last executing test programs: 2.726788555s ago: executing program 3 (id=940): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0xfffffff9}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.579435458s ago: executing program 1 (id=943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="4c5253916d987194b29b9fa88452e0b306eb041d0608ab3ea2b080dd0f34eeb08ff23131", 0x24}], 0x4, 0x0, 0x0, 0xd0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f00000005c0)="37fe0187610488b3d05d92015ee9ad38d14e1b37234adcd7a271dcd87da03ea3128825ba4f61f4b702bf489c5737aa6121dd8d90d0729c82020000000000000036a4bf1addedee00"/92, 0x5c, 0x100000000000000, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df2508000300010000000800010000000000080004"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x5e24, @private=0xa010102}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000740)='\x00', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r6], 0x80}}], 0x3, 0x48000) close(0x3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000e80)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000e00)=""/66, 0x42}, {&(0x7f0000000c80)=""/184, 0xb8}], 0x2, &(0x7f0000000800)=""/193, 0xc1}, 0xc4c70aa7164dfeff) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000300)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000480)={0x0, @local, @private}, &(0x7f00000004c0)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r8, 0x24, 0x1, 0x4, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$inet(r2, 0x0, 0x0) 2.537315851s ago: executing program 3 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020782500000000002020207b1af8ff00000000bf"], 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34b18}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000100)={&(0x7f0000000040)=[{0x1, 0x0, 0x2, 0x6, 0x80000001, 0x4, 0x5, 0x7fff}, {0x1, 0x0, 0x1, 0xfffffffffffffff9, 0x5, 0x3, 0xffff, 0x4}, {0x0, 0x0, 0x8000000000000001, 0x2b89, 0x0, 0x1ff, 0x0, 0x6c4}], 0x3, 0x38, 0x0, 0xfffffffffffff70c}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a8008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.295216203s ago: executing program 3 (id=949): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80041) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x80) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x1, 0xb, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) 2.19477972s ago: executing program 1 (id=950): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x1412, 0x400, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800355c76b728289ef098f300003c3281df2052d3b7e470b82cff56b9ff1234bc4f723ecf9c2b051a6e631f1099a7c941583cff4f4fb832da53566a57d3a0eed94e4248434b5fc1f9f794a69f7c89a1d7e9d882dd2ef3385717967d09d763c9f48a04406314c6309eaf00b7c1f7d069ae2a6c8baec47d70be5c1b4f56d3dfe60501e3b5dfbd26697b6f01cdf45f9bdcd2234f0bab30e1f74b4de9e01d4b6e92e08e03b0a80074fcb07d5e8b8cda45721559ca054621235a78dc09339a68d22c4e30", @ANYRES16=r1, @ANYBLOB="01002bbd7000bfcbdf25150000000c002b80080001000000000008000300", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x480d1}, 0x4c044) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000480)={r7, @in={{0x2, 0x4e21, @empty}}, 0xfffe, 0xb92}, 0x90) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1407, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x801) getsockopt$inet_sctp6_SCTP_EVENT(r6, 0x84, 0x7f, &(0x7f0000000540)={r7, 0x8009, 0x1}, &(0x7f0000000580)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$PPPIOCSFLAGS(r8, 0x40047459, &(0x7f0000000340)=0xe106906) 1.974671799s ago: executing program 2 (id=953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000180000032dbd7000ffdbdf2502201000fd04ff03000bb40008001e00d703000006001c004e2300000800060009000000"], 0x34}}, 0x8084) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r3, 0x100000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) unshare(0x2c020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008", @ANYRESOCT=r9, @ANYRES16=r8, @ANYRESHEX=r6, @ANYBLOB="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", @ANYRES16], 0x2c}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f00000004c0)=ANY=[@ANYBLOB="df23f348b12d8c85892954d78097bf6c47d60aa32b107ec4f8e8f1b07483977480f133b22c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf25010000001800040004000000060000000700000009000000010000000800020004000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000080) (async) listen(r0, 0x1) 1.816733597s ago: executing program 4 (id=955): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/205, 0xcd}], 0x1, 0x0, 0xfffffffffffffe6a}, 0x9}], 0x1, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/12, 0xc}], 0x1}, 0xa}], 0x1, 0x40000022, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.758787767s ago: executing program 2 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34802}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.678198898s ago: executing program 2 (id=958): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000003, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getsadinfo={0x44, 0x23, 0xa00, 0x70bd2a, 0x25dfdbfd, 0x0, [@policy_type={0xa, 0x10, {0x1}}, @policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x6}, @policy_type={0xa, 0x10, {0xa23fb6fb86a3a4ce}}]}, 0x44}, 0x1, 0x0, 0x0, 0x401c040}, 0x20000000) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r1, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x12578000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r3}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback={0xffffff7f00000000}, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) 1.614737006s ago: executing program 4 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001480)={@fallback=r1, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000014c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@cgroup=r1, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000030a01010000000000000000000000002c000000200a05000000000000000000070000010900010073797a30000000000c0005", @ANYRES32=r0, @ANYRESOCT=r0], 0x392c}}, 0x0) 1.60672658s ago: executing program 0 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x30b, 0x0, 0x0, {0x26}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}}, 0x20000001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4c00000011000e14000300020000000002000000200000", 0x17) 1.530367629s ago: executing program 4 (id=961): recvmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/254, 0xfe}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/57, 0x39}, {&(0x7f00000035c0)=""/61, 0x3d}], 0x6, &(0x7f0000003680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003800)=""/104, 0x68}], 0x1, &(0x7f00000038c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000003a00)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003a80)=""/210, 0xd2}, {&(0x7f0000003b80)=""/95, 0x5f}, {&(0x7f0000003c00)=""/32, 0x20}, {&(0x7f0000003c40)=""/92, 0x5c}, {&(0x7f0000003cc0)=""/172, 0xac}, {&(0x7f0000003d80)=""/158, 0x9e}], 0x6, &(0x7f0000003ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/61, 0x3d}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/195, 0xc3}, {&(0x7f0000006100)=""/77, 0x4d}, {&(0x7f0000006180)=""/34, 0x22}, {&(0x7f00000061c0)=""/120, 0x78}, {&(0x7f0000006240)=""/184, 0xb8}, {&(0x7f0000006300)=""/1, 0x1}], 0x9, &(0x7f0000006400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f00000064c0)=""/80, 0x50}], 0x1, &(0x7f0000006580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x5, 0x40002000, &(0x7f0000006700)={0x0, 0x3938700}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa0000000}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 1.488130378s ago: executing program 0 (id=962): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x605, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffcb23}]}}]}, 0x38}}, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.43060409s ago: executing program 4 (id=963): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket(0x2, 0x2, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000002c0)={0x7, [0x731e, 0x8001], 0x8000}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000340)) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000022000000000000000000800711073000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.35260051s ago: executing program 2 (id=964): syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6ab4739fbd995608000000000c8fb70523111179", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000700), 0x8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000740)={0x3, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000780), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB="7563ed71859fe48b1da9740d8a057b85a338fb052f25f2f5d76996129d069faec7c1be7647e283855c365ee85322b68e29a2d6a38dc79c626f5fc6d1fce1dc2a42a19171a6c31c5113c7444e3caf89"], 0x3c}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', 0x1}) write$tun(r6, &(0x7f0000001300)=ANY=[@ANYBLOB="a1375747fde0c71142e6039c0700010022fe26a71ecbf601a8af74bba85bf0b7f4dd3847d499488aa85b78a60ae855de0bd064956234170fa012993846ffd6bf67ec07be3a4e59ef0be188d434d438ece96c2cfb6def3f0990f0e904abaa9afc224e57b6ec3455dfd5f7c7921343ec4ddb96cb40b0daa7d799a3db0faa1ab9effa8bdd4acc17427bcea3f9a5166ee62423c5053e108c6bf3d3cfc8f5a76688bdf192024ac11e16afa5edc25f40f7504fd8f9d0ff80f089b732c18357ccf6728294d9dc444d61a0a0"], 0x7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000200000000000000000000000db8bdaec237b2eac3243e12bc6187471474b02eed74b89b47662b347017fbe897eb6eb4516c0b1488c0d482e9d510deeb3d14449233ce012d5aeb5ea0ae9c58784487454d4c77aa995d8a4c46c606e9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES16=r10, @ANYBLOB="9533401ac8953c33cc2fa792e744b4d037ba1d8b4aefe3b3c054d107c2a52a37d2d61b20f065378e3459218b7c3cd685a3b2efe7d3dffec3c5ef3c78eea112a84f1d0c877d90ab09eaa6b46ff142e62260ba44b89d0b11a7fc16d7a2dee28886d685d7101cf377e261fb785a1f318dea425c1cdc1f68a16b9911b54ba2850ad14d086f24745d167cbeb6d49209af2960c300b6a2e6595782b583ac83a6657eccf2af1970b09a38fa0d842a9abd9e8a658d7663328f681564c34a8fb838b4c7f8928f430c54327dc53f374b0900a03e", @ANYRESHEX=r5, @ANYRES8, @ANYRES16, @ANYRES32, @ANYBLOB="85f32bfd6fe098de54189b75431cb398e207bbbac52596dfca3315b81cf45f5b9e7491938cbecf16a07f3a0ac31d3725be388d515f5885fbb630523c9b2267a8feaafc3cdcdefc26aa214cc19a708000aff0b091d3c89abf189004bea75a8fc6380114b3be6fb6fbda0ba47f32", @ANYRES64], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0xd, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r11, @ANYBLOB="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"/369], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.268389937s ago: executing program 1 (id=965): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_emit_ethernet(0xa6, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000000, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) socket(0x2a, 0x2, 0x4) 1.174648934s ago: executing program 4 (id=966): socket$xdp(0x2c, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) (async) listen(r0, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000021c0)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000002200)) unshare(0x20000400) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000002300)={0x2, 0x0, @loopback}, 0x57) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x8000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002400)={'syzkaller0\x00', 0x0}) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002440)={@mcast2, 0x6, 0x0, 0x1, 0x6, 0xfffa, 0x9}, 0x20) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x6cd}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc359cb1}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002640)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r10 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32) sendmsg$kcm(r10, &(0x7f0000002680)={&(0x7f00000026c0)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)="27030200dc", 0x5}], 0x1}, 0x4005) (async) sendmsg$alg(r2, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="1800009587000000170100000200000000000010000000001c0000000000000017010000040000000100000000000000"], 0x30}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x1) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000002840)) 1.174251907s ago: executing program 0 (id=967): write(0xffffffffffffffff, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76", 0x1e) 1.089923495s ago: executing program 0 (id=968): syz_emit_ethernet(0x146, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/326], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x16, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x8, 0x3, 0x5, 0x9, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000011c0)='syzkaller\x00', 0x6, 0x37, &(0x7f0000001200)=""/55, 0x41100, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x2, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000012c0)=[{0x2, 0x1, 0xe, 0x2}, {0x0, 0x4, 0x0, 0xb}], 0x10, 0x5}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, 0x0, {0xeffe068f8514295, 0xfff2}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r3, 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f00000010c0)=0x9, 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) unshare(0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x0, 0x1, 0x80}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xfff}, 0x8) sendmsg$can_bcm(r1, &(0x7f0000000640)={&(0x7f0000000180), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0xb91, 0x6, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x16, 0x2, 0x0, 0x0, "31f30a6a5cf99319e230c9652b48569c555bdb4d56707686efd7798ebf93b8268a4e6da92b4d6436d6de154e3c904f8c0ef09644a56700ec447ce9ccf3e973a7"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000200020000840900020073797a310000000005000100070000002800074c7566f206a3046240fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="080005000b000000", @ANYRESHEX, @ANYRES64=r0], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x2}}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r8, 0x308, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.060594253s ago: executing program 3 (id=969): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRES16=0x0], 0x50) listen(0xffffffffffffffff, 0x39b3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sock_ops}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4106, 