last executing test programs: 1m19.390639423s ago: executing program 3 (id=791): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newtclass={0xc4, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xb, 0x5}, {0xb, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x2, 0x0, 0x1, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x3, 0x9, 0x40, 0x14a56307, 0x8000, 0x7, 0xafd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0xa, 0x0, 0x43fe, 0x9, 0x466b18ad, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0xf361, 0x1, 0x7, 0x7c}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x84, 0x8c, 0x800, 0x1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="b4ded9542ed08bc78e989cd7e07672a4", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@bcast, @default, @netrom, @rose, @null, @bcast, @null, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x3, 0x5}, {0xb, 0x4, 0x6}, {0x0, 0x2, 0x2315}, {0x5, 0x0, 0x3ff}, {0xc, 0x4, 0x1}, {0xe, 0x0, 0x6}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/5, 0xad, 0x5, 0x0, 0x5088, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x2, 0x40010, r4, 0x1, '\x00', r2, r5, 0x2, 0x3, 0x0, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x47f82ed127665c84, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)={0x2, 0x10, 0x4, 0x6, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x5, 0xd4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x4, 0x0, 0xa8, 0x0, "f0b041d5b664d9d3fd238945f93c92e41d083d788b"}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0xf9, 0x68, "8131ddfb451e4e5f9e64875f45589fde8d64382ca322078844f3c58ead3897fd0422678e3f97a23ef7c11ebeb248c40f39da6fb07333b26ebc6c40b106106add197bc7c2ab37e13a9d97409d982a2f95f899c9fc5ae33cfe349ba3c092bf4177eb15f9b98a8ee3be"}, @sadb_lifetime={0x4, 0x4, 0x3, 0x8000000000000001, 0x401, 0xc66}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x10, 0xaf, 0x3, 0xe0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x6, 0x4, 0x40000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x9, 0xbc, "7d18c835a57953a5ac66e2d184b676b4d4fd2d5e151cddea95858a1740547fa019f57629eb0e78ed7c398d26381f42f630314086739022b4760e484641f0dcd85264eff54b7de3f1e0adff8edeea925996d49396b2db4c159a19d9b572ba8e266eb344bb14d5e7dc3a6cb7407f0db72a6105b7c605138d21b0a5b68ad08679d91a00418e8bea908a6bd3acc57c9c2381a09f4039fd5f22539acb116768dfd5609c4684eb74a6dc65ad1e0f8494789162e3dd97272232d80e7e8b7a2c"}]}, 0x1e8}}, 0x200000c0) getpeername$ax25(r1, &(0x7f0000000980)={{0x3, @null}, [@default, @netrom, @remote, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000a00)=0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x739}, [@alu={0x7, 0x1, 0xa, 0xb, 0x7, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0xa, 0x7, 0x5, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x8000, 0x35, &(0x7f0000000b00)=""/53, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r7], &(0x7f0000000bc0)=[{0x0, 0x1, 0x7, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000000cc0)={0x1a, 0x334, 0x6, 0x3, 0x4d, 0x7, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000d00), 0x4) r10 = socket(0x27, 0x2, 0xe44e) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x6841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) socket(0x18, 0x2, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000fc0)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r13, 0x13, 0x1, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000011c0)='.\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r13, r9, 0x2a, 0x30, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) 1m8.008915105s ago: executing program 3 (id=791): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newtclass={0xc4, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xb, 0x5}, {0xb, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x2, 0x0, 0x1, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x3, 0x9, 0x40, 0x14a56307, 0x8000, 0x7, 0xafd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0xa, 0x0, 0x43fe, 0x9, 0x466b18ad, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0xf361, 0x1, 0x7, 0x7c}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x84, 0x8c, 0x800, 0x1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="b4ded9542ed08bc78e989cd7e07672a4", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@bcast, @default, @netrom, @rose, @null, @bcast, @null, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x3, 0x5}, {0xb, 0x4, 0x6}, {0x0, 0x2, 0x2315}, {0x5, 0x0, 0x3ff}, {0xc, 0x4, 0x1}, {0xe, 0x0, 0x6}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/5, 0xad, 0x5, 0x0, 0x5088, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x2, 0x40010, r4, 0x1, '\x00', r2, r5, 0x2, 0x3, 0x0, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x47f82ed127665c84, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)={0x2, 0x10, 0x4, 0x6, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x5, 0xd4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x4, 0x0, 0xa8, 0x0, "f0b041d5b664d9d3fd238945f93c92e41d083d788b"}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0xf9, 0x68, "8131ddfb451e4e5f9e64875f45589fde8d64382ca322078844f3c58ead3897fd0422678e3f97a23ef7c11ebeb248c40f39da6fb07333b26ebc6c40b106106add197bc7c2ab37e13a9d97409d982a2f95f899c9fc5ae33cfe349ba3c092bf4177eb15f9b98a8ee3be"}, @sadb_lifetime={0x4, 0x4, 0x3, 0x8000000000000001, 0x401, 0xc66}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x10, 0xaf, 0x3, 0xe0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x6, 0x4, 0x40000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x9, 0xbc, "7d18c835a57953a5ac66e2d184b676b4d4fd2d5e151cddea95858a1740547fa019f57629eb0e78ed7c398d26381f42f630314086739022b4760e484641f0dcd85264eff54b7de3f1e0adff8edeea925996d49396b2db4c159a19d9b572ba8e266eb344bb14d5e7dc3a6cb7407f0db72a6105b7c605138d21b0a5b68ad08679d91a00418e8bea908a6bd3acc57c9c2381a09f4039fd5f22539acb116768dfd5609c4684eb74a6dc65ad1e0f8494789162e3dd97272232d80e7e8b7a2c"}]}, 0x1e8}}, 0x200000c0) getpeername$ax25(r1, &(0x7f0000000980)={{0x3, @null}, [@default, @netrom, @remote, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000a00)=0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x739}, [@alu={0x7, 0x1, 0xa, 0xb, 0x7, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0xa, 0x7, 0x5, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x8000, 0x35, &(0x7f0000000b00)=""/53, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r7], &(0x7f0000000bc0)=[{0x0, 0x1, 0x7, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000000cc0)={0x1a, 0x334, 0x6, 0x3, 0x4d, 0x7, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000d00), 0x4) r10 = socket(0x27, 0x2, 0xe44e) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x6841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) socket(0x18, 0x2, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000fc0)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r13, 0x13, 0x1, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000011c0)='.\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r13, r9, 0x2a, 0x30, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) 58.738284694s ago: executing program 3 (id=791): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newtclass={0xc4, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xb, 0x5}, {0xb, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x2, 0x0, 0x1, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x3, 0x9, 0x40, 0x14a56307, 0x8000, 0x7, 0xafd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0xa, 0x0, 0x43fe, 0x9, 0x466b18ad, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0xf361, 0x1, 0x7, 0x7c}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x84, 0x8c, 0x800, 0x1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="b4ded9542ed08bc78e989cd7e07672a4", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@bcast, @default, @netrom, @rose, @null, @bcast, @null, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x3, 0x5}, {0xb, 0x4, 0x6}, {0x0, 0x2, 0x2315}, {0x5, 0x0, 0x3ff}, {0xc, 0x4, 0x1}, {0xe, 0x0, 0x6}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/5, 0xad, 0x5, 0x0, 0x5088, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x2, 0x40010, r4, 0x1, '\x00', r2, r5, 0x2, 0x3, 0x0, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x47f82ed127665c84, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)={0x2, 0x10, 0x4, 0x6, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x5, 0xd4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x4, 0x0, 0xa8, 0x0, "f0b041d5b664d9d3fd238945f93c92e41d083d788b"}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0xf9, 0x68, "8131ddfb451e4e5f9e64875f45589fde8d64382ca322078844f3c58ead3897fd0422678e3f97a23ef7c11ebeb248c40f39da6fb07333b26ebc6c40b106106add197bc7c2ab37e13a9d97409d982a2f95f899c9fc5ae33cfe349ba3c092bf4177eb15f9b98a8ee3be"}, @sadb_lifetime={0x4, 0x4, 0x3, 0x8000000000000001, 0x401, 0xc66}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x10, 0xaf, 0x3, 0xe0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x6, 0x4, 0x40000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x9, 0xbc, "7d18c835a57953a5ac66e2d184b676b4d4fd2d5e151cddea95858a1740547fa019f57629eb0e78ed7c398d26381f42f630314086739022b4760e484641f0dcd85264eff54b7de3f1e0adff8edeea925996d49396b2db4c159a19d9b572ba8e266eb344bb14d5e7dc3a6cb7407f0db72a6105b7c605138d21b0a5b68ad08679d91a00418e8bea908a6bd3acc57c9c2381a09f4039fd5f22539acb116768dfd5609c4684eb74a6dc65ad1e0f8494789162e3dd97272232d80e7e8b7a2c"}]}, 0x1e8}}, 0x200000c0) getpeername$ax25(r1, &(0x7f0000000980)={{0x3, @null}, [@default, @netrom, @remote, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000a00)=0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x739}, [@alu={0x7, 0x1, 0xa, 0xb, 0x7, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0xa, 0x7, 0x5, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x8000, 0x35, &(0x7f0000000b00)=""/53, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r7], &(0x7f0000000bc0)=[{0x0, 0x1, 0x7, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000000cc0)={0x1a, 0x334, 0x6, 0x3, 0x4d, 0x7, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000d00), 0x4) r10 = socket(0x27, 0x2, 0xe44e) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x6841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) socket(0x18, 0x2, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000fc0)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r13, 0x13, 0x1, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000011c0)='.\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r13, r9, 0x2a, 0x30, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) 45.115918843s ago: executing program 3 (id=791): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newtclass={0xc4, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xb, 0x5}, {0xb, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x2, 0x0, 0x1, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x3, 0x9, 0x40, 0x14a56307, 0x8000, 0x7, 0xafd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0xa, 0x0, 0x43fe, 0x9, 0x466b18ad, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0xf361, 0x1, 0x7, 0x7c}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x84, 0x8c, 0x800, 0x1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="b4ded9542ed08bc78e989cd7e07672a4", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@bcast, @default, @netrom, @rose, @null, @bcast, @null, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x3, 0x5}, {0xb, 0x4, 0x6}, {0x0, 0x2, 0x2315}, {0x5, 0x0, 0x3ff}, {0xc, 0x4, 0x1}, {0xe, 0x0, 0x6}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/5, 0xad, 0x5, 0x0, 0x5088, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x2, 0x40010, r4, 0x1, '\x00', r2, r5, 0x2, 0x3, 0x0, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x47f82ed127665c84, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)={0x2, 0x10, 0x4, 0x6, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x5, 0xd4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x4, 0x0, 0xa8, 0x0, "f0b041d5b664d9d3fd238945f93c92e41d083d788b"}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0xf9, 0x68, "8131ddfb451e4e5f9e64875f45589fde8d64382ca322078844f3c58ead3897fd0422678e3f97a23ef7c11ebeb248c40f39da6fb07333b26ebc6c40b106106add197bc7c2ab37e13a9d97409d982a2f95f899c9fc5ae33cfe349ba3c092bf4177eb15f9b98a8ee3be"}, @sadb_lifetime={0x4, 0x4, 0x3, 0x8000000000000001, 0x401, 0xc66}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x10, 0xaf, 0x3, 0xe0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x6, 0x4, 0x40000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x9, 0xbc, "7d18c835a57953a5ac66e2d184b676b4d4fd2d5e151cddea95858a1740547fa019f57629eb0e78ed7c398d26381f42f630314086739022b4760e484641f0dcd85264eff54b7de3f1e0adff8edeea925996d49396b2db4c159a19d9b572ba8e266eb344bb14d5e7dc3a6cb7407f0db72a6105b7c605138d21b0a5b68ad08679d91a00418e8bea908a6bd3acc57c9c2381a09f4039fd5f22539acb116768dfd5609c4684eb74a6dc65ad1e0f8494789162e3dd97272232d80e7e8b7a2c"}]}, 0x1e8}}, 0x200000c0) getpeername$ax25(r1, &(0x7f0000000980)={{0x3, @null}, [@default, @netrom, @remote, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000a00)=0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x739}, [@alu={0x7, 0x1, 0xa, 0xb, 0x7, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0xa, 0x7, 0x5, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x8000, 0x35, &(0x7f0000000b00)=""/53, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r7], &(0x7f0000000bc0)=[{0x0, 0x1, 0x7, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000000cc0)={0x1a, 0x334, 0x6, 0x3, 0x4d, 0x7, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000d00), 0x4) r10 = socket(0x27, 0x2, 0xe44e) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x6841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) socket(0x18, 0x2, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000fc0)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r13, 0x13, 0x1, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000011c0)='.\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r13, r9, 0x2a, 0x30, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) 37.469839395s ago: executing program 0 (id=2064): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37", 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000840)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x1000}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000003900)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000004cc0)=""/126, 0x7e}, {&(0x7f0000004d40)=""/17, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000004e00)=""/128, 0x80}, {&(0x7f0000005040)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000082c0)=[{&(0x7f00000072c0)=""/4096, 0x1000}], 0x1}}], 0x4, 0x12021, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="9e71b93506a6a947b3a82beeafee9cf86dd39c7bf2cedfb2c42c60c2512beb5c00ecf9df0b9221962812dce1152654cf7c8b3b4dc9e3927b11861606fab3ee4831fdb8ff0d53c4c06ac523bd665519926d7d8fbfab7f580ba7480982235e25ff4db3e43c2e6dfaa76091d717305c87a2a9f777643ed6aaee49309d7220a692abe188beebb887f959b31b1b942cd060aa48581267a9cea68ac84564", 0x9b}, {&(0x7f0000000900)="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", 0xfb6}, {&(0x7f0000000680)="bf612973e97a938ad7abb2c9e63fd31421d2dbbfacd08027f38cd209e47a16", 0x1f}], 0x3}, 0x4004001) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="43e1a10c6752642580040a1ee5b154af9bd054bd27339a01b067a22f86f750d0bc6a599830ff21ba53f47cb3902a33a71f0081e91ef5ac4d4a083645336f1bc8accf1cb4fb8f23774ab01515108a802f30150af9df44b2cbe9cbe79cfe962ca82ade21b15517e17afc06b4f1f8a70c807f1e780306722a8ab72c649f570b0d71ea60960e6790ce5c58e3ee", 0x8b, 0x4008010, &(0x7f0000000280)={0x11, 0x17}, 0x14) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x2, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x9, &(0x7f0000001180)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000039000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7b, @void, @value}, 0x94) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x8, @private2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000100), 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/234, 0xea, 0x1, &(0x7f0000000400)=""/94, 0x5e}, &(0x7f0000000600)=0x40) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="320c0000000000000001000859077355a371959889a3b011213ad5cb4679436bacd8645236afd4bb68c0058f8dea125e63aba4ab5d236bbf5bb66dc796090acfbdd00f605da13599de1b1341c4670aba5ee92aa7724357e22eeae8dbd85b2c2bedc1943fe81005020fff000000000000"], 0x70) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x2, 'syz0\x00', @default, 0x5, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = epoll_create1(0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) 37.133855951s ago: executing program 0 (id=2067): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "7f1bf25cc2e80b9f", "5f58868648b4a0319ab52d1c19ecc585", "c00d5e08", "f30b4b11de50df7f"}, 0x28) r1 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x2, 0x2, 0x0, 0x8, 0x7f, @local}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$cgroup_int(r3, &(0x7f00000000c0)=0x100000001, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd8099d557dd676bc}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240)=0x2, 0x4) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f00000003c0)="712aa16675e7d26e3cc9355410c04be56a418dc4b6d9006cc5e2ffa549e63e7035f2dc4247f4b44aee7c53d57c1855ca6eb1b8df81244cbf945685ec1b3f9943cf42f3fd2d5e766f1decacdfcf1a60e276a6609f546c02b34b258dd8e51261fde75c1c088d735b5e06e3bd9c9df7b84dccaf1c185ad939a59a9b4e", &(0x7f0000000440)=""/140, 0x4}, 0x20) r7 = socket(0x5, 0x0, 0x80000001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dvmrp0\x00'}) getpeername(r2, &(0x7f0000000580)=@ax25={{0x3, @bcast}, [@rose, @bcast, @default, @bcast, @default, @null, @bcast, @default]}, &(0x7f0000000600)=0x80) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000640)=0x5, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r3, r3}, 0xc) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000007c0)=0x8) write$tun(r3, &(0x7f0000000800)={@void, @val={0x1, 0x1, 0xd, 0xb, 0x2, 0x6}, @ipv6=@udp={0x6, 0x6, "516785", 0x14f, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, {[@dstopts={0x87, 0xe, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xa5e}, @calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x8, [0x26, 0x86, 0xd2d, 0x8000, 0x6, 0x8]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xab7f}]}], {0xc1c, 0x4e20, 0xcf, 0x0, @opaque="bb274ecead95b8873e2bee51466249506b947de9e402ec24d65343694c502b96bd5724594a84fdb6459226b517dcca52e7a8038c3929d99f6f596287c77e5db0b551b560a676ccad8fe738d8a4c1741a1d8853b00bb80abecc3156c19aab2a8c5c7feb5b78ed78bcfe97ee696304ccaf2a6764d34a7e336c4a653df0960a0d2c6156a89f05b2737945a7de362a3097fca80e27df931ed19253e58f3ce2180b271eeb94372faa67344f9a0cfd81821446d57f80116b21ec034a94b3c01158f5fcdb929e8789c444"}}}}, 0x181) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r3) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004014}, 