last executing test programs: 7m27.281645957s ago: executing program 2 (id=1098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x2000000000000114, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f000000ad80)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/128, 0x80}, 0x4}, {{&(0x7f00000005c0)=@nfc_llcp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/168, 0xa8}, {&(0x7f0000000900)}], 0x5, &(0x7f0000000a00)=""/37, 0x25}, 0x9}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/238, 0xee}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/239, 0xef}], 0x3, &(0x7f0000003680)=""/210, 0xd2}, 0xb2e}, {{&(0x7f0000000c80)=@qipcrtr, 0x80, &(0x7f0000006c40)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/108, 0x6c}, {&(0x7f0000005800)=""/179, 0xb3}, {&(0x7f00000058c0)=""/147, 0x93}, {&(0x7f0000005980)=""/190, 0xbe}, {&(0x7f0000005a40)=""/228, 0xe4}, {&(0x7f0000005b40)=""/221, 0xdd}, {&(0x7f0000005c40)=""/4096, 0x1000}], 0x9, &(0x7f0000006d00)=""/198, 0xc6}, 0x7}, {{&(0x7f0000006e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000009000)=[{&(0x7f0000006e80)=""/4096, 0x1000}, {&(0x7f0000007e80)=""/4096, 0x1000}, {&(0x7f0000008e80)=""/153, 0x99}, {&(0x7f0000008f40)=""/181, 0xb5}], 0x4, &(0x7f0000009040)=""/254, 0xfe}, 0xd35c}, {{&(0x7f0000009140)=@x25, 0x80, &(0x7f000000a580)=[{&(0x7f00000091c0)=""/163, 0xa3}, {&(0x7f0000009280)=""/4096, 0x1000}, {&(0x7f000000a280)=""/112, 0x70}, {&(0x7f000000a300)=""/158, 0x9e}, {&(0x7f000000a3c0)=""/235, 0xeb}, {&(0x7f000000a4c0)=""/190, 0xbe}], 0x6, &(0x7f000000a600)=""/9, 0x9}, 0x7}, {{0x0, 0x0, &(0x7f000000a940)=[{&(0x7f000000a640)=""/181, 0xb5}, {&(0x7f000000a700)=""/107, 0x6b}, {&(0x7f000000a780)=""/197, 0xc5}, {&(0x7f000000a880)=""/87, 0x57}, {&(0x7f000000a900)=""/7, 0x7}], 0x5, &(0x7f000000a9c0)=""/93, 0x5d}, 0x7}, {{&(0x7f000000aa40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f000000acc0)=[{&(0x7f000000aac0)}, {&(0x7f000000ab00)=""/213, 0xd5}, {&(0x7f000000ac00)=""/179, 0xb3}], 0x3, &(0x7f000000ad00)=""/104, 0x68}, 0x6}], 0x8, 0x0, 0x0) 7m26.004527886s ago: executing program 0 (id=1107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3400c041) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) sendmsg$kcm(r1, 0x0, 0x20000000) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r9) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r7, 0x0, 0x1100000000f336, 0x0) 7m25.581813969s ago: executing program 4 (id=1109): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x40) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="17fce59f2e1d45ff6427f888c5ff23", 0xf}, {&(0x7f00000003c0)="aecae1c7bf6125f416ce3b253d43e11599c1ed3573418ae1eb4d939b1356aab742b3cd2a1bffde0950e2a33de7438358fabaabcf696bf9d639dfe62f0985654135c5fdba9e1a40aa4a7ba6b783cca35a7ce0a36406c3ed598756a2175e571519b4f92233a6fa26e671cc7a1190ee41d71b852cfe2d38721bc42ac8aa520459d149b57b17192c4b0f510b0e2f5861c2d3fe86d1ec065f56c0ebd2e921e402a815f0f5fdb3e5568ed15f0d33761fd4d53413ba37f0300b203d9c7295cd82e9f513f7308c6b0d345a6d40fb691680af55418b5063f01ca9a556562875d36bb33b2bb2482060b1500406fbe20a7f63de898e7f4b597cb57a", 0xf6}, {&(0x7f0000000040)="168dd7063f747c0e28eb49698441a1e9d659540404dc2291b24440b6fd6f899f46e62715e8211c70b3bd236bd93e8d2d", 0x30}, {&(0x7f0000000100)="a8", 0x1}, {&(0x7f00000001c0)="b7c16083fb68", 0x6}, {&(0x7f0000000240)="44ce431a642cd6cced80056926fbf5b276331e0f9db667e78508eb15bb937e0a2b949de89a50680b25b0e5b7ff615bb9aeda50a02de6", 0x36}], 0x6) 7m25.0445871s ago: executing program 0 (id=1111): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x800, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r8, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) 7m24.845795795s ago: executing program 4 (id=1112): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="9e15"]}]}, 0x1c}], 0x1}, 0x300) 7m24.158441583s ago: executing program 1 (id=1113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x200000000000000, 0xffffffe7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0x80}, {}, 0x0, 0x1, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m24.103588321s ago: executing program 2 (id=1114): socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x63) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x4, r2}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x14, r5, 0x1, 0x4070bd2d, 0x2, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e21, 0x0, 0xffff, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x4, 0x40000000007, 0x0, 0x40000000000004, 0x2, 0x200000006, 0x3}, {0x40000000000005, 0xffffffffffffffff, 0x0, 0x6}, 0x4, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9079}}, 0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x23, 0x5, 0x5, 0x12, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) unshare(0x22020400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x5}}}, 0x1c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) syz_genetlink_get_family_id$nbd(0x0, r4) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x44010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@gettfilter={0x54, 0x2e, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x3, 0x2}, {0x2, 0xf421babd583b772c}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x907}]}, 0x54}}, 0x4088000) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60040050) 7m23.988067537s ago: executing program 1 (id=1115): r0 = socket$key(0xf, 0x3, 0x2) (async) socket(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="efce7444000000000000000000000000000000000b0000f2ff000000"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800f0fffffffffffff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r9 = socket$inet6(0xa, 0xa, 0x8) sendmmsg$sock(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000300)="a660613b60d7cdbfb6ddd15056a064e050cd17c623788fb6d4b0dd9dc80037422ca69d31f83aa412c099f89bd7bfac898a91ca7a827f433f1f3cc41864fb5ed7a804641765de47622f69a1077da7061406fede9405e7543b281a090bfca65d4748aa09fb", 0x64}], 0x2, &(0x7f0000000380)=[@mark={{0x0, 0x1, 0x24, 0xfffff800}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x0, 0x1, 0x3d, 0xea}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x90}}, {{&(0x7f0000000440)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002c80)="4fcf1d6063489916b75bad32ba8dbaf087f4e940e0335731a6867fba1690aa688f", 0x21}, {&(0x7f0000001540)="321503db54818ee8a476b44ab27b993d00b9e3e9c6e35b4566913c354ba6caccc8165b236d66bc12a168dcd65a8f579cea0b623a5b24b91c7c1048c84dbec6fbada81388c5886a88b31bfd5a3ce43ccf00aa17fc7adf67d8ee033a3112840720df56dd505ad92d7d7b3b688d689bac125493a8b0", 0x74}, {&(0x7f00000015c0)="11eb745df13779104d53ebc97dc38a1be164109a973683372bffaed1ede42fd969be6d69f803228b47032042e7d74063527902936663d1fb449ea90be0dfc2bc34eac205751f04bc4a9f98f7790891873cfee2240ed19e137f70c44a4bdf1fcaa94d283a0399b17db9605526d1237a4d", 0x70}, {&(0x7f0000001640)="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", 0x1000}], 0x4}}, {{&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x803, 0x1, 0x0, 0x4, {0xa, 0x4e21, 0x79ab, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002700)="557697234eb7bc750a95ef2c50d3c58cc8f951cf5f5c8cec9c64a8b11a76b2cfbe48ba02de0df0baea8361a960dd63407395d0df8a7bb822459d4232a44c27414524319961150abd234b1639a1ae5c6d57aa425f7462eef2f0f9c5caac9c1f7a7735aafdb9c5d2d188f52ed47f3a212b9ffcc2afc2f90f1cda4bff10c164e1ccf5fc99fcff765ed70bc3a3f008ad90ccc979e9dad3d506e85c81d1a2a4d67b4c0756faec9e9bedb759d1b656da1ee9729f526d232ff674fb893f923cbf14b7c8a3be", 0x1ced7a9ccae10747}, {&(0x7f0000002800)="f20fcc00bb5f7e94a084c6104a13ec2e15fce337a22b7649906f20ea2987e418a4abf3ec8305c77f8aa197fd34ae4f3c0d252cb5f5db1cf93d13bf8004defb836b12ec6cae9e6c514924c2cab5e1f8129ed507e5c34f5416ab4f811328311f98158798cc822aa8c9571016c7515c560e802b5272037d2eef92b64b9718bde510aa3230460b5b0ed2be58ccc8a38c42f453698e428c3e5f2229436be622d7d555e3d1e2529b43d6977071b5fed590bd3803c22529775a4d1a89ebb9fae3", 0xbd}, {&(0x7f00000028c0)="63172d34c37bff28b17e2c1876ddfbf08171fee0d664cd3ce86d9dd899ef2947584c679d80f048729ad164dcbe69d759273f6d76460e54f452867c48343bacf02e6f49bc07711baa0ca2813895ae2cc039fc098a5151b3d69ba94147f58bba8e860f9d0712de1eb8280fce5f23dead26a95ef48a68a20c483451e7ae8c8143cd0e3cdaba3d21d5", 0x87}, {&(0x7f0000002980)="de056de4a02932f9f551488357c550a04ab84c852d6c366845cf25695be30ccccd04890588ccd8eb4cd79be6889d4f3d47eb2d3f937eae4c9d9d15f377dd92975fbe606cd7a96ce1c6dc1e8c2f81e781ad4360c7daf9b0c9742432b98e32e8b60b6537f23631e1cf6d47fa4d5d4c4a402ffeb8d86eca29beada88b20ba2a7dc95f4ecbc3147040865dca76f51f4b4ff3c45149103e11fb3e954af710057b9956c4481af8648b354b3d61634a9de49114489987bb229d2cf8c863a51b8d8e167d26780be4fea6ff4b4a94bc18327f8bd9977ed291ada31e1108cc2d4259616667", 0xe0}, {&(0x7f0000002a80)="cf5e8f956e6b1fd9b483f433741625590f7d491460b7c541be7c2a32a7f0391bafb13a4109c6194c7ae1e99113839db0d3", 0x31}], 0x5, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}}], 0x3, 0x4000080) 7m23.947851714s ago: executing program 1 (id=1116): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) listen(r3, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x1, &(0x7f0000000fc0)="c0", 0xe, 0x52, 0xb57, 0x401, 0x186b, 0x0, 0xd, 'syz1\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ff04000000fffffffffffffff5c446f50f08ff4520001dfffe000000119078000000000000000000014e"], 0x0) 7m23.922664478s ago: executing program 0 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000004340)=@assoc_value, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000046020100760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x18, 0x0, 0x0) connect$pppoe(r6, 0x0, 0x0) sendmmsg(r6, 0x0, 0x0, 0x20008004) connect$bt_l2cap(r6, &(0x7f00000001c0)={0x1f, 0x7, @any, 0x7ff, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x3, 0x4, 0x9, 0x101, 0x9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x1cb2117a, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 7m23.721657286s ago: executing program 4 (id=1118): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000040300000000000000080001000100000008000ac0"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100003050000f100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000200aaaaaaaaaabb0000"], 0x48}}, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000140)={0x2, 0x1b51}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 7m23.72117288s ago: executing program 2 (id=1119): syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010121}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@remote}, {@private=0xa010102}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m23.595485994s ago: executing program 0 (id=1121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3400c041) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) sendmsg$kcm(r1, 0x0, 0x20000000) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r9) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r7, 0x0, 0x1100000000f336, 0x0) 7m23.496477622s ago: executing program 2 (id=1122): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x42, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000d80)=@framed={{}, [@generic={0x0, 0x9, 0x7, 0x3, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(r6, &(0x7f0000004000), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5, 0x0, 0x5}, 0x18) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r6) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x710, 0x10, 0x3, 0x5, {{0x3f, 0x4, 0x0, 0x4, 0xfc, 0x68, 0x0, 0x7, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @empty, {[@generic={0x44, 0x3, "01"}, @ssrr={0x89, 0x23, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @multicast1, @empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0x23, 0xf0, [@loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}]}, @ssrr={0x89, 0xf, 0x32, [@broadcast, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x22}}]}, @rr={0x7, 0x2b, 0x27, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @remote, @empty, @private=0xa010100, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x49, 0x3, 0xd, [{@broadcast, 0xd}, {@remote, 0x3}, {@remote, 0x8}]}, @rr={0x7, 0x23, 0xef, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x83, [@remote, @empty]}, @generic={0xc, 0xf, "680fe4e695d3dc920ba68f0ac2"}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @func={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x61, 0x2e]}}, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x10001, 0x10, {{0x2a, 0x4, 0x1, 0xd, 0xa8, 0x68, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@cipso={0x86, 0x15, 0x1, [{0x7, 0x2}, {0x7, 0x4, ')^'}, {0x5, 0x9, "0ddc88aca31029"}]}, @lsrr={0x83, 0x23, 0x67, [@private=0xa010102, @rand_addr=0x64010100, @broadcast, @empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1]}, @end, @generic={0x44, 0xb, "ec11d7c87a6f638d19"}, @timestamp={0x44, 0x10, 0x7b, 0x0, 0xf, [0x3ff, 0x0, 0x4]}, @end, @end, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x4, [{@empty, 0x9}, {@remote, 0x3}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010102, 0x7df}]}, @end, @ssrr={0x89, 0x7, 0xff, [@private=0xa010101]}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r13, @ANYBLOB="828500000000000024001a8008000280040001f6fb4450cae1dcc94b5d31578018000a8014010700fc010000524240cdfaf634e41c60f93592fbc2ffc377489a268a16e9f39fbb6fff1182d6f61230d354"], 0x44}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x28, 0x5, 0x0) getsockname$packet(r15, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x1}, {0xb, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x390, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa2}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7a}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb46f}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x390}, 0x1, 0x0, 0x0, 0x4000080}, 0x4048000) 7m23.496036795s ago: executing program 1 (id=1123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x1000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffff423, @dev={0xfe, 0x80, '\x00', 0xc}, 0x101}, 0x1c) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r3, 0x0) 7m23.075571636s ago: executing program 4 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000000b80)=""/244, 0xf4}, {&(0x7f0000005080)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 7m22.8175957s ago: executing program 2 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRES16=r0, @ANYRESDEC=r0], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000300), &(0x7f0000000380)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7m22.694221321s ago: executing program 4 (id=1127): socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000e"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000c6dab360438f64650f0000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240), 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000140000000000069078000000001000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a", @ANYRES32=r9, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7m22.542130369s ago: executing program 0 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xb, 0xa, 0x6, 0xfffffffffffffffe, 0x99a2179048df7119}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xe0, &(0x7f0000000100)=""/224, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0xd, 0xfffffff9, 0x21bbe762}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[r0, r0, r0], &(0x7f0000000340)=[{0x2, 0x5, 0x4, 0x2}, {0x3, 0x5, 0x5, 0x7}], 0x10, 0x0, @void, @value}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x9000000c}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000000), &(0x7f0000000440)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 7m22.461652849s ago: executing program 1 (id=1129): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 7m22.065574315s ago: executing program 1 (id=1131): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008a0000"], 0x26}}, 0x0) 7m22.064183403s ago: executing program 4 (id=1132): r0 = socket$inet6(0xa, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x154, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x11e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0xd, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d880087"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'bridge0\x00'}) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xd}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r9, @ANYBLOB="0500330001000002", @ANYRES64=r0, @ANYRES32=r7, @ANYRES64=r8], 0x2c}}, 0x40000c5) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x5452, &(0x7f0000000000)) sendmmsg$sock(r10, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) socket(0x840000000002, 0x3, 0xff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 7m21.563200965s ago: executing program 32 (id=1131): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008a0000"], 0x26}}, 0x0) 7m21.550969889s ago: executing program 0 (id=1134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 7m21.434224373s ago: executing program 33 (id=1134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 7m21.428811521s ago: executing program 2 (id=1135): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600980040000000050017"], 0x50}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xb, [@fwd={0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x8}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x4, [{0xf, 0x0, 0x2}]}, @fwd={0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x48, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x2e, 0x5f, 0x0, 0x5f, 0x0]}}, &(0x7f0000000180)=""/74, 0xb7, 0x4a, 0x1, 0x6, 0x10000, @value}, 