0x100a}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00', @ANYBLOB="140426bd7000fcdbdf2513000000050003000d00000005000300070000000c0400000003"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x10004080) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="814297a5a302d54f63cdec590806000108000604"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r4) sendto$packet(r1, &(0x7f0000000200)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000440)=0xb, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000540)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000580)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f00000005c0)={0x0, 0x3938700}, 0x0) pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000640)='\n', 0x1}], 0x1, 0x2, 0x2) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 577.961366ms ago: executing program 2 (id=970): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r0}, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast1, 0x4}}, 0x7, 0x8, 0x7f}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x1000, 0x8200, 0x5, 0x7, r4}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x5, 0x14, 0x0, &(0x7f0000000380)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socketpair(0x11, 0x2, 0x8, &(0x7f00000003c0)) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000004c0), &(0x7f00000009c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 500.40033ms ago: executing program 1 (id=971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf25"], 0x2c}}, 0x884) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="80000000000000002400128009000100697069700000000014000280080001000000400005000900890000001400030074756e6c"], 0x58}}, 0x1020) listen(r0, 0x202) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f00000000c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001d000100000c00000000000007000000", @ANYRES32=r4, @ANYBLOB="400096fb090002"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0x44, 0x3, 0x5}, @end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x3, 0xb9, 0x4, 0x80, 0x2, 0x5}, &(0x7f0000000600)=0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006e90000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb8}, 0x94) 483.91919ms ago: executing program 3 (id=972): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 430.361583ms ago: executing program 0 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000014", @ANYRES16=r1, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r2, @ANYBLOB="08003500050000000a0006000802110000010000080026006c0900000a0034000202020202020000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="140000001600a9bb1120c038c7c57f5a1974a8d99e2356bc05", 0x19}], 0x1}, 0x44000) recvmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x84) sendto$inet(r5, &(0x7f0000001080)="00010002000000000000000011223344", 0x10, 0x0, &(0x7f00000010c0)={0x2, 0x0, @loopback}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c80)=0x14) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000394e1ffba7868e663e7b26cd75f599691dd41f88c82885006a955c1089192148", @ANYRES16=r10, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="04003080"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000cc0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r12, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r8], 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000100)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf25230000001c00018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="c459749d18f405ad65dc6f63bda426e8ea343b1450a80f29a13ccf1c7d0be614fbe19f275c6e7d0bd055c51e68b390"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040840) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x8000, 0x3594f59b68326351, 0x3, 0x401, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x65, 0x0, 0x9, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x14}, {[@noop, @rr={0x7, 0xf, 0xe2, [@loopback, @loopback, @local]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @noop, @generic={0x86, 0xe, "49858eae6c800484973a6cc6"}, @timestamp_addr={0x44, 0x2c, 0x90, 0x1, 0xd, [{@local, 0xfffffeaf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdac4}, {@local}, {@rand_addr=0x64010100, 0xed}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0x69, 0x3, 0x1, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@broadcast, 0x5}, {@multicast2, 0x4}, {@empty, 0xffffffff}, {@broadcast, 0x78}, {@multicast2, 0x2}, {@broadcast, 0x4}]}, @noop, @lsrr={0x83, 0x1b, 0x2f, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010102, @broadcast, @multicast1]}]}}}}}) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r16, 0x2000000, 0xe, 0x0, &(0x7f0000000880)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000ff000000000000005900f80018110000fe372aca66ab33969e2ca3153b015ec1c62902df000080004a5c79f26011fe627fedc996fc2315d8074821771bb734554224ba43dd46efc2c6bd", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000083da0500000000008520000004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000400)=""/232, 0x41000, 0x2, '\x00', r14, @sched_cls=0x37, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x7fffffff, 0x9, 0x3, 0x400}, 0x10, 0xffffffffffffffff, r16, 0xa, &(0x7f0000000a40)=[r17, r18], &(0x7f0000000a80)=[{0x5, 0x1, 0x7, 0x9}, {0x4, 0x2, 0xe, 0x2}, {0x4, 0x1, 0x3, 0x5}, {0x3, 0x3, 0x9, 0x4}, {0x4, 0x4, 0xa, 0x2}, {0x0, 0x4, 0xe, 0x2}, {0x1, 0x5, 0x7, 0x4}, {0x5, 0x5, 0x8, 0x7}, {0x5, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x7, 0x7}], 0x10, 0xeae6}, 0x94) 185.26725ms ago: executing program 3 (id=974): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1f000000190081054e81f782db4cb9040263cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f00000005c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000740)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_sctp(0x2, 0x5, 0x84) write(r8, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3ac9, 0xfeb, &(0x7f0000001cc0)=""/4075, 0x41100, 0x69, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) 124.267246ms ago: executing program 1 (id=975): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x6, 0x9, 0x9, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400ff}, 0x94) 118.305824ms ago: executing program 2 (id=976): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473001a00028005db010003000000", 0x38) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000050000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e0054000000060a01040000000000000000050000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a656374000014000280080001"], 0xe8}}, 0x4010) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="77690addcfbe1f78f859f1d5aed10f45aa756b51a7f142e2d50f8f6c066688adbcc5f9a3022999ebde2c2466de000318a9056643c93d9a1d4b800535f6a3fd0362c795bbd9f0c92c315a4e4c5e179c08dd8e7d0c5edaa57046517e41664a59ef4a0522867d5479225e7530d833b86a092d0a8773ffaf0a0e969b7d86ca06ce28ae", 0x81}], 0x1, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) splice(r0, 0x0, r4, 0x0, 0x2, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x9, 0x4) 20.973879ms ago: executing program 1 (id=977): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@loopback, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x800}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f00000002c0), 0x800001d, 0x1c) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) (rerun: 64) 10.255667ms ago: executing program 0 (id=978): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 0s ago: executing program 4 (id=979): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x7}]}, 0x30}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x20c, 0x0, 0x0, 0x400000}}], 0x30, 0x8080}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 70.228254][ T5600] cgroup: Unknown subsys name 'net' [ 70.338293][ T5600] cgroup: Unknown subsys name 'cpuset' [ 70.340811][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.287084][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.287152][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.683148][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.025601][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.027392][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.030803][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.031524][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.031864][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.033424][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.034649][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.040235][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.042416][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.043192][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.043780][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.044211][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.052600][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.053789][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.058202][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.058805][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.086829][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.087060][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.094562][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.101556][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.145786][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.160844][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.175298][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.186381][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.187429][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.845382][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.845481][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.845596][ T5612] bridge_slave_0: entered allmulticast mode [ 76.847573][ T5612] bridge_slave_0: entered promiscuous mode [ 76.851626][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.851760][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.851870][ T5612] bridge_slave_1: entered allmulticast mode [ 76.853938][ T5612] bridge_slave_1: entered promiscuous mode [ 76.963637][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.963761][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.963860][ T5613] bridge_slave_0: entered allmulticast mode [ 76.965793][ T5613] bridge_slave_0: entered promiscuous mode [ 76.968176][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.968268][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.968659][ T5627] bridge_slave_0: entered allmulticast mode [ 76.971144][ T5627] bridge_slave_0: entered promiscuous mode [ 76.992843][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.993571][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.993665][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.994026][ T5613] bridge_slave_1: entered allmulticast mode [ 76.997749][ T5613] bridge_slave_1: entered promiscuous mode [ 77.011792][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.011931][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.012281][ T5627] bridge_slave_1: entered allmulticast mode [ 77.014555][ T5627] bridge_slave_1: entered promiscuous mode [ 77.016423][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.016515][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.016912][ T5611] bridge_slave_0: entered allmulticast mode [ 77.019205][ T5611] bridge_slave_0: entered promiscuous mode [ 77.025239][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.068306][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.068477][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.068931][ T5611] bridge_slave_1: entered allmulticast mode [ 77.071118][ T5611] bridge_slave_1: entered promiscuous mode [ 77.102573][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.102667][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.103017][ T5621] bridge_slave_0: entered allmulticast mode [ 77.104621][ T5621] bridge_slave_0: entered promiscuous mode [ 77.110948][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.132846][ T4934] Bluetooth: hci3: command tx timeout [ 77.132999][ T4934] Bluetooth: hci1: command tx timeout [ 77.133071][ T4934] Bluetooth: hci0: command tx timeout [ 77.183502][ T5612] team0: Port device team_slave_0 added [ 77.183687][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.183776][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.183896][ T5621] bridge_slave_1: entered allmulticast mode [ 77.187946][ T5621] bridge_slave_1: entered promiscuous mode [ 77.191990][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.195754][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.200549][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.203533][ T5612] team0: Port device team_slave_1 added [ 77.206960][ T5615] Bluetooth: hci4: command tx timeout [ 77.206969][ T4934] Bluetooth: hci2: command tx timeout [ 77.236806][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.253933][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.328745][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.328760][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.328782][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.333064][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.335273][ T5613] team0: Port device team_slave_0 added [ 77.339165][ T5627] team0: Port device team_slave_0 added [ 77.341730][ T5627] team0: Port device team_slave_1 added [ 77.359031][ T5611] team0: Port device team_slave_0 added [ 77.359735][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.359746][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.359767][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.364920][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.380671][ T5613] team0: Port device team_slave_1 added [ 77.423837][ T5611] team0: Port device team_slave_1 added [ 77.499062][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.499075][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.499092][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.552155][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.552170][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.552186][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.569285][ T5621] team0: Port device team_slave_0 added [ 77.570737][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.570749][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.570770][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.572034][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.572046][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.572064][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.574253][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.574264][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.574283][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.594362][ T5612] hsr_slave_0: entered promiscuous mode [ 77.595832][ T5612] hsr_slave_1: entered promiscuous mode [ 77.600527][ T5621] team0: Port device team_slave_1 added [ 77.611315][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.611327][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.611346][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.787789][ T5611] hsr_slave_0: entered promiscuous mode [ 77.789017][ T5611] hsr_slave_1: entered promiscuous mode [ 77.789766][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 77.789837][ T5611] Cannot create hsr debugfs directory [ 77.790602][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.790613][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.790633][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.878730][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.878744][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.878762][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.891085][ T5627] hsr_slave_0: entered promiscuous mode [ 77.892029][ T5627] hsr_slave_1: entered promiscuous mode [ 77.892816][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 77.892833][ T5627] Cannot create hsr debugfs directory [ 77.951346][ T5613] hsr_slave_0: entered promiscuous mode [ 77.951989][ T5613] hsr_slave_1: entered promiscuous mode [ 77.952376][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 77.952392][ T5613] Cannot create hsr debugfs directory [ 78.053111][ T5621] hsr_slave_0: entered promiscuous mode [ 78.053697][ T5621] hsr_slave_1: entered promiscuous mode [ 78.054069][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 78.054079][ T5621] Cannot create hsr debugfs directory [ 78.425654][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.430509][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.431347][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.437947][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.448694][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.454177][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.461820][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.470998][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.540498][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.551701][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.562312][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.572317][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.573530][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.583158][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.594476][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.603919][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.680404][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.682618][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.683902][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.689073][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.689863][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.696847][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.711950][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.719434][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.820850][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.823628][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.824367][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.835358][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.851814][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.859505][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.872709][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.876635][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.886936][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.965664][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.969892][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.973325][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.990302][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.991236][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.000965][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.017386][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.021898][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.034971][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.037142][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.040457][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.040753][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.080229][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.080381][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.109276][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.152858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.152918][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.154097][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.154150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.184373][ T5612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.184395][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.216872][ T4934] Bluetooth: hci0: command tx timeout [ 79.216906][ T5615] Bluetooth: hci1: command tx timeout [ 79.216907][ T4934] Bluetooth: hci3: command tx timeout [ 79.277841][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.285377][ T52] Bluetooth: hci4: command tx timeout [ 79.285409][ T52] Bluetooth: hci2: command tx timeout [ 79.372761][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.430844][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.430927][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.448881][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.478486][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.485422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.485516][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.512860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.512980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.567415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.567517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.621313][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.670265][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.688276][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.688400][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.746382][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.746465][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.092043][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.274510][ T5612] veth0_vlan: entered promiscuous mode [ 80.314640][ T5612] veth1_vlan: entered promiscuous mode [ 80.471121][ T5612] veth0_macvtap: entered promiscuous mode [ 80.482179][ T5612] veth1_macvtap: entered promiscuous mode [ 80.541631][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.582183][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.612362][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.808230][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.809348][ T1122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.809651][ T1122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.810046][ T1122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.823512][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.841300][ T5611] veth0_vlan: entered promiscuous mode [ 80.882995][ T5611] veth1_vlan: entered promiscuous mode [ 80.971824][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.971845][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.014498][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.048147][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.070392][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.070410][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.120765][ T5611] veth0_macvtap: entered promiscuous mode [ 81.143292][ T5627] veth0_vlan: entered promiscuous mode [ 81.170717][ T5611] veth1_macvtap: entered promiscuous mode [ 81.174475][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.213833][ T5627] veth1_vlan: entered promiscuous mode [ 81.263233][ T5613] veth0_vlan: entered promiscuous mode [ 81.284971][ T52] Bluetooth: hci0: command tx timeout [ 81.285037][ T52] Bluetooth: hci3: command tx timeout [ 81.285090][ T4934] Bluetooth: hci1: command tx timeout [ 81.300003][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.310976][ T5613] veth1_vlan: entered promiscuous mode [ 81.321232][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.365567][ T5615] Bluetooth: hci2: command tx timeout [ 81.367372][ T5615] Bluetooth: hci4: command tx timeout [ 81.391265][ T5627] veth0_macvtap: entered promiscuous mode [ 81.396677][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397565][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397600][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397630][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.437821][ T5806] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.451223][ T5627] veth1_macvtap: entered promiscuous mode [ 81.507979][ T5613] veth0_macvtap: entered promiscuous mode [ 81.512293][ T5809] Illegal XDP return value 4294967262 on prog (id 4) dev N/A, expect packet loss! [ 81.582064][ T5613] veth1_macvtap: entered promiscuous mode [ 81.622261][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.687171][ T5809] bond1: (slave team0): Device is not bonding slave [ 81.687192][ T5809] bond1: option active_slave: invalid value (team0) [ 81.693233][ T5809] bond1 (unregistering): Released all slaves [ 81.762023][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.877730][ T82] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.912483][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.912504][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.915251][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.917919][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.917956][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.925909][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.968465][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.029649][ T5815] Zero length message leads to an empty skb [ 82.029976][ T5621] veth0_vlan: entered promiscuous mode [ 82.045880][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.045897][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.072920][ T5621] veth1_vlan: entered promiscuous mode [ 82.157482][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.157502][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.241276][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.258338][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.275564][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.312326][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.312345][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.367090][ T1122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.367398][ T157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.398054][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.398073][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.404163][ T5818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.499992][ T5621] veth0_macvtap: entered promiscuous mode [ 82.602752][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.602772][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.630421][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.631317][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.642878][ T5621] veth1_macvtap: entered promiscuous mode [ 82.788872][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.840358][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.894908][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.970240][ T157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.973431][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.021583][ T5841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'. [ 83.056095][ T157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.105520][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.105541][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.276701][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.276721][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.327949][ T5837] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 83.365208][ T5615] Bluetooth: hci1: command tx timeout [ 83.365238][ T5615] Bluetooth: hci3: command tx timeout [ 83.365258][ T5615] Bluetooth: hci0: command tx timeout [ 83.444750][ T4934] Bluetooth: hci4: command tx timeout [ 83.444795][ T4934] Bluetooth: hci2: command tx timeout [ 83.704931][ T5857] syz_tun: entered allmulticast mode [ 83.751091][ T5857] gretap0: entered allmulticast mode [ 83.922196][ T5874] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 84.365917][ T5890] x_tables: duplicate underflow at hook 2 [ 84.546939][ T5896] ip_tables: iptables: counters copy to user failed while replacing table [ 84.652313][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 84.678044][ T5903] macvlan2: entered promiscuous mode [ 84.678064][ T5903] macvlan2: entered allmulticast mode [ 85.071146][ T5921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.084163][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 85.103683][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 85.350402][ T5946] openvswitch: netlink: Message has 8 unknown bytes. [ 85.411927][ T5946] netlink: 92 bytes leftover after parsing attributes in process `syz.4.40'. [ 85.549339][ T5963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.46'. [ 85.969303][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 85.969317][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 85.988997][ T5993] netlink: 'syz.4.51': attribute type 4 has an invalid length. [ 85.992006][ T5993] .