0x4004004) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b00)={r1, r3}, 0xc) connect$inet6(r2, &(0x7f0000000b40)={0xa, 0x4e23, 0xbf2, @private2, 0x7fff}, 0x1c) connect$unix(r7, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000c00)=0x800, 0x4) socket$rxrpc(0x21, 0x2, 0x2) 36.906004065s ago: executing program 0 (id=2070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000080), &(0x7f0000000500)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000c6bc5f000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 36.734080029s ago: executing program 0 (id=2073): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) unshare(0x20040600) (async) write$cgroup_int(r0, &(0x7f0000000000)=0x7fff, 0x12) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f00000049c0)=[{&(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)='M', 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000840000000500000030000000000000002000000000000000840000000200"/52, @ANYRES32=0x0, @ANYBLOB='0'], 0x68}], 0x1, 0xc0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) (async) shutdown(r2, 0x1) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) close(0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) (async) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) 36.385917242s ago: executing program 0 (id=2075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_serviced\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=@deltaction={0x1c4, 0x31, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x12}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24040841}, 0x400) socket$kcm(0xa, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet6(0xa, 0x0, 0x0) 36.023711994s ago: executing program 3 (id=791): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newtclass={0xc4, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xb, 0x5}, {0xb, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x2, 0x0, 0x1, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x3, 0x9, 0x40, 0x14a56307, 0x8000, 0x7, 0xafd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0xa, 0x0, 0x43fe, 0x9, 0x466b18ad, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0xf361, 0x1, 0x7, 0x7c}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x84, 0x8c, 0x800, 0x1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="b4ded9542ed08bc78e989cd7e07672a4", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@bcast, @default, @netrom, @rose, @null, @bcast, @null, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x3, 0x5}, {0xb, 0x4, 0x6}, {0x0, 0x2, 0x2315}, {0x5, 0x0, 0x3ff}, {0xc, 0x4, 0x1}, {0xe, 0x0, 0x6}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/5, 0xad, 0x5, 0x0, 0x5088, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x2, 0x40010, r4, 0x1, '\x00', r2, r5, 0x2, 0x3, 0x0, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x47f82ed127665c84, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)={0x2, 0x10, 0x4, 0x6, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x5, 0xd4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x4, 0x0, 0xa8, 0x0, "f0b041d5b664d9d3fd238945f93c92e41d083d788b"}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0xf9, 0x68, "8131ddfb451e4e5f9e64875f45589fde8d64382ca322078844f3c58ead3897fd0422678e3f97a23ef7c11ebeb248c40f39da6fb07333b26ebc6c40b106106add197bc7c2ab37e13a9d97409d982a2f95f899c9fc5ae33cfe349ba3c092bf4177eb15f9b98a8ee3be"}, @sadb_lifetime={0x4, 0x4, 0x3, 0x8000000000000001, 0x401, 0xc66}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x10, 0xaf, 0x3, 0xe0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x6, 0x4, 0x40000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x9, 0xbc, "7d18c835a57953a5ac66e2d184b676b4d4fd2d5e151cddea95858a1740547fa019f57629eb0e78ed7c398d26381f42f630314086739022b4760e484641f0dcd85264eff54b7de3f1e0adff8edeea925996d49396b2db4c159a19d9b572ba8e266eb344bb14d5e7dc3a6cb7407f0db72a6105b7c605138d21b0a5b68ad08679d91a00418e8bea908a6bd3acc57c9c2381a09f4039fd5f22539acb116768dfd5609c4684eb74a6dc65ad1e0f8494789162e3dd97272232d80e7e8b7a2c"}]}, 0x1e8}}, 0x200000c0) getpeername$ax25(r1, &(0x7f0000000980)={{0x3, @null}, [@default, @netrom, @remote, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000a00)=0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x739}, [@alu={0x7, 0x1, 0xa, 0xb, 0x7, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0xa, 0x7, 0x5, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x8000, 0x35, &(0x7f0000000b00)=""/53, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r7], &(0x7f0000000bc0)=[{0x0, 0x1, 0x7, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000000cc0)={0x1a, 0x334, 0x6, 0x3, 0x4d, 0x7, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000d00), 0x4) r10 = socket(0x27, 0x2, 0xe44e) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x6841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) socket(0x18, 0x2, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000fc0)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r13, 0x13, 0x1, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000011c0)='.\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r13, r9, 0x2a, 0x30, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) 26.440092439s ago: executing program 0 (id=2075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_serviced\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=@deltaction={0x1c4, 0x31, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x12}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24040841}, 0x400) socket$kcm(0xa, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet6(0xa, 0x0, 0x0) 20.42196823s ago: executing program 4 (id=2150): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x9092fa9fb6e02a21, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x0, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x0, 0x0, {0x9, 0x0, 0x4}}, 0x18}}, 0x50) 19.92613654s ago: executing program 4 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x65}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x65}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa8}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) 19.788408922s ago: executing program 4 (id=2155): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@ipv6_getroute={0x24, 0x1a, 0xd21, 0x400, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0xc090) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcfb}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x40800) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)}, 0x20) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r3}, 0x40) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@random="91a00873e630", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x7f00, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x7}}}}}, 0x0) (rerun: 64) syz_emit_ethernet(0xac, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @local, @void, {@mpls_uc={0x8847, {[{0xcfec}, {0x0, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4}], @generic="e5a4e5b5c2a2a9d0711c3cf80ac13b3ef3c1f2df138c7a108b808b614908d896a71fcb455f44df173faba9443f2490740c087ec03091c0b50017b7690cd2c5c5607e9e4667639a11caae0624100877d966604c5954bfdaf7970b67450c75f06e2386c7209d755b672a2c412bd5d76475b6043ec9dc5602cf3833e7c26ad03b7c96687057ed44361832a5"}}}}, &(0x7f0000000000)={0x0, 0x3, [0x81e, 0xb52, 0x2a8, 0x7ae]}) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000004f39aac5000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8c5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r6, r5}, 0xc) ppoll(&(0x7f0000000180)=[{r6, 0xb148}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000002c0)={[0x200]}, 0x8) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001401) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) (async) close(r4) 19.20173619s ago: executing program 4 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@default, @null, @rose, @null, @rose, @bcast, @remote, @bcast]}, &(0x7f0000000100)=0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xc6}, {0x6, 0x1}]}, 0x10) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) unshare(0x2c060000) (async) unshare(0x24020400) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="80fd", @ANYRES64=r3], 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x0, @value=r7, @void, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd11}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0xd0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, @bcast, @rose={'rose', 0x0}, 0xffffd52c, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x99, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$inet6(0xa, 0x80002, 0x88) 18.984196335s ago: executing program 4 (id=2160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x50, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x1d, 0x42, 0x66, 0x0, 0xb, 0x6, 0x0, @empty, @remote, {[@noop]}}, @payload_named={{{{{0x2a, 0x0, 0x1, 0x1, 0x0, 0xa, 0x3, 0x2, 0x3, 0x0, 0x2, 0x8, 0x3, 0x2, 0x0, 0x1, 0x4, 0x4e24, 0x4e21}, 0x3, 0x1}, 0x0, 0x2}}, [0x0, 0x0]}}}}}, &(0x7f0000000000)={0x0, 0x1, [0xf4c, 0x6a7, 0xb31, 0xf40]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f00000000c0)=0x61) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x29, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e40000140001000000000000000000cc0c3ae27f00000114000100fe8000000000000000000000000000aa2c0002"], 0xb4}}, 0x0) 18.85402576s ago: executing program 3 (id=791): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newtclass={0xc4, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0xb, 0x5}, {0xb, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb7}}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x5, 0x2, 0x0, 0x1, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2, 0x3, 0x9, 0x40, 0x14a56307, 0x8000, 0x7, 0xafd}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x2, 0xa, 0x0, 0x43fe, 0x9, 0x466b18ad, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x0, 0xf361, 0x1, 0x7, 0x7c}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x7, 0x84, 0x8c, 0x800, 0x1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="b4ded9542ed08bc78e989cd7e07672a4", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{}, [@bcast, @default, @netrom, @rose, @null, @bcast, @null, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@typedef={0x5, 0x0, 0x0, 0x8, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x3, 0x5}, {0xb, 0x4, 0x6}, {0x0, 0x2, 0x2315}, {0x5, 0x0, 0x3ff}, {0xc, 0x4, 0x1}, {0xe, 0x0, 0x6}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/5, 0xad, 0x5, 0x0, 0x5088, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0x101, 0x2, 0x40010, r4, 0x1, '\x00', r2, r5, 0x2, 0x3, 0x0, 0x3, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x47f82ed127665c84, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000700)={0x2, 0x10, 0x4, 0x6, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x5, 0xd4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_key={0x4, 0x0, 0xa8, 0x0, "f0b041d5b664d9d3fd238945f93c92e41d083d788b"}, @sadb_x_sec_ctx={0xe, 0x18, 0x7, 0xf9, 0x68, "8131ddfb451e4e5f9e64875f45589fde8d64382ca322078844f3c58ead3897fd0422678e3f97a23ef7c11ebeb248c40f39da6fb07333b26ebc6c40b106106add197bc7c2ab37e13a9d97409d982a2f95f899c9fc5ae33cfe349ba3c092bf4177eb15f9b98a8ee3be"}, @sadb_lifetime={0x4, 0x4, 0x3, 0x8000000000000001, 0x401, 0xc66}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x10, 0xaf, 0x3, 0xe0000000}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x0, 0x6, 0x4, 0x40000000}, @sadb_x_sec_ctx={0x19, 0x18, 0x3, 0x9, 0xbc, "7d18c835a57953a5ac66e2d184b676b4d4fd2d5e151cddea95858a1740547fa019f57629eb0e78ed7c398d26381f42f630314086739022b4760e484641f0dcd85264eff54b7de3f1e0adff8edeea925996d49396b2db4c159a19d9b572ba8e266eb344bb14d5e7dc3a6cb7407f0db72a6105b7c605138d21b0a5b68ad08679d91a00418e8bea908a6bd3acc57c9c2381a09f4039fd5f22539acb116768dfd5609c4684eb74a6dc65ad1e0f8494789162e3dd97272232d80e7e8b7a2c"}]}, 0x1e8}}, 0x200000c0) getpeername$ax25(r1, &(0x7f0000000980)={{0x3, @null}, [@default, @netrom, @remote, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000a00)=0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x739}, [@alu={0x7, 0x1, 0xa, 0xb, 0x7, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0xa, 0x7, 0x5, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x8000, 0x35, &(0x7f0000000b00)=""/53, 0x40f00, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0x5, 0x8001, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r7], &(0x7f0000000bc0)=[{0x0, 0x1, 0x7, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000000cc0)={0x1a, 0x334, 0x6, 0x3, 0x4d, 0x7, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000d00), 0x4) r10 = socket(0x27, 0x2, 0xe44e) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x6841) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) socket(0x18, 0x2, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000fc0)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r13, 0x13, 0x1, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000011c0)='.\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@cgroup=r13, r9, 0x2a, 0x30, 0x0, @void, @void, @void, @value=r15, r14}, 0x20) 18.183158517s ago: executing program 4 (id=2163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4a0000000206010200000000000020020000000505000400000000000900020073797a30000000000c0007800800120000000000110003965bd174737a1da04f43e874ad0068617368329a702c706f7274000500050002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x3, 0x1, 0x0, 0x3, 0x5, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) ioctl(r3, 0x8b32, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000001c0)={'veth0_to_bond\x00', {0x2, 0x4e21, @broadcast}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.509775613s ago: executing program 1 (id=2182): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xffffffe2, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a0019012cbd7000fedbdf250200000000000000080005000a7ed04f2db03149e6b985102c71546e3463165a5bad44006a76c02a441fe4ee93368487205ce4c5295ff6313ce30448", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000320800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b2c000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x40000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'wlan0\x00', 0x400}) write$tun(r7, &(0x7f0000000200)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast2, @local, @local}}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f00000004c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@hl={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1000000, 0x0, 0x42, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, 0x0, &(0x7f00000000c0), 0x1, r9}, 0x38) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r7], 0x0) 9.772664463s ago: executing program 1 (id=2184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000720102000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b0000000000000000050000ff070003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002dbd7000fbdbdf25070000000c001600060000000000000008000a000000000114000800636169663000000000000000000000000500040004000000050021000100000006001a004e23000005001300090000000800c3d64bcd747e4385be7349ebc0f6"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) listen(r3, 0x7fffffff) recvfrom$inet(r3, &(0x7f0000000680)=""/4096, 0x1000, 0x10000, 0x0, 0x0) 9.707127856s ago: executing program 1 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000002c0), &(0x7f0000000040)=0x10) 9.470100186s ago: executing program 1 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r0, 0x0, 0x8}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB='f'], 0x44) close(r2) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'veth0_to_bridge\x00'}}, 0x1e) close(r2) 9.128362881s ago: executing program 1 (id=2188): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000001100)=[{&(0x7f0000001240)="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", 0x1006}, {&(0x7f0000000000)="ba0c47387de0d5b9cc5104f0fb24ca6d28e7568d6fa9872f6b353593643f9295981f5a4f52f895a2512ea6be614f283b49d7a2cca48106d14b1677eaf290b6134fd1afbfb130f92f7ba81c429f5634e6e3d223852ddb1f21cd99b28d07a123b99241d8bdf70b340cf662243616660699068e32e62d4ab038ab28fbd3ae7e8e516f3f55cc3d3771ea975d7e688bb66c09a1494a7f2e23e981149ee8e1189e0333a1592bb8716d699d5bbe6b66d5505320c690ce5db46bd8c0eb6527d075c5e21eac798263326d963a06eb6e1dbace24b9aa7c804a4c6574e7ffb5aaed1e030bbf0cc692b5033ab4292779a101ed6091eda973539e4d2a8dc82f553dac670bb90b36b14aba636beb0c9c02e263e6b162fa51a96e3dedac3ed8d3077326d47a7ca51cadf22d2978241e36f1ec3d519128d7d0d05a1fbdf4ed18bed2290ae8edf9e62685d056c6f69285875ab39b472fed9fd9db446f2c1ab69966f38eca6074d700", 0x160}], 0x2) 5.765982749s ago: executing program 2 (id=2194): socket$inet6(0xa, 0xa, 0x3) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x806, 0x0) listen(r1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r5, 0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCDELRT(r4, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xff7f}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x14) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000e05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 5.318779524s ago: executing program 2 (id=2195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='writeback_bdi_register\x00', r3, 0x0, 0x400000000}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000015c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28}, {0x6}]}, 0x10) sendmmsg$unix(r5, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 5.21411067s ago: executing program 1 (id=2196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0xa, 0x0, 0x0) close(r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x3c}}, 0x0) 5.088420297s ago: executing program 2 (id=2197): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x2, 0x2}, @sadb_address={0x5, 0x5, 0x2f, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) writev(r0, &(0x7f0000001100)=[{&(0x7f0000000ac0)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e886de2085218c1cc9fb2decdb2a5f89154999de0aeebf9b9c41add84afb988eeb8fee205f4c5ead67ebd46eae9f240d566809645d0b34a2bf92443c795b58407adaf5c1ae59a90e2286b970c7ff2a294056c86975580fc2acead2a2c0fb63ef762482a6bcb611d54a077f10f2d0b50927963333e33f0bb65623b2573ea62259", 0x9f}], 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d39, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000026002307"], 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x3, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) (async) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x2e, @multicast1, 0x4e20, 0x1, 'nq\x00', 0x0, 0x400, 0x33}, 0x2c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) sendto$inet6(r6, &(0x7f0000000080)="95bce86a2a89e1cda3d35a527aa5a79f3260784598f6310f3086b0557e4d3a85038899fb6864974729b532abab72b616121257c93f0646235022d64e466beb65c243b714d25f9e09c57cdda7034f5d3af19ea8537f8159b3be2a4e6cf4a43d3ca252fb6c143964b973aa962b718170515e16bf3ecdce307ff923b35ab952afbaafff1d70034665e23febb42de6136ad553105f5b45db17e9483f9ee78f0202239a202d496b35b3a8742e2d0e3568b15a3a7588f3155f3379e1799424f8e3aa465d8ff3d94f466a933f78b4fe415aa753cfaf3e27e78499b3cd80461e", 