0x28) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x80, 0x0, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1f, 0x6, 0x8, 0x3, 0x10000, 0x1, 0x6, '\x00', r6, r7, 0x4, 0x1, 0x4, 0x0, @void, @value, @value=r8}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0xfffffffffffffec1, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c40)={0x108, r3, 0xc01, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x17, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x5c799dde041308ff, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800906cf35cfa957a2500"/20, @ANYRES32=r15, @ANYRES8=r0], 0x38}}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005"], 0x1ec}}, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/5, 0x5}], 0x1, &(0x7f0000000000)=""/30, 0x1e}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a40)={&(0x7f0000000800)="2f8cf48676f22a51bf6f710ae90bc3265f3ea0366506ef72380fb642930ed0467a844a59791206b9803c48d4", &(0x7f0000000840)=""/184, &(0x7f0000000900)="20fee0c4e1b712d7357b922bd6f30c7bf2450c18a516788c6e40a342f8bc76dfd970d8848585e3a4338862ff4162d1c545797d66aaa09341df5def66b29765439dd6bd62e3ca692c3a7afa077cc20d", &(0x7f0000000980)="f6a703d6132d62e85ef161b9816f38a1c91ba4144be47504a82f1d8e4b498fc827a41acefa5c1d", 0x9c, r10, 0x4}, 0x38) 7m21.34886312s ago: executing program 34 (id=1135): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600980040000000050017"], 0x50}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xb, [@fwd={0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x8}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x4, [{0xf, 0x0, 0x2}]}, @fwd={0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x48, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x2e, 0x5f, 0x0, 0x5f, 0x0]}}, &(0x7f0000000180)=""/74, 0xb7, 0x4a, 0x1, 0x6, 0x10000, @value}, 0x28) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x80, 0x0, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1f, 0x6, 0x8, 0x3, 0x10000, 0x1, 0x6, '\x00', r6, r7, 0x4, 0x1, 0x4, 0x0, @void, @value, @value=r8}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0xfffffffffffffec1, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c40)={0x108, r3, 0xc01, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x17, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x5c799dde041308ff, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800906cf35cfa957a2500"/20, @ANYRES32=r15, @ANYRES8=r0], 0x38}}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/5, 0x5}], 0x1, &(0x7f0000000000)=""/30, 0x1e}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a40)={&(0x7f0000000800)="2f8cf48676f22a51bf6f710ae90bc3265f3ea0366506ef72380fb642930ed0467a844a59791206b9803c48d4", &(0x7f0000000840)=""/184, &(0x7f0000000900)="20fee0c4e1b712d7357b922bd6f30c7bf2450c18a516788c6e40a342f8bc76dfd970d8848585e3a4338862ff4162d1c545797d66aaa09341df5def66b29765439dd6bd62e3ca692c3a7afa077cc20d", &(0x7f0000000980)="f6a703d6132d62e85ef161b9816f38a1c91ba4144be47504a82f1d8e4b498fc827a41acefa5c1d", 0x9c, r10, 0x4}, 0x38) 7m21.305251325s ago: executing program 35 (id=1132): r0 = socket$inet6(0xa, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x154, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x11e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x7, 0x1, "000000050000000026000400"}, {}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0xd, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d880087"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'bridge0\x00'}) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xd}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r9, @ANYBLOB="0500330001000002", @ANYRES64=r0, @ANYRES32=r7, @ANYRES64=r8], 0x2c}}, 0x40000c5) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x5452, &(0x7f0000000000)) sendmmsg$sock(r10, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) socket(0x840000000002, 0x3, 0xff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m46.162962208s ago: executing program 7 (id=3201): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300010000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01034000000000001400030076657468305f746f5f6261746164760008000d0000000000080029"], 0x44}, 0x1, 0x0, 0x300, 0x4044010}, 0x0) 1m45.82806043s ago: executing program 7 (id=3204): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 1m27.373424812s ago: executing program 6 (id=3289): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000b80)="4cf80c33db588500f6796f210c5c25a3c17f77eb7cd6135744495e689f0308505dc9dc7d504e269ad5b9028ece1daae10a67942da326a929904a1762df7f5b7c35", 0x41) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) 1m27.226227712s ago: executing program 6 (id=3292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040600) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r4, 0x1, 0x210000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x22fa, 0xb, 0x8, 0x7, 0x6, 0x65b, 0xb5, 0x8]}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4024) 1m26.705607257s ago: executing program 6 (id=3300): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x8001}}, @common=@inet=@multiport={{0x50}, {0x0, 0xff, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e20]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xcc48, 0x5, 0x7, 'snmp\x00', {0x1800000000000}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x1, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r3], 0x78}}, 0x0) 1m16.934158705s ago: executing program 7 (id=3204): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 59.756901614s ago: executing program 6 (id=3300): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x8001}}, @common=@inet=@multiport={{0x50}, {0x0, 0xff, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e20]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xcc48, 0x5, 0x7, 'snmp\x00', {0x1800000000000}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x1, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r3], 0x78}}, 0x0) 51.127246527s ago: executing program 7 (id=3204): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 37.00616621s ago: executing program 6 (id=3300): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x8001}}, @common=@inet=@multiport={{0x50}, {0x0, 0xff, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e20]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xcc48, 0x5, 0x7, 'snmp\x00', {0x1800000000000}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x1, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r3], 0x78}}, 0x0) 31.790235163s ago: executing program 7 (id=3204): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 15.28712445s ago: executing program 6 (id=3300): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x0, 0x0, 0x8001}}, @common=@inet=@multiport={{0x50}, {0x0, 0xff, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e20]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xcc48, 0x5, 0x7, 'snmp\x00', {0x1800000000000}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x1, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r3], 0x78}}, 0x0) 11.450353002s ago: executing program 7 (id=3204): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 3.347246665s ago: executing program 3 (id=3772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0xa00, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040844) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x42, 0x4, 0x1428, 0xffffffff, 0x0, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1488) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113800000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x36ee}, {r6, 0x1402}, {0xffffffffffffffff, 0x2000}, {r6}, {r0, 0x100}], 0x5, 0xfffffff4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) 2.452478767s ago: executing program 5 (id=3778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) socket$inet_tcp(0x2, 0x1, 0x0) 2.380507002s ago: executing program 5 (id=3779): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070200000000000000000100000008000880bcff07802c0004800500030001000000050003000500000f00000300010000000500030000000000000000000200000008000100030000000800020001"], 0x58}}, 0x880) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x78, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x78}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff080001400000000008000240000000010800034000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.305488936s ago: executing program 8 (id=3780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r1, &(0x7f0000008440)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000440)='reno\x00', 0x5) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x40, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x58}, {0x2, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x2, 0x8}, [@tmpl={0x44, 0x8, [{{@in6=@loopback={0x800000000000000}, 0x4d4}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) sendmsg$key(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x48c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x348, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1c0, 0x1e0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000005008c1e06a6010007000000"], 0x1c}}, 0x20000090) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x2e8}}], 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2.295536491s ago: executing program 5 (id=3781): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, 0x0, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0b0000000d040000cc00020001ffffff05c70000795a5987f8b10a5de0281fa4a45ff127b3b446379137180c2bb5741e2affbd4a902ae5e3451f559100b50475eb04e5c0c01220bc10e311a3710efab81c73420ec22c0ad62159b250e6aeb78b447a01df83150c0213bf197dd4abe1dd71e2bc7c58b9d1595dc8b01e43f9a16208a3f9b9a50e3b5db41112f6f850a8abea8bf28c6adb01d6621866a2e1d92a0c9c5743cd4e7769603fe30d3b1fda6ae28f1d31169c738874408e909f988c32a4e5b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r0}, 0x38) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002001800000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x5b}}], 0x40001b6, 0xc0090) close(r4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001900)="bfaf00798e84ccafb6e88633989f1cdb6f8defb6a5338ad4ec417a2e51c790ab3b4478dfc1988bb72625ddd8076fa05538bfdad140b9667889ba915973e517af906eea78a4db639069", &(0x7f0000000480), 0x1000, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f0000000100), &(0x7f0000000580)=""/4096}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001980)="c067e7d562fbceb74f367693f3571e7dbd7f4c9d9513dea80018c790167326c73b57a6fb8bfee2a55c825da24eac9a22b45f44b2134cfe43da0cf48c91dd91b3d678124865281496c9eeff053650e6f76d8bdd95f2c85127d0821ddca434de4463fe338e3b60bb4457138917317de8fa146639c6d4989fe267d2fd0d365a4d8b698de4e15ca3ebc6775e4789fdb30fca3cd2409bdb756da38ed5c1d614a3583ea47695d5d232", 0x2, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c40ff80000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.158248531s ago: executing program 5 (id=3782): pipe(&(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) 2.057721801s ago: executing program 5 (id=3783): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) socket$igmp6(0xa, 0x3, 0x2) unshare(0x22020400) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="18cc3f8c39a3aa19249c631f7cd11257674f659f63dc7ccd1f148b1a6117e2a45a6c66a9f610810fc220", 0x2a}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES32=0x41424344], 0x0) unshare(0x44000400) 1.280815707s ago: executing program 3 (id=3784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.224469759s ago: executing program 8 (id=3785): r0 = socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x12, 0x0, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001580), r0) 1.037803592s ago: executing program 3 (id=3786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004cc0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="ebec", 0x2}, {&(0x7f0000000440)="b937d3", 0x3}], 0x2, 0x0, 0x0, 0x200048c4}], 0x1, 0x44091) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 893.471138ms ago: executing program 8 (id=3787): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000140)=0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000100ffffffff"], 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 847.276457ms ago: executing program 3 (id=3788): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000089"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r10, 0x20, 0x0}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="20535caa1e0005000000010901040000000000000000000000000900010073797a3100000000"], 0x20}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x3}, {0x6, 0x3}, {0x7, 0x5}, {0xe}, {0xd, 0x1}]}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x7}]}, @datasec={0x5, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x1, 0x9}, {0x3, 0x1, 0x401}, {0x5, 0x6}, {0x4, 0x37, 0x66}, {0x5, 0x5, 0x2}, {0x1, 0x8, 0x5}], "c58d6b"}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x5, 0x8}, {0x3, 0x5}, {0x5, 0x5}, {0xb, 0x5}, {0x8, 0x1}, {0x5, 0x4}, {0x5, 0x4}]}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000000240)=""/44, 0x10c, 0x2c, 0x1, 0x80000001, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', r8, r12, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 657.846318ms ago: executing program 8 (id=3789): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_LINK={0x8, 0x1, r1}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010001", 0x7) 470.03188ms ago: executing program 3 (id=3790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, &(0x7f0000000280), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1a6b181800000000000000000000000000000037477be519"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) epoll_create1(0x80000) epoll_create(0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='module_request\x00', r3}, 0x18) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130728bd700000000000ac1e01010000000000000000020c0000000000000000000000000000dfffffff4e230001000000000200000c84000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x4, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="8b3000000000000000000000009e711c4cff7f00005100000ac71d4018544d5606460365ea1bee3aa804f7b94c84a51be667793c3e67370a66c1e305f144bcd9b13d44a132af6a425fcb6745729228b51c7df636b77f17e2a78436a877f42fd8fcfbf530b3ea560c508429e8efef8f4449c77f8428da902f1758c4bcbfabad675c1c69a6e77b06c3f49f2f3afb67b1a1a7731da1c0f2d5185f59ebfc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) socket$inet(0x2, 0xa, 0x1) pipe(&(0x7f0000000c00)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) listen(r0, 0x8) 331.260793ms ago: executing program 8 (id=3791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) epoll_create1(0x0) socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x40000) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) (async) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) listen(r2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 137.465496ms ago: executing program 8 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESOCT=r0, @ANYBLOB="7e20394ea98a4d05581d03fc19a11f30ecd0de51e71713c1b99c5dccebfe", @ANYRES16, @ANYBLOB="1dba5611323aebc502a7ba930cbd266b078e1d4c9d7884daeabfd584f5d58733a0f04bbd2cd2b0b5d2da6965c89493eeec7ed14afd86def47b358176d234881e5914174856763363ba97", @ANYRES32=r0, @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000001540)=ANY=[@ANYRES16=r3], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d7208", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @long}, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000100), 0x0, 0x7, 0x7) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x3, @broadcast}, 0x10) (async) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c000000100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af8840000000140012800b00010062617461647600000400028008001f0003000000a2ae165b673868844431dedc68ff070bd388bd5947f9d3d3d20b2fecbfabb3f3b9fe9a96c73a8bb9c181c009cb12f219446f7abaf99a60faf9025a5dde3a4614f5656a781019f6623e00a133982f050364999558535ae02bf8ef4c8a9270277a8cad377ef7f5fed98690628717fb91c3c73145790a0e0bbbfb6857469130a2f9c34663aef4"], 0x3c}}, 0x0) (async) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) (async) accept4(r10, 0x0, 0x0, 0x0) 126.329961ms ago: executing program 3 (id=3793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000180)=""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x491, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0xe742c000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES8=r0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={r1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 0s ago: executing program 5 (id=3794): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1b, 0x7}, 0x880) socket$key(0xf, 0x3, 0x2) unshare(0x20000400) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000940)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xe040180) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040), 0x4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000200)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7dc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bind$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f00000000c0)=""/66, &(0x7f0000000140)=0x42) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20040045}, 0x40) kernel console output (not intermixed with test programs): im3 netdevsim2: renamed from eth2 [ 557.396810][T17397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 557.412460][T17599] tipc: Started in network mode [ 557.417515][T17599] tipc: Node identity ac14140f, cluster identity 4711 [ 557.429831][T17599] tipc: New replicast peer: 255.255.255.255 [ 557.436798][T17599] tipc: Enabled bearer , priority 10 [ 557.544915][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3149'. [ 557.586178][T17601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.691752][T17397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.775561][T17397] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.842844][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.850138][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.924041][ T5850] Bluetooth: hci5: command tx timeout [ 558.015085][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.022474][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.239432][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3151'. [ 558.284096][T17630] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3151'. [ 558.435139][T17628] lo speed is unknown, defaulting to 1000 [ 558.564713][T17186] tipc: Node number set to 2886997007 [ 559.081892][T17650] xt_CT: No such helper "pptp" [ 559.096935][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.104820][T17656] netlink: 'syz.5.3158': attribute type 23 has an invalid length. [ 559.144487][T17655] delete_channel: no stack [ 559.361325][T17397] veth0_vlan: entered promiscuous mode [ 559.392272][T17397] veth1_vlan: entered promiscuous mode [ 559.404002][T17667] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3161'. [ 559.518901][T17397] veth0_macvtap: entered promiscuous mode [ 559.588439][T17397] veth1_macvtap: entered promiscuous mode [ 559.618848][T17676] netlink: 'syz.5.3164': attribute type 39 has an invalid length. [ 559.647345][T17676] netlink: 'syz.5.3164': attribute type 21 has an invalid length. [ 559.685426][T17676] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3164'. [ 559.704452][T17676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.748129][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.808269][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.845229][T17397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.905380][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.926967][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.961842][T17397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.004647][ T5850] Bluetooth: hci5: command tx timeout [ 560.027927][T17397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.053048][T17397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.074929][T17397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.096255][T17397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.270787][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.300607][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.347437][ T9192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.357433][ T9192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.388555][T17687] bond0: (slave team0): Releasing backup interface [ 560.431951][T17687] bond0: (slave batadv0): Releasing backup interface [ 560.464951][T17687] bond0: (slave bond_slave_1): Releasing backup interface [ 560.494793][T17687] team_slave_0: left promiscuous mode [ 560.501960][T17692] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 560.532142][T17687] team0: Port device team_slave_0 removed [ 560.560572][T17687] team_slave_1: left promiscuous mode [ 560.580552][T17687] team0: Port device team_slave_1 removed [ 560.590378][T17687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.676091][T17687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.701215][T17687] bond0: (slave bond1): Releasing backup interface [ 560.720795][T17690] vlan0: entered promiscuous mode [ 560.742223][T17697] wg1: entered promiscuous mode [ 560.775096][T17697] wg1: entered allmulticast mode [ 560.878288][T17703] netlink: 'syz.5.3172': attribute type 2 has an invalid length. [ 560.886950][T17703] __nla_validate_parse: 1 callbacks suppressed [ 560.886967][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3172'. [ 561.310547][T17725] x_tables: unsorted entry at hook 3 [ 561.319731][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3178'. [ 561.336416][T17725] x_tables: unsorted entry at hook 3 [ 562.215160][T17759] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3184'. [ 562.584655][T17707] lo speed is unknown, defaulting to 1000 [ 562.605652][T17761] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3185'. [ 562.691076][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3185'. [ 562.776830][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3185'. [ 562.860236][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3185'. [ 562.970714][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.246927][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3189'. [ 563.415559][T17780] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3191'. [ 563.778673][T17735] lo speed is unknown, defaulting to 1000 [ 563.797011][T17803] netlink: zone id is out of range [ 563.848533][T17803] netlink: set zone limit has 4 unknown bytes [ 564.431066][T17825] netlink: 'syz.8.3203': attribute type 5 has an invalid length. [ 565.253964][T17836] syzkaller0: entered promiscuous mode [ 565.259616][T17836] syzkaller0: entered allmulticast mode [ 565.272495][T17838] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 565.579544][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3211'. [ 565.714802][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.731161][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.748244][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.791366][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.809517][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.166345][T17865] __nla_validate_parse: 1 callbacks suppressed [ 566.166365][T17865] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3213'. [ 567.928013][ T5844] Bluetooth: hci2: command tx timeout [ 567.993720][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3211'. [ 568.192506][T17870] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3215'. [ 568.258406][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3215'. [ 568.273947][T17874] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3216'. [ 568.384409][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3218'. [ 568.396247][T17857] lo speed is unknown, defaulting to 1000 [ 568.415563][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3218'. [ 568.438676][T17879] netlink: 22 bytes leftover after parsing attributes in process `syz.8.3218'. [ 568.450786][T17879] nbd: socks must be embedded in a SOCK_ITEM attr [ 568.707201][T17893] 8021q: VLANs not supported on nlmon0 [ 568.821996][T17857] chnl_net:caif_netlink_parms(): no params data found [ 569.089425][T17909] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 569.205739][T17902] syzkaller0: entered promiscuous mode [ 569.230340][T17902] syzkaller0: entered allmulticast mode [ 569.652069][T17889] lo speed is unknown, defaulting to 1000 [ 569.853622][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3229'. [ 569.888124][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3229'. [ 570.006014][ T5844] Bluetooth: hci2: command tx timeout [ 571.945604][T17929] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 571.970128][T17929] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 572.017063][T17857] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.025229][T17857] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.032529][T17857] bridge_slave_0: entered allmulticast mode [ 572.040497][T17857] bridge_slave_0: entered promiscuous mode [ 572.084909][ T5844] Bluetooth: hci2: command tx timeout [ 572.111781][T17857] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.129412][T17857] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.139506][T17857] bridge_slave_1: entered allmulticast mode [ 572.148280][T17857] bridge_slave_1: entered promiscuous mode [ 572.301705][T17857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.360618][T17857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.579658][T17857] team0: Port device team_slave_0 added [ 572.614933][T17857] team0: Port device team_slave_1 added [ 572.699637][T17857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.707350][T17857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.738288][T17857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.765824][T17857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.773004][T17857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.800420][T17857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.276070][T17957] lo speed is unknown, defaulting to 1000 [ 573.381349][T17857] hsr_slave_0: entered promiscuous mode [ 573.406035][T17857] hsr_slave_1: entered promiscuous mode [ 573.442981][T17857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.466757][T17857] Cannot create hsr debugfs directory [ 573.814658][T17974] __nla_validate_parse: 1 callbacks suppressed [ 573.814678][T17974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3243'. [ 573.909394][T17966] syzkaller0: entered promiscuous mode [ 573.927709][T17966] syzkaller0: entered allmulticast mode [ 573.999901][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3243'. [ 574.164059][ T5844] Bluetooth: hci2: command tx timeout [ 574.892024][T18000] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3249'. [ 576.542871][T17993] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 576.609285][T17998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 577.070730][T18018] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3251'. [ 577.203931][T18030] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3260'. [ 577.219497][T17857] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.242025][T17857] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.388368][T18032] syzkaller0: entered promiscuous mode [ 577.394948][T18032] syzkaller0: entered allmulticast mode [ 577.411500][T17857] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.424478][T17857] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.129362][T18060] xt_CT: No such helper "snmp" [ 578.169684][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3267'. [ 579.726461][T17857] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.736779][T17857] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.831005][T18065] netlink: 340 bytes leftover after parsing attributes in process `syz.5.3268'. [ 579.887527][T17857] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.910650][T17857] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.124804][T17857] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 580.138066][T17857] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 580.158722][T17857] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 580.199808][T17857] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 580.399371][T17857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.446207][T17857] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.489590][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.496857][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.566926][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.574255][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.862627][T18108] syzkaller0: entered promiscuous mode [ 580.868872][T18108] syzkaller0: entered allmulticast mode [ 580.985206][T18114] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 582.737617][ T5850] Bluetooth: hci2: command 0x0405 tx timeout [ 583.112557][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3291'. [ 583.115493][T18143] netlink: 'syz.8.3290': attribute type 21 has an invalid length. [ 583.129461][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3291'. [ 583.181950][T18143] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.202341][T18143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.210134][T18143] IPv6: NLM_F_CREATE should be set when creating new route [ 583.217486][T18143] IPv6: NLM_F_CREATE should be set when creating new route [ 583.224834][T18143] IPv6: NLM_F_CREATE should be set when creating new route [ 583.436567][T18152] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 583.610496][T18162] bridge6: entered allmulticast mode [ 583.690338][T17857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.860884][T18162] syzkaller0: entered promiscuous mode [ 583.867085][T18162] syzkaller0: entered allmulticast mode [ 583.874184][T18124] lo speed is unknown, defaulting to 1000 [ 584.283549][T18173] FAULT_INJECTION: forcing a failure. [ 584.283549][T18173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 584.297089][T18173] CPU: 1 UID: 0 PID: 18173 Comm: syz.8.3302 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 584.297117][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 584.297129][T18173] Call Trace: [ 584.297138][T18173] [ 584.297146][T18173] dump_stack_lvl+0x189/0x250 [ 584.297184][T18173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.297214][T18173] ? __pfx__printk+0x10/0x10 [ 584.297237][T18173] ? fs_reclaim_acquire+0x7d/0x100 [ 584.297276][T18173] should_fail_ex+0x414/0x560 [ 584.297302][T18173] prepare_alloc_pages+0x213/0x610 [ 584.297341][T18173] __alloc_frozen_pages_noprof+0x123/0x370 [ 584.297377][T18173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 584.297413][T18173] ? __pfx__copy_from_iter+0x10/0x10 [ 584.297439][T18173] ? policy_nodemask+0x27c/0x720 [ 584.297463][T18173] ? aa_file_perm+0x11f/0xed0 [ 584.297491][T18173] alloc_pages_mpol+0x232/0x4a0 [ 584.297523][T18173] alloc_pages_noprof+0xa9/0x190 [ 584.297551][T18173] anon_pipe_write+0xb85/0x1360 [ 584.297604][T18173] ? __pfx_anon_pipe_write+0x10/0x10 [ 584.297628][T18173] ? common_file_perm+0x199/0x200 [ 584.297653][T18173] ? bpf_lsm_file_permission+0x9/0x20 [ 584.297677][T18173] ? security_file_permission+0x75/0x290 [ 584.297717][T18173] vfs_write+0x548/0xa90 [ 584.297753][T18173] ? __pfx_anon_pipe_write+0x10/0x10 [ 584.297780][T18173] ? __pfx_vfs_write+0x10/0x10 [ 584.297814][T18173] ? __fget_files+0x2a/0x420 [ 584.297850][T18173] ksys_write+0x145/0x250 [ 584.297875][T18173] ? __pfx_ksys_write+0x10/0x10 [ 584.297908][T18173] do_syscall_64+0xf6/0x210 [ 584.297932][T18173] ? clear_bhb_loop+0x45/0xa0 [ 584.297957][T18173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.297976][T18173] RIP: 0033:0x7fbb4618e969 [ 584.297994][T18173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.298012][T18173] RSP: 002b:00007fbb46f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 584.298033][T18173] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618e969 [ 584.298047][T18173] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 584.298060][T18173] RBP: 00007fbb46f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 584.298072][T18173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.298083][T18173] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 584.298115][T18173] [ 584.924511][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.939353][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.951958][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.964778][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.995148][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.669839][T18198] netlink: 'syz.5.3307': attribute type 12 has an invalid length. [ 586.678672][T18198] netlink: 'syz.5.3307': attribute type 12 has an invalid length. [ 586.687199][T18198] netlink: 'syz.5.3307': attribute type 12 has an invalid length. [ 587.045252][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 587.079666][T18226] FAULT_INJECTION: forcing a failure. [ 587.079666][T18226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.094803][T18226] CPU: 0 UID: 0 PID: 18226 Comm: syz.8.3313 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 587.094832][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.094845][T18226] Call Trace: [ 587.094853][T18226] [ 587.094870][T18226] dump_stack_lvl+0x189/0x250 [ 587.094902][T18226] ? __lock_acquire+0xaac/0xd20 [ 587.094933][T18226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.094961][T18226] ? __pfx__printk+0x10/0x10 [ 587.094982][T18226] ? __might_fault+0xb0/0x130 [ 587.095020][T18226] should_fail_ex+0x414/0x560 [ 587.095046][T18226] _copy_from_iter+0x1db/0x15a0 [ 587.095071][T18226] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 587.095114][T18226] ? __pfx__copy_from_iter+0x10/0x10 [ 587.095139][T18226] ? policy_nodemask+0x27c/0x720 [ 587.095164][T18226] ? aa_file_perm+0x11f/0xed0 [ 587.095195][T18226] ? page_copy_sane+0x4e/0x280 [ 587.095222][T18226] copy_page_from_iter+0x7b/0x100 [ 587.095250][T18226] anon_pipe_write+0x99a/0x1360 [ 587.095302][T18226] ? __pfx_anon_pipe_write+0x10/0x10 [ 587.095327][T18226] ? common_file_perm+0x199/0x200 [ 587.095352][T18226] ? bpf_lsm_file_permission+0x9/0x20 [ 587.095377][T18226] ? security_file_permission+0x75/0x290 [ 587.095418][T18226] vfs_write+0x548/0xa90 [ 587.095445][T18226] ? __pfx_anon_pipe_write+0x10/0x10 [ 587.095472][T18226] ? __pfx_vfs_write+0x10/0x10 [ 587.095507][T18226] ? __fget_files+0x2a/0x420 [ 587.095543][T18226] ksys_write+0x145/0x250 [ 587.095569][T18226] ? __pfx_ksys_write+0x10/0x10 [ 587.095603][T18226] do_syscall_64+0xf6/0x210 [ 587.095627][T18226] ? clear_bhb_loop+0x45/0xa0 [ 587.095653][T18226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.095672][T18226] RIP: 0033:0x7fbb4618e969 [ 587.095689][T18226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.095707][T18226] RSP: 