`: renamed from bond0 [ 86.142581][ T6000] veth0: mtu less than device minimum [ 86.478316][ T6013] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 86.483590][ T6013] netlink: 'syz.2.56': attribute type 39 has an invalid length. [ 86.521262][ T6021] Bluetooth: MGMT ver 1.23 [ 86.521621][ T6021] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 86.664578][ T991] cfg80211: failed to load regulatory.db [ 86.982857][ T6044] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.168884][ T6031] team0: Port device team_slave_0 removed [ 87.559850][ T6055] __nla_validate_parse: 7 callbacks suppressed [ 87.559868][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.66'. [ 87.798905][ T6070] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 87.798948][ T6070] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 87.866245][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.867221][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.956351][ T6055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.009729][ T6074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.279853][ T50] IPVS: starting estimator thread 0... [ 88.335006][ T6095] netlink: 'syz.0.71': attribute type 3 has an invalid length. [ 88.343038][ T6095] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 88.343058][ T6095] netlink: 'syz.0.71': attribute type 268 has an invalid length. [ 88.343070][ T6095] netlink: 224 bytes leftover after parsing attributes in process `syz.0.71'. [ 88.364888][ T6096] IPVS: using max 35 ests per chain, 84000 per kthread [ 88.468471][ T5747] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 88.469070][ T5747] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 88.579494][ T6073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.579518][ T6073] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 88.661599][ T6073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.661623][ T6073] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 88.717475][ T6073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.717498][ T6073] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 88.762630][ T6073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.762652][ T6073] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 88.782764][ T6073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.782786][ T6073] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 89.092250][ T6126] netlink: 596 bytes leftover after parsing attributes in process `syz.0.75'. [ 89.472183][ T6148] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 89.595423][ T6158] netlink: 104 bytes leftover after parsing attributes in process `syz.2.85'. [ 89.596796][ T6159] netlink: 104 bytes leftover after parsing attributes in process `syz.2.85'. [ 89.734184][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 89.830264][ T6171] syzkaller0: entered promiscuous mode [ 89.830285][ T6171] syzkaller0: entered allmulticast mode [ 89.922738][ T6171] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 89.944520][ T6171] bond1 (unregistering): Released all slaves [ 90.013587][ T6190] tipc: Started in network mode [ 90.013616][ T6190] tipc: Node identity e620788ba5d4, cluster identity 4711 [ 90.014026][ T6190] tipc: Enabled bearer , priority 0 [ 90.077527][ T6167] tipc: Resetting bearer [ 90.120128][ T6167] tipc: Disabling bearer [ 90.492520][ T6214] ip6erspan0: entered allmulticast mode [ 90.589049][ T6223] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.134117][ T6225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.198808][ T6261] netlink: 68 bytes leftover after parsing attributes in process `syz.3.99'. [ 91.285459][ T6225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.374821][ T6257] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 91.438105][ T6225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.458353][ T6271] xt_hashlimit: size too large, truncated to 1048576 [ 91.599595][ T6279] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 91.690592][ T6279] bond1: option mode: invalid value (9) [ 91.737626][ T6279] bond1 (unregistering): Released all slaves [ 91.867619][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205235][ T279] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205282][ T279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.216397][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.386551][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 92.455653][ T6329] netlink: 'syz.0.107': attribute type 4 has an invalid length. [ 92.472143][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.485301][ T6249] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.485350][ T6249] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.485379][ T6249] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.889880][ T6352] syzkaller1: entered promiscuous mode [ 92.889904][ T6352] syzkaller1: entered allmulticast mode [ 93.416119][ T6376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.451263][ T6378] Bluetooth: ISO socket layer initialized [ 93.453037][ T6375] __nla_validate_parse: 1 callbacks suppressed [ 93.453053][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 93.516133][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 93.566316][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 93.649722][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 93.665856][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 93.751462][ T6394] xt_HMARK: spi-set and port-set can't be combined [ 93.978722][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 94.596962][ T6444] : renamed from bridge_slave_1 (while UP) [ 94.653636][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.127'. [ 94.769900][ T6472] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.132'. [ 94.771153][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 94.771171][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 94.953348][ T6485] netlink: 'syz.3.135': attribute type 3 has an invalid length. [ 94.963636][ T6485] veth1_macvtap: left promiscuous mode [ 95.352960][ T6517] block nbd0: Unsupported socket: should be TCP or UNIX. [ 95.627724][ T6530] netlink: 'syz.4.145': attribute type 62 has an invalid length. [ 95.631580][ T6530] netlink: 'syz.4.145': attribute type 62 has an invalid length. [ 95.879644][ T6538] openvswitch: netlink: Message has 8 unknown bytes. [ 95.897883][ T6536] 8021q: adding VLAN 0 to HW filter on device .` [ 95.959703][ T6536] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 96.057465][ T6547] netlink: 'syz.0.149': attribute type 11 has an invalid length. [ 96.698460][ T6576] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 96.740337][ T6587] veth0_to_bridge: entered promiscuous mode [ 96.753114][ T6587] macvtap0: entered allmulticast mode [ 96.753134][ T6587] veth0_to_bridge: entered allmulticast mode [ 96.783440][ T6587] veth0_to_bridge: left allmulticast mode [ 96.783468][ T6587] veth0_to_bridge: left promiscuous mode [ 97.016468][ T6595] veth1_to_team: entered promiscuous mode [ 97.022421][ T6595] veth0_to_team: entered promiscuous mode [ 97.029938][ T6595] hsr1: entered promiscuous mode [ 97.152559][ T6612] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 97.152596][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.152990][ T6613] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 97.153017][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.209846][ T6617] ip_tables: iptables: counters copy to user failed while replacing table [ 97.426160][ T6626] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 97.428665][ T6626] bond2 (unregistering): Released all slaves [ 97.442414][ T6633] siw: device registration error -23 [ 97.543769][ T6628] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 97.563094][ T6628] bond2 (unregistering): Released all slaves [ 97.600677][ T6437] bond0: (slave bond_slave_0): interface is now down [ 97.600707][ T6437] bond0: (slave bond_slave_1): interface is now down [ 97.658438][ T6632] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.658471][ T6632] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.658511][ T6632] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.935736][ T6665] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 98.022049][ T6673] netlink: 'syz.4.176': attribute type 21 has an invalid length. [ 98.054543][ T6680] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.276598][ T6682] netlink: 'syz.2.178': attribute type 25 has an invalid length. [ 98.857505][ T6727] __nla_validate_parse: 21 callbacks suppressed [ 98.857525][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 98.949153][ T6737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.195'. [ 98.988118][ T6737] bridge0: port 3(vlan2) entered blocking state [ 98.988231][ T6737] bridge0: port 3(vlan2) entered disabled state [ 98.990603][ T6737] vlan2: entered allmulticast mode [ 98.990621][ T6737] geneve0: entered allmulticast mode [ 98.999443][ T6737] vlan2: entered promiscuous mode [ 98.999460][ T6737] geneve0: entered promiscuous mode [ 99.246154][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 99.246176][ T6754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.196'. [ 99.246188][ T6754] netlink: 29 bytes leftover after parsing attributes in process `syz.3.196'. [ 99.358511][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 100.166104][ T6446] bond0: (slave bond_slave_0): interface is now down [ 100.166128][ T6446] bond0: (slave bond_slave_1): interface is now down [ 100.443584][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 100.616090][ T6821] netlink: 88 bytes leftover after parsing attributes in process `syz.2.207'. [ 100.616409][ T6823] netlink: 88 bytes leftover after parsing attributes in process `syz.2.207'. [ 100.623354][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 101.543283][ T6886] netlink: 'syz.1.217': attribute type 8 has an invalid length. [ 101.780766][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.783917][ T6880] syzkaller1: entered promiscuous mode [ 101.783936][ T6880] syzkaller1: entered allmulticast mode [ 101.831198][ T6899] bond0: (slave batadv1): Opening slave failed [ 102.270034][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.270312][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.287676][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.292505][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.318422][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.407808][ T6911] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 102.470107][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.470259][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.727407][ T6432] bond0: (slave bond_slave_0): interface is now down [ 102.727430][ T6432] bond0: (slave bond_slave_1): interface is now down [ 102.769321][ T6432] bond0: now running without any active interface! [ 103.059646][ T6998] bond0: entered promiscuous mode [ 103.059666][ T6998] bond_slave_0: entered promiscuous mode [ 103.059865][ T6998] bond_slave_1: entered promiscuous mode [ 103.081963][ T6998] batadv0: entered promiscuous mode [ 103.083584][ T6998] debugfs: 'hsr1' already exists in 'hsr' [ 103.083603][ T6998] Cannot create hsr debugfs directory [ 103.087413][ T6998] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 103.408131][ T7067] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 104.123436][ T7100] Cannot find set identified by id 0 to match [ 104.222076][ T7106] __nla_validate_parse: 76 callbacks suppressed [ 104.222109][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.245'. [ 104.222191][ T7106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.245'. [ 104.231583][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 104.292411][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.245'. [ 104.390231][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.248'. [ 104.390267][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'. [ 104.390281][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 104.542511][ T7125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.987765][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 104.993866][ T7139] veth1_to_team (unregistering): left promiscuous mode [ 105.013434][ T7139] team0: Port device team_slave_1 removed [ 105.033290][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 105.128072][ T7148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.146786][ T7148] ip6gre0: entered promiscuous mode [ 105.146805][ T7148] ip6gre0: entered allmulticast mode [ 105.272930][ T7160] netlink: 'syz.4.259': attribute type 1 has an invalid length. [ 105.306564][ T7160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.380002][ T7160] bond1: (slave veth3): Enslaving as an active interface with a down link [ 105.407038][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.409917][ T7163] bond1: (slave batadv1): making interface the new active one [ 105.412519][ T7163] batadv1: entered promiscuous mode [ 105.413619][ T7163] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 105.498269][ T7160] bond1 (unregistering): (slave veth3): Releasing active interface [ 105.515330][ T7160] bond1 (unregistering): (slave batadv1): Releasing active interface [ 105.520321][ T7160] batadv1: left promiscuous mode [ 105.539971][ T7160] bond1 (unregistering): Released all slaves [ 105.613659][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'. [ 105.854888][ T7172] syz.1.263 (7172) used greatest stack depth: 18088 bytes left [ 105.858516][ T7196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.627234][ T7253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.910815][ T7262] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 107.038704][ T7267] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 107.109047][ T7265] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 107.592208][ T157] IPVS: starting estimator thread 0... [ 107.616602][ T7295] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 107.671367][ T7299] geneve1: entered promiscuous mode [ 107.684833][ T7297] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.958217][ T7310] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 108.012722][ T7310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.088083][ T7324] bond1: (slave veth5): Enslaving as an active interface with a down link [ 108.120816][ T7331] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 108.174979][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 108.180410][ T7310] bond1: (slave batadv2): making interface the new active one [ 108.182361][ T7310] batadv2: entered promiscuous mode [ 108.183317][ T7310] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 108.184502][ T7331] dummy0: entered promiscuous mode [ 108.392137][ T7350] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 108.433701][ T7350] team0: Device veth0_vlan failed to register rx_handler [ 108.547816][ T7354] openvswitch: netlink: Unknown key attributes 20 [ 108.552726][ T7357] openvswitch: netlink: Unknown key attributes 