0xdc, 0x80, 0x0, 0x0) unshare(0x22020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xfffffffc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.218613438s ago: executing program 2 (id=2198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x12, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000039000000a70000000000000018000000000000000000000000000000950000000000000095", @ANYBLOB="3b7c856153e37157455ae372ee31161e4e02c9119d5f4b5437d26943272df0dcf9468c3297aced43fdbad99d23e228d1bcff799abedf9ae63886426fc2775657181b5559a334fe154c92fffbbf07db999a161e123f31f910e08d4e9d0ea941ef8f05023b4a3216f325c2a346ac595cf302f8899a018ae062a08eadbfb46f701ce1", @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7b, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f0000000440)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb5000005", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000200)={0xa, 0x4e20, 0x3, @remote, 0x100}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000480)="77fee193ac52a09b23daf9f75710ce1d38fe67a41ea29bb451640f", 0x1b}, {&(0x7f00000004c0)="d13931c00171e719ce50382798bc3f83e4ec5b1868812cd47ce3ee0e58d5a619579af6af05c7cb4c69fa9d539576ca0401e12e21b6fd9cee77dc10ed92c3bbf1a33a14b60f7dd5e2b8f589321b8a210f3c7916d439565963fe9af50a63883910409a1038ebdf0e229bd86f7b7ff2accfa1896bf11325524b266779e2fdd3a32ef2b4812f642537", 0x87}, {&(0x7f0000000580)="d7c0ca19ddc5c39d51a01f730b680cfcb6e8caa499d77b2222aa832bb915c15200f52ed61668d8bd709c9fcfb28808ccd7fc5969c28c4dab857f42149259a9e2c23302667e5404d6602eb74d", 0x4c}, {&(0x7f0000000680)="a3fae68dba45bef2a6ade975804e0fdb96d53423b9a7e2ecc1d0a4830f1784436dbb293f01030fd7e8ebce46b18f7cea3f070b87a209b5a8953a21eb7c734761d1fefe81c7cf0674b2802294982c", 0x4e}, {&(0x7f0000000700)="ae1e29f06142968e503980609e6bef91afc608037fc10267a79938ad1493be2e0f0daab58b9ac15bd87119db2914ee9c31b227196965179c461c7192c2f074d0b2d3265339b4962283f4f30f90d5a4d655", 0x51}], 0x5, &(0x7f0000000800)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x3b, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff}, @enc_lim={0x4, 0x1, 0x5}]}}}, @dstopts={{0x80, 0x29, 0x37, {0x3b, 0xc, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x3, [0x7, 0xc]}}, @jumbo={0xc2, 0x4, 0xffffff81}, @calipso={0x7, 0x30, {0x3, 0xa, 0x7, 0x3, [0x3, 0x80000001, 0x9, 0xfffffffffffffffc, 0x8]}}, @jumbo, @jumbo={0xc2, 0x4, 0x10}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xb}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x1, 0x3, 0x0, [@mcast2]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x16, 0x2, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x170}, 0x4000) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) 101.947084ms ago: executing program 2 (id=2199): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, &(0x7f0000000000)=0x800000000, 0x7fffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x1c, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000900000000000000ff0f000095000000000000001800000001000000000000000300000085100000f8ffffffd99601000400000018340000010000000000000000000000578a100010000000181b0000", @ANYRESOCT=r4, @ANYBLOB="000000000000000018000000010400000000000004000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x100, 0xf7, &(0x7f00000006c0)=""/247, 0x40f00, 0x50, '\x00', r1, @fallback=0xf, r3, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0xff, 0xafc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000fffd0011"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x1, 0x0, &(0x7f0000000440)="5121c287c2d13846a98205", 0x0, 0xe, 0x0, 0xffb4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80010001}, 0x65) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000070a07000000000000000000010000060900010073797a3000000000"], 0x20}}, 0x40000) socket$inet_dccp(0x2, 0x6, 0x0) accept(r6, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x20, r8, 0x800, 0x170bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x401}, 0x40044884) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x8000}, 0x90) 0s ago: executing program 2 (id=2200): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000740)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0xe) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'pimreg1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) close(r3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000096b13f8106444d3dadde00", @ANYRES32, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843140002007767310000000000000000000000000004000880"], 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) kernel console output (not intermixed with test programs): 0: Adding interface: batadv_slave_0 [ 277.796391][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.830581][T11881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1566'. [ 277.843393][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.922375][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.952917][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.997247][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.167628][ T5833] Bluetooth: hci1: command tx timeout [ 278.175812][T11775] hsr_slave_0: entered promiscuous mode [ 278.194498][T11775] hsr_slave_1: entered promiscuous mode [ 278.205157][T11896] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1572'. [ 278.216625][T11895] tipc: Resetting bearer [ 278.223544][T11896] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1572'. [ 278.406207][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 278.422426][T11895] tipc: Disabling bearer [ 278.430658][T11895] team_slave_0: left promiscuous mode [ 278.439497][T11895] team0 (unregistering): Port device team_slave_0 removed [ 278.446858][T11895] team_slave_1: left promiscuous mode [ 278.459099][T11895] team0 (unregistering): Port device team_slave_1 removed [ 278.466666][T11895] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 278.503931][T11895] team0 (unregistering): Port device wlan1 removed [ 279.070990][T11775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.142716][T11775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.173461][T11775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.200850][T11775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.212639][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.225740][T11931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.248004][T11932] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 279.315886][T11931] xt_recent: Unsupported userspace flags (00000042) [ 279.389189][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.428260][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.465535][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.472735][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.491704][T11945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1584'. [ 279.533770][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.540962][T11613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.619372][T11948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.191660][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 280.213516][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.222924][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 280.247328][ T5833] Bluetooth: hci1: command tx timeout [ 280.427624][T11775] veth0_vlan: entered promiscuous mode [ 280.442987][T11775] veth1_vlan: entered promiscuous mode [ 280.494004][T11987] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1597'. [ 280.519327][T11775] veth0_macvtap: entered promiscuous mode [ 280.531321][T11987] ax25_connect(): syz.4.1597 uses autobind, please contact jreuter@yaina.de [ 280.543232][T11989] netlink: 'syz.2.1598': attribute type 3 has an invalid length. [ 280.552169][T11775] veth1_macvtap: entered promiscuous mode [ 280.574551][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.585679][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.598741][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.620494][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.638885][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.656594][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.684991][T11775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.706251][T11775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.728702][T11775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.751698][T11775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.876162][ T7333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.897718][ T7333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.953890][T11613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.987830][T11613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.539530][T12010] batadv0: entered promiscuous mode [ 281.550981][T12010] batadv1: entered promiscuous mode [ 281.564202][T12010] batadv2: entered promiscuous mode [ 281.575671][T12010] batadv3: entered promiscuous mode [ 281.586517][T12010] batadv4: entered promiscuous mode [ 281.598286][T12010] batadv5: entered promiscuous mode [ 281.611128][T12010] batadv6: entered promiscuous mode [ 281.623198][T12010] batadv7: entered promiscuous mode [ 281.652902][T12010] batadv8: entered promiscuous mode [ 281.664715][T12010] batadv9: entered promiscuous mode [ 281.677189][T12010] batadv10: entered promiscuous mode [ 281.690704][T12010] batadv11: entered promiscuous mode [ 281.702006][T12010] batadv12: entered promiscuous mode [ 281.716573][T12010] batadv13: entered promiscuous mode [ 281.731068][T12010] batadv14: entered promiscuous mode [ 281.742428][T12010] batadv15: entered promiscuous mode [ 281.755686][T12010] batadv16: entered promiscuous mode [ 281.767129][T12010] batadv17: entered promiscuous mode [ 281.784275][T12010] batadv18: entered promiscuous mode [ 281.830411][T12010] batadv19: entered promiscuous mode [ 281.866569][T12010] batadv20: entered promiscuous mode [ 281.878500][T12010] batadv21: entered promiscuous mode [ 281.891361][T12010] batadv22: entered promiscuous mode [ 281.903333][T12010] batadv23: entered promiscuous mode [ 281.909315][T12017] bridge0: port 1(hsr_slave_0) entered blocking state [ 281.929819][T12017] bridge0: port 1(hsr_slave_0) entered disabled state [ 281.936848][T12017] hsr_slave_0: entered allmulticast mode [ 281.961063][T12017] hsr_slave_0: left allmulticast mode [ 281.975300][T12010] batadv24: entered promiscuous mode [ 281.996722][T12018] syzkaller0: entered allmulticast mode [ 282.009821][T12010] batadv25: entered promiscuous mode [ 282.024753][T12010] batadv26: entered promiscuous mode [ 282.046236][T12010] batadv27: entered promiscuous mode [ 282.071361][T12010] batadv28: entered promiscuous mode [ 282.095073][T12010] batadv29: entered promiscuous mode [ 282.109110][T12010] batadv30: entered promiscuous mode [ 282.120196][T12010] batadv31: entered promiscuous mode [ 282.132645][T12010] batadv32: entered promiscuous mode [ 282.287274][T12028] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 282.585676][ T3512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.561986][ T3512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.689460][ T3512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.770298][ T3512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.955046][T12047] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 283.979393][T12047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.001581][ T3512] bridge_slave_1: left allmulticast mode [ 284.032178][ T3512] bridge_slave_1: left promiscuous mode [ 284.050269][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.086195][ T3512] bridge_slave_0: left allmulticast mode [ 284.105302][ T3512] bridge_slave_0: left promiscuous mode [ 284.135933][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.297462][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.308183][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.318480][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.336076][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.349641][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.357054][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.214892][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.230517][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.241967][ T3512] bond0 (unregistering): Released all slaves [ 285.276216][T12080] netlink: 'syz.2.1622': attribute type 12 has an invalid length. [ 286.113612][ T3512] hsr_slave_0: left promiscuous mode [ 286.128527][ T3512] hsr_slave_1: left promiscuous mode [ 286.168435][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.196713][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.228355][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.256550][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.304936][ T3512] veth1_macvtap: left promiscuous mode [ 286.356056][ T3512] veth0_macvtap: left promiscuous mode [ 286.362115][ T3512] veth1_vlan: left promiscuous mode [ 286.372655][ T3512] veth0_vlan: left promiscuous mode [ 286.407810][ T5833] Bluetooth: hci1: command tx timeout [ 287.279897][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 287.332951][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 287.971507][T12061] chnl_net:caif_netlink_parms(): no params data found [ 288.329523][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.357106][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.364455][T12061] bridge_slave_0: entered allmulticast mode [ 288.397476][T12061] bridge_slave_0: entered promiscuous mode [ 288.482818][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.491834][ T5833] Bluetooth: hci1: command tx timeout [ 288.507267][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.517283][T12061] bridge_slave_1: entered allmulticast mode [ 288.525119][T12061] bridge_slave_1: entered promiscuous mode [ 288.615987][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.618007][T12147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.649544][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.732370][T12147] xt_recent: Unsupported userspace flags (00000042) [ 288.750559][T12061] team0: Port device team_slave_0 added [ 288.771213][T12061] team0: Port device team_slave_1 added [ 288.810725][T12152] __nla_validate_parse: 35 callbacks suppressed [ 288.810746][T12152] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.1639'. [ 288.862730][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.879008][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.967711][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.012949][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.037356][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.077058][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.273519][T12061] hsr_slave_0: entered promiscuous mode [ 289.294150][T12061] hsr_slave_1: entered promiscuous mode [ 289.308746][T12166] netlink: 'syz.0.1642': attribute type 2 has an invalid length. [ 289.461991][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 289.481440][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 289.539172][T12175] netlink: 'syz.1.1646': attribute type 3 has an invalid length. [ 289.567039][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 289.593623][T12175] netlink: 'syz.1.1646': attribute type 8 has an invalid length. [ 289.818499][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'. [ 290.270787][T12061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.320368][T12061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.361913][T12061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.362596][T12197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.400371][T12061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.458586][T12197] xt_recent: Unsupported userspace flags (00000042) [ 290.536696][T12061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.567181][ T5833] Bluetooth: hci1: command tx timeout [ 290.594597][T12061] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.610340][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.617570][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.659853][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.667074][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.225939][T12061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.304970][T12223] netlink: 'syz.1.1660': attribute type 21 has an invalid length. [ 291.337965][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 291.348346][T12223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1660'. [ 291.430567][T12230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1662'. [ 291.472874][T12061] veth0_vlan: entered promiscuous mode [ 291.523841][T12061] veth1_vlan: entered promiscuous mode [ 291.639663][T12061] veth0_macvtap: entered promiscuous mode [ 291.660305][T12061] veth1_macvtap: entered promiscuous mode [ 291.729588][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.767201][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.798199][T12061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.865945][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.887088][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.911992][T12061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.951613][T12258] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 291.964311][T12061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.984828][T12061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.004264][T12061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.022567][T12061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.024176][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 292.138246][T12258] bond4: entered promiscuous mode [ 292.143678][T12258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.179476][T12263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1670'. [ 292.353296][ T7323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.380083][ T7323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.442860][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.464179][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.509486][T12303] netlink: 'syz.4.1682': attribute type 39 has an invalid length. [ 293.579030][T11609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.305984][T11609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.559274][T11609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.641414][T11609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.769814][T11609] bridge_slave_1: left allmulticast mode [ 294.775531][T11609] bridge_slave_1: left promiscuous mode [ 294.781812][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.791975][T11609] bridge_slave_0: left allmulticast mode [ 294.798778][T11609] bridge_slave_0: left promiscuous mode [ 