002b:00007fbb46f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.095728][T18226] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618e969 [ 587.095742][T18226] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 587.095755][T18226] RBP: 00007fbb46f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.095767][T18226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.095779][T18226] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 587.095811][T18226] [ 587.145095][ T5844] Bluetooth: hci1: command tx timeout [ 587.445872][T17857] veth0_vlan: entered promiscuous mode [ 587.501032][T17857] veth1_vlan: entered promiscuous mode [ 587.602293][T18180] lo speed is unknown, defaulting to 1000 [ 587.777166][T18242] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 588.346956][T18255] netlink: 'syz.5.3321': attribute type 21 has an invalid length. [ 588.396545][ T13] bond0 (unregistering): Released all slaves [ 588.611677][ T13] bond1 (unregistering): Released all slaves [ 588.642999][T18249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3320'. [ 588.686976][T17857] veth0_macvtap: entered promiscuous mode [ 588.765952][T18248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3320'. [ 588.792743][T18261] FAULT_INJECTION: forcing a failure. [ 588.792743][T18261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.810473][T18261] CPU: 0 UID: 0 PID: 18261 Comm: syz.5.3324 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 588.810501][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.810511][T18261] Call Trace: [ 588.810518][T18261] [ 588.810527][T18261] dump_stack_lvl+0x189/0x250 [ 588.810560][T18261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.810584][T18261] ? __pfx__printk+0x10/0x10 [ 588.810603][T18261] ? fs_reclaim_acquire+0x7d/0x100 [ 588.810637][T18261] should_fail_ex+0x414/0x560 [ 588.810659][T18261] prepare_alloc_pages+0x213/0x610 [ 588.810693][T18261] __alloc_frozen_pages_noprof+0x123/0x370 [ 588.810724][T18261] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 588.810755][T18261] ? __pfx__copy_from_iter+0x10/0x10 [ 588.810776][T18261] ? policy_nodemask+0x27c/0x720 [ 588.810797][T18261] ? aa_file_perm+0x11f/0xed0 [ 588.810820][T18261] alloc_pages_mpol+0x232/0x4a0 [ 588.810847][T18261] alloc_pages_noprof+0xa9/0x190 [ 588.810871][T18261] anon_pipe_write+0xb85/0x1360 [ 588.810917][T18261] ? __pfx_anon_pipe_write+0x10/0x10 [ 588.810937][T18261] ? common_file_perm+0x199/0x200 [ 588.810959][T18261] ? bpf_lsm_file_permission+0x9/0x20 [ 588.810980][T18261] ? security_file_permission+0x75/0x290 [ 588.811014][T18261] vfs_write+0x548/0xa90 [ 588.811038][T18261] ? __pfx_anon_pipe_write+0x10/0x10 [ 588.811061][T18261] ? __pfx_vfs_write+0x10/0x10 [ 588.811091][T18261] ? __fget_files+0x2a/0x420 [ 588.811122][T18261] ksys_write+0x145/0x250 [ 588.811144][T18261] ? __pfx_ksys_write+0x10/0x10 [ 588.811173][T18261] do_syscall_64+0xf6/0x210 [ 588.811192][T18261] ? clear_bhb_loop+0x45/0xa0 [ 588.811223][T18261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.811241][T18261] RIP: 0033:0x7fd4bdb8e969 [ 588.811256][T18261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.811271][T18261] RSP: 002b:00007fd4be9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.811289][T18261] RAX: ffffffffffffffda RBX: 00007fd4bddb5fa0 RCX: 00007fd4bdb8e969 [ 588.811301][T18261] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 588.811311][T18261] RBP: 00007fd4be9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 588.811321][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.811331][T18261] R13: 0000000000000000 R14: 00007fd4bddb5fa0 R15: 00007ffe8cf8eff8 [ 588.811359][T18261] [ 588.848286][T18263] sctp: [Deprecated]: syz.8.3323 (pid 18263) Use of int in max_burst socket option. [ 588.848286][T18263] Use struct sctp_assoc_value instead [ 588.952520][T17857] veth1_macvtap: entered promiscuous mode [ 589.112249][ T13] tipc: Left network mode [ 589.278145][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.289742][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.309012][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.327176][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.341332][T17857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.379212][ T5844] Bluetooth: hci1: command tx timeout [ 589.430299][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3328'. [ 589.488963][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.520315][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.551158][T17857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.562401][T17857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.576226][T17857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.765265][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3332'. [ 589.805389][T18301] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3331'. [ 589.905372][T17857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.930325][T17857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.951096][T17857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.978998][T17857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.146292][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3333'. [ 590.259397][T18305] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3333'. [ 590.285320][T18311] smc: net device bond0 applied user defined pnetid SYZ2 [ 590.294308][ T13] macvlan1: left promiscuous mode [ 590.310411][ T13] hsr_slave_0: left promiscuous mode [ 591.016342][ T13] vxcan1 (unregistering): left allmulticast mode [ 591.237582][T18180] chnl_net:caif_netlink_parms(): no params data found [ 591.270221][T18312] !: renamed from dummy0 (while UP) [ 591.347299][T18314] FAULT_INJECTION: forcing a failure. [ 591.347299][T18314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.360890][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.5.3336 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 591.360911][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 591.360920][T18314] Call Trace: [ 591.360927][T18314] [ 591.360934][T18314] dump_stack_lvl+0x189/0x250 [ 591.360959][T18314] ? __lock_acquire+0xaac/0xd20 [ 591.360982][T18314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.361003][T18314] ? __pfx__printk+0x10/0x10 [ 591.361017][T18314] ? __might_fault+0xb0/0x130 [ 591.361045][T18314] should_fail_ex+0x414/0x560 [ 591.361064][T18314] _copy_from_iter+0x1db/0x15a0 [ 591.361082][T18314] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 591.361112][T18314] ? __pfx__copy_from_iter+0x10/0x10 [ 591.361130][T18314] ? policy_nodemask+0x27c/0x720 [ 591.361147][T18314] ? aa_file_perm+0x11f/0xed0 [ 591.361170][T18314] ? page_copy_sane+0x4e/0x280 [ 591.361189][T18314] copy_page_from_iter+0x7b/0x100 [ 591.361209][T18314] anon_pipe_write+0x99a/0x1360 [ 591.361246][T18314] ? __pfx_anon_pipe_write+0x10/0x10 [ 591.361263][T18314] ? common_file_perm+0x199/0x200 [ 591.361281][T18314] ? bpf_lsm_file_permission+0x9/0x20 [ 591.361299][T18314] ? security_file_permission+0x75/0x290 [ 591.361327][T18314] vfs_write+0x548/0xa90 [ 591.361347][T18314] ? __pfx_anon_pipe_write+0x10/0x10 [ 591.361366][T18314] ? __pfx_vfs_write+0x10/0x10 [ 591.361390][T18314] ? __fget_files+0x2a/0x420 [ 591.361416][T18314] ksys_write+0x145/0x250 [ 591.361433][T18314] ? __pfx_ksys_write+0x10/0x10 [ 591.361457][T18314] do_syscall_64+0xf6/0x210 [ 591.361473][T18314] ? clear_bhb_loop+0x45/0xa0 [ 591.361491][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.361511][T18314] RIP: 0033:0x7fd4bdb8e969 [ 591.361525][T18314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.361537][T18314] RSP: 002b:00007fd4be9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.361552][T18314] RAX: ffffffffffffffda RBX: 00007fd4bddb5fa0 RCX: 00007fd4bdb8e969 [ 591.361562][T18314] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 591.361572][T18314] RBP: 00007fd4be9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 591.361580][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.361588][T18314] R13: 0000000000000000 R14: 00007fd4bddb5fa0 R15: 00007ffe8cf8eff8 [ 591.361611][T18314] [ 591.621617][ T5844] Bluetooth: hci1: command tx timeout [ 591.759976][T18318] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3337'. [ 591.780773][ T9185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.816681][ T9185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.841423][T18328] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3339'. [ 591.899707][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.922981][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.932426][T18180] bridge_slave_0: entered allmulticast mode [ 591.952468][T18180] bridge_slave_0: entered promiscuous mode [ 592.011735][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.037170][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.047763][T18180] bridge_slave_1: entered allmulticast mode [ 592.059558][T18180] bridge_slave_1: entered promiscuous mode [ 592.197257][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3343'. [ 592.239584][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.268413][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.319971][ T9174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.362947][ T9174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.487851][T18357] FAULT_INJECTION: forcing a failure. [ 592.487851][T18357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.490688][T18180] team0: Port device team_slave_0 added [ 592.503390][T18357] CPU: 1 UID: 0 PID: 18357 Comm: syz.5.3348 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 592.503422][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 592.503435][T18357] Call Trace: [ 592.503444][T18357] [ 592.503453][T18357] dump_stack_lvl+0x189/0x250 [ 592.503495][T18357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.503526][T18357] ? __pfx__printk+0x10/0x10 [ 592.503551][T18357] ? fs_reclaim_acquire+0x7d/0x100 [ 592.503593][T18357] should_fail_ex+0x414/0x560 [ 592.503622][T18357] prepare_alloc_pages+0x213/0x610 [ 592.503663][T18357] __alloc_frozen_pages_noprof+0x123/0x370 [ 592.503702][T18357] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 592.503740][T18357] ? __pfx__copy_from_iter+0x10/0x10 [ 592.503768][T18357] ? policy_nodemask+0x27c/0x720 [ 592.503794][T18357] ? aa_file_perm+0x11f/0xed0 [ 592.503825][T18357] alloc_pages_mpol+0x232/0x4a0 [ 592.503860][T18357] alloc_pages_noprof+0xa9/0x190 [ 592.503891][T18357] anon_pipe_write+0xb85/0x1360 [ 592.503948][T18357] ? __pfx_anon_pipe_write+0x10/0x10 [ 592.503975][T18357] ? common_file_perm+0x199/0x200 [ 592.504005][T18357] ? bpf_lsm_file_permission+0x9/0x20 [ 592.504032][T18357] ? security_file_permission+0x75/0x290 [ 592.504115][T18357] vfs_write+0x548/0xa90 [ 592.504146][T18357] ? __pfx_anon_pipe_write+0x10/0x10 [ 592.504176][T18357] ? __pfx_vfs_write+0x10/0x10 [ 592.504222][T18357] ? __fget_files+0x2a/0x420 [ 592.504261][T18357] ksys_write+0x145/0x250 [ 592.504292][T18357] ? __pfx_ksys_write+0x10/0x10 [ 592.504329][T18357] do_syscall_64+0xf6/0x210 [ 592.504354][T18357] ? clear_bhb_loop+0x45/0xa0 [ 592.504382][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.504402][T18357] RIP: 0033:0x7fd4bdb8e969 [ 592.504422][T18357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.504441][T18357] RSP: 002b:00007fd4be9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.504463][T18357] RAX: ffffffffffffffda RBX: 00007fd4bddb5fa0 RCX: 00007fd4bdb8e969 [ 592.504479][T18357] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 592.504492][T18357] RBP: 00007fd4be9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 592.504506][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.504518][T18357] R13: 0000000000000000 R14: 00007fd4bddb5fa0 R15: 00007ffe8cf8eff8 [ 592.504552][T18357] [ 592.922526][T18180] team0: Port device team_slave_1 added [ 592.925460][T18367] netlink: 'syz.8.3351': attribute type 15 has an invalid length. [ 593.298644][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.308965][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.338581][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.452530][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.485066][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.541603][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.700691][ T5844] Bluetooth: hci1: command tx timeout [ 593.707806][T18389] __nla_validate_parse: 4 callbacks suppressed [ 593.707823][T18389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3357'. [ 594.028047][T18180] hsr_slave_0: entered promiscuous mode [ 594.035296][T18180] hsr_slave_1: entered promiscuous mode [ 594.041765][T18180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.049543][T18180] Cannot create hsr debugfs directory [ 594.177064][T18396] FAULT_INJECTION: forcing a failure. [ 594.177064][T18396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.193799][T18396] CPU: 0 UID: 0 PID: 18396 Comm: syz.8.3360 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 594.193830][T18396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.193842][T18396] Call Trace: [ 594.193850][T18396] [ 594.193859][T18396] dump_stack_lvl+0x189/0x250 [ 594.193892][T18396] ? __lock_acquire+0xaac/0xd20 [ 594.193924][T18396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.193952][T18396] ? __pfx__printk+0x10/0x10 [ 594.193973][T18396] ? __might_fault+0xb0/0x130 [ 594.194010][T18396] should_fail_ex+0x414/0x560 [ 594.194034][T18396] _copy_from_iter+0x1db/0x15a0 [ 594.194058][T18396] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 594.194100][T18396] ? __pfx__copy_from_iter+0x10/0x10 [ 594.194124][T18396] ? policy_nodemask+0x27c/0x720 [ 594.194149][T18396] ? aa_file_perm+0x11f/0xed0 [ 594.194180][T18396] ? page_copy_sane+0x4e/0x280 [ 594.194206][T18396] copy_page_from_iter+0x7b/0x100 [ 594.194233][T18396] anon_pipe_write+0x99a/0x1360 [ 594.194284][T18396] ? __pfx_anon_pipe_write+0x10/0x10 [ 594.194313][T18396] ? common_file_perm+0x199/0x200 [ 594.194338][T18396] ? bpf_lsm_file_permission+0x9/0x20 [ 594.194362][T18396] ? security_file_permission+0x75/0x290 [ 594.194403][T18396] vfs_write+0x548/0xa90 [ 594.194431][T18396] ? __pfx_anon_pipe_write+0x10/0x10 [ 594.194458][T18396] ? __pfx_vfs_write+0x10/0x10 [ 594.194494][T18396] ? __fget_files+0x2a/0x420 [ 594.194530][T18396] ksys_write+0x145/0x250 [ 594.194556][T18396] ? __pfx_ksys_write+0x10/0x10 [ 594.194588][T18396] do_syscall_64+0xf6/0x210 [ 594.194610][T18396] ? clear_bhb_loop+0x45/0xa0 [ 594.194633][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.194651][T18396] RIP: 0033:0x7fbb4618e969 [ 594.194669][T18396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.194686][T18396] RSP: 002b:00007fbb46f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.194706][T18396] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618e969 [ 594.194721][T18396] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 594.194733][T18396] RBP: 00007fbb46f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 594.194745][T18396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.194757][T18396] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 594.194788][T18396] [ 594.535369][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.544902][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.554530][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.565638][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.575223][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.704681][T18413] netlink: 4980 bytes leftover after parsing attributes in process `syz.8.3363'. [ 594.907451][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.041512][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.057086][T18424] x_tables: duplicate underflow at hook 2 [ 595.193560][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.454926][T18404] lo speed is unknown, defaulting to 1000 [ 595.571784][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.683056][T18430] syzkaller0: entered promiscuous mode [ 595.695168][T18430] syzkaller0: entered allmulticast mode [ 596.657458][ T5844] Bluetooth: hci2: command tx timeout [ 598.145612][T18453] netlink: 'syz.3.3371': attribute type 2 has an invalid length. [ 598.163239][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3371'. [ 598.177996][T18454] FAULT_INJECTION: forcing a failure. [ 598.177996][T18454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 598.191555][T18454] CPU: 1 UID: 0 PID: 18454 Comm: syz.5.3373 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 598.191584][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.191596][T18454] Call Trace: [ 598.191605][T18454] [ 598.191613][T18454] dump_stack_lvl+0x189/0x250 [ 598.191652][T18454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.191681][T18454] ? __pfx__printk+0x10/0x10 [ 598.191703][T18454] ? fs_reclaim_acquire+0x7d/0x100 [ 598.191743][T18454] should_fail_ex+0x414/0x560 [ 598.191770][T18454] prepare_alloc_pages+0x213/0x610 [ 598.191808][T18454] __alloc_frozen_pages_noprof+0x123/0x370 [ 598.191844][T18454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 598.191881][T18454] ? __pfx__copy_from_iter+0x10/0x10 [ 598.191906][T18454] ? policy_nodemask+0x27c/0x720 [ 598.191932][T18454] ? aa_file_perm+0x11f/0xed0 [ 598.191959][T18454] alloc_pages_mpol+0x232/0x4a0 [ 598.191992][T18454] alloc_pages_noprof+0xa9/0x190 [ 598.192033][T18454] anon_pipe_write+0xb85/0x1360 [ 598.192087][T18454] ? __pfx_anon_pipe_write+0x10/0x10 [ 598.192112][T18454] ? common_file_perm+0x199/0x200 [ 