20 [ 108.660605][ T7356] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 108.928142][ T7380] x_tables: ip_tables: ah match: only valid for protocol 51 [ 108.963265][ T7356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.080155][ T7378] bond1: (slave ip6erspan0): making interface the new active one [ 109.097922][ T7378] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 109.340047][ T7394] batadv_slave_1: entered promiscuous mode [ 109.529641][ T7393] batadv_slave_1: left promiscuous mode [ 109.617779][ T7408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.620171][ T7408] __nla_validate_parse: 14 callbacks suppressed [ 109.620188][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 109.620247][ T7408] netlink: 'syz.0.318': attribute type 2 has an invalid length. [ 109.620259][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 109.654942][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.655139][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.655329][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.659538][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.659760][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.659936][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.660109][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.660300][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 109.763070][ T7418] veth1_macvtap: entered promiscuous mode [ 109.774513][ T7418] macsec0: entered promiscuous mode [ 110.047057][ T7431] syzkaller0: entered promiscuous mode [ 110.047079][ T7431] syzkaller0: entered allmulticast mode [ 110.217843][ T7437] bond0: entered promiscuous mode [ 110.217863][ T7437] bond_slave_0: entered promiscuous mode [ 110.218271][ T7437] bond_slave_1: entered promiscuous mode [ 110.229593][ T7437] batadv0: entered promiscuous mode [ 110.232451][ T7437] debugfs: 'hsr1' already exists in 'hsr' [ 110.232470][ T7437] Cannot create hsr debugfs directory [ 110.232517][ T7437] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 110.234162][ T7437] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 110.273985][ T7440] trusted_key: syz.0.325 sent an empty control message without MSG_MORE. [ 111.536114][ T7495] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 112.767402][ T7545] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 113.222683][ T7572] bridge0: port 3(vlan2) entered blocking state [ 113.222840][ T7572] bridge0: port 3(vlan2) entered disabled state [ 113.222961][ T7572] vlan2: entered allmulticast mode [ 113.222983][ T7572] geneve0: entered allmulticast mode [ 113.225249][ T7572] vlan2: entered promiscuous mode [ 113.225268][ T7572] geneve0: entered promiscuous mode [ 113.304258][ T7575] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 114.155815][ T7615] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 114.233214][ T7615] bond1: option mode: invalid value (9) [ 114.282168][ T7615] bond1 (unregistering): Released all slaves [ 114.411970][ T7623] ip_tables: iptables: counters copy to user failed while replacing table [ 114.515689][ T157] IPVS: starting estimator thread 0... [ 114.605316][ T7649] IPVS: using max 32 ests per chain, 76800 per kthread [ 114.826638][ T7658] __nla_validate_parse: 74 callbacks suppressed [ 114.826658][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 114.826675][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 114.826688][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 114.847969][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 114.984347][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 115.042191][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'. [ 115.100182][ T7677] netlink: 34 bytes leftover after parsing attributes in process `syz.1.370'. [ 115.421940][ T7700] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 115.492406][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 115.492442][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 115.496139][ T7700] bond1: entered promiscuous mode [ 115.500865][ T7700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.549293][ T7709] x_tables: duplicate underflow at hook 1 [ 115.579589][ T7700] bond1: (slave bridge1): making interface the new active one [ 115.579613][ T7700] bridge1: entered promiscuous mode [ 115.584619][ T7700] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 115.626195][ T7709] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 116.066023][ T7736] netlink: 'syz.4.383': attribute type 5 has an invalid length. [ 116.469535][ T7757] bridge2: entered promiscuous mode [ 116.469666][ T7757] bridge2: entered allmulticast mode [ 116.567820][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 116.612608][ T7762] ip6tnl1: entered allmulticast mode [ 116.753341][ T7767] syzkaller0: entered promiscuous mode [ 116.753363][ T7767] syzkaller0: entered allmulticast mode [ 116.779984][ T7767] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 118.498023][ T7801] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 118.500024][ T7802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 118.594883][ T7807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.639233][ T7808] netlink: 'syz.4.398': attribute type 2 has an invalid length. [ 118.687038][ T7806] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 120.104974][ T7881] __nla_validate_parse: 16 callbacks suppressed [ 120.104995][ T7881] netlink: 84 bytes leftover after parsing attributes in process `syz.4.410'. [ 121.780847][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 121.993870][ T7922] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 122.253958][ T7939] rdma_op ffff888076c13a38 conn xmit_rdma 0000000000000000 [ 122.402012][ T7947] bridge3: entered promiscuous mode [ 122.402034][ T7947] bridge3: entered allmulticast mode [ 122.421669][ T7947] team0: Port device bridge3 added [ 122.469661][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 122.525040][ T295] batadv2: left promiscuous mode [ 122.735379][ T7967] netlink: 208 bytes leftover after parsing attributes in process `syz.1.435'. [ 122.735409][ T7967] netlink: 208 bytes leftover after parsing attributes in process `syz.1.435'. [ 122.811903][ T7970] macsec1: entered promiscuous mode [ 122.811925][ T7970] macsec1: entered allmulticast mode [ 123.675862][ T7987] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20010 [ 123.913531][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.444'. [ 124.097091][ T8002] --map-set only usable from mangle table [ 124.111647][ T8005] ip_tables: iptables: counters copy to user failed while replacing table [ 124.127753][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 124.127783][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 124.176391][ T8010] geneve2: entered promiscuous mode [ 124.206407][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 124.215447][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.223739][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.231917][ T8005] netlink: 'syz.2.448': attribute type 16 has an invalid length. [ 124.231933][ T8005] netlink: 'syz.2.448': attribute type 17 has an invalid length. [ 124.332502][ T8005] dummy0: left promiscuous mode [ 124.370947][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.371050][ T8005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.402162][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.402277][ T8005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.462116][ T8005] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 124.464090][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.450'. [ 124.654142][ T8034] raw_sendmsg: syz.0.453 forgot to set AF_INET. Fix it! [ 124.978873][ T8048] xt_hashlimit: size too large, truncated to 1048576 [ 124.979107][ T8048] xt_hashlimit: max too large, truncated to 1048576 [ 125.132777][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.148654][ T8059] __nla_validate_parse: 1 callbacks suppressed [ 125.148672][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 125.148719][ T8059] bond0: Unable to set down delay as MII monitoring is disabled [ 125.420876][ T8059] Cannot find set identified by id 65534 to match [ 125.754519][ T8088] sctp: [Deprecated]: syz.2.465 (pid 8088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.754519][ T8088] Use struct sctp_sack_info instead [ 126.241207][ T8110] tipc: Started in network mode [ 126.241236][ T8110] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 126.242401][ T8110] tipc: Enabled bearer , priority 10 [ 126.750478][ T8137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.856967][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 126.856988][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 127.231644][ T8147] xt_hashlimit: size too large, truncated to 1048576 [ 127.306733][ T8154] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.357006][ T25] tipc: Node number set to 1 [ 127.713191][ T8179] batman_adv: batadv0: Adding interface: dummy0 [ 127.713208][ T8179] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.713232][ T8179] batman_adv: batadv0: Interface activated: dummy0 [ 127.766587][ T8190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.767789][ T8179] batadv0: mtu less than device minimum [ 127.769839][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.771205][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.772594][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.773954][ T8179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.993278][ T295] IPVS: starting estimator thread 0... [ 128.074738][ T8206] IPVS: using max 33 ests per chain, 79200 per kthread [ 128.190835][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.493'. [ 128.433635][ T8231] syzkaller1: entered promiscuous mode [ 128.433659][ T8231] syzkaller1: entered allmulticast mode [ 128.460879][ T8238] block nbd0: server does not support multiple connections per device. [ 128.484689][ T8238] block nbd0: shutting down sockets [ 129.289398][ T8275] erspan0: entered promiscuous mode [ 129.318044][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 129.483185][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 129.644339][ T8292] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 129.644362][ T8292] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 129.663842][ T8292] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 130.621010][ T8331] veth0_macvtap: left promiscuous mode [ 130.629810][ T8330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'. [ 131.284216][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 132.232270][ T8389] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 132.263557][ T8388] bond3: entered promiscuous mode [ 132.263579][ T8388] bond3: entered allmulticast mode [ 132.690507][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.534'. [ 132.727839][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.727893][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249952][ T8446] syzkaller0: entered promiscuous mode [ 133.249974][ T8446] syzkaller0: entered allmulticast mode [ 133.338004][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 133.532025][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'. [ 133.689346][ T5278] veth0_macvtap: entered promiscuous mode [ 133.755169][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 133.755189][ T8470] netlink: 356 bytes leftover after parsing attributes in process `syz.2.543'. [ 133.755201][ T8470] netlink: 68 bytes leftover after parsing attributes in process `syz.2.543'. [ 133.799366][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 133.913016][ T8482] netlink: 27 bytes leftover after parsing attributes in process `syz.4.546'. [ 134.075068][ T8489] x_tables: duplicate underflow at hook 1 [ 134.206140][ T8503] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 134.983690][ T8544] bridge4: entered promiscuous mode [ 134.983714][ T8544] bridge4: entered allmulticast mode [ 135.016441][ T8544] team0: Port device bridge4 added [ 135.020930][ T8550] bridge0: port 3(team0) entered blocking state [ 135.021015][ T8550] bridge0: port 3(team0) entered disabled state [ 135.021298][ T8550] team0: entered allmulticast mode [ 135.021315][ T8550] team_slave_0: entered allmulticast mode [ 135.021348][ T8550] team_slave_1: entered allmulticast mode [ 135.072675][ T8550] team0: entered promiscuous mode [ 135.072695][ T8550] team_slave_0: entered promiscuous mode [ 135.072859][ T8550] team_slave_1: entered promiscuous mode [ 135.103961][ T8550] bridge0: port 3(team0) entered blocking state [ 135.104092][ T8550] bridge0: port 3(team0) entered forwarding state [ 135.364085][ T8546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.815938][ T8580] __nla_validate_parse: 10 callbacks suppressed [ 135.815959][ T8580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 136.013610][ T8590] net_ratelimit: 18 callbacks suppressed [ 136.013628][ T8590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.085607][ T8592] syz_tun: entered allmulticast mode [ 136.102337][ T8591] syz_tun: left allmulticast mode [ 136.213140][ T8599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.570'. [ 136.238186][ T8601] netlink: 56 bytes leftover after parsing attributes in process `syz.0.572'. [ 136.238310][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 136.653047][ T8611] bond4: entered promiscuous mode [ 136.653090][ T8611] bond4: entered allmulticast mode [ 136.653518][ T8611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.998653][ T8623] syzkaller1: entered promiscuous mode [ 136.998675][ T8623] syzkaller1: entered allmulticast mode [ 137.831773][ T8636] bridge0: port 3(team0) entered disabled state [ 137.864879][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.866933][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.873787][ T8638] netlink: 'syz.4.581': attribute type 16 has an invalid length. [ 137.873805][ T8638] netlink: 'syz.4.581': attribute type 17 has an invalid length. [ 137.943559][ T8638] erspan0: left promiscuous mode [ 137.971286][ T8638] bridge0: port 3(team0) entered blocking state [ 137.971409][ T8638] bridge0: port 3(team0) entered forwarding state [ 138.029425][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.029561][ T8638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.038624][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.038784][ T8638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.113419][ T8638] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 