294.804538][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.445368][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.456573][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.473374][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.497777][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.515787][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.533815][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.646563][T12334] __nla_validate_parse: 2 callbacks suppressed [ 295.646588][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 295.703619][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.716828][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.728051][T11609] bond0 (unregistering): Released all slaves [ 295.741157][T12315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1687'. [ 295.838840][T12334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.939871][T12335] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 296.119215][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 296.136626][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.157858][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 296.245980][T12348] xt_recent: Unsupported userspace flags (00000042) [ 296.610506][T11609] hsr_slave_0: left promiscuous mode [ 296.629197][T11609] hsr_slave_1: left promiscuous mode [ 296.651296][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.660619][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.674985][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.687787][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.804953][T11609] veth1_macvtap: left promiscuous mode [ 296.811575][T11609] veth0_macvtap: left promiscuous mode [ 296.817295][T11609] veth1_vlan: left promiscuous mode [ 296.822641][T11609] veth0_vlan: left promiscuous mode [ 297.423363][T11609] team0 (unregistering): Port device team_slave_1 removed [ 297.475039][T11609] team0 (unregistering): Port device team_slave_0 removed [ 297.611192][ T54] Bluetooth: hci1: command tx timeout [ 298.129452][T12386] bridge6: entered promiscuous mode [ 298.138972][T12386] bridge6: entered allmulticast mode [ 298.295348][T12390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1705'. [ 298.344930][T12388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1704'. [ 298.380190][T12388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1704'. [ 298.581752][T12328] chnl_net:caif_netlink_parms(): no params data found [ 298.696864][T12408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1708'. [ 299.269432][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.283474][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.297979][T12328] bridge_slave_0: entered allmulticast mode [ 299.313514][T12328] bridge_slave_0: entered promiscuous mode [ 299.350873][T12328] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.367313][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.378593][T12328] bridge_slave_1: entered allmulticast mode [ 299.396189][T12328] bridge_slave_1: entered promiscuous mode [ 299.556159][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 299.559377][T12328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.588646][T12437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.597733][T12328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.687645][ T54] Bluetooth: hci1: command tx timeout [ 299.689351][T12328] team0: Port device team_slave_0 added [ 299.713576][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 299.762647][T12328] team0: Port device team_slave_1 added [ 299.787776][T12437] xt_recent: Unsupported userspace flags (00000042) [ 300.093131][T12328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.113267][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.174955][T12328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.190247][T12328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.197879][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.224843][T12328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.491715][T12328] hsr_slave_0: entered promiscuous mode [ 300.557426][T12328] hsr_slave_1: entered promiscuous mode [ 300.807381][T12471] __nla_validate_parse: 3 callbacks suppressed [ 300.807404][T12471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1726'. [ 300.878695][T12463] netlink: 'syz.0.1724': attribute type 1 has an invalid length. [ 300.921875][T12477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1726'. [ 301.019357][T12463] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.624433][T12501] netlink: 'syz.0.1732': attribute type 3 has an invalid length. [ 301.674441][T12496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.777368][ T54] Bluetooth: hci1: command tx timeout [ 301.805363][T12506] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 301.863984][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 301.918148][T12511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.049569][T12511] xt_recent: Unsupported userspace flags (00000042) [ 302.109848][T12516] sctp: [Deprecated]: syz.2.1735 (pid 12516) Use of int in maxseg socket option. [ 302.109848][T12516] Use struct sctp_assoc_value instead [ 302.266416][T12328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.367044][T12328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.395969][T12328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.451759][T12328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.609484][T12328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.698814][T12328] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.734610][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.741807][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.773920][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.781170][T11613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.822069][T12534] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 302.884550][T12534] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 302.908424][T12536] bond2: (slave veth3): Releasing backup interface [ 302.921784][T12536] veth3: left promiscuous mode [ 302.932940][T12536] veth3: left allmulticast mode [ 302.955467][T12536] bond0: (slave bond3): Releasing backup interface [ 302.982600][T12534] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 303.449783][T12328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.497256][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1748'. [ 303.510799][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 303.585678][T12328] veth0_vlan: entered promiscuous mode [ 303.600476][T12328] veth1_vlan: entered promiscuous mode [ 303.617611][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 303.652564][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1750'. [ 303.679066][T12328] veth0_macvtap: entered promiscuous mode [ 303.686633][T12563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.708828][T12328] veth1_macvtap: entered promiscuous mode [ 303.741595][T12563] xt_recent: Unsupported userspace flags (00000042) [ 303.750598][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.777323][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.808353][T12328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.845729][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.857612][ T54] Bluetooth: hci1: command tx timeout [ 303.895892][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.946341][T12328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.981464][T12328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.027434][T12328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.036208][T12328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.057300][T12328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.117993][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 304.206081][T12579] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 304.327077][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.334965][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.408762][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.431233][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.744947][T12607] netlink: 'syz.0.1764': attribute type 10 has an invalid length. [ 304.753781][T12610] netlink: 'syz.0.1764': attribute type 10 has an invalid length. [ 304.935137][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 304.977319][T12614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.024750][T12614] xt_recent: Unsupported userspace flags (00000042) [ 305.034581][T12621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.321982][T12632] nftables ruleset with unbound chain [ 305.762376][T12650] sctp: [Deprecated]: syz.2.1775 (pid 12650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.762376][T12650] Use struct sctp_sack_info instead [ 306.133531][ T3610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.768668][ T3610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.927965][ T3610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.000058][ T3610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.111008][ T3610] bridge_slave_1: left allmulticast mode [ 307.116832][ T3610] bridge_slave_1: left promiscuous mode [ 307.123694][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.150015][ T3610] bridge_slave_0: left allmulticast mode [ 307.155723][ T3610] bridge_slave_0: left promiscuous mode [ 307.161746][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.699453][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.710643][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.718678][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.726679][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.737659][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 307.745043][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.028093][T12686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1782'. [ 308.040555][T12686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.174290][ T3610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.200548][ T3610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.223582][T12688] xt_recent: Unsupported userspace flags (00000042) [ 308.225127][ T3610] bond0 (unregistering): Released all slaves [ 308.289950][T12678] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 308.515367][T12693] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 308.555265][T12693] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1784'. [ 308.635492][T12698] netlink: 'syz.1.1786': attribute type 12 has an invalid length. [ 308.655633][T12698] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1786'. [ 308.682882][T12698] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1786'. [ 309.193767][T12680] chnl_net:caif_netlink_parms(): no params data found [ 309.428035][ T3610] hsr_slave_0: left promiscuous mode [ 309.450707][ T3610] hsr_slave_1: left promiscuous mode [ 309.522913][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.533966][T12727] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 309.542417][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.558213][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 309.568278][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.575720][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.629576][ T3610] veth1_macvtap: left promiscuous mode [ 309.639211][ T3610] veth0_macvtap: left promiscuous mode [ 309.655784][ T3610] veth1_vlan: left promiscuous mode [ 309.668578][ T3610] veth0_vlan: left promiscuous mode [ 309.767554][ T54] Bluetooth: hci1: command tx timeout [ 310.472621][ T3610] team0 (unregistering): Port device team_slave_1 removed [ 310.535088][ T3610] team0 (unregistering): Port device team_slave_0 removed [ 311.091004][T12724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 311.103063][T12724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1791'. [ 311.112561][T12724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1791'. [ 311.315297][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.347624][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.354957][T12680] bridge_slave_0: entered allmulticast mode [ 311.393804][T12680] bridge_slave_0: entered promiscuous mode [ 311.420590][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.437448][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.447395][T12680] bridge_slave_1: entered allmulticast mode [ 311.471470][T12753] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1799'. [ 311.478637][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 311.490396][T12680] bridge_slave_1: entered promiscuous mode [ 311.507222][T12748] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 311.633926][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.669187][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.771835][T12680] team0: Port device team_slave_0 added [ 311.799268][T12680] team0: Port device team_slave_1 added [ 311.857738][ T54] Bluetooth: hci1: command 0x041b tx timeout [ 311.909442][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.916610][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.944434][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.977972][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.008129][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.048329][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.288495][T12680] hsr_slave_0: entered promiscuous mode [ 312.342370][T12680] hsr_slave_1: entered promiscuous mode [ 312.426775][T12788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.602686][T12797] xt_recent: Unsupported userspace flags (00000042) [ 312.631962][T12799] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 313.343955][T12825] __nla_validate_parse: 6 callbacks suppressed [ 313.343978][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 313.686218][T12680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.754690][T12680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.860346][T12680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.872121][T12680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.900667][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'. [ 313.913032][T12853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.955341][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 314.023526][T12847] xt_recent: Unsupported userspace flags (00000042) [ 314.188367][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.291177][T12857] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1829'. [ 314.299574][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.339744][T12857] netlink: 'syz.2.1829': attribute type 2 has an invalid length. [ 314.350468][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.357614][ T7323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.473263][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.480505][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.659149][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1831'. [ 314.954200][T12880] netlink: 'syz.2.1835': attribute type 3 has an invalid length. [ 314.969818][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.983500][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 314.999078][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'. [ 315.002892][T12880] netlink: 'syz.2.1835': attribute type 3 has an invalid length. [ 315.018556][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 315.031898][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1835'. [ 315.036755][T12882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.053510][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 315.063491][T12882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.072731][T12882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.082050][T12882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.101048][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 315.243396][T12680] veth0_vlan: entered promiscuous mode [ 315.292500][T12680] veth1_vlan: entered promiscuous mode [ 315.362995][T12680] veth0_macvtap: entered promiscuous mode [ 315.415719][T12892] vlan1: entered promiscuous mode [ 315.441967][T12892] vlan1: entered allmulticast mode [ 315.468709][T12680] veth1_macvtap: entered promiscuous mode [ 315.475335][T12899] openvswitch: netlink: Flow actions attr not present in new flow. [ 315.496305][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.508128][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.545261][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.631034][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.677092][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.712632][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.731937][T12680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.741240][T12680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.752207][T12680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.761223][T12680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.772015][T12911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.908676][T12904] xt_recent: Unsupported userspace flags (00000042) [ 316.008180][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 316.094944][T12923] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:0 [ 316.188352][T11613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.198585][T11613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.291707][T11613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.314259][T11613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.578975][T12936] gretap0: left allmulticast mode [ 316.607189][T12936] gretap0: left promiscuous mode [ 316.615968][T12936] bridge0: port 1(gretap0) entered disabled state [ 316.670426][T12936] bond4: (slave bridge5): Releasing backup interface [ 316.732765][T12938] IPVS: Unknown mcast interface: batadv0 [ 317.412749][T11613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.449218][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.492490][T12968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.520077][T12968] xt_recent: Unsupported userspace flags (00000042) [ 317.890626][T11613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.044402][T11613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.157450][T11613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.270701][T11613] bridge_slave_1: left allmulticast mode [ 318.276419][T11613] bridge_slave_1: left promiscuous mode [ 318.283338][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.292706][T11613] bridge_slave_0: left allmulticast mode [ 318.299390][T11613] bridge_slave_0: left promiscuous mode [ 318.305156][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.765854][T11613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.778539][T11613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.789672][T11613] bond0 (unregistering): Released all slaves [ 319.032791][T11613] hsr_slave_0: left promiscuous mode [ 319.039139][T11613] hsr_slave_1: left promiscuous mode [ 319.045198][T11613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.054630][T11613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.064076][T11613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.071890][T11613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.099656][T11613] veth1_macvtap: left promiscuous mode [ 319.105619][T11613] veth0_macvtap: left promiscuous mode [ 319.111997][T11613] veth1_vlan: left promiscuous mode [ 319.118927][T11613] veth0_vlan: left promiscuous mode [ 319.238856][T12971] __nla_validate_parse: 12 callbacks suppressed [ 319.238879][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 319.700687][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.713824][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.729029][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.740179][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.761349][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.780895][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.149909][T11613] team0 (unregistering): Port device team_slave_1 removed [ 320.202505][T11613] team0 (unregistering): Port device team_slave_0 removed [ 320.983957][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1873'. [ 321.178479][T13010] netlink: 'syz.0.1876': attribute type 3 has an invalid length. [ 321.512257][T12995] chnl_net:caif_netlink_parms(): no params data found [ 321.614526][T13027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.687562][T13027] xt_recent: Unsupported userspace flags (00000042) [ 321.694488][T12995] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.702149][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.710007][T12995] bridge_slave_0: entered allmulticast mode [ 321.717406][T12995] bridge_slave_0: entered promiscuous mode [ 321.725322][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.732832][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.740481][T12995] bridge_slave_1: entered allmulticast mode [ 321.747750][T12995] bridge_slave_1: entered promiscuous mode [ 321.795863][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.808480][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.847154][ T5833] Bluetooth: hci1: command tx timeout [ 321.931019][T12995] team0: Port device team_slave_0 added [ 321.961049][T12995] team0: Port device team_slave_1 added [ 322.030621][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.045535][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.120541][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.151197][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.165787][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.197707][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.328461][T12995] hsr_slave_0: entered promiscuous mode [ 322.347505][T12995] hsr_slave_1: entered promiscuous mode [ 323.112945][T12995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.221214][T12995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.245231][T13074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.275558][T13074] xt_recent: Unsupported userspace flags (00000042) [ 323.380190][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 323.390277][T12995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.404799][T12995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.621953][T12995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.640338][T12995] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.651631][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.658841][T11609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.761906][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.769142][T11609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.864058][T12995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.888572][T12995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.938423][ T5833] Bluetooth: hci1: command tx timeout [ 324.290846][T13110] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 324.365511][T12995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.448189][T13120] netlink: 'syz.0.1903': attribute type 1 has an invalid length. [ 324.506730][T12995] veth0_vlan: entered promiscuous mode [ 324.532956][T12995] veth1_vlan: entered promiscuous mode [ 324.588847][T13124] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1907'. [ 324.601402][T12995] veth0_macvtap: entered promiscuous mode [ 324.609421][T13126] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1908'. [ 324.659686][T12995] veth1_macvtap: entered promiscuous mode [ 324.694878][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.727552][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.749409][T12995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.773973][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.795268][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.819147][T12995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.842855][T12995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.862896][T12995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.882681][T12995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.902543][T12995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.945095][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1911'. [ 324.970242][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 325.153684][T13147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.158578][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.191460][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.236670][T13144] xt_recent: Unsupported userspace flags (00000042) [ 325.252603][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.277418][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.449849][T13149] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1914'. [ 325.571290][T13149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1914'. [ 325.709381][T13161] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1917'. [ 325.734379][T13161] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1917'. [ 326.765881][ T3610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.788344][T13199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.818215][T13196] xt_recent: Unsupported userspace flags (00000042) [ 327.381368][ T3610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.539920][ T3610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.599982][ T3610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.698217][ T3610] bridge_slave_1: left allmulticast mode [ 327.704578][ T3610] bridge_slave_1: left promiscuous mode [ 327.710699][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.720050][ T3610] bridge_slave_0: left allmulticast mode [ 327.725998][ T3610] bridge_slave_0: left promiscuous mode [ 327.732759][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.174150][ T3610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.186124][ T3610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.197819][ T3610] bond0 (unregistering): Released all slaves [ 328.368295][T13203] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1934'. [ 328.897316][ T3610] hsr_slave_0: left promiscuous mode [ 328.915243][ T3610] hsr_slave_1: left promiscuous mode [ 328.957224][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.964801][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.001994][T13237] xt_CT: No such helper "syz0" [ 329.009640][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.037098][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.060088][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.069449][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.078089][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.090280][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.100174][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.107764][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.154081][ T3610] veth1_macvtap: left promiscuous mode [ 329.160109][ T3610] veth0_macvtap: left promiscuous mode [ 329.165738][ T3610] veth1_vlan: left promiscuous mode [ 329.171407][ T3610] veth0_vlan: left promiscuous mode [ 329.766725][ T3610] team0 (unregistering): Port device team_slave_1 removed [ 329.823601][ T3610] team0 (unregistering): Port device team_slave_0 removed [ 330.441306][T13237] bridge0: port 1(ipvlan0) entered blocking state [ 330.467796][T13237] bridge0: port 1(ipvlan0) entered disabled state [ 330.484806][T13237] ipvlan0: entered allmulticast mode [ 330.491845][T13237] ipvlan0: left allmulticast mode [ 330.549786][T13246] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 330.844435][T13257] netlink: zone id is out of range [ 330.917578][T13257] netlink: zone id is out of range [ 330.922811][T13257] netlink: del zone limit has 8 unknown bytes [ 331.068752][T13268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1946'. [ 331.128822][ T5833] Bluetooth: hci1: command tx timeout [ 331.159569][T13268] netlink: 'syz.4.1946': attribute type 12 has an invalid length. [ 331.160405][T13242] chnl_net:caif_netlink_parms(): no params data found [ 331.197831][T13266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.362725][T13266] xt_recent: Unsupported userspace flags (00000042) [ 331.478426][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1947'. [ 331.733907][T13289] FAULT_INJECTION: forcing a failure. [ 331.733907][T13289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.811817][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.819831][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.850453][T13242] bridge_slave_0: entered allmulticast mode [ 331.873522][T13242] bridge_slave_0: entered promiscuous mode [ 331.914133][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.938055][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.940362][T13291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1952'. [ 331.955098][T13289] CPU: 0 UID: 0 PID: 13289 Comm: syz.1.1951 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 331.965925][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.976038][T13289] Call Trace: [ 331.979356][T13289] [ 331.979439][T13242] bridge_slave_1: entered allmulticast mode [ 331.982299][T13289] dump_stack_lvl+0x241/0x360 [ 331.993109][T13289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.998360][T13289] ? __pfx__printk+0x10/0x10 [ 332.003007][T13289] ? __pfx_lock_release+0x10/0x10 [ 332.008169][T13289] should_fail_ex+0x3b0/0x4e0 [ 332.011848][T13242] bridge_slave_1: entered promiscuous mode [ 332.012868][T13289] _copy_from_user+0x2f/0xc0 [ 332.023321][T13289] __sys_bpf+0x1a4/0x810 [ 332.027616][T13289] ? __pfx___sys_bpf+0x10/0x10 [ 332.032431][T13289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.038453][T13289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.044820][T13289] ? do_syscall_64+0x100/0x230 [ 332.049638][T13289] __x64_sys_bpf+0x7c/0x90 [ 332.054102][T13289] do_syscall_64+0xf3/0x230 [ 332.058646][T13289] ? clear_bhb_loop+0x35/0x90 [ 332.063368][T13289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.069318][T13289] RIP: 0033:0x7fa16fd85d29 [ 332.073783][T13289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.093433][T13289] RSP: 002b:00007fa170c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.101894][T13289] RAX: ffffffffffffffda RBX: 00007fa16ff75fa0 RCX: 00007fa16fd85d29 [ 332.109919][T13289] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 332.117936][T13289] RBP: 00007fa170c37090 R08: 0000000000000000 R09: 0000000000000000 [ 332.125967][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.133971][T13289] R13: 0000000000000000 R14: 00007fa16ff75fa0 R15: 00007ffe18c9a8c8 [ 332.141970][T13289] [ 332.159098][T13295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1954'. [ 332.258779][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.375210][T13303] netlink: 'syz.1.1957': attribute type 2 has an invalid length. [ 332.388233][T13303] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1957'. [ 332.422140][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.535624][T13242] team0: Port device team_slave_0 added [ 332.559001][T13313] netlink: 'syz.1.1960': attribute type 30 has an invalid length. [ 332.571077][T13242] team0: Port device team_slave_1 added [ 332.675030][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.704401][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.779789][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.811516][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.833189][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.927685][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.946006][T13326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.013137][T13324] xt_recent: Unsupported userspace flags (00000042) [ 333.051797][T13331] FAULT_INJECTION: forcing a failure. [ 333.051797][T13331] name failslab, interval 1, probability 0, space 0, times 0 [ 333.086199][T13331] CPU: 1 UID: 0 PID: 13331 Comm: syz.4.1967 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 333.097045][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.107130][T13331] Call Trace: [ 333.110420][T13331] [ 333.113362][T13331] dump_stack_lvl+0x241/0x360 [ 333.118062][T13331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.123301][T13331] ? __pfx__printk+0x10/0x10 [ 333.127913][T13331] ? __kmalloc_noprof+0xb5/0x4c0 [ 333.132873][T13331] ? __pfx___might_resched+0x10/0x10 [ 333.138199][T13331] should_fail_ex+0x3b0/0x4e0 [ 333.142895][T13331] should_failslab+0xac/0x100 [ 333.147597][T13331] __kmalloc_noprof+0xdd/0x4c0 [ 333.152378][T13331] ? bpf_test_init+0xe1/0x180 [ 333.157080][T13331] bpf_test_init+0xe1/0x180 [ 333.161634][T13331] bpf_prog_test_run_skb+0x2bb/0x1820 [ 333.167135][T13331] ? __pfx_lock_release+0x10/0x10 [ 333.172203][T13331] ? __pfx___might_resched+0x10/0x10 [ 333.177580][T13331] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 333.183404][T13331] ? __fget_files+0x2a/0x410 [ 333.188020][T13331] ? fput+0x21b/0x290 [ 333.192018][T13331] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 333.197840][T13331] bpf_prog_test_run+0x2e4/0x360 [ 333.202795][T13331] __sys_bpf+0x48d/0x810 [ 333.207059][T13331] ? __pfx___sys_bpf+0x10/0x10 [ 333.211867][T13331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.217887][T13331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.224234][T13331] ? do_syscall_64+0x100/0x230 [ 333.229019][T13331] __x64_sys_bpf+0x7c/0x90 [ 333.233466][T13331] do_syscall_64+0xf3/0x230 [ 333.237995][T13331] ? clear_bhb_loop+0x35/0x90 [ 333.242712][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.248626][T13331] RIP: 0033:0x7f3e84b85d29 [ 333.253056][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.272763][T13331] RSP: 002b:00007f3e858e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.281372][T13331] RAX: ffffffffffffffda RBX: 00007f3e84d75fa0 RCX: 00007f3e84b85d29 [ 333.289356][T13331] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 333.297339][T13331] RBP: 00007f3e858e2090 R08: 0000000000000000 R09: 0000000000000000 [ 333.305317][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.313298][T13331] R13: 0000000000000000 R14: 00007f3e84d75fa0 R15: 00007ffeb1967118 [ 333.321307][T13331] [ 333.402545][ T5833] Bluetooth: hci1: command tx timeout [ 333.470966][ T7978] IPVS: starting estimator thread 0... [ 333.471048][T13337] IPVS: set_ctl: invalid protocol: 94 172.20.20.26:0 [ 333.523357][T13242] hsr_slave_0: entered promiscuous mode [ 333.551981][T13242] hsr_slave_1: entered promiscuous mode [ 333.637604][T13340] IPVS: using max 22 ests per chain, 52800 per kthread [ 334.513677][T13369] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.527374][T13356] tipc: Started in network mode [ 334.532332][T13356] tipc: Node identity ac14142f, cluster identity 4711 [ 334.540179][T13356] tipc: Enabling of bearer rejected, failed to enable media [ 334.739335][T13378] FAULT_INJECTION: forcing a failure. [ 334.739335][T13378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.775325][T13378] CPU: 1 UID: 0 PID: 13378 Comm: syz.4.1979 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 334.786209][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.796301][T13378] Call Trace: [ 334.799610][T13378] [ 334.802565][T13378] dump_stack_lvl+0x241/0x360 [ 334.807286][T13378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.812524][T13378] ? __pfx__printk+0x10/0x10 [ 334.817185][T13378] should_fail_ex+0x3b0/0x4e0 [ 334.821904][T13378] _copy_from_user+0x2f/0xc0 [ 334.826539][T13378] bpf_test_init+0x11f/0x180 [ 334.831184][T13378] bpf_prog_test_run_skb+0x2bb/0x1820 [ 334.836606][T13378] ? __pfx_lock_release+0x10/0x10 [ 334.841681][T13378] ? __pfx___might_resched+0x10/0x10 [ 334.847021][T13378] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.852868][T13378] ? __fget_files+0x2a/0x410 [ 334.857521][T13378] ? fput+0x21b/0x290 [ 334.861543][T13378] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.867388][T13378] bpf_prog_test_run+0x2e4/0x360 [ 334.872373][T13378] __sys_bpf+0x48d/0x810 [ 334.876659][T13378] ? __pfx___sys_bpf+0x10/0x10 [ 334.881574][T13378] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.887599][T13378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.893973][T13378] ? do_syscall_64+0x100/0x230 [ 334.898798][T13378] __x64_sys_bpf+0x7c/0x90 [ 334.903258][T13378] do_syscall_64+0xf3/0x230 [ 334.907797][T13378] ? clear_bhb_loop+0x35/0x90 [ 334.912521][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.918456][T13378] RIP: 0033:0x7f3e84b85d29 [ 334.922899][T13378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.942548][T13378] RSP: 002b:00007f3e858e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.951009][T13378] RAX: ffffffffffffffda RBX: 00007f3e84d75fa0 RCX: 00007f3e84b85d29 [ 334.959022][T13378] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 334.967031][T13378] RBP: 00007f3e858e2090 R08: 0000000000000000 R09: 0000000000000000 [ 334.975047][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.983077][T13378] R13: 0000000000000000 R14: 00007f3e84d75fa0 R15: 00007ffeb1967118 [ 334.991131][T13378] [ 335.031936][T13385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.054477][T13385] xt_recent: Unsupported userspace flags (00000042) [ 335.146281][T13392] x_tables: duplicate underflow at hook 1 [ 335.187831][T13392] x_tables: duplicate underflow at hook 3 [ 335.276168][T13242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.321232][T13242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.332107][T13242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.343262][T13242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.448969][T13395] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 335.464557][ T5833] Bluetooth: hci1: command tx timeout [ 335.533598][T13397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.652303][T13242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.712050][T13242] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.744592][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.751818][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.779057][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.786285][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.874884][T13242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.915127][T13404] bridge6: entered promiscuous mode [ 335.937466][T13404] bridge6: entered allmulticast mode [ 335.978123][T13404] team0: Port device bridge6 added [ 336.047122][T13413] nbd: must specify a size in bytes for the device [ 336.090481][T13419] xfrm2: entered allmulticast mode [ 336.312411][T13422] xt_CT: No such helper "snmp" [ 336.399491][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.479519][T13434] FAULT_INJECTION: forcing a failure. [ 336.479519][T13434] name failslab, interval 1, probability 0, space 0, times 0 [ 336.503092][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.1.1994 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 336.513941][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.524051][T13434] Call Trace: [ 336.527375][T13434] [ 336.530342][T13434] dump_stack_lvl+0x241/0x360 [ 336.535071][T13434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.540324][T13434] ? __pfx__printk+0x10/0x10 [ 336.544967][T13434] ? __kmalloc_noprof+0xb5/0x4c0 [ 336.549987][T13434] ? __pfx___might_resched+0x10/0x10 [ 336.555308][T13434] should_fail_ex+0x3b0/0x4e0 [ 336.560019][T13434] should_failslab+0xac/0x100 [ 336.564720][T13434] __kmalloc_noprof+0xdd/0x4c0 [ 336.569550][T13434] ? __virt_addr_valid+0x183/0x530 [ 336.574686][T13434] ? sk_prot_alloc+0xe0/0x210 [ 336.579400][T13434] sk_prot_alloc+0xe0/0x210 [ 336.583923][T13434] ? sk_alloc+0x26/0x370 [ 336.588187][T13434] sk_alloc+0x38/0x370 [ 336.592274][T13434] ? bpf_test_init+0x15a/0x180 [ 336.597052][T13434] ? bpf_ctx_init+0x162/0x1b0 [ 336.601742][T13434] bpf_prog_test_run_skb+0x3ab/0x1820 [ 336.607136][T13434] ? __pfx_lock_release+0x10/0x10 [ 336.612205][T13434] ? __pfx___might_resched+0x10/0x10 [ 336.617516][T13434] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 336.623339][T13434] ? __fget_files+0x2a/0x410 [ 336.627964][T13434] ? fput+0x21b/0x290 [ 336.631969][T13434] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 336.637806][T13434] bpf_prog_test_run+0x2e4/0x360 [ 336.642767][T13434] __sys_bpf+0x48d/0x810 [ 336.647052][T13434] ? __pfx___sys_bpf+0x10/0x10 [ 336.651853][T13434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.657863][T13434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.664212][T13434] ? do_syscall_64+0x100/0x230 [ 336.669003][T13434] __x64_sys_bpf+0x7c/0x90 [ 336.673620][T13434] do_syscall_64+0xf3/0x230 [ 336.678141][T13434] ? clear_bhb_loop+0x35/0x90 [ 336.682837][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.688846][T13434] RIP: 0033:0x7fa16fd85d29 [ 336.693283][T13434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.712908][T13434] RSP: 002b:00007fa170c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.721345][T13434] RAX: ffffffffffffffda RBX: 00007fa16ff75fa0 RCX: 00007fa16fd85d29 [ 336.729329][T13434] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 336.737311][T13434] RBP: 00007fa170c37090 R08: 0000000000000000 R09: 0000000000000000 [ 336.745291][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.753270][T13434] R13: 0000000000000000 R14: 00007fa16ff75fa0 R15: 00007ffe18c9a8c8 [ 336.761266][T13434] [ 336.886415][T13437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.967698][T13441] veth0_to_bridge: entered promiscuous mode [ 337.258654][T13242] veth0_vlan: entered promiscuous mode [ 337.281529][T13437] xt_recent: Unsupported userspace flags (00000042) [ 337.309917][T13242] veth1_vlan: entered promiscuous mode [ 337.380460][T13439] veth0_to_bridge: left promiscuous mode [ 337.399776][T13446] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 337.479222][T13451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1998'. [ 337.543706][ T5833] Bluetooth: hci1: command tx timeout [ 337.629981][T13242] veth0_macvtap: entered promiscuous mode [ 337.748358][T13242] veth1_macvtap: entered promiscuous mode [ 337.795099][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.808494][T13458] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 337.833304][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.869734][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.908779][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.930611][T13458] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 337.978072][T13464] batadv_slave_1: entered promiscuous mode [ 337.988455][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.017138][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.048437][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.089602][T13242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.120294][T13242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.147747][T13242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.156525][T13242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.188663][T13475] netlink: 'syz.4.2006': attribute type 39 has an invalid length. [ 338.212899][T13476] netlink: 'syz.4.2006': attribute type 39 has an invalid length. [ 338.309296][T13480] FAULT_INJECTION: forcing a failure. [ 338.309296][T13480] name failslab, interval 1, probability 0, space 0, times 0 [ 338.342035][T13480] CPU: 1 UID: 0 PID: 13480 Comm: syz.1.2008 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 338.352983][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.363070][T13480] Call Trace: [ 338.366376][T13480] [ 338.369332][T13480] dump_stack_lvl+0x241/0x360 [ 338.374070][T13480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.379312][T13480] ? __pfx__printk+0x10/0x10 [ 338.383940][T13480] ? __kmalloc_noprof+0xb5/0x4c0 [ 338.388912][T13480] ? __pfx___might_resched+0x10/0x10 [ 338.394230][T13480] should_fail_ex+0x3b0/0x4e0 [ 338.398941][T13480] should_failslab+0xac/0x100 [ 338.403665][T13480] __kmalloc_noprof+0xdd/0x4c0 [ 338.408461][T13480] ? security_sk_alloc+0x53/0x360 [ 338.413521][T13480] security_sk_alloc+0x53/0x360 [ 338.418501][T13480] sk_prot_alloc+0xfa/0x210 [ 338.423049][T13480] ? sk_alloc+0x26/0x370 [ 338.427332][T13480] sk_alloc+0x38/0x370 [ 338.431429][T13480] ? bpf_test_init+0x15a/0x180 [ 338.436221][T13480] ? bpf_ctx_init+0x162/0x1b0 [ 338.441017][T13480] bpf_prog_test_run_skb+0x3ab/0x1820 [ 338.446421][T13480] ? __pfx_lock_release+0x10/0x10 [ 338.451488][T13480] ? __pfx___might_resched+0x10/0x10 [ 338.456818][T13480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 338.462658][T13480] ? __fget_files+0x2a/0x410 [ 338.467297][T13480] ? fput+0x21b/0x290 [ 338.471317][T13480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 338.477159][T13480] bpf_prog_test_run+0x2e4/0x360 [ 338.482135][T13480] __sys_bpf+0x48d/0x810 [ 338.486412][T13480] ? __pfx___sys_bpf+0x10/0x10 [ 338.491221][T13480] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.497235][T13480] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.503595][T13480] ? do_syscall_64+0x100/0x230 [ 338.508401][T13480] __x64_sys_bpf+0x7c/0x90 [ 338.512862][T13480] do_syscall_64+0xf3/0x230 [ 338.517404][T13480] ? clear_bhb_loop+0x35/0x90 [ 338.522120][T13480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.528047][T13480] RIP: 0033:0x7fa16fd85d29 [ 338.532491][T13480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.552130][T13480] RSP: 002b:00007fa170c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.560591][T13480] RAX: ffffffffffffffda RBX: 00007fa16ff75fa0 RCX: 00007fa16fd85d29 [ 338.568595][T13480] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 338.576593][T13480] RBP: 00007fa170c37090 R08: 0000000000000000 R09: 0000000000000000 [ 338.584591][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.592593][T13480] R13: 0000000000000000 R14: 00007fa16ff75fa0 R15: 00007ffe18c9a8c8 [ 338.600619][T13480] [ 338.691764][T13479] netlink: 'syz.2.2009': attribute type 9 has an invalid length. [ 338.755045][T13482] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 338.798918][T13482] bridge0: entered allmulticast mode [ 338.920573][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 338.992888][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.027318][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.100019][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2015'. [ 339.121029][ T7333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.130443][T13494] xt_recent: Unsupported userspace flags (00000042) [ 339.138163][ T7333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.158189][T13496] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 339.421286][T13504] sctp: [Deprecated]: syz.1.2016 (pid 13504) Use of int in max_burst socket option deprecated. [ 339.421286][T13504] Use struct sctp_assoc_value instead [ 339.948576][T13525] xt_hashlimit: size too large, truncated to 1048576 [ 339.965496][T13525] xt_hashlimit: max too large, truncated to 1048576 [ 339.977022][T13525] xt_hashlimit: overflow, try lower: 0/0 [ 339.978771][T13526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2022'. [ 340.125396][T13531] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2025'. [ 340.220552][T13536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.270363][T13536] netlink: 'syz.4.2027': attribute type 10 has an invalid length. [ 340.334672][ T2961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.394639][T13536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 340.513152][ T2961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.586862][ T2961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.661054][ T2961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.758606][ T2961] bridge_slave_1: left allmulticast mode [ 340.764334][ T2961] bridge_slave_1: left promiscuous mode [ 340.770412][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.779729][ T2961] bridge_slave_0: left allmulticast mode [ 340.785578][ T2961] bridge_slave_0: left promiscuous mode [ 340.792218][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.239619][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.260183][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.289373][ T2961] bond0 (unregistering): Released all slaves [ 341.550381][ T2961] hsr_slave_0: left promiscuous mode [ 341.556408][ T2961] hsr_slave_1: left promiscuous mode [ 341.563427][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.571585][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.579889][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.587569][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.616302][ T2961] veth1_macvtap: left promiscuous mode [ 341.622103][ T2961] veth0_macvtap: left promiscuous mode [ 341.628866][ T2961] veth1_vlan: left promiscuous mode [ 341.634219][ T2961] veth0_vlan: left promiscuous mode [ 342.444270][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.459304][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.470275][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.491685][T13557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2031'. [ 342.492422][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.511919][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.520536][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.522407][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 342.629429][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 342.667857][T13560] xt_recent: Unsupported userspace flags (00000042) [ 343.075364][T13550] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 343.261299][T13563] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2032'. [ 343.557107][T13565] FAULT_INJECTION: forcing a failure. [ 343.557107][T13565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.601347][T13565] CPU: 0 UID: 0 PID: 13565 Comm: syz.4.2033 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 343.612184][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.622296][T13565] Call Trace: [ 343.625607][T13565] [ 343.628571][T13565] dump_stack_lvl+0x241/0x360 [ 343.633298][T13565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.638546][T13565] ? __pfx__printk+0x10/0x10 [ 343.643193][T13565] should_fail_ex+0x3b0/0x4e0 [ 343.647988][T13565] _copy_to_user+0x31/0xb0 [ 343.652459][T13565] bpf_test_finish+0x212/0x890 [ 343.657285][T13565] ? __pfx_bpf_test_finish+0x10/0x10 [ 343.662623][T13565] ? convert___skb_to_skb+0x41/0x620 [ 343.667955][T13565] ? convert_skb_to___skb+0x2d3/0x510 [ 343.673377][T13565] bpf_prog_test_run_skb+0xff0/0x1820 [ 343.678829][T13565] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 343.684675][T13565] ? __fget_files+0x2a/0x410 [ 343.689319][T13565] ? fput+0x21b/0x290 [ 343.693337][T13565] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 343.699181][T13565] bpf_prog_test_run+0x2e4/0x360 [ 343.704161][T13565] __sys_bpf+0x48d/0x810 [ 343.708449][T13565] ? __pfx___sys_bpf+0x10/0x10 [ 343.713271][T13565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.719325][T13565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.725681][T13565] ? do_syscall_64+0x100/0x230 [ 343.730486][T13565] __x64_sys_bpf+0x7c/0x90 [ 343.734933][T13565] do_syscall_64+0xf3/0x230 [ 343.739456][T13565] ? clear_bhb_loop+0x35/0x90 [ 343.744157][T13565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.750069][T13565] RIP: 0033:0x7f3e84b85d29 [ 343.754501][T13565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.774128][T13565] RSP: 002b:00007f3e858e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.782568][T13565] RAX: ffffffffffffffda RBX: 00007f3e84d75fa0 RCX: 00007f3e84b85d29 [ 343.790561][T13565] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 343.798572][T13565] RBP: 00007f3e858e2090 R08: 0000000000000000 R09: 0000000000000000 [ 343.806549][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.814528][T13565] R13: 0000000000000000 R14: 00007f3e84d75fa0 R15: 00007ffeb1967118 [ 343.822517][T13565] [ 344.011833][T13555] chnl_net:caif_netlink_parms(): no params data found [ 344.179131][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.179235][T13584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2037'. [ 344.194531][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.210950][T13555] bridge_slave_0: entered allmulticast mode [ 344.228567][T13555] bridge_slave_0: entered promiscuous mode [ 344.243815][T13587] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2038'. [ 344.253638][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.269983][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.287269][T13555] bridge_slave_1: entered allmulticast mode [ 344.303983][T13584] xt_CT: No such helper "netbios-ns" [ 344.317544][T13555] bridge_slave_1: entered promiscuous mode [ 344.397563][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.447666][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.519624][T13555] team0: Port device team_slave_0 added [ 344.540146][T13555] team0: Port device team_slave_1 added [ 344.567967][ T54] Bluetooth: hci1: command tx timeout [ 344.624463][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.633926][ T2961] tipc: Subscription rejected, illegal request [ 344.650377][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.707641][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.741380][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.757302][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.797087][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.966186][T13602] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.978478][T13555] hsr_slave_0: entered promiscuous mode [ 345.010204][T13555] hsr_slave_1: entered promiscuous mode [ 345.269501][T13615] FAULT_INJECTION: forcing a failure. [ 345.269501][T13615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.337201][T13615] CPU: 0 UID: 0 PID: 13615 Comm: syz.4.2047 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 345.348046][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.358143][T13615] Call Trace: [ 345.361448][T13615] [ 345.364400][T13615] dump_stack_lvl+0x241/0x360 [ 345.369127][T13615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.374366][T13615] ? __pfx__printk+0x10/0x10 [ 345.378984][T13615] should_fail_ex+0x3b0/0x4e0 [ 345.383705][T13615] _copy_to_user+0x31/0xb0 [ 345.388160][T13615] bpf_test_finish+0x2e6/0x890 [ 345.392958][T13615] ? __pfx_bpf_test_finish+0x10/0x10 [ 345.398368][T13615] ? convert___skb_to_skb+0x41/0x620 [ 345.403694][T13615] ? convert_skb_to___skb+0x2d3/0x510 [ 345.409132][T13615] bpf_prog_test_run_skb+0xff0/0x1820 [ 345.414559][T13615] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 345.420388][T13615] ? __fget_files+0x2a/0x410 [ 345.425024][T13615] ? fput+0x21b/0x290 [ 345.429026][T13615] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 345.434844][T13615] bpf_prog_test_run+0x2e4/0x360 [ 345.439800][T13615] __sys_bpf+0x48d/0x810 [ 345.444057][T13615] ? __pfx___sys_bpf+0x10/0x10 [ 345.448849][T13615] ? __might_fault+0xc6/0x120 [ 345.453536][T13615] ? trace_sys_enter+0x74/0x120 [ 345.458406][T13615] ? rcu_is_watching+0x15/0xb0 [ 345.463189][T13615] __x64_sys_bpf+0x7c/0x90 [ 345.467624][T13615] do_syscall_64+0xf3/0x230 [ 345.472144][T13615] ? clear_bhb_loop+0x35/0x90 [ 345.476835][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.482743][T13615] RIP: 0033:0x7f3e84b85d29 [ 345.487167][T13615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.506796][T13615] RSP: 002b:00007f3e858e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.515222][T13615] RAX: ffffffffffffffda RBX: 00007f3e84d75fa0 RCX: 00007f3e84b85d29 [ 345.523228][T13615] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 345.531214][T13615] RBP: 00007f3e858e2090 R08: 0000000000000000 R09: 0000000000000000 [ 345.539195][T13615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.547192][T13615] R13: 0000000000000000 R14: 00007f3e84d75fa0 R15: 00007ffeb1967118 [ 345.555196][T13615] [ 346.153516][T13633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2053'. [ 346.155272][T13555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.183905][T13555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.210862][T13555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.277445][T13555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.408948][T13645] x_tables: duplicate underflow at hook 3 [ 346.514343][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.581924][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.612993][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.620222][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.633659][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 346.647309][ T54] Bluetooth: hci1: command tx timeout [ 346.655231][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.662445][ T7316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.724671][T13650] xt_recent: Unsupported userspace flags (00000042) [ 346.997926][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.095260][T13555] veth0_vlan: entered promiscuous mode [ 347.121117][T13555] veth1_vlan: entered promiscuous mode [ 347.166547][T13555] veth0_macvtap: entered promiscuous mode [ 347.178672][T13555] veth1_macvtap: entered promiscuous mode [ 