598.192137][T18454] ? bpf_lsm_file_permission+0x9/0x20 [ 598.192161][T18454] ? security_file_permission+0x75/0x290 [ 598.192201][T18454] vfs_write+0x548/0xa90 [ 598.192229][T18454] ? __pfx_anon_pipe_write+0x10/0x10 [ 598.192257][T18454] ? __pfx_vfs_write+0x10/0x10 [ 598.192291][T18454] ? __fget_files+0x2a/0x420 [ 598.192328][T18454] ksys_write+0x145/0x250 [ 598.192353][T18454] ? __pfx_ksys_write+0x10/0x10 [ 598.192386][T18454] do_syscall_64+0xf6/0x210 [ 598.192408][T18454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.192428][T18454] ? clear_bhb_loop+0x45/0xa0 [ 598.192452][T18454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.192471][T18454] RIP: 0033:0x7fd4bdb8e969 [ 598.192488][T18454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.192505][T18454] RSP: 002b:00007fd4be9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.192525][T18454] RAX: ffffffffffffffda RBX: 00007fd4bddb5fa0 RCX: 00007fd4bdb8e969 [ 598.192540][T18454] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 598.192552][T18454] RBP: 00007fd4be9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 598.192565][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.192576][T18454] R13: 0000000000000000 R14: 00007fd4bddb5fa0 R15: 00007ffe8cf8eff8 [ 598.192608][T18454] [ 598.568334][ T13] bridge_slave_1: left allmulticast mode [ 598.575019][ T13] bridge_slave_1: left promiscuous mode [ 598.587200][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.617742][ T13] bridge_slave_0: left allmulticast mode [ 598.623684][ T13] bridge_slave_0: left promiscuous mode [ 598.629722][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.729824][ T5844] Bluetooth: hci2: command tx timeout [ 599.101593][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.113331][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.125099][ T13] bond0 (unregistering): Released all slaves [ 599.212643][T18470] netlink: 'syz.5.3377': attribute type 8 has an invalid length. [ 599.218593][T18180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 599.317787][T18180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 599.399460][T18180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 599.429053][T18479] xt_socket: unknown flags 0x8 [ 599.437715][T18479] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3380'. [ 599.450875][T18180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 599.461929][T18479] IPVS: length: 135 != 24 [ 599.524553][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 599.879706][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3385'. [ 599.898707][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3385'. [ 599.966893][T18500] FAULT_INJECTION: forcing a failure. [ 599.966893][T18500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.971362][T18404] chnl_net:caif_netlink_parms(): no params data found [ 599.989158][T18500] CPU: 1 UID: 0 PID: 18500 Comm: syz.3.3384 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 599.989187][T18500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.989200][T18500] Call Trace: [ 599.989208][T18500] [ 599.989217][T18500] dump_stack_lvl+0x189/0x250 [ 599.989249][T18500] ? __lock_acquire+0xaac/0xd20 [ 599.989281][T18500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.989309][T18500] ? __pfx__printk+0x10/0x10 [ 599.989330][T18500] ? __might_fault+0xb0/0x130 [ 599.989368][T18500] should_fail_ex+0x414/0x560 [ 599.989394][T18500] _copy_from_iter+0x1db/0x15a0 [ 599.989420][T18500] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 599.989462][T18500] ? __pfx__copy_from_iter+0x10/0x10 [ 599.989487][T18500] ? policy_nodemask+0x27c/0x720 [ 599.989512][T18500] ? aa_file_perm+0x11f/0xed0 [ 599.989543][T18500] ? page_copy_sane+0x4e/0x280 [ 599.989569][T18500] copy_page_from_iter+0x7b/0x100 [ 599.989597][T18500] anon_pipe_write+0x99a/0x1360 [ 599.989650][T18500] ? __pfx_anon_pipe_write+0x10/0x10 [ 599.989684][T18500] ? common_file_perm+0x199/0x200 [ 599.989710][T18500] ? bpf_lsm_file_permission+0x9/0x20 [ 599.989735][T18500] ? security_file_permission+0x75/0x290 [ 599.989774][T18500] vfs_write+0x548/0xa90 [ 599.989802][T18500] ? __pfx_anon_pipe_write+0x10/0x10 [ 599.989830][T18500] ? __pfx_vfs_write+0x10/0x10 [ 599.989863][T18500] ? __fget_files+0x2a/0x420 [ 599.989899][T18500] ksys_write+0x145/0x250 [ 599.989926][T18500] ? __pfx_ksys_write+0x10/0x10 [ 599.989960][T18500] do_syscall_64+0xf6/0x210 [ 599.989982][T18500] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.990002][T18500] ? clear_bhb_loop+0x45/0xa0 [ 599.990027][T18500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.990045][T18500] RIP: 0033:0x7fe0e878e969 [ 599.990063][T18500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.990080][T18500] RSP: 002b:00007fe0e9628038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.990100][T18500] RAX: ffffffffffffffda RBX: 00007fe0e89b5fa0 RCX: 00007fe0e878e969 [ 599.990115][T18500] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 599.990127][T18500] RBP: 00007fe0e9628090 R08: 0000000000000000 R09: 0000000000000000 [ 599.990140][T18500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.990151][T18500] R13: 0000000000000000 R14: 00007fe0e89b5fa0 R15: 00007ffd89cc95c8 [ 599.990184][T18500] [ 600.347539][T18499] : entered promiscuous mode [ 600.534612][T18508] nbd: socks must be embedded in a SOCK_ITEM attr [ 600.547741][ T13] hsr_slave_0: left promiscuous mode [ 600.555643][T18508] block nbd6: shutting down sockets [ 600.561152][ T13] hsr_slave_1: left promiscuous mode [ 600.567835][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.575564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.584641][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.592092][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.628084][ T13] veth1_macvtap: left promiscuous mode [ 600.636298][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3388'. [ 600.644003][ T13] veth0_macvtap: left promiscuous mode [ 600.650955][ T13] veth1_vlan: left promiscuous mode [ 600.657547][ T13] veth0_vlan: left promiscuous mode [ 600.803949][ T5844] Bluetooth: hci2: command tx timeout [ 601.210707][ T13] team0 (unregistering): Port device team_slave_1 removed [ 601.264104][ T13] team0 (unregistering): Port device team_slave_0 removed [ 601.802265][T18507] syzkaller0: entered promiscuous mode [ 601.808483][T18507] syzkaller0: entered allmulticast mode [ 601.995816][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3389'. [ 602.126818][T18526] xt_connbytes: Forcing CT accounting to be enabled [ 602.134696][T18526] xt_bpf: check failed: parse error [ 602.883726][ T5844] Bluetooth: hci2: command tx timeout [ 603.940340][T18526] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 603.950569][T18526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 603.960997][T18526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 604.085239][T18404] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.092412][T18404] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.140478][T18404] bridge_slave_0: entered allmulticast mode [ 604.176638][T18404] bridge_slave_0: entered promiscuous mode [ 604.195055][T18404] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.204177][T18404] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.211479][T18404] bridge_slave_1: entered allmulticast mode [ 604.229943][T18404] bridge_slave_1: entered promiscuous mode [ 604.301871][T18546] FAULT_INJECTION: forcing a failure. [ 604.301871][T18546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.317139][T18546] CPU: 0 UID: 0 PID: 18546 Comm: syz.8.3398 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 604.317168][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.317181][T18546] Call Trace: [ 604.317189][T18546] [ 604.317198][T18546] dump_stack_lvl+0x189/0x250 [ 604.317236][T18546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.317266][T18546] ? __pfx__printk+0x10/0x10 [ 604.317288][T18546] ? fs_reclaim_acquire+0x7d/0x100 [ 604.317328][T18546] should_fail_ex+0x414/0x560 [ 604.317355][T18546] prepare_alloc_pages+0x213/0x610 [ 604.317394][T18546] __alloc_frozen_pages_noprof+0x123/0x370 [ 604.317430][T18546] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 604.317466][T18546] ? __pfx__copy_from_iter+0x10/0x10 [ 604.317493][T18546] ? policy_nodemask+0x27c/0x720 [ 604.317517][T18546] ? aa_file_perm+0x11f/0xed0 [ 604.317546][T18546] alloc_pages_mpol+0x232/0x4a0 [ 604.317578][T18546] alloc_pages_noprof+0xa9/0x190 [ 604.317613][T18546] anon_pipe_write+0xb85/0x1360 [ 604.317666][T18546] ? __pfx_anon_pipe_write+0x10/0x10 [ 604.317692][T18546] ? common_file_perm+0x199/0x200 [ 604.317718][T18546] ? bpf_lsm_file_permission+0x9/0x20 [ 604.317742][T18546] ? security_file_permission+0x75/0x290 [ 604.317782][T18546] vfs_write+0x548/0xa90 [ 604.317810][T18546] ? __pfx_anon_pipe_write+0x10/0x10 [ 604.317838][T18546] ? __pfx_vfs_write+0x10/0x10 [ 604.317873][T18546] ? __fget_files+0x2a/0x420 [ 604.317909][T18546] ksys_write+0x145/0x250 [ 604.317933][T18546] ? __pfx_ksys_write+0x10/0x10 [ 604.317966][T18546] do_syscall_64+0xf6/0x210 [ 604.317989][T18546] ? clear_bhb_loop+0x45/0xa0 [ 604.318014][T18546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.318033][T18546] RIP: 0033:0x7fbb4618e969 [ 604.318049][T18546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.318066][T18546] RSP: 002b:00007fbb46f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 604.318086][T18546] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618e969 [ 604.318101][T18546] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000004 [ 604.318118][T18546] RBP: 00007fbb46f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 604.318130][T18546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 604.318141][T18546] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 604.318173][T18546] [ 604.650441][T18404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.707018][T18404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.733856][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.768889][T18555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3400'. [ 604.885907][T18404] team0: Port device team_slave_0 added [ 604.956250][T18404] team0: Port device team_slave_1 added [ 605.168988][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.201034][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.208306][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.270789][T18404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.310655][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.403922][T18404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.462048][T18570] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3404'. [ 605.496593][T18578] ªªªªªª: renamed from lo [ 605.530202][T18404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.554802][T18404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.620578][T18404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.691839][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.699113][ T9185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.076901][T18404] hsr_slave_0: entered promiscuous mode [ 606.102243][T18404] hsr_slave_1: entered promiscuous mode [ 606.133958][T18404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.141584][T18404] Cannot create hsr debugfs directory [ 606.508957][T18566] lo speed is unknown, defaulting to 1000 [ 607.170499][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3413'. [ 607.442643][T18624] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3417'. [ 607.453055][T18624] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3417'. [ 607.471917][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.934958][T18638] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (253) [ 608.112534][T18180] veth0_vlan: entered promiscuous mode [ 608.166484][T18180] veth1_vlan: entered promiscuous mode [ 608.181644][T18616] lo speed is unknown, defaulting to 1000 [ 608.191275][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 608.204818][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 608.721125][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 608.759372][T18180] veth0_macvtap: entered promiscuous mode [ 608.822450][T18180] veth1_macvtap: entered promiscuous mode [ 608.949468][T18625] infiniband syz1: set active [ 608.954856][T17199] macvlan1 speed is unknown, defaulting to 1000 [ 608.961836][T18625] infiniband syz1: added macvlan1 [ 608.968668][T18625] syz1: rxe_create_cq: returned err = -12 [ 608.974639][T18625] infiniband syz1: Couldn't create ib_mad CQ [ 608.980864][T18625] infiniband syz1: Couldn't open port 1 [ 608.999933][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.012320][T18625] RDS/IB: syz1: added [ 609.017002][T18625] smc: adding ib device syz1 with port count 1 [ 609.024801][T18625] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 609.053712][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.064331][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.075537][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.087580][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.097783][T17199] macvlan1 speed is unknown, defaulting to 1000 [ 609.126143][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.146605][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.159834][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.171003][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.182865][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.190689][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 609.284196][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3421'. [ 609.303879][T18644] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 609.331089][T18180] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.371346][T18180] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.405031][T18180] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.423312][T18180] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.485955][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 609.599247][T18404] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 609.682947][T18404] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 609.751156][T18404] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 609.764135][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 609.830417][T18404] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 609.947554][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.979221][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.019654][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 610.109349][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.129845][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.142947][T18655] netlink: 'syz.8.3425': attribute type 12 has an invalid length. [ 610.345747][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 610.603968][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 610.790321][T18207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.870267][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 610.887908][T18404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.024252][T18207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.127117][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 611.157908][T18404] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.302198][T18207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.400800][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.408204][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.449567][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.457011][ T9185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.491165][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 611.632160][T18207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.747140][T18625] macvlan1 speed is unknown, defaulting to 1000 [ 611.837751][T18664] FAULT_INJECTION: forcing a failure. [ 611.837751][T18664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.876069][T18404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.902803][T18664] CPU: 0 UID: 0 PID: 18664 Comm: syz.8.3428 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 611.902835][T18664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.902847][T18664] Call Trace: [ 611.902855][T18664] [ 611.902865][T18664] dump_stack_lvl+0x189/0x250 [ 611.902904][T18664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.902933][T18664] ? __pfx__printk+0x10/0x10 [ 611.902968][T18664] should_fail_ex+0x414/0x560 [ 611.902994][T18664] _copy_to_user+0x31/0xb0 [ 611.903025][T18664] simple_read_from_buffer+0xe1/0x170 [ 611.903055][T18664] proc_fail_nth_read+0x1df/0x250 [ 611.903088][T18664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.903124][T18664] ? rw_verify_area+0x258/0x650 [ 611.903144][T18664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.903173][T18664] vfs_read+0x1fd/0x980 [ 611.903202][T18664] ? __pfx___mutex_lock+0x10/0x10 [ 611.903224][T18664] ? __pfx_vfs_read+0x10/0x10 [ 611.903248][T18664] ? __fget_files+0x2a/0x420 [ 611.903279][T18664] ? __fget_files+0x3a0/0x420 [ 611.903303][T18664] ? __fget_files+0x2a/0x420 [ 611.903339][T18664] ksys_read+0x145/0x250 [ 611.903364][T18664] ? __pfx_ksys_read+0x10/0x10 [ 611.903399][T18664] do_syscall_64+0xf6/0x210 [ 611.903421][T18664] ? clear_bhb_loop+0x45/0xa0 [ 611.903446][T18664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.903465][T18664] RIP: 0033:0x7fbb4618d37c [ 611.903483][T18664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.903499][T18664] RSP: 