138.138344][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 138.161594][ T8645] netlink: 'syz.0.583': attribute type 30 has an invalid length. [ 138.206101][ T8645] bond1: option arp_missed_max: invalid value (0) [ 138.206122][ T8645] bond1: option arp_missed_max: allowed values 1 - 255 [ 138.232006][ T8645] bond1 (unregistering): Released all slaves [ 138.421377][ T8654] netlink: 'syz.4.584': attribute type 62 has an invalid length. [ 138.885669][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 138.966323][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 139.420159][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 139.451532][ T8689] geneve1: left promiscuous mode [ 139.461442][ T8689] bridge2: left promiscuous mode [ 139.463179][ T8689] bond3: left promiscuous mode [ 139.463763][ T8689] bond4: left promiscuous mode [ 139.581271][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 139.581295][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 139.581308][ T8695] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 139.614298][ T8690] block nbd0: Unsupported socket: should be TCP or UNIX. [ 140.292695][ T8733] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.340212][ T8733] bond1: (slave lo): Enslaving as an active interface with an up link [ 140.343704][ T8733] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 140.347905][ T8737] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 140.402710][ T8737] ip6tnl1: entered allmulticast mode [ 140.404417][ T8732] syzkaller0: entered promiscuous mode [ 140.404433][ T8732] syzkaller0: entered allmulticast mode [ 140.417202][ T6443] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.417465][ T6443] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.471569][ T5623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.663129][ T8747] netlink: 'syz.4.610': attribute type 7 has an invalid length. [ 140.663150][ T8747] netlink: 'syz.4.610': attribute type 8 has an invalid length. [ 140.716484][ T5623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.802462][ T8765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.881146][ T8772] __nla_validate_parse: 71 callbacks suppressed [ 140.881164][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.4.616'. [ 140.884858][ T5720] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.932607][ T8756] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 140.963801][ T8756] pim6reg: entered allmulticast mode [ 140.988176][ T8756] pim6reg: left allmulticast mode [ 141.026278][ T8777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.611'. [ 141.176386][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 141.176514][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.619'. [ 141.209518][ T8785] block nbd0: server does not support multiple connections per device. [ 141.209822][ T8785] block nbd0: shutting down sockets [ 141.275109][ T8791] sctp: [Deprecated]: syz.4.621 (pid 8791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.275109][ T8791] Use struct sctp_sack_info instead [ 141.275924][ T8791] netlink: 148 bytes leftover after parsing attributes in process `syz.4.621'. [ 141.391087][ T8799] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 141.446199][ T8801] pim6reg1: entered allmulticast mode [ 141.838011][ T8821] netlink: 380 bytes leftover after parsing attributes in process `syz.0.629'. [ 141.838032][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 141.838044][ T8821] netlink: 7 bytes leftover after parsing attributes in process `syz.0.629'. [ 141.910450][ T8821] bridge2: entered promiscuous mode [ 141.959543][ T8823] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.063454][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 142.412309][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 142.601400][ T8855] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 142.601425][ T8855] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.759781][ T8866] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 142.813990][ T8870] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 142.855595][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.856008][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.940288][ T8862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.947207][ T8862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.219964][ T8866] vxcan0: entered promiscuous mode [ 143.220134][ T8866] vxcan0: entered allmulticast mode [ 143.220147][ T8866] team0: Device vxcan0 is of different type [ 143.253527][ T8870] team0: Device vxcan0 is of different type [ 143.286761][ T6458] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.287415][ T6458] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.287472][ T6458] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.288212][ T6458] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.479297][ T8893] tipc: Enabling of bearer rejected, failed to enable media [ 143.651915][ T8905] openvswitch: netlink: Message has 4 unknown bytes. [ 143.652199][ T8905] openvswitch: netlink: Message has 4 unknown bytes. [ 143.652479][ T8905] openvswitch: netlink: Message has 4 unknown bytes. [ 143.652750][ T8905] openvswitch: netlink: Message has 4 unknown bytes. [ 143.653010][ T8905] openvswitch: netlink: Message has 4 unknown bytes. [ 143.666305][ T8905] openvswitch: netlink: Message has 4 unknown bytes. [ 143.906908][ T8927] netlink: 'syz.4.647': attribute type 4 has an invalid length. [ 143.909273][ T8928] netlink: 'syz.4.647': attribute type 4 has an invalid length. [ 144.093844][ T8919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.093882][ T8919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.267623][ T8956] netlink: 'syz.4.651': attribute type 3 has an invalid length. [ 144.284198][ T8919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.284231][ T8919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.410169][ T8919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.417750][ T8919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.503457][ T8919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.503491][ T8919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.714802][ T6458] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.714834][ T6458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.727084][ T6458] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.727116][ T6458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.727965][ T6458] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.727987][ T6458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.728016][ T6458] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.728037][ T6458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.804866][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.324110][ T9004] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 145.499073][ T8975] ip6gre1: entered allmulticast mode [ 145.503199][ T6458] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.744271][ T9025] netlink: 'syz.2.666': attribute type 21 has an invalid length. [ 145.744416][ T9025] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 145.744429][ T9025] netlink: 'syz.2.666': attribute type 3 has an invalid length. [ 145.779168][ T9027] pimreg: entered allmulticast mode [ 145.845652][ T9026] pimreg: left allmulticast mode [ 145.922751][ T9025] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 145.938559][ T9034] __nla_validate_parse: 72 callbacks suppressed [ 145.938577][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 145.964399][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.141233][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.670'. [ 146.226390][ T9034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.289525][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 146.703444][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 146.716685][ T9084] netlink: 76 bytes leftover after parsing attributes in process `syz.3.675'. [ 146.803586][ T9088] syzkaller0: entered promiscuous mode [ 146.803606][ T9088] syzkaller0: entered allmulticast mode [ 146.853953][ T9089] tipc: Enabled bearer , priority 0 [ 146.908384][ T9089] tipc: Resetting bearer [ 146.935742][ T9087] tipc: Resetting bearer [ 146.952189][ T9105] net_ratelimit: 81 callbacks suppressed [ 146.952205][ T9105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.992122][ T9105] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.680'. [ 146.992180][ T9105] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.680'. [ 147.001118][ T9087] tipc: Disabling bearer [ 147.270890][ T9116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.682'. [ 147.274310][ T9118] TCP: TCP_TX_DELAY enabled [ 147.284375][ T9120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.682'. [ 147.323374][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 147.500226][ T31] audit: type=1804 audit(1791672772.550:2): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.683" name="cgroup.controllers" dev="tmpfs" ino=665 res=1 errno=0 [ 147.500276][ T31] audit: type=1800 audit(1791672772.550:3): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.683" name="cgroup.controllers" dev="tmpfs" ino=665 res=0 errno=0 [ 147.736058][ T9131] netlink: 'syz.1.684': attribute type 2 has an invalid length. [ 147.793874][ T9131] : entered promiscuous mode [ 147.801217][ T9139] veth1_to_bond: entered promiscuous mode [ 147.844506][ T9138] veth1_to_bond: left promiscuous mode [ 148.024260][ T9152] syzkaller0: entered promiscuous mode [ 148.024282][ T9152] syzkaller0: entered allmulticast mode [ 148.507389][ T9177] macvlan1: mtu less than device minimum [ 148.933541][ T9209] bond0: entered promiscuous mode [ 148.933561][ T9209] bond_slave_0: entered promiscuous mode [ 148.934446][ T9209] bond_slave_1: entered promiscuous mode [ 148.942827][ T9209] bridge0: entered promiscuous mode [ 148.947084][ T9209] debugfs: 'hsr1' already exists in 'hsr' [ 148.947744][ T9209] Cannot create hsr debugfs directory [ 148.947806][ T9209] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 149.448277][ T9230] netlink: 'syz.3.709': attribute type 4 has an invalid length. [ 149.526067][ T9232] netlink: 'syz.3.709': attribute type 4 has an invalid length. [ 149.684831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.132981][ T9251] netlink: 'syz.4.713': attribute type 2 has an invalid length. [ 150.653693][ T9272] netlink: 'syz.2.719': attribute type 2 has an invalid length. [ 150.977710][ T9308] netlink: 'syz.2.724': attribute type 16 has an invalid length. [ 150.977730][ T9308] __nla_validate_parse: 9 callbacks suppressed [ 150.977740][ T9308] netlink: 556 bytes leftover after parsing attributes in process `syz.2.724'. [ 151.177951][ T9320] bridge0: port 4(macsec1) entered blocking state [ 151.178114][ T9320] bridge0: port 4(macsec1) entered disabled state [ 151.178195][ T9320] macsec1: entered allmulticast mode [ 151.178204][ T9320] bridge0: entered allmulticast mode [ 151.178225][ T9320] bridge0: entered promiscuous mode [ 151.180588][ T9320] macsec1: left allmulticast mode [ 151.180599][ T9320] bridge0: left allmulticast mode [ 151.203216][ T5623] bridge0: left promiscuous mode [ 151.354091][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'. [ 151.393599][ T9325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.572431][ T9338] tun0: tun_chr_ioctl cmd 1074812117 [ 151.793314][ T9349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.735'. [ 151.863130][ T9356] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 151.941652][ T9356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.970512][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 152.028188][ T9356] bond2: (slave bridge4): making interface the new active one [ 152.042557][ T9356] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 152.291489][ T9381] tc_dump_action: action bad kind [ 152.399425][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 152.399728][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 152.929247][ T9420] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 153.210096][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 153.442235][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 153.442487][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 153.520747][ T9432] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 153.570485][ T9435] netlink: 'syz.4.758': attribute type 2 has an invalid length. [ 153.573530][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.573592][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.630641][ T9435] þ: entered promiscuous mode [ 154.028516][ T9457] Bluetooth: hci0: unsupported parameter 5134 [ 154.028535][ T9457] Bluetooth: hci0: unsupported parameter 8192 [ 154.028557][ T9457] Bluetooth: hci0: unsupported parameter 5134 [ 154.028567][ T9457] Bluetooth: hci0: unsupported parameter 8192 [ 154.350824][ T9487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.408113][ T9488] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 154.409689][ T9488] bond3 (unregistering): Released all slaves [ 154.713235][ T9506] tipc: Enabling of bearer rejected, failed to enable media [ 154.732058][ T9506] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 154.732139][ T9506] syzkaller1: linktype set to 773 [ 154.993160][ T9513] netlink: 'syz.0.778': attribute type 4 has an invalid length. [ 155.221069][ T9521] pimreg: entered allmulticast mode [ 155.223940][ T9521] pimreg: left allmulticast mode [ 155.289904][ T9523] syzkaller0: entered promiscuous mode [ 155.289924][ T9523] syzkaller0: entered allmulticast mode [ 155.389535][ T9535] netlink: 'syz.2.786': attribute type 27 has an invalid length. [ 155.461983][ T9537] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20004 [ 155.594241][ T9539] syz.0.788: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.594484][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(full) [ 155.594506][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.594524][ T9539] Call Trace: [ 155.594532][ T9539] [ 155.594544][ T9539] dump_stack_lvl+0xe8/0x150 [ 155.594586][ T9539] warn_alloc+0x24d/0x270 [ 155.594607][ T9539] ? kasan_save_track+0x4f/0x80 [ 155.594630][ T9539] ? kasan_save_track+0x3e/0x80 [ 155.594650][ T9539] ? __pfx_warn_alloc+0x10/0x10 [ 155.594667][ T9539] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 155.594684][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.594719][ T9539] __vmalloc_node_range_noprof+0x127/0x1540 [ 155.594758][ T9539] ? rcu_is_watching+0x16/0xb0 [ 155.594786][ T9539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.594805][ T9539] ? __kmalloc_cache_noprof+0x321/0x600 [ 155.594827][ T9539] ? __kmalloc_cache_noprof+0x14d/0x600 [ 155.594847][ T9539] ? xskq_create+0x56/0x220 [ 155.594874][ T9539] xskq_create+0x148/0x220 [ 155.594896][ T9539] ? xsk_init_queue+0x8a/0xe0 [ 155.594920][ T9539] xsk_init_queue+0x8a/0xe0 [ 155.594951][ T9539] xsk_setsockopt+0x52a/0x960 [ 155.594976][ T9539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.594997][ T9539] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.595033][ T9539] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.595059][ T9539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.595081][ T9539] do_sock_setsockopt+0x17c/0x1b0 [ 155.595105][ T9539] __x64_sys_setsockopt+0x13d/0x1b0 [ 155.595129][ T9539] do_syscall_64+0x166/0x520 [ 155.595153][ T9539] ? trace_irq_disable+0x3b/0x140 [ 155.595172][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.595190][ T9539] ? clear_bhb_loop+0x70/0xc0 [ 155.595212][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.595229][ T9539] RIP: 0033:0x7f0f6b59e1d9 [ 155.595253][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.595268][ T9539] RSP: 002b:00007f0f6c3ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.595287][ T9539] RAX: ffffffffffffffda RBX: 00007f0f6b825fa0 RCX: 00007f0f6b59e1d9 [ 155.595300][ T9539] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 155.595312][ T9539] RBP: 00007f0f6b635888 R08: 0000000000000004 R09: 0000000000000000 [ 155.595323][ T9539] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 155.595334][ T9539] R13: 00007f0f6b826038 R14: 00007f0f6b825fa0 R15: 00007fff50d59188 [ 155.595366][ T9539] [ 155.624121][ T9539] Mem-Info: [ 155.624139][ T9539] active_anon:8079 inactive_anon:0 isolated_anon:0 [ 155.624139][ T9539] active_file:0 inactive_file:43404 isolated_file:0 [ 155.624139][ T9539] unevictable:0 dirty:195 writeback:0 [ 155.624139][ T9539] slab_reclaimable:11451 slab_unreclaimable:96431 [ 155.624139][ T9539] mapped:29511 shmem:539 pagetables:1302 [ 155.624139][ T9539] sec_pagetables:0 bounce:0 [ 155.624139][ T9539] kernel_misc_reclaimable:0 [ 155.624139][ T9539] free:1315912 free_pcp:17040 free_cma:0 [ 155.624186][ T9539] Node 0 active_anon:32316kB inactive_anon:0kB active_file:0kB inactive_file:173412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118044kB dirty:776kB writeback:0kB shmem:2156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14376kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.624235][ T9539] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.624278][ T9539] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.624333][ T9539] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 155.624365][ T9539] Node 0 DMA32 free:1305404kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32316kB inactive_anon:0kB active_file:0kB inactive_file:173412kB unevictable:0kB writepending:776kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:68156kB local_pcp:37560kB free_cma:0kB [ 155.624415][ T9539] lowmem_reserve[]: 0 0 0 0 0 [ 155.624452][ T9539] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.624500][ T9539] lowmem_reserve[]: 0 0 0 0 0 [ 155.624530][ T9539] Node 1 Normal free:3942884kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 155.624581][ T9539] lowmem_reserve[]: 0 0 0 0 0 [ 155.624612][ T9539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.624793][ T9539] Node 0 DMA32: 1125*4kB (UM) 533*8kB (M) 354*16kB (ME) 89*32kB (ME) 95*64kB (UME) 28*128kB (UM) 8*256kB (U) 3*512kB (UM) 1*1024kB (U) 4*2048kB (UME) 309*4096kB (UM) = 1305404kB [ 155.624936][ T9539] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 155.625011][ T9539] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 4*16kB (UM) 4*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942884kB [ 155.625150][ T9539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.625164][ T9539] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.625177][ T9539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.625191][ T9539] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.625204][ T9539] 43939 total pagecache pages [ 155.625217][ T9539] 0 pages in swap cache [ 155.625223][ T9539] Free swap = 124996kB [ 155.625229][ T9539] Total swap = 124996kB [ 155.625240][ T9539] 2097051 pages RAM [ 155.625246][ T9539] 0 pages HighMem/MovableOnly [ 155.625253][ T9539] 433508 pages reserved [ 155.625259][ T9539] 0 pages cma reserved [ 155.897972][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 155.912624][ T9556] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 156.010175][ T9556] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 156.141894][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.142116][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.142320][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.142532][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.142740][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.142944][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.143147][ T9560] netlink: 'syz.1.790': attribute type 7 has an invalid length. [ 156.209863][ T9571] __nla_validate_parse: 11 callbacks suppressed [ 156.209882][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 156.209894][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 156.735020][ T9595] tipc: Started in network mode [ 156.735049][ T9595] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 156.735305][ T9595] tipc: Enabled bearer , priority 10 [ 156.982021][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 157.011690][ T9599] set match dimension is over the limit! [ 157.117616][ T9615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.118462][ T9615] bridge0: port 4(bond5) entered blocking state [ 157.118628][ T9615] bridge0: port 4(bond5) entered disabled state [ 157.118762][ T9615] bond5: entered allmulticast mode [ 157.121478][ T9615] bond5: entered promiscuous mode [ 157.155366][ T9615] bridge0: port 4(bond5) entered blocking state [ 157.155476][ T9615] bridge0: port 4(bond5) entered forwarding state [ 157.281395][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 157.406188][ T9627] netlink: 48 bytes leftover after parsing attributes in process `syz.2.807'. [ 157.425549][ T6441] bridge0: port 4(bond5) entered disabled state [ 157.601823][ T9639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.326331][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.366425][ T9641] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 159.372886][ T5720] tipc: Node number set to 10136234 [ 159.713951][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 159.840161][ T9681] Bluetooth: MGMT ver 1.23 [ 159.859315][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 159.880327][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 159.915223][ T9684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.963501][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.993852][ T9675] bond3: (slave team0): Enslaving as an active interface with an up link [ 160.110088][ T9693] validate_nla: 57 callbacks suppressed [ 160.110110][ T9693] netlink: 'syz.3.825': attribute type 32 has an invalid length. [ 160.286853][ T9706] tipc: MTU too low for tipc bearer [ 160.632780][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 160.637894][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 160.887241][ T9739] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 160.902990][ T9740] netlink: Conntrack attr has 8 unknown bytes [ 160.903022][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.022254][ T9750] nbd: must specify a device to reconfigure [ 161.263892][ T9754] IPVS: Error connecting to the multicast addr [ 161.351309][ T9774] __nla_validate_parse: 11 callbacks suppressed [ 161.351328][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 161.431650][ T9776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.846'. [ 161.486213][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 161.565892][ T9784] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 161.568191][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 161.568225][ T9785] netlink: 312 bytes leftover after parsing attributes in process `syz.0.849'. [ 161.568269][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 161.573664][ T9787] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 161.805800][ T9802] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 161.808731][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'. [ 161.999305][ T9812] ip_tables: iptables: counters copy to user failed while replacing table [ 162.027994][ T9812] netlink: 'syz.2.854': attribute type 16 has an invalid length. [ 162.028013][ T9812] netlink: 'syz.2.854': attribute type 17 has an invalid length. [ 162.143813][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.147305][ T9812] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.152129][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.170866][ T9826] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 162.186393][ T9827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'. [ 162.193077][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.194464][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.199924][ T9812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.199943][ T9812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.203069][ T9812] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 162.256659][ T9822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 162.270582][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.270672][ T6439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.278974][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.279074][ T6439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.282977][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 162.400018][ T9826] bond4: entered promiscuous mode [ 162.400516][ T9826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.502320][ T9828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.502984][ T9828] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 162.503004][ T9828] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 162.522067][ T9828] bond4: (slave gre1): making interface the new active one [ 162.522088][ T9828] gre1: entered promiscuous mode [ 162.531044][ T9828] bond4: (slave gre1): Enslaving as an active interface with an up link [ 162.574588][ T9830] bond4 (unregistering): (slave gre1): Releasing backup interface [ 162.574613][ T9830] gre1: left promiscuous mode [ 162.597051][ T9830] bond4 (unregistering): Released all slaves [ 162.659515][ T9849] netlink: 'syz.1.861': attribute type 13 has an invalid length. [ 162.659565][ T9849] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 163.157695][ T9878] bridge4 (unregistering): left promiscuous mode [ 163.161148][ T9878] team0: Port device bridge4 removed [ 163.694180][ T9912] vlan4: entered promiscuous mode [ 163.694198][ T9912] syz_tun: entered promiscuous mode [ 163.811271][ T9917] lo speed is unknown, defaulting to 1000 [ 163.836903][ T9917] lo speed is unknown, defaulting to 1000 [ 163.837968][ T9917] lo speed is unknown, defaulting to 1000 [ 163.992263][ T9929] sctp: [Deprecated]: syz.3.879 (pid 9929) Use of int in max_burst socket option. [ 163.992263][ T9929] Use struct sctp_assoc_value instead [ 164.141460][ T991] lo speed is unknown, defaulting to 1000 [ 164.142322][ T9917] infiniband syz0: set active [ 164.142339][ T9917] infiniband syz0: added lo [ 164.187224][ T9917] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 164.187258][ T9917] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 164.187290][ T9917] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 164.210295][ T9917] RDS/IB: syz0: added [ 164.210882][ T9917] smc: adding ib device syz0 with port count 1 [ 164.210995][ T9917] smc: ib device syz0 port 1 has no pnetid [ 164.213179][ T5630] lo speed is unknown, defaulting to 1000 [ 164.226229][ T9917] lo speed is unknown, defaulting to 1000 [ 164.563580][ T9917] lo speed is unknown, defaulting to 1000 [ 164.926944][ T9958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.980751][ T9956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.031564][ T9956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.092752][ T9963] netlink: 'syz.4.890': attribute type 21 has an invalid length. [ 165.123738][ T9917] lo speed is unknown, defaulting to 1000 [ 165.343724][ T9971] ip6erspan1: entered allmulticast mode [ 165.657235][ T9917] lo speed is unknown, defaulting to 1000 [ 166.133290][ T9917] lo speed is unknown, defaulting to 1000 [ 166.450798][ T9988] syzkaller0: entered promiscuous mode [ 166.450822][ T9988] syzkaller0: entered allmulticast mode [ 166.453611][ T9994] ip_tables: iptables: counters copy to user failed while replacing table [ 166.677115][T10000] geneve1: entered promiscuous mode [ 166.677137][T10000] geneve1: entered allmulticast mode [ 166.690521][T10000] siw: device registration error -23 [ 166.781807][T10002] bridge0: Device is already in use. [ 166.961874][T10009] gre0: entered promiscuous mode [ 166.961896][T10009] gre0: entered allmulticast mode [ 166.969255][T10009] __nla_validate_parse: 120 callbacks suppressed [ 166.969273][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 167.004404][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 167.059771][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 167.164960][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'. [ 167.166416][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'. [ 167.188809][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.904'. [ 169.222811][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 169.403830][T10063] bond6: entered allmulticast mode [ 169.404212][T10063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.473385][T10068] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 169.700205][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'. [ 169.757782][T10094] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 169.757815][T10094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.763409][T10092] netlink: 'syz.0.921': attribute type 11 has an invalid length. [ 169.798858][T10093] netlink: 'syz.0.921': attribute type 11 has an invalid length. [ 169.844850][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.121649][T10104] ip_tables: iptables: counters