347.200553][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.233413][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.259669][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.318155][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.346602][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.359355][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.381873][T13555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.400520][T13555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.417611][T13555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.431516][T13555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.548897][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.579455][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.650870][ T7333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.678474][ T7333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.845466][T13675] netlink: 'syz.0.2064': attribute type 10 has an invalid length. [ 347.868635][T13675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2064'. [ 347.879640][T13675] bridge0: port 1(macvlan1) entered blocking state [ 347.886265][T13675] bridge0: port 1(macvlan1) entered disabled state [ 347.897456][T13675] macvlan1: entered allmulticast mode [ 347.902915][T13675] veth1_vlan: entered allmulticast mode [ 347.909969][T13675] macvlan1: entered promiscuous mode [ 348.118946][T13681] tun0: tun_chr_ioctl cmd 2147767519 [ 348.328521][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 348.349567][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 349.181480][T13718] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 349.287468][T13718] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 349.295480][T13718] gretap1: entered promiscuous mode [ 349.310511][T13718] gretap1: entered allmulticast mode [ 349.491661][ T7333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.656370][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.666544][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.675586][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.683570][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.695234][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.703336][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.873989][T13725] chnl_net:caif_netlink_parms(): no params data found [ 349.952828][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.960162][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.968187][T13725] bridge_slave_0: entered allmulticast mode [ 349.975599][T13725] bridge_slave_0: entered promiscuous mode [ 349.984000][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.992094][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.999924][T13725] bridge_slave_1: entered allmulticast mode [ 350.007648][T13725] bridge_slave_1: entered promiscuous mode [ 350.043580][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.056048][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.113201][T13725] team0: Port device team_slave_0 added [ 350.133408][T13725] team0: Port device team_slave_1 added [ 350.162528][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.169892][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.196781][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.217042][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.224088][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.252441][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.297189][T13725] hsr_slave_0: entered promiscuous mode [ 350.303762][T13725] hsr_slave_1: entered promiscuous mode [ 350.311014][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.318695][T13725] Cannot create hsr debugfs directory [ 350.435464][T13725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.446272][T13725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.524192][T13725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.535265][T13725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.604121][T13725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.614617][T13725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.713817][T13725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.724790][T13725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.834094][ T7333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.906627][T13725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.930251][T13725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.940756][T13725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.970302][ T7333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.984653][T13725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.041351][ T7333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.153586][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.217681][T13725] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.224933][ T7333] bridge_slave_1: left allmulticast mode [ 351.232575][ T7333] bridge_slave_1: left promiscuous mode [ 351.238697][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.257875][ T7333] bridge_slave_0: left allmulticast mode [ 351.263570][ T7333] bridge_slave_0: left promiscuous mode [ 351.269733][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.388112][T13738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 351.399179][T13740] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2079'. [ 351.602908][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.626724][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.636935][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.645291][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.673912][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 351.683826][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.768023][ T54] Bluetooth: hci1: command tx timeout [ 352.093162][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.108050][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.120663][ T7333] bond0 (unregistering): Released all slaves [ 352.340617][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.347852][ T7323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.379045][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.386221][ T7323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.811037][T13725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.968940][ T7333] hsr_slave_0: left promiscuous mode [ 352.975200][ T7333] hsr_slave_1: left promiscuous mode [ 352.985942][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.002464][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.010820][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.018939][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.034700][T13782] netlink: 'syz.1.2084': attribute type 4 has an invalid length. [ 353.041321][T13783] netlink: 'syz.1.2084': attribute type 4 has an invalid length. [ 353.070512][ T7333] veth1_macvtap: left promiscuous mode [ 353.076470][ T7333] veth0_macvtap: left promiscuous mode [ 353.082610][ T7333] veth1_vlan: left promiscuous mode [ 353.097249][ T7333] veth0_vlan: left promiscuous mode [ 353.346095][T13790] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2086'. [ 353.368966][T13790] openvswitch: netlink: Flow key attr not present in new flow. [ 353.771142][ T54] Bluetooth: hci4: command tx timeout [ 353.847189][ T54] Bluetooth: hci1: command tx timeout [ 354.030168][ T7333] team0 (unregistering): Port device team_slave_1 removed [ 354.125452][ T7333] team0 (unregistering): Port device team_slave_0 removed [ 355.086717][T13749] chnl_net:caif_netlink_parms(): no params data found [ 355.137650][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 355.426392][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.609936][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.627510][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.645150][T13749] bridge_slave_0: entered allmulticast mode [ 355.656377][T13749] bridge_slave_0: entered promiscuous mode [ 355.790710][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.799069][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.817912][T13749] bridge_slave_1: entered allmulticast mode [ 355.835529][T13749] bridge_slave_1: entered promiscuous mode [ 355.847802][ T54] Bluetooth: hci4: command tx timeout [ 355.927328][ T54] Bluetooth: hci1: command tx timeout [ 355.928196][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 356.112555][T13858] xt_recent: Unsupported userspace flags (00000042) [ 356.169979][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.220270][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.426761][T13749] team0: Port device team_slave_0 added [ 356.454684][T13749] team0: Port device team_slave_1 added [ 356.520954][T13725] veth0_vlan: entered promiscuous mode [ 356.538390][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.549738][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.603827][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.637687][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.644701][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.709288][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.740296][T13725] veth1_vlan: entered promiscuous mode [ 356.883449][T13749] hsr_slave_0: entered promiscuous mode [ 356.901764][T13749] hsr_slave_1: entered promiscuous mode [ 357.103824][T13725] veth0_macvtap: entered promiscuous mode [ 357.168449][T13725] veth1_macvtap: entered promiscuous mode [ 357.252536][T13902] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2105'. [ 357.302447][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.314142][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.325990][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.406636][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.456105][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.488109][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.535396][T13725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.555137][T13725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.575881][T13725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.584898][T13725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.612117][T13908] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.927831][ T54] Bluetooth: hci4: command tx timeout [ 357.983659][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 358.007101][ T54] Bluetooth: hci1: command tx timeout [ 358.047796][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.067563][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.117908][ T7323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.118672][T13921] xt_recent: Unsupported userspace flags (00000042) [ 358.125933][ T7323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.333476][T13749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.390855][T13749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.681817][T13749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.721778][T13749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.254217][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.470514][ T7316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.479464][T13955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2122'. [ 359.528661][T13955] netlink: 'syz.4.2122': attribute type 7 has an invalid length. [ 359.536458][T13955] netlink: 'syz.4.2122': attribute type 8 has an invalid length. [ 359.554774][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.591469][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.598774][T11613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.667573][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 359.687725][ T7316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.731353][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.738602][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.959327][ T7316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.968367][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.988889][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.998424][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.008634][ T5833] Bluetooth: hci4: command tx timeout [ 360.016678][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.026814][ T5149] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.060898][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.252071][T13975] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 360.261359][T13975] nbd: couldn't find a device at index -2142568428 [ 360.291571][ T7316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.365553][T13972] xt_recent: Unsupported userspace flags (00000042) [ 360.716646][ T7316] bridge_slave_1: left allmulticast mode [ 360.723400][ T7316] bridge_slave_1: left promiscuous mode [ 360.729755][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.758023][ T7316] bridge_slave_0: left allmulticast mode [ 360.764860][ T7316] bridge_slave_0: left promiscuous mode [ 360.771206][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.343036][ T7316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.376620][ T7316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.401787][ T7316] bond0 (unregistering): Released all slaves [ 361.616140][T13967] chnl_net:caif_netlink_parms(): no params data found [ 361.835210][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.143828][T13967] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.167955][ T54] Bluetooth: hci1: command tx timeout [ 362.170070][T13967] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.196706][T13967] bridge_slave_0: entered allmulticast mode [ 362.225157][T14019] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.233633][T13967] bridge_slave_0: entered promiscuous mode [ 362.248113][T14019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.359207][T13967] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.366432][T13967] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.378818][T13967] bridge_slave_1: entered allmulticast mode [ 362.386170][T13967] bridge_slave_1: entered promiscuous mode [ 362.432737][ T7316] hsr_slave_0: left promiscuous mode [ 362.448488][ T7316] hsr_slave_1: left promiscuous mode [ 362.454763][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.463656][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.472133][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.480125][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.511376][ T7316] veth1_macvtap: left promiscuous mode [ 362.517968][ T7316] veth0_macvtap: left promiscuous mode [ 362.523805][ T7316] veth1_vlan: left promiscuous mode [ 362.529372][ T7316] veth0_vlan: left promiscuous mode [ 363.329900][T14042] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 363.382566][T14043] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2143'. [ 363.393154][ T7316] team0 (unregistering): Port device team_slave_1 removed [ 363.457448][ T7316] team0 (unregistering): Port device team_slave_0 removed [ 364.188694][T14026] netlink: 'syz.4.2139': attribute type 21 has an invalid length. [ 364.196823][T14026] netlink: 'syz.4.2139': attribute type 20 has an invalid length. [ 364.217860][T14042] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 364.223102][T14043] batadv0: entered promiscuous mode [ 364.247214][ T54] Bluetooth: hci1: command tx timeout [ 364.257129][T14043] batadv0: entered allmulticast mode [ 364.326152][T13967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.389311][T13967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.412632][T13749] veth0_vlan: entered promiscuous mode [ 364.557628][T14054] netlink: 'syz.1.2145': attribute type 3 has an invalid length. [ 364.610145][T13967] team0: Port device team_slave_0 added [ 364.638460][T13749] veth1_vlan: entered promiscuous mode [ 364.666228][T13749] veth0_macvtap: entered promiscuous mode [ 364.675879][T13749] veth1_macvtap: entered promiscuous mode [ 364.712373][T13967] team0: Port device team_slave_1 added [ 364.745190][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.770675][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.793293][T13749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.875975][T13967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.885419][T13967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.924117][T13967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.011657][T13967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.036974][T13967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.087660][T13967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.102940][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.114520][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.127112][T13749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.148695][T13749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.177355][T13749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.186378][T13749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.207345][T13749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.312832][T14076] vlan0: entered promiscuous mode [ 365.360154][T14074] xt_recent: Unsupported userspace flags (00000042) [ 365.379855][T13967] hsr_slave_0: entered promiscuous mode [ 365.402508][T13967] hsr_slave_1: entered promiscuous mode [ 365.422419][T13967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.446508][T13967] Cannot create hsr debugfs directory [ 365.720511][ T7331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.730547][ T7331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.890489][ T7331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.907781][ T7331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.146505][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 366.179056][T14099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.260806][T14107] netlink: 'syz.2.2159': attribute type 18 has an invalid length. [ 366.377386][ T54] Bluetooth: hci1: command tx timeout [ 366.478399][ T2961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.578256][T14111] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2160'. [ 366.644755][ T2961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.848371][ T2961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.939448][ T2961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.073424][T13967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.109870][T13967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.149211][T13967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.199426][T14118] syz.1.2161[14118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.199532][T14118] syz.1.2161[14118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.221158][T13967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.227286][T14118] syz.1.2161[14118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.300793][T14120] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2161'. [ 