002b:00007fbb46f0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.903520][T18664] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618d37c [ 611.903535][T18664] RDX: 000000000000000f RSI: 00007fbb46f0e0a0 RDI: 0000000000000007 [ 611.903548][T18664] RBP: 00007fbb46f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 611.903559][T18664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.903571][T18664] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 611.903604][T18664] [ 612.475601][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3431'. [ 612.646008][T18207] bridge_slave_1: left allmulticast mode [ 612.651756][T18207] bridge_slave_1: left promiscuous mode [ 612.712015][T18207] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.889111][T18689] netlink: 'syz.5.3433': attribute type 1 has an invalid length. [ 612.915839][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3433'. [ 613.132764][T18207] bridge_slave_0: left allmulticast mode [ 613.184581][T18207] bridge_slave_0: left promiscuous mode [ 613.224254][T18207] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.269971][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.284121][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.295960][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.429775][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.441168][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 614.050349][T18207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.062162][T18207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.072810][T18207] bond0 (unregistering): Released all slaves [ 614.143474][T18404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.187878][T18690] lo speed is unknown, defaulting to 1000 [ 615.214665][T18690] macvlan1 speed is unknown, defaulting to 1000 [ 615.331274][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3445'. [ 615.348747][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3445'. [ 615.357956][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3445'. [ 615.583862][T18404] veth0_vlan: entered promiscuous mode [ 615.610520][ T5844] Bluetooth: hci1: command tx timeout [ 615.635114][T18404] veth1_vlan: entered promiscuous mode [ 615.694776][T18404] veth0_macvtap: entered promiscuous mode [ 615.752161][T18404] veth1_macvtap: entered promiscuous mode [ 615.799435][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.823705][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.836894][T18745] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3448'. [ 615.849957][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.874603][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.908209][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.918883][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.935470][T18404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.958897][T18208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.993680][T18208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.039422][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.064529][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.143364][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.154160][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.171962][T18404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.183003][T18404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.215509][T18404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.247823][T18404] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.273325][T18404] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.293341][T18404] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.313642][T18404] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.755903][T18207] hsr_slave_0: left promiscuous mode [ 616.772460][T18207] hsr_slave_1: left promiscuous mode [ 616.780545][T18207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.789124][T18207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.799214][T18207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.807835][T18207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.877593][T18207] veth1_macvtap: left promiscuous mode [ 616.886952][T18207] veth0_macvtap: left promiscuous mode [ 616.892677][T18207] veth1_vlan: left promiscuous mode [ 616.902280][T18207] veth0_vlan: left promiscuous mode [ 617.260799][T18772] netlink: 'syz.8.3456': attribute type 1 has an invalid length. [ 617.270989][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3456'. [ 617.551015][T18207] team0 (unregistering): Port device team_slave_1 removed [ 617.598791][T18207] team0 (unregistering): Port device team_slave_0 removed [ 617.698055][ T5844] Bluetooth: hci1: command tx timeout [ 618.446015][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.508264][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.733899][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.762045][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.988763][T18815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.030827][T18810] batman_adv: batadv0: Adding interface: ip6gretap1 [ 619.053251][T18810] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.084221][T18810] batman_adv: batadv0: Interface activated: ip6gretap1 [ 619.099176][T18690] chnl_net:caif_netlink_parms(): no params data found [ 619.185862][T18821] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3467'. [ 619.486825][ T9190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.763760][ T5844] Bluetooth: hci1: command tx timeout [ 619.772824][ T9190] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.171216][ T9190] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.232900][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.251052][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.271052][T18690] bridge_slave_0: entered allmulticast mode [ 620.282456][T18690] bridge_slave_0: entered promiscuous mode [ 620.299783][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.307618][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.315589][T18690] bridge_slave_1: entered allmulticast mode [ 620.324132][T18690] bridge_slave_1: entered promiscuous mode [ 620.334581][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.345746][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.358530][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.368524][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.378354][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.394433][T18843] tap0: tun_chr_ioctl cmd 1074025675 [ 620.412614][T18843] tap0: persist enabled [ 620.458224][T18850] tap0: tun_chr_ioctl cmd 1074025675 [ 620.464334][T18850] tap0: persist enabled [ 620.577488][ T9190] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.667123][T18690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.689123][T18690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.824662][T18690] team0: Port device team_slave_0 added [ 620.839715][T18690] team0: Port device team_slave_1 added [ 620.988907][T18826] lo speed is unknown, defaulting to 1000 [ 620.990035][T18690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.012594][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.049588][T18690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.068128][T18826] macvlan1 speed is unknown, defaulting to 1000 [ 621.079720][T18690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.107800][T18875] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3480'. [ 621.128448][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.156192][T18874] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3480'. [ 621.192443][T18690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.560586][T18690] hsr_slave_0: entered promiscuous mode [ 621.581329][T18690] hsr_slave_1: entered promiscuous mode [ 621.605221][T18690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.612850][T18690] Cannot create hsr debugfs directory [ 621.636170][T18856] lo speed is unknown, defaulting to 1000 [ 621.649736][ T9190] bridge_slave_1: left allmulticast mode [ 621.655749][ T9190] bridge_slave_1: left promiscuous mode [ 621.661647][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.677116][ T9190] bridge_slave_0: left allmulticast mode [ 621.683054][ T9190] bridge_slave_0: left promiscuous mode [ 621.689286][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.849063][ T5850] Bluetooth: hci1: command tx timeout [ 622.136224][ T9190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.150991][ T9190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.161575][ T9190] bond0 (unregistering): Released all slaves [ 622.192799][T18856] macvlan1 speed is unknown, defaulting to 1000 [ 622.415170][T18889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3484'. [ 622.485270][ T5850] Bluetooth: hci2: command tx timeout [ 622.885518][T18910] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3491'. [ 622.979851][T18915] netlink: 120 bytes leftover after parsing attributes in process `syz.8.3493'. [ 623.151906][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3496'. [ 623.163052][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3496'. [ 623.243966][T18923] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 624.035021][T18953] netlink: 'syz.8.3501': attribute type 21 has an invalid length. [ 624.094367][T18940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.410515][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.566517][ T5850] Bluetooth: hci2: command tx timeout [ 624.629623][T18966] netlink: 'syz.5.3505': attribute type 2 has an invalid length. [ 624.700744][T18966] þ: entered promiscuous mode [ 624.735590][ T9190] hsr_slave_0: left promiscuous mode [ 624.750096][ T9190] hsr_slave_1: left promiscuous mode [ 624.756993][ T9190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.777283][ T9190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.786435][ T9190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.794654][ T9190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.833717][ T9190] veth1_macvtap: left promiscuous mode [ 624.839318][ T9190] veth0_macvtap: left promiscuous mode [ 624.846490][ T9190] veth1_vlan: left promiscuous mode [ 624.851871][ T9190] veth0_vlan: left promiscuous mode [ 625.549465][ T9190] team0 (unregistering): Port device team_slave_1 removed [ 625.597118][ T9190] team0 (unregistering): Port device team_slave_0 removed [ 626.356291][T18856] chnl_net:caif_netlink_parms(): no params data found [ 626.538844][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3510'. [ 626.643261][ T5850] Bluetooth: hci2: command tx timeout [ 626.681624][T18990] netlink: 'syz.3.3511': attribute type 11 has an invalid length. [ 626.692595][T18990] netlink: 'syz.3.3511': attribute type 11 has an invalid length. [ 626.700721][T18990] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3511'. [ 626.940483][T18856] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.950242][T18856] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.951942][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3516'. [ 626.959423][T18856] bridge_slave_0: entered allmulticast mode [ 626.976761][T18856] bridge_slave_0: entered promiscuous mode [ 626.997047][T18690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 627.052878][T18856] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.062652][T18856] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.070843][T18856] bridge_slave_1: entered allmulticast mode [ 627.079626][T18856] bridge_slave_1: entered promiscuous mode [ 627.089275][T18690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 627.238016][T18690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 627.256291][T18856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.272393][T18690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 627.290757][T18856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.345630][T18856] team0: Port device team_slave_0 added [ 627.364592][T18856] team0: Port device team_slave_1 added [ 627.450909][T18856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.458363][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.485554][T18856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.500227][T18856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.507440][T18856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.533674][T18856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.601679][T18856] hsr_slave_0: entered promiscuous mode [ 627.619482][T18856] hsr_slave_1: entered promiscuous mode [ 627.626554][T18856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.638950][T18856] Cannot create hsr debugfs directory [ 627.854098][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3520'. [ 627.877444][T19025] batman_adv: batadv0: Interface deactivated: macvlan0 [ 627.891641][T19025] batman_adv: batadv0: Removing interface: macvlan0 [ 627.917132][T19025] batadv0 (unregistering): left promiscuous mode [ 627.956202][T18209] smc: removing ib device syz1 [ 628.066100][T17201] macvlan1 speed is unknown, defaulting to 1000 [ 628.072599][T17201] syz1: Port: 1 Link DOWN [ 628.227794][T18690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.329099][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3522'. [ 628.398856][T18690] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.472111][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.479356][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.628242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.635505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.724962][ T5850] Bluetooth: hci2: command tx timeout [ 629.356121][T18856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 629.407475][T18856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 629.459265][T18856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 629.498401][T19049] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3525'. [ 629.517563][T18856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.529871][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3525'. [ 629.575357][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 629.585815][T19049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3525'. [ 629.586903][T18690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.603812][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3525'. [ 629.947167][T18856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.037243][T18856] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.087858][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.095100][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.156534][T19039] lo speed is unknown, defaulting to 1000 [ 630.217779][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.225027][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.956723][T18690] veth0_vlan: entered promiscuous mode [ 631.015823][T18690] veth1_vlan: entered promiscuous mode [ 631.112136][T18690] veth0_macvtap: entered promiscuous mode [ 631.169014][T18690] veth1_macvtap: entered promiscuous mode [ 631.190575][T19041] lo speed is unknown, defaulting to 1000 [ 631.576563][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.603814][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.642383][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.673072][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.712968][T18690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.911246][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.923233][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.937410][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.961107][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.990695][T18690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.138586][T18690] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.156268][T18690] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.166391][T18690] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.177144][T18690] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.217525][T18856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.503968][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.511856][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.764536][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.835255][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.181093][T19120] macvtap2: entered promiscuous mode [ 633.194485][T19120] macvtap2: entered allmulticast mode [ 633.255923][T19121] __nla_validate_parse: 1 callbacks suppressed [ 633.255943][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.271750][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.285289][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.294320][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.306242][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.316196][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.326379][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.335907][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.345838][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.355374][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 633.501623][ T9185] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.590164][T18856] veth0_vlan: entered promiscuous mode [ 633.649007][ T9185] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.682881][T18856] veth1_vlan: entered promiscuous mode [ 633.939400][ T9185] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.036993][T18856] veth0_macvtap: entered promiscuous mode [ 