0 [ 321.015722][ T5449] compat_standard_call+0x188/0x4c0 [ 321.021132][ T5449] wext_ioctl_dispatch+0x192/0x7a0 [ 321.026652][ T5449] compat_wext_handle_ioctl+0x1a1/0x300 [ 321.032612][ T5449] compat_sock_ioctl+0x20c/0xff0 [ 321.037748][ T5449] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 321.043808][ T5449] ia32_sys_call+0x2d5f/0x4310 [ 321.048823][ T5449] __do_fast_syscall_32+0xb0/0x150 [ 321.054944][ T5449] do_fast_syscall_32+0x38/0x80 [ 321.060069][ T5449] do_SYSENTER_32+0x1f/0x30 [ 321.065038][ T5449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.071598][ T5449] [ 321.074240][ T5449] Local variable iwp created at: [ 321.079288][ T5449] compat_standard_call+0x4a/0x4c0 [ 321.086884][ T5449] wext_ioctl_dispatch+0x192/0x7a0 [ 321.092203][ T5449] [ 321.095485][ T5449] Bytes 60-63 of 64 are uninitialized [ 321.101005][ T5449] Memory access of size 64 starts at ffff888118eaf440 [ 321.108249][ T5449] Data copied to user address 00007ffff10e2bb0 [ 321.114707][ T5449] [ 321.117188][ T5449] CPU: 1 UID: 101 PID: 5449 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 321.126718][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.137250][ T5449] ===================================================== [ 321.144525][ T5449] Disabling lock debugging due to kernel taint [ 321.150818][ T5449] Kernel panic - not syncing: kmsan.panic set ... [ 321.157574][ T5449] CPU: 1 UID: 101 PID: 5449 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 321.168498][ T5449] Tainted: [B]=BAD_PAGE [ 321.172782][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.183194][ T5449] Call Trace: [ 321.186616][ T5449] [ 321.189678][ T5449] __dump_stack+0x26/0x30 [ 321.194247][ T5449] dump_stack_lvl+0x53/0x270 [ 321.199081][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.205145][ T5449] dump_stack+0x1e/0x25 [ 321.209527][ T5449] vpanic+0x435/0xd30 [ 321.213748][ T5449] panic+0x15d/0x160 [ 321.217996][ T5449] kmsan_report+0x31c/0x320 [ 321.222690][ T5449] ? kmsan_internal_check_memory+0x1e1/0x230 [ 321.228904][ T5449] ? kmsan_copy_to_user+0xf1/0x190 [ 321.234208][ T5449] ? _copy_to_iter+0xef3/0x33f0 [ 321.239240][ T5449] ? __skb_datagram_iter+0x196/0x12c0 [ 321.244918][ T5449] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 321.250593][ T5449] ? netlink_recvmsg+0x4bb/0xfe0 [ 321.255737][ T5449] ? sock_recvmsg+0x2df/0x390 [ 321.260589][ T5449] ? ____sys_recvmsg+0x193/0x610 [ 321.265739][ T5449] ? ___sys_recvmsg+0x20b/0x850 [ 321.270796][ T5449] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 321.276115][ T5449] ? x64_sys_call+0x35f0/0x3e30 [ 321.281175][ T5449] ? do_syscall_64+0xd9/0xfa0 [ 321.286049][ T5449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.292345][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.298376][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.303662][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.308961][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.314959][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.320265][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.326267][ T5449] ? __pfx__raw_spin_lock+0x1/0x10 [ 321.331563][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.336865][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.342955][ T5449] kmsan_internal_check_memory+0x1e1/0x230 [ 321.349019][ T5449] kmsan_copy_to_user+0xf1/0x190 [ 321.354144][ T5449] _copy_to_iter+0xef3/0x33f0 [ 321.358997][ T5449] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 321.365555][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.370842][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.377015][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.382308][ T5449] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 321.388907][ T5449] __skb_datagram_iter+0x196/0x12c0 [ 321.394339][ T5449] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 321.400252][ T5449] skb_copy_datagram_iter+0x5b/0x1e0 [ 321.405760][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.411768][ T5449] netlink_recvmsg+0x4bb/0xfe0 [ 321.416753][ T5449] ? aa_sock_msg_perm+0x29c/0x2f0 [ 321.422019][ T5449] ? __pfx_netlink_recvmsg+0x10/0x10 [ 321.427561][ T5449] sock_recvmsg+0x2df/0x390 [ 321.432264][ T5449] ____sys_recvmsg+0x193/0x610 [ 321.437273][ T5449] ? setup_fault_attr+0x260/0x300 [ 321.442509][ T5449] ? stack_depot_save_flags+0x35/0x7b0 [ 321.448223][ T5449] ___sys_recvmsg+0x20b/0x850 [ 321.453284][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.459445][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.464767][ T5449] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.470883][ T5449] __x64_sys_recvmsg+0x20e/0x3d0 [ 321.476065][ T5449] ? kmsan_get_metadata+0xfb/0x160 [ 321.481377][ T5449] x64_sys_call+0x35f0/0x3e30 [ 321.486364][ T5449] do_syscall_64+0xd9/0xfa0 [ 321.491086][ T5449] ? clear_bhb_loop+0x40/0x90 [ 321.495949][ T5449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.502038][ T5449] RIP: 0033:0x7f08c8a5a407 [ 321.506600][ T5449] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 321.526393][ T5449] RSP: 002b:00007ffff10e2aa0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 321.535268][ T5449] RAX: ffffffffffffffda RBX: 00007f08c89d0740 RCX: 00007f08c8a5a407 [ 321.543392][ T5449] RDX: 0000000000000040 RSI: 00007ffff10e2b20 RDI: 0000000000000009 [ 321.551493][ T5449] RBP: 0000564159393aa0 R08: 0000000000000000 R09: 0000000000000000 [ 321.559596][ T5449] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 321.567694][ T5449] R13: 00007ffff10e6c80 R14: 0000000000000000 R15: 00007ffff10e6c70 [ 321.575837][ T5449] [ 321.579373][ T5449] Kernel Offset: disabled [ 321.583785][ T5449] Rebooting in 86400 seconds..