367.744793][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.759005][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.779962][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.785926][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.790703][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.799601][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.804299][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.812048][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.818936][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.824231][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.832436][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 367.845847][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.996567][T14121] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 368.005745][T14121] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 368.018332][T14121] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 368.028418][T14121] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 368.051130][T14121] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.060417][T14121] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.070076][T14121] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.078931][T14121] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.119486][ T2961] bridge_slave_1: left allmulticast mode [ 368.125349][ T2961] bridge_slave_1: left promiscuous mode [ 368.131372][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.142497][ T2961] bridge_slave_0: left allmulticast mode [ 368.149102][ T2961] bridge_slave_0: left promiscuous mode [ 368.155497][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.407746][ T5845] Bluetooth: hci1: command tx timeout [ 368.634214][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.647052][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.659723][ T2961] bond0 (unregistering): Released all slaves [ 368.701522][T14122] bridge0: entered promiscuous mode [ 368.711981][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.725561][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.743766][T14122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.954459][T14137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2166'. [ 368.988637][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 369.027744][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 369.070688][T14141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2167'. [ 369.097183][T14141] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 369.274862][ T2961] hsr_slave_0: left promiscuous mode [ 369.283662][ T2961] hsr_slave_1: left promiscuous mode [ 369.290662][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.298661][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.329381][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.351314][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.404917][ T2961] veth1_macvtap: left promiscuous mode [ 369.417108][ T2961] veth0_macvtap: left promiscuous mode [ 369.432996][ T2961] veth1_vlan: left promiscuous mode [ 369.447164][ T2961] veth0_vlan: left promiscuous mode [ 369.848175][ T5845] Bluetooth: hci2: command tx timeout [ 369.927340][ T5845] Bluetooth: hci4: command tx timeout [ 370.183850][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 370.244257][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 370.882521][T14158] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 371.943430][ T5845] Bluetooth: hci2: command tx timeout [ 372.018234][ T5845] Bluetooth: hci4: command tx timeout [ 373.789926][T13967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.915254][T13967] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.964963][T14130] chnl_net:caif_netlink_parms(): no params data found [ 374.027252][ T5845] Bluetooth: hci2: command tx timeout [ 374.087070][ T5845] Bluetooth: hci4: command tx timeout [ 374.223144][T14128] chnl_net:caif_netlink_parms(): no params data found [ 374.263467][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.270667][T11609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.449029][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2179'. [ 374.476140][T14130] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.484786][T14130] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.492480][T14130] bridge_slave_0: entered allmulticast mode [ 374.501260][T14130] bridge_slave_0: entered promiscuous mode [ 374.530325][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.537517][ T7331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.613725][T14191] ip6gretap0: entered promiscuous mode [ 374.636236][T14191] batadv_slave_0: entered promiscuous mode [ 374.652548][T14130] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.677313][T14130] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.684651][T14130] bridge_slave_1: entered allmulticast mode [ 374.713003][T14130] bridge_slave_1: entered promiscuous mode [ 374.841534][T14130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.854504][T14204] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.2182'. [ 374.865151][T14204] openvswitch: netlink: Flow key attr not present in new flow. [ 374.948019][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.960520][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 374.982765][T14130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.020971][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.030352][T14204] xt_recent: Unsupported userspace flags (00000042) [ 375.037742][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.052263][T14128] bridge_slave_0: entered allmulticast mode [ 375.069549][T14128] bridge_slave_0: entered promiscuous mode [ 375.089905][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.100865][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.108493][T14128] bridge_slave_1: entered allmulticast mode [ 375.116786][T14128] bridge_slave_1: entered promiscuous mode [ 375.173780][T13967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.209640][T13967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.291145][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.314667][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.384515][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.411141][T14130] team0: Port device team_slave_0 added [ 375.454122][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.477312][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.510516][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.567669][T14130] team0: Port device team_slave_1 added [ 375.676361][ T2961] bond0: (slave netdevsim0): Releasing backup interface [ 375.696605][ T2961] bond0: (slave netdevsim0): the permanent HWaddr of slave - ee:bf:a3:26:5c:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 375.764985][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.787647][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.862561][T14128] team0: Port device team_slave_0 added [ 375.892172][T14128] team0: Port device team_slave_1 added [ 375.930979][T14130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.939024][T14130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.968271][T14130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.009789][T14130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.016801][T14130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.066445][T14130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.117213][ T5845] Bluetooth: hci2: command tx timeout [ 376.145616][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.154273][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.181793][ T5845] Bluetooth: hci4: command tx timeout [ 376.187354][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.201471][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.209638][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.235836][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.372659][T14128] hsr_slave_0: entered promiscuous mode [ 376.391366][T14128] hsr_slave_1: entered promiscuous mode [ 376.414520][T14130] hsr_slave_0: entered promiscuous mode [ 376.431148][T14130] hsr_slave_1: entered promiscuous mode [ 376.442056][T14130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.450919][T14130] Cannot create hsr debugfs directory [ 377.948154][ T2961] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 377.969333][ T2961] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 377.998618][ T2961] bond0 (unregistering): Released all slaves [ 378.418006][ T2961] bond1 (unregistering): (slave batadv1): Releasing active interface [ 378.448357][ T2961] bond1 (unregistering): Released all slaves [ 378.471935][ T2961] bond2 (unregistering): Released all slaves [ 378.800020][ T2961] bond3 (unregistering): Released all slaves [ 378.890430][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.931614][T13967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.943950][ T2961] : left promiscuous mode [ 379.172302][T13967] veth0_vlan: entered promiscuous mode [ 379.203603][ T2961] tipc: Left network mode [ 379.210285][T13967] veth1_vlan: entered promiscuous mode [ 379.289605][ T2961] IPVS: stopping master sync thread 7885 ... [ 379.418468][T13967] veth0_macvtap: entered promiscuous mode [ 379.487314][T13967] veth1_macvtap: entered promiscuous mode [ 379.771698][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.794719][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.818411][T13967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.846363][T14254] xt_ecn: cannot match TCP bits for non-tcp packets [ 379.851944][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.879719][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.891557][T13967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.998325][ T2961] veth1_macvtap: left promiscuous mode [ 380.003934][ T2961] veth0_macvtap: left promiscuous mode [ 380.028439][ T2961] veth1_vlan: left promiscuous mode [ 380.029260][T14259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2195'. [ 380.033761][ T2961] veth0_vlan: left promiscuous mode [ 380.290555][T14269] IPVS: set_ctl: invalid protocol: 33316 182.17.213.74:1919 [ 380.379458][ T2961] team0 (unregistering): Port device vcan0 removed [ 381.871450][T13967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.883157][T13967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.907348][T13967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.927045][T13967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.078478][T14128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.100913][T14128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.174892][T14128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.204733][T14128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.376786][T14277] syzkaller0: entered promiscuous mode [ 382.387358][T14277] syzkaller0: entered allmulticast mode [ 382.443101][ T7333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.455396][ T7333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.940153][ T2961] IPVS: stop unused estimator thread 0... [ 385.065784][T14130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 385.090048][T14130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 385.109017][T14130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 385.199451][T14130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.247151][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.255344][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.338960][ T2961] ref_tracker: net notrefcnt@ffff88805e2181e0 has 1/2 users at [ 385.338960][ T2961] sk_alloc+0x2b3/0x370 [ 385.338960][ T2961] inet6_create+0x6ce/0x10f0 [ 385.338960][ T2961] __sock_create+0x4c0/0xa30 [ 385.338960][ T2961] inet_ctl_sock_create+0xc2/0x250 [ 385.338960][ T2961] igmp6_net_init+0x39/0x390 [ 385.338960][ T2961] ops_init+0x31e/0x590 [ 385.338960][ T2961] setup_net+0x287/0x9e0 [ 385.338960][ T2961] copy_net_ns+0x33f/0x570 [ 385.338960][ T2961] create_new_namespaces+0x425/0x7b0 [ 385.338960][ T2961] unshare_nsproxy_namespaces+0x124/0x180 [ 385.338960][ T2961] ksys_unshare+0x57d/0xa70 [ 385.338960][ T2961] __x64_sys_unshare+0x38/0x40 [ 385.338960][ T2961] do_syscall_64+0xf3/0x230 [ 385.338960][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.338960][ T2961] [ 385.418516][ T2961] ref_tracker: net notrefcnt@ffff88805e2181e0 has 1/2 users at [ 385.418516][ T2961] sk_alloc+0x2b3/0x370 [ 385.418516][ T2961] inet6_create+0x6ce/0x10f0 [ 385.418516][ T2961] __sock_create+0x4c0/0xa30 [ 385.418516][ T2961] inet_ctl_sock_create+0xc2/0x250 [ 385.418516][ T2961] ndisc_net_init+0xa7/0x2b0 [ 385.418516][ T2961] ops_init+0x31e/0x590 [ 385.418516][ T2961] setup_net+0x287/0x9e0 [ 385.418516][ T2961] copy_net_ns+0x33f/0x570 [ 385.418516][ T2961] create_new_namespaces+0x425/0x7b0 [ 385.418516][ T2961] unshare_nsproxy_namespaces+0x124/0x180 [ 385.418516][ T2961] ksys_unshare+0x57d/0xa70 [ 385.418516][ T2961] __x64_sys_unshare+0x38/0x40 [ 385.418516][ T2961] do_syscall_64+0xf3/0x230 [ 385.418516][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.418516][ T2961] [ 385.552126][T14128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.569393][ T2961] ------------[ cut here ]------------ [ 385.575413][ T2961] WARNING: CPU: 0 PID: 2961 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x411/0x550 [ 385.585182][ T2961] Modules linked in: [ 385.589583][ T2961] CPU: 0 UID: 0 PID: 2961 Comm: kworker/u8:7 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.600517][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.610965][ T2961] Workqueue: netns cleanup_net [ 385.615785][ T2961] RIP: 0010:ref_tracker_dir_exit+0x411/0x550 [ 385.622693][ T2961] Code: 48 8b 1c 24 48 89 df 48 8b 74 24 20 e8 f8 d8 d3 06 eb 1a e8 31 12 a5 fc 48 8b 1c 24 48 89 df 48 8b 74 24 20 e8 e0 d8 d3 06 90 <0f> 0b 90 48 83 c3 44 48 89 df be 04 00 00 00 e8 ab 74 0b fd 48 89 [ 385.642471][ T2961] RSP: 0018:ffffc9000ba1f9e0 EFLAGS: 00010246 [ 385.648905][ T2961] RAX: ec1015daee3f0c00 RBX: ffff88805e2181e0 RCX: 0000000000000001 [ 385.656982][ T2961] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 385.665305][ T2961] RBP: ffffc9000ba1fab0 R08: ffffffff942bc9d7 R09: 1ffffffff285793a [ 385.673713][ T2961] R10: dffffc0000000000 R11: fffffbfff285793b R12: 1ffff1100bde0798 [ 385.682382][ T2961] R13: dead000000000100 R14: ffff88805e218230 R15: dffffc0000000000 [ 385.683310][T14128] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.690721][ T2961] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 385.706578][ T2961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.713675][ T2961] CR2: 00007ffc6da96ff8 CR3: 0000000067b0e000 CR4: 00000000003526f0 [ 385.722315][ T2961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.730438][ T2961] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.738806][ T2961] Call Trace: [ 385.742127][ T2961] [ 385.745097][ T2961] ? __warn+0x165/0x4d0 [ 385.749406][ T2961] ? ref_tracker_dir_exit+0x411/0x550 [ 385.755460][ T2961] ? report_bug+0x2b3/0x500 [ 385.760108][ T2961] ? ref_tracker_dir_exit+0x411/0x550 [ 385.765673][ T2961] ? handle_bug+0x60/0x90 [ 385.770756][ T2961] ? exc_invalid_op+0x1a/0x50 [ 385.775489][ T2961] ? asm_exc_invalid_op+0x1a/0x20 [ 385.780675][ T2961] ? ref_tracker_dir_exit+0x411/0x550 [ 385.786099][ T2961] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 385.791958][ T2961] ? cleanup_net+0xc65/0xd50 [ 385.796605][ T2961] ? cleanup_net+0xc65/0xd50 [ 385.801654][ T2961] cleanup_net+0xc72/0xd50 [ 385.806129][ T2961] ? __pfx_cleanup_net+0x10/0x10 [ 385.811177][ T2961] ? process_scheduled_works+0x976/0x1840 [ 385.817006][ T2961] process_scheduled_works+0xa66/0x1840 [ 385.822642][ T2961] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.829041][ T2961] ? assign_work+0x364/0x3d0 [ 385.833673][ T2961] worker_thread+0x870/0xd30 [ 385.838411][ T2961] ? __kthread_parkme+0x169/0x1d0 [ 385.843474][ T2961] ? __pfx_worker_thread+0x10/0x10 [ 385.848762][ T2961] kthread+0x2f0/0x390 [ 385.852864][ T2961] ? __pfx_worker_thread+0x10/0x10 [ 385.858441][ T2961] ? __pfx_kthread+0x10/0x10 [ 385.863084][ T2961] ret_from_fork+0x4b/0x80 [ 385.867703][ T2961] ? __pfx_kthread+0x10/0x10 [ 385.872338][ T2961] ret_from_fork_asm+0x1a/0x30 [ 385.877389][ T2961] [ 385.880465][ T2961] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 385.887774][ T2961] CPU: 0 UID: 0 PID: 2961 Comm: kworker/u8:7 Not tainted 6.13.0-rc3-syzkaller-00765-gbb70b0d48d8e #0 [ 385.898672][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.908761][ T2961] Workqueue: netns cleanup_net [ 385.913574][ T2961] Call Trace: [ 385.916877][ T2961] [ 385.919836][ T2961] dump_stack_lvl+0x241/0x360 [ 385.924558][ T2961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.929793][ T2961] ? __pfx__printk+0x10/0x10 [ 385.934413][ T2961] ? _printk+0xd5/0x120 [ 385.938802][ T2961] ? __init_begin+0x41000/0x41000 [ 385.943881][ T2961] ? vscnprintf+0x5d/0x90 [ 385.948273][ T2961] panic+0x349/0x880 [ 385.952205][ T2961] ? __warn+0x174/0x4d0 [ 385.956398][ T2961] ? __pfx_panic+0x10/0x10 [ 385.960865][ T2961] ? ret_from_fork_asm+0x1a/0x30 [ 385.965845][ T2961] __warn+0x344/0x4d0 [ 385.969872][ T2961] ? ref_tracker_dir_exit+0x411/0x550 [ 385.975294][ T2961] report_bug+0x2b3/0x500 [ 385.979693][ T2961] ? ref_tracker_dir_exit+0x411/0x550 [ 385.985108][ T2961] handle_bug+0x60/0x90 [ 385.989304][ T2961] exc_invalid_op+0x1a/0x50 [ 385.993928][ T2961] asm_exc_invalid_op+0x1a/0x20 [ 385.998787][ T2961] RIP: 0010:ref_tracker_dir_exit+0x411/0x550 [ 386.004777][ T2961] Code: 48 8b 1c 24 48 89 df 48 8b 74 24 20 e8 f8 d8 d3 06 eb 1a e8 31 12 a5 fc 48 8b 1c 24 48 89 df 48 8b 74 24 20 e8 e0 d8 d3 06 90 <0f> 0b 90 48 83 c3 44 48 89 df be 04 00 00 00 e8 ab 74 0b fd 48 89 [ 386.024401][ T2961] RSP: 0018:ffffc9000ba1f9e0 EFLAGS: 00010246 [ 386.030474][ T2961] RAX: ec1015daee3f0c00 RBX: ffff88805e2181e0 RCX: 0000000000000001 [ 386.038456][ T2961] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 386.046435][ T2961] RBP: ffffc9000ba1fab0 R08: ffffffff942bc9d7 R09: 1ffffffff285793a [ 386.054446][ T2961] R10: dffffc0000000000 R11: fffffbfff285793b R12: 1ffff1100bde0798 [ 386.062430][ T2961] R13: dead000000000100 R14: ffff88805e218230 R15: dffffc0000000000 [ 386.070433][ T2961] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 386.076699][ T2961] ? cleanup_net+0xc65/0xd50 [ 386.081307][ T2961] ? cleanup_net+0xc65/0xd50 [ 386.085917][ T2961] cleanup_net+0xc72/0xd50 [ 386.090358][ T2961] ? __pfx_cleanup_net+0x10/0x10 [ 386.095319][ T2961] ? process_scheduled_works+0x976/0x1840 [ 386.101082][ T2961] process_scheduled_works+0xa66/0x1840 [ 386.106661][ T2961] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.112656][ T2961] ? assign_work+0x364/0x3d0 [ 386.117260][ T2961] worker_thread+0x870/0xd30 [ 386.121875][ T2961] ? __kthread_parkme+0x169/0x1d0 [ 386.126928][ T2961] ? __pfx_worker_thread+0x10/0x10 [ 386.132071][ T2961] kthread+0x2f0/0x390 [ 386.136149][ T2961] ? __pfx_worker_thread+0x10/0x10 [ 386.141275][ T2961] ? __pfx_kthread+0x10/0x10 [ 386.145892][ T2961] ret_from_fork+0x4b/0x80 [ 386.150317][ T2961] ? __pfx_kthread+0x10/0x10 [ 386.154925][ T2961] ret_from_fork_asm+0x1a/0x30 [ 386.159709][ T2961] [ 386.163081][ T2961] Kernel Offset: disabled [ 386.167469][ T2961] Rebooting in 86400 seconds..