634.099794][ T9185] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.132739][T18856] veth1_macvtap: entered promiscuous mode [ 634.251570][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.293743][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.314640][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.343805][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.360857][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.378558][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.389056][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.398166][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.407170][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.417371][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.441967][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.519123][T18856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.550987][T19137] lo speed is unknown, defaulting to 1000 [ 634.583069][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.598828][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.610037][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.621326][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.632270][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.647976][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.661973][T18856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.796875][T18856] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.806715][T18856] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.816191][T18856] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.826016][T18856] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.960235][ T9185] bridge_slave_1: left allmulticast mode [ 634.968042][ T9185] bridge_slave_1: left promiscuous mode [ 634.975566][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.992000][ T9185] bridge_slave_0: left allmulticast mode [ 635.047009][ T9185] bridge_slave_0: left promiscuous mode [ 635.067658][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.695840][ T9185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.708025][ T9185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.718841][ T9185] bond0 (unregistering): Released all slaves [ 635.744808][T19154] lo speed is unknown, defaulting to 1000 [ 635.761710][T19185] ip6gretap3: entered allmulticast mode [ 636.031036][T19191] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 636.313415][T18209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.321308][T18209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.484160][ T5850] Bluetooth: hci1: command tx timeout [ 636.501861][ T9189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.534194][ T9189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.770464][ T9185] hsr_slave_0: left promiscuous mode [ 636.780539][ T9185] hsr_slave_1: left promiscuous mode [ 636.789613][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.798251][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.818701][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.831085][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.901938][ T9185] veth1_macvtap: left promiscuous mode [ 636.911113][ T9185] veth0_macvtap: left promiscuous mode [ 636.919336][ T9185] veth1_vlan: left promiscuous mode [ 636.925381][ T9185] veth0_vlan: left promiscuous mode [ 637.501917][ T9185] team0 (unregistering): Port device team_slave_1 removed [ 637.547479][ T9185] team0 (unregistering): Port device team_slave_0 removed [ 638.408323][T19154] chnl_net:caif_netlink_parms(): no params data found [ 638.436136][T19214] lo speed is unknown, defaulting to 1000 [ 638.563361][ T5850] Bluetooth: hci1: command tx timeout [ 639.013846][T19154] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.022278][T19154] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.045022][T19154] bridge_slave_0: entered allmulticast mode [ 639.078360][T19154] bridge_slave_0: entered promiscuous mode [ 639.103051][T19154] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.110631][T19154] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.127154][T19154] bridge_slave_1: entered allmulticast mode [ 639.145682][T19154] bridge_slave_1: entered promiscuous mode [ 639.171483][T19229] lo speed is unknown, defaulting to 1000 [ 639.350949][T19154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.455399][T19154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.532555][ T9185] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.714668][T19154] team0: Port device team_slave_0 added [ 639.730725][T19154] team0: Port device team_slave_1 added [ 639.828510][ T9185] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.891082][T19248] netlink: 'syz.3.3577': attribute type 23 has an invalid length. [ 640.239688][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.251891][T19154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.261275][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.275803][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 640.288850][T19154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.321759][T19154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.344331][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 640.367890][T19154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.375553][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 640.382637][T19154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.442252][T19154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.566001][ T9185] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.644525][ T5850] Bluetooth: hci1: command tx timeout [ 640.691704][ T9185] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.769263][T19154] hsr_slave_0: entered promiscuous mode [ 640.788120][T19154] hsr_slave_1: entered promiscuous mode [ 640.808893][T19154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.833288][T19154] Cannot create hsr debugfs directory [ 641.234838][ T9185] bridge_slave_1: left allmulticast mode [ 641.240571][ T9185] bridge_slave_1: left promiscuous mode [ 641.302659][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.344330][ T9185] bridge_slave_0: left allmulticast mode [ 641.350049][ T9185] bridge_slave_0: left promiscuous mode [ 641.382990][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.537892][T19286] __nla_validate_parse: 78 callbacks suppressed [ 641.537910][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 642.237329][ T9185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.250259][ T9185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.261694][ T9185] bond0 (unregistering): Released all slaves [ 642.340410][T19297] vlan0: entered promiscuous mode [ 642.440369][T19254] lo speed is unknown, defaulting to 1000 [ 642.492924][ T5850] Bluetooth: hci2: command tx timeout [ 642.614163][T19309] netlink: 79 bytes leftover after parsing attributes in process `syz.3.3591'. [ 642.724870][ T5850] Bluetooth: hci1: command tx timeout [ 642.846188][T19311] openvswitch: netlink: IP tunnel TTL not specified. [ 642.876789][T19317] netlink: 'syz.3.3593': attribute type 10 has an invalid length. [ 642.966288][T19317] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.030079][T19317] bond0: (slave team0): Enslaving as an active interface with an up link [ 643.116959][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3596'. [ 643.166032][T19325] xfrm2: entered promiscuous mode [ 643.172268][T19325] xfrm2: entered allmulticast mode [ 643.584578][T19329] bond0: (slave team0): Releasing backup interface [ 643.657329][T19329] team0 (unregistering): Port device team_slave_0 removed [ 643.726331][T19329] team0 (unregistering): Port device team_slave_1 removed [ 643.800252][T19346] syz_tun: Device is already in use. [ 643.809904][T19347] syzkaller1: entered promiscuous mode [ 643.833602][T19347] syzkaller1: entered allmulticast mode [ 644.031204][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3605'. [ 644.296773][T19377] netlink: 'syz.8.3609': attribute type 3 has an invalid length. [ 644.406633][T19382] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3610'. [ 644.551489][ T9185] hsr_slave_0: left promiscuous mode [ 644.565808][ T5850] Bluetooth: hci2: command tx timeout [ 644.594041][ T9185] hsr_slave_1: left promiscuous mode [ 644.600202][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.609011][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.626162][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.637153][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.700118][ T9185] veth1_macvtap: left promiscuous mode [ 644.713626][ T9185] veth0_macvtap: left promiscuous mode [ 644.720360][ T9185] veth1_vlan: left promiscuous mode [ 644.734675][ T9185] veth0_vlan: left promiscuous mode [ 645.292011][ T9185] team0 (unregistering): Port device team_slave_1 removed [ 645.339034][ T9185] team0 (unregistering): Port device team_slave_0 removed [ 645.869171][T19254] chnl_net:caif_netlink_parms(): no params data found [ 645.882246][T19394] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 645.904137][T19394] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 645.916933][T19394] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 645.942632][T19396] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 646.097871][T19154] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 646.167060][T19410] sctp: [Deprecated]: syz.5.3618 (pid 19410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.167060][T19410] Use struct sctp_sack_info instead [ 646.372885][T19154] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.411421][T19154] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.443684][T19154] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 646.538447][T19254] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.550872][T19254] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.585011][T19254] bridge_slave_0: entered allmulticast mode [ 646.593018][T19254] bridge_slave_0: entered promiscuous mode [ 646.625796][T19254] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.635999][T19429] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.3621'. [ 646.648457][T19254] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.653536][ T5850] Bluetooth: hci2: command tx timeout [ 646.675161][T19254] bridge_slave_1: entered allmulticast mode [ 646.688644][T19431] netlink: 'syz.5.3624': attribute type 3 has an invalid length. [ 646.694952][T19254] bridge_slave_1: entered promiscuous mode [ 646.697792][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3624'. [ 646.839500][T19254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.868333][T19254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.880500][T19433] netlink: 816 bytes leftover after parsing attributes in process `syz.5.3625'. [ 647.000365][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3627'. [ 647.130850][T19254] team0: Port device team_slave_0 added [ 647.200334][T19254] team0: Port device team_slave_1 added [ 647.419051][T19457] netem: change failed [ 647.454434][T19254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.470411][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3630'. [ 647.492564][T19254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.531944][T19254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.551635][T19254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.559323][T19254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.589910][T19254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.819089][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3636'. [ 647.874993][T19254] hsr_slave_0: entered promiscuous mode [ 647.881415][T19254] hsr_slave_1: entered promiscuous mode [ 647.925242][T19254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.953571][T19254] Cannot create hsr debugfs directory [ 648.015678][T19154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.289247][T19154] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.367154][T18207] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.374399][T18207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.447903][T18207] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.455139][T18207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.724736][ T5844] Bluetooth: hci2: command tx timeout [ 649.170085][T19254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 649.234031][T19254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.277874][T19522] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3647'. [ 649.308638][T19518] syzkaller0: entered promiscuous mode [ 649.314725][T19518] syzkaller0: entered allmulticast mode [ 649.321632][T19254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 649.335058][T19254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 651.156069][T19154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.638577][T19254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.679754][T19555] netlink: 'syz.8.3653': attribute type 4 has an invalid length. [ 651.783640][T19555] netlink: 'syz.8.3653': attribute type 4 has an invalid length. [ 651.826838][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3653'. [ 651.858018][T19254] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.930237][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.937487][ T9189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.045988][T18207] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.053226][T18207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.196509][T19154] veth0_vlan: entered promiscuous mode [ 652.336889][T19154] veth1_vlan: entered promiscuous mode [ 652.396821][T19592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.590343][T19154] veth0_macvtap: entered promiscuous mode [ 652.635110][T19154] veth1_macvtap: entered promiscuous mode [ 652.736498][T19154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.794110][T19154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.804490][T19154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.815923][T19154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.830430][T19154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.988664][T19154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.021539][T19154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.038266][ T30] audit: type=1800 audit(1747198412.360:13): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3675" name="memory.events" dev="tmpfs" ino=2578 res=0 errno=0 [ 653.089589][T19154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.100170][T19154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.111809][T19154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.124709][ T30] audit: type=1804 audit(1747198412.440:14): pid=19632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3675" name="/newroot/502/memory.events" dev="tmpfs" ino=2578 res=1 errno=0 [ 653.157758][T19634] netlink: 'syz.5.3678': attribute type 42 has an invalid length. [ 653.162795][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3675'. [ 653.177451][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3675'. [ 653.204366][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 653.259595][T19154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.272974][T19154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.287239][T19154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.296548][T19154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.324608][T19639] netlink: 'syz.5.3679': attribute type 16 has an invalid length. [ 653.333053][T19639] netlink: 'syz.5.3679': attribute type 17 has an invalid length. [ 653.374808][T19639] hsr0: left allmulticast mode [ 653.379764][T19639] hsr_slave_0: left allmulticast mode [ 653.386692][T19639] hsr_slave_1: left allmulticast mode [ 653.392106][T19639] hsr0: left promiscuous mode [ 653.421210][T19642] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 653.513834][T19648] x_tables: duplicate underflow at hook 3 [ 653.609758][T19254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.667741][T19647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3682'. [ 653.926503][ T9189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.945362][ T9189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.105553][T18209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.143382][T18209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.462095][T19687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3692'. [ 654.885198][T19709] netlink: 'syz.8.3694': attribute type 1 has an invalid length. [ 654.908894][T19709] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3694'. [ 655.467486][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.500759][T19704] IPVS: Unknown mcast interface: dvmrp0 [ 655.598287][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.619447][T19254] veth0_vlan: entered promiscuous mode [ 655.634441][T19254] veth1_vlan: entered promiscuous mode [ 655.667260][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.706042][T19254] veth0_macvtap: entered promiscuous mode [ 655.719257][T19254] veth1_macvtap: entered promiscuous mode [ 