copy to user failed while replacing table [ 170.270042][ T9792] udevd[9792]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 170.558644][T10129] netlink: 14 bytes leftover after parsing attributes in process `syz.3.928'. [ 170.637617][T10129] bond0 (unregistering): left promiscuous mode [ 170.637640][T10129] bond_slave_0: left promiscuous mode [ 170.637911][T10129] bond_slave_1: left promiscuous mode [ 170.652317][T10129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.720185][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 170.741082][T10129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.780089][T10129] bond0 (unregistering): Released all slaves [ 170.862175][ T5747] infiniband syz1: ib_query_port failed (-19) [ 170.890757][ T6452] smbdirect: ib_dev[syz1] removed [ 171.424025][T10163] pim6reg: entered allmulticast mode [ 171.450182][T10162] pim6reg: left allmulticast mode [ 171.829049][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880681f9400: rx timeout, send abort [ 171.831988][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880681f9400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.941698][T10180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.007188][T10186] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.022442][T10186] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 172.051704][T10180] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 172.053813][T10180] bond4 (unregistering): Released all slaves [ 172.182518][T10189] __nla_validate_parse: 6 callbacks suppressed [ 172.182537][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 172.320559][T10201] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 172.616115][T10216] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 172.728128][T10223] Bluetooth: hci0: unsupported parameter 5134 [ 172.728147][T10223] Bluetooth: hci0: unsupported parameter 8192 [ 172.728159][T10223] Bluetooth: hci0: unsupported parameter 5134 [ 172.728169][T10223] Bluetooth: hci0: unsupported parameter 8192 [ 172.877508][T10230] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 172.962125][T10231] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 172.970978][T10229] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 173.275627][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 173.590710][T10254] bridge0: port 3(hsr0) entered blocking state [ 173.590794][T10254] bridge0: port 3(hsr0) entered disabled state [ 173.590940][T10254] hsr0: entered allmulticast mode [ 173.590957][T10254] hsr_slave_0: entered allmulticast mode [ 173.590972][T10254] hsr_slave_1: entered allmulticast mode [ 173.611996][T10254] hsr0: entered promiscuous mode [ 173.621271][T10254] bridge0: port 3(hsr0) entered blocking state [ 173.621398][T10254] bridge0: port 3(hsr0) entered forwarding state [ 173.857847][T10270] sctp: [Deprecated]: syz.2.970 (pid 10270) Use of int in max_burst socket option. [ 173.857847][T10270] Use struct sctp_assoc_value instead [ 173.959023][T10276] netlink: 'syz.3.972': attribute type 15 has an invalid length. [ 174.013947][T10276] netlink: 'syz.3.972': attribute type 15 has an invalid length. [ 174.026733][ T6441] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.026787][ T6441] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.026817][ T6441] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.026847][ T6441] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 174.141841][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 174.245629][T10288] netlink: 3 bytes leftover after parsing attributes in process `syz.3.974'. [ 174.286713][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 174.306300][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 174.324889][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.325603][ C1] [ 174.335389][ C1] ============================================ [ 174.341534][ C1] WARNING: possible recursive locking detected [ 174.347694][ C1] syzkaller #0 Not tainted [ 174.352103][ C1] -------------------------------------------- [ 174.358236][ C1] syz-executor/5621 is trying to acquire lock: [ 174.364374][ C1] ffff888037645070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 174.373418][ C1] [ 174.373418][ C1] but task is already holding lock: [ 174.380772][ C1] ffff8880364d1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x3cd/0xcf0 [ 174.391037][ C1] [ 174.391037][ C1] other info that might help us debug this: [ 174.399085][ C1] Possible unsafe locking scenario: [ 174.399085][ C1] [ 174.406521][ C1] CPU0 [ 174.409790][ C1] ---- [ 174.413057][ C1] lock(&hsr->seqnr_lock); [ 174.417565][ C1] lock(&hsr->seqnr_lock); [ 174.422083][ C1] [ 174.422083][ C1] *** DEADLOCK *** [ 174.422083][ C1] [ 174.430230][ C1] May be due to missing lock nesting notation [ 174.430230][ C1] [ 174.438554][ C1] locks held by syz-executor/5621: 16, last CPU#1: [ 174.445049][ C1] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 174.453785][ C1] #1: ffff88803673b440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 174.462865][ C1] #2: ffff8880795db440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 174.472111][ C1] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 174.481634][ C1] #4: ffff888077db9078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 174.492120][ C1] #5: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 174.501643][ C1] #6: ffff888074b1bcd8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 174.511931][ C1] #7: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x127/0x530 [ 174.521889][ C1] #8: ffffc90000a18cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 174.531938][ C1] #9: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 174.541113][ C1] #10: ffff8880364d1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x3cd/0xcf0 [ 174.551943][ C1] #11: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb9/0x2b70 [ 174.561551][ C1] #12: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 174.571567][ C1] #13: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x182/0x19b0 [ 174.580924][ C1] #14: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 174.590946][ C1] #15: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 174.600197][ C1] [ 174.600197][ C1] stack backtrace: [ 174.606086][ C1] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 174.615552][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.625627][ C1] Call Trace: [ 174.628911][ C1] [ 174.631760][ C1] dump_stack_lvl+0xe8/0x150 [ 174.636367][ C1] print_deadlock_bug+0x27a/0x290 [ 174.641395][ C1] __lock_acquire+0x25db/0x2de0 [ 174.646265][ C1] ? __lock_acquire+0x747/0x2de0 [ 174.651205][ C1] ? __lock_acquire+0x747/0x2de0 [ 174.656158][ C1] lock_acquire+0x115/0x350 [ 174.660669][ C1] ? hsr_dev_xmit+0x237/0x360 [ 174.665367][ C1] ? hsr_dev_xmit+0x237/0x360 [ 174.670051][ C1] _raw_spin_lock_bh+0x36/0x50 [ 174.674820][ C1] ? hsr_dev_xmit+0x237/0x360 [ 174.679495][ C1] hsr_dev_xmit+0x237/0x360 [ 174.683997][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 174.688592][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 174.693719][ C1] __dev_queue_xmit+0x14d1/0x3920 [ 174.698757][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 174.703884][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 174.709191][ C1] ? ebt_do_table+0x25fd/0x27c0 [ 174.714048][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 174.719339][ C1] ? ebt_do_table+0x25fd/0x27c0 [ 174.724202][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 174.729493][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 174.734690][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 174.740067][ C1] ? br_nf_post_routing+0x1b0/0xee0 [ 174.745261][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 174.750627][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 174.756509][ C1] NF_HOOK+0x360/0x3f0 [ 174.760569][ C1] ? NF_HOOK+0xa2/0x3f0 [ 174.764713][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 174.769298][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 174.775183][ C1] ? lock_acquire+0x115/0x350 [ 174.779852][ C1] br_forward_finish+0xd3/0x130 [ 174.784696][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 174.790588][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 174.796035][ C1] NF_HOOK+0x360/0x3f0 [ 174.800096][ C1] ? NF_HOOK+0xa2/0x3f0 [ 174.804240][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 174.808818][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 174.813829][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 174.819285][ C1] ? __skb_clone+0x5c/0x6c0 [ 174.823777][ C1] ? br_handle_vlan+0x60/0x580 [ 174.828527][ C1] __br_forward+0x41e/0x5d0 [ 174.833023][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 174.838472][ C1] maybe_deliver+0x373/0x5b0 [ 174.843052][ C1] ? br_flood_port+0x325/0x4b0 [ 174.847807][ C1] br_flood+0x142/0x650 [ 174.851956][ C1] ? br_dev_xmit+0x182/0x19b0 [ 174.856628][ C1] br_dev_xmit+0x11d1/0x19b0 [ 174.861214][ C1] ? __flow_hash_from_keys+0x431/0x6c0 [ 174.866660][ C1] ? br_dev_xmit+0x182/0x19b0 [ 174.871332][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 174.876260][ C1] ? netif_skb_features+0x8ba/0xf20 [ 174.881452][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 174.886558][ C1] __dev_queue_xmit+0x14d1/0x3920 [ 174.891572][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.897713][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 174.902814][ C1] ? copy_process+0x1e79/0x4400 [ 174.907661][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 174.913024][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 174.918040][ C1] ? hsr_addr_subst_dest+0x30a/0xaa0 [ 174.923321][ C1] ? skb_clone+0x246/0x3a0 [ 174.927729][ C1] hsr_forward_skb+0x1701/0x2b70 [ 174.932657][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 174.938714][ C1] ? hsr_forward_skb+0xb9/0x2b70 [ 174.943644][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 174.948913][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.953934][ C1] ? __skb_pad+0x3f8/0x600 [ 174.958338][ C1] send_hsr_supervision_frame+0x733/0xcf0 [ 174.964049][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 174.970280][ C1] hsr_announce+0x1db/0x370 [ 174.974777][ C1] ? hsr_announce+0x89/0x370 [ 174.979353][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 174.984365][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.989742][ C1] call_timer_fn+0x18d/0x5f0 [ 174.994324][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 174.999331][ C1] ? call_timer_fn+0xd5/0x5f0 [ 175.003996][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 175.009102][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.014291][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 175.019301][ C1] __run_timer_base+0x652/0x8b0 [ 175.024149][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 175.029510][ C1] ? ktime_get+0x1f5/0x220 [ 175.033915][ C1] ? lapic_next_event+0x11/0x20 [ 175.038753][ C1] run_timer_softirq+0xb7/0x170 [ 175.043593][ C1] handle_softirqs+0x226/0x860 [ 175.048351][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 175.053110][ C1] __irq_exit_rcu+0xcb/0x220 [ 175.057694][ C1] irq_exit_rcu+0x9/0x30 [ 175.061930][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 175.067552][ C1] [ 175.070468][ C1] [ 175.073386][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.079358][ C1] RIP: 0010:debug_smp_processor_id+0x12/0x20 [ 175.085335][ C1] Code: cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 d8 6d 8c 48 c7 c6 60 d8 6d 8c 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 175.104933][ C1] RSP: 0018:ffffc90003be71f8 EFLAGS: 00000287 [ 175.110986][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88801ef61f40 [ 175.118943][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dd860 RDI: ffffffff8c6dd820 [ 175.126901][ C1] RBP: 0000000000000001 R08: ffff88801f4b751f R09: 1ffff11003e96ea3 [ 175.134859][ C1] R10: dffffc0000000000 R11: ffffed1003e96ea4 R12: 00000000000624a9 [ 175.142814][ C1] R13: ffffffff8244eb27 R14: ffffffff8fd5c8a0 R15: ffff88801f4b74d0 [ 175.150771][ C1] ? page_table_check_set+0x127/0x530 [ 175.156141][ C1] rcu_is_watching+0x16/0xb0 [ 175.160725][ C1] lock_release+0x4b/0x3c0 [ 175.165131][ C1] ? page_table_check_set+0x127/0x530 [ 175.170497][ C1] page_table_check_set+0x4c8/0x530 [ 175.175683][ C1] ? page_table_check_set+0x127/0x530 [ 175.181047][ C1] copy_pmd_range+0x4adc/0x5c10 [ 175.185888][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 175.191346][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 175.196528][ C1] ? do_syscall_64+0x166/0x520 [ 175.201286][ C1] ? __lock_acquire+0x747/0x2de0 [ 175.206211][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 175.211407][ C1] copy_page_range+0xc82/0x1290 [ 175.216258][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 175.221534][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 175.228460][ C1] dup_mmap+0xf17/0x1dc0 [ 175.232694][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 175.237358][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.242384][ C1] ? lock_acquire+0x115/0x350 [ 175.247057][ C1] copy_mm+0x115/0x480 [ 175.251117][ C1] copy_process+0x1e79/0x4400 [ 175.255782][ C1] ? __lock_acquire+0x747/0x2de0 [ 175.260711][ C1] ? copy_process+0xd16/0x4400 [ 175.265476][ C1] ? __pfx_copy_process+0x10/0x10 [ 175.270494][ C1] kernel_clone+0x2d7/0x940 [ 175.274991][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 175.280012][ C1] __x64_sys_clone+0x1b6/0x230 [ 175.284772][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 175.290055][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 175.295331][ C1] do_syscall_64+0x166/0x520 [ 175.299910][ C1] ? trace_irq_disable+0x3b/0x140 [ 175.304919][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.310970][ C1] ? clear_bhb_loop+0x70/0xc0 [ 175.315635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.321513][ C1] RIP: 0033:0x7f20b95c6c52 [ 175.325915][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 175.345507][ C1] RSP: 002b:00007ffda63f85d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 175.353907][ C1] RAX: ffffffffffffffda RBX: 00007ffda63f85d0 RCX: 00007f20b95c6c52 [ 175.361864][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 175.369818][ C1] RBP: 00007ffda63f875c R08: 0000000000000000 R09: 0000000000000001 [ 175.377772][ C1] R10: 00005555731887d0 R11: 0000000000000246 R12: 0000000000000001 [ 175.385731][ C1] R13: 00000000000927c0 R14: 000000000002a78e R15: 00007ffda63f87b0 [ 175.393700][ C1]