655.759393][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.777690][T19254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.788846][T19254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.799133][T19254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.810916][T19254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.820892][T19254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.832405][T19254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.850754][T19254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.870106][T19254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.881169][T19254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.892508][T19254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.903372][T19254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.913372][T19254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.948088][T19254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.970766][T19254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.024410][T19254] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.035022][T19254] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.043819][T19254] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.052928][T19254] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.582655][ T1150] bridge_slave_1: left allmulticast mode [ 656.598020][ T1150] bridge_slave_1: left promiscuous mode [ 656.624521][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.640848][ T1150] bridge_slave_0: left allmulticast mode [ 656.656782][ T1150] bridge_slave_0: left promiscuous mode [ 656.663072][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.937596][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.948468][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.972248][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.003914][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.019362][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.205883][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 657.269906][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.283936][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.295907][ T1150] bond0 (unregistering): Released all slaves [ 657.368653][T18207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.376676][T18207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.085126][T18208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.109338][T18208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.539204][T19799] openvswitch: netlink: IP tunnel dst address not specified [ 658.548689][T19802] ieee802154 phy0 wpan0: encryption failed: -90 [ 658.837137][T19754] lo speed is unknown, defaulting to 1000 [ 659.124211][ T5850] Bluetooth: hci1: command tx timeout [ 659.465008][ T1150] hsr_slave_0: left promiscuous mode [ 659.471298][ T1150] hsr_slave_1: left promiscuous mode [ 659.483778][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.491213][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.500303][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.508224][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.538447][ T1150] veth1_macvtap: left promiscuous mode [ 659.545997][ T1150] veth0_macvtap: left promiscuous mode [ 659.551672][ T1150] veth1_vlan: left promiscuous mode [ 659.558793][ T1150] veth0_vlan: left promiscuous mode [ 660.151925][T19827] openvswitch: netlink: Duplicate or invalid key (type 0). [ 660.161923][T19827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.206066][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 660.429938][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 660.803675][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.823350][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.832653][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.868216][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.889937][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 661.203669][ T5850] Bluetooth: hci1: command tx timeout [ 661.382131][T19754] chnl_net:caif_netlink_parms(): no params data found [ 662.078041][T19871] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3735'. [ 662.106652][T19871] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3735'. [ 662.120724][T19754] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.141806][T19754] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.180786][T19754] bridge_slave_0: entered allmulticast mode [ 662.212403][T19754] bridge_slave_0: entered promiscuous mode [ 662.234651][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3737'. [ 662.237137][T19754] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.262975][T19754] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.283838][T19754] bridge_slave_1: entered allmulticast mode [ 662.291237][T19754] bridge_slave_1: entered promiscuous mode [ 662.345007][T19841] lo speed is unknown, defaulting to 1000 [ 662.386661][T19754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.438389][T19754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.572310][T19754] team0: Port device team_slave_0 added [ 662.581127][T19754] team0: Port device team_slave_1 added [ 662.667361][T19754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.675138][T19754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.704870][T19754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.740590][T19754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.748608][T19754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.775092][T19754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.861293][ T1150] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.907385][T19754] hsr_slave_0: entered promiscuous mode [ 662.914844][T19754] hsr_slave_1: entered promiscuous mode [ 662.921196][T19754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.929347][T19754] Cannot create hsr debugfs directory [ 662.963264][ T5850] Bluetooth: hci2: command tx timeout [ 662.986306][ T1150] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.118361][T19894] warn_alloc: 1 callbacks suppressed [ 663.118378][T19894] syz.5.3743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 663.139941][T19894] CPU: 0 UID: 0 PID: 19894 Comm: syz.5.3743 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 663.139972][T19894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.139985][T19894] Call Trace: [ 663.139995][T19894] [ 663.140005][T19894] dump_stack_lvl+0x189/0x250 [ 663.140046][T19894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.140076][T19894] ? __pfx__printk+0x10/0x10 [ 663.140097][T19894] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.140118][T19894] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.140141][T19894] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 663.140175][T19894] warn_alloc+0x214/0x310 [ 663.140204][T19894] ? __pfx___schedule+0x10/0x10 [ 663.140239][T19894] ? __pfx_warn_alloc+0x10/0x10 [ 663.140268][T19894] ? kasan_save_track+0x4f/0x80 [ 663.140289][T19894] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 663.140313][T19894] ? xskq_create+0x56/0x170 [ 663.140332][T19894] ? __x64_sys_setsockopt+0x18b/0x220 [ 663.140359][T19894] ? do_syscall_64+0xf6/0x210 [ 663.140379][T19894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.140413][T19894] __vmalloc_node_range_noprof+0x125/0x12c0 [ 663.140475][T19894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 663.140507][T19894] ? __kasan_kmalloc+0x93/0xb0 [ 663.140538][T19894] vmalloc_user_noprof+0x74/0x80 [ 663.140567][T19894] ? xskq_create+0xbf/0x170 [ 663.140584][T19894] xskq_create+0xbf/0x170 [ 663.140606][T19894] xsk_init_queue+0xb0/0x110 [ 663.140640][T19894] xsk_setsockopt+0x43f/0x710 [ 663.140673][T19894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 663.140716][T19894] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 663.140739][T19894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 663.140771][T19894] do_sock_setsockopt+0x257/0x3e0 [ 663.140801][T19894] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 663.140826][T19894] ? __fget_files+0x2a/0x420 [ 663.140857][T19894] ? __fget_files+0x3a0/0x420 [ 663.140882][T19894] ? __fget_files+0x2a/0x420 [ 663.140917][T19894] __x64_sys_setsockopt+0x18b/0x220 [ 663.140952][T19894] do_syscall_64+0xf6/0x210 [ 663.140974][T19894] ? clear_bhb_loop+0x45/0xa0 [ 663.140999][T19894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.141019][T19894] RIP: 0033:0x7fd4bdb8e969 [ 663.141038][T19894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.141054][T19894] RSP: 002b:00007fd4be9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 663.141075][T19894] RAX: ffffffffffffffda RBX: 00007fd4bddb5fa0 RCX: 00007fd4bdb8e969 [ 663.141090][T19894] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 663.141102][T19894] RBP: 00007fd4bdc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 663.141115][T19894] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.141127][T19894] R13: 0000000000000000 R14: 00007fd4bddb5fa0 R15: 00007ffe8cf8eff8 [ 663.141167][T19894] [ 663.141175][T19894] Mem-Info: [ 663.293834][ T5850] Bluetooth: hci1: command tx timeout [ 663.297463][T19894] active_anon:3577 inactive_anon:0 isolated_anon:0 [ 663.297463][T19894] active_file:1877 inactive_file:40070 isolated_file:0 [ 663.297463][T19894] unevictable:768 dirty:167 writeback:0 [ 663.297463][T19894] slab_reclaimable:12349 slab_unreclaimable:139694 [ 663.297463][T19894] mapped:30368 shmem:1385 pagetables:596 [ 663.297463][T19894] sec_pagetables:0 bounce:0 [ 663.297463][T19894] kernel_misc_reclaimable:0 [ 663.297463][T19894] free:1295513 free_pcp:498 free_cma:0 [ 663.317711][ T1150] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.319626][T19894] Node 0 active_anon:14308kB inactive_anon:0kB active_file:7508kB inactive_file:160080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121472kB dirty:668kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12368kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.544933][T19894] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.587022][T19894] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.627587][T19894] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 663.643920][T19894] Node 0 DMA32 free:1256168kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:14000kB inactive_anon:0kB active_file:7508kB inactive_file:159988kB unevictable:1536kB writepending:664kB present:3129332kB managed:2564048kB mlocked:0kB bounce:0kB free_pcp:2252kB local_pcp:1080kB free_cma:0kB [ 663.674635][T19897] pim6reg: entered allmulticast mode [ 663.674777][T19898] pim6reg: left allmulticast mode [ 663.696184][T19894] lowmem_reserve[]: 0 0 0 0 0 [ 663.700984][T19894] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 663.731998][T19894] lowmem_reserve[]: 0 0 0 0 0 [ 663.736834][T19894] Node 1 Normal free:3910876kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 663.768254][T19894] lowmem_reserve[]: 0 0 0 0 0 [ 663.773056][T19894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 663.787110][T19894] Node 0 DMA32: 2*4kB (UM) 336*8kB (ME) 324*16kB (ME) 220*32kB (UME) 186*64kB (UME) 401*128kB (UME) 550*256kB (UME) 255*512kB (UME) 135*1024kB (UME) 3*2048kB (UM) 186*4096kB (UM) = 1255752kB [ 663.808569][T19894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 663.823825][T19894] Node 1 Normal: 257*4kB (UE) 73*8kB (UME) 49*16kB (UME) 226*32kB (UME) 97*64kB (UME) 36*128kB (UME) 15*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910876kB [ 663.853706][T19894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.864116][T19894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.874233][T19894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.884562][T19894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.894546][T19894] 43329 total pagecache pages [ 663.899359][T19894] 0 pages in swap cache [ 663.904119][T19894] Free swap = 124996kB [ 663.908321][T19894] Total swap = 124996kB [ 663.912508][T19894] 2097051 pages RAM [ 663.918257][T19894] 0 pages HighMem/MovableOnly [ 663.923009][T19894] 424381 pages reserved [ 663.928162][T19894] 0 pages cma reserved [ 664.054783][ T1150] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.400842][T19841] chnl_net:caif_netlink_parms(): no params data found [ 664.436474][T19924] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3752'. [ 664.497249][T19924] IPVS: stopping backup sync thread 12869 ... [ 664.538641][T19925] IPVS: Unknown mcast interface: team0 [ 664.601899][T19934] netlink: 'syz.5.3755': attribute type 10 has an invalid length. [ 664.610109][T19935] netlink: 'syz.5.3755': attribute type 10 has an invalid length. [ 664.619782][T19934] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3755'. [ 664.629033][T19935] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3755'. [ 664.717262][T19934] bridge0: port 4(dummy0) entered blocking state [ 664.726039][T19934] bridge0: port 4(dummy0) entered disabled state [ 664.732615][T19934] dummy0: entered allmulticast mode [ 664.740646][T19934] dummy0: entered promiscuous mode [ 664.831649][ T1150] bridge_slave_1: left allmulticast mode [ 664.837605][ T1150] bridge_slave_1: left promiscuous mode [ 664.845273][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.859280][ T1150] bridge_slave_0: left allmulticast mode [ 664.865742][ T1150] bridge_slave_0: left promiscuous mode [ 664.871562][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.054474][ T5850] Bluetooth: hci2: command tx timeout [ 665.137194][T19954] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 665.365943][ T5850] Bluetooth: hci1: command tx timeout [ 665.808715][T19970] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3763'. [ 665.824317][T19970] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3763'. [ 665.864594][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.877435][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.889245][ T1150] bond0 (unregistering): Released all slaves [ 666.026484][T19841] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.045575][T19841] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.057668][T19841] bridge_slave_0: entered allmulticast mode [ 666.071537][T19841] bridge_slave_0: entered promiscuous mode [ 666.150718][T19982] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3766'. [ 666.161733][T19983] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3766'. [ 666.164529][T19841] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.191202][T19841] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.200027][T19841] bridge_slave_1: entered allmulticast mode [ 666.216321][T19841] bridge_slave_1: entered promiscuous mode [ 666.285074][T19841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.299071][T19841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.474360][T19841] team0: Port device team_slave_0 added [ 666.591693][T19841] team0: Port device team_slave_1 added [ 666.692273][T19995] netlink: 'syz.3.3770': attribute type 10 has an invalid length. [ 666.753770][T19999] netlink: 'syz.3.3770': attribute type 10 has an invalid length. [ 666.841058][T19995] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 666.907521][T19841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.914837][T19841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.941341][T19841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.953375][T19999] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 667.006718][ T1150] hsr_slave_0: left promiscuous mode [ 667.012964][ T1150] hsr_slave_1: left promiscuous mode [ 667.029309][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.064161][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.079759][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.091363][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.123260][ T5850] Bluetooth: hci2: command tx timeout [ 667.138263][ T1150] veth1_macvtap: left promiscuous mode [ 667.144351][ T1150] veth0_macvtap: left promiscuous mode [ 667.150046][ T1150] veth1_vlan: left promiscuous mode [ 667.155851][ T1150] veth0_vlan: left promiscuous mode [ 667.301738][T20011] xt_limit: Overflow, try lower: 0/0 [ 668.185530][T20032] __nla_validate_parse: 3 callbacks suppressed [ 668.185550][T20032] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3780'. [ 668.340730][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 668.398976][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 668.920573][T19841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.928804][T19841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.956801][T19841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.969958][T19754] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 669.060795][T19754] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 669.080435][T19754] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 669.199762][T19754] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 669.213247][ T5850] Bluetooth: hci2: command tx timeout [ 669.358809][T19841] hsr_slave_0: entered promiscuous mode [ 669.376054][T19841] hsr_slave_1: entered promiscuous mode [ 669.386374][T19841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.400183][T19841] Cannot create hsr debugfs directory [ 669.410383][T20037] lo speed is unknown, defaulting to 1000 [ 669.437561][T20045] 8021q: VLANs not supported on ip_vti0 [ 670.126655][T20071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3790'. [ 670.375294][T19754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.443345][T20079] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3794'. [ 670.452562][T20079] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3794'. [ 670.483902][ C1] ================================================================== [ 670.492135][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 670.500075][ C1] Read of size 2 at addr ffff888037f3802a by task syz.8.3792/20074 [ 670.507997][ C1] [ 670.510353][ C1] CPU: 1 UID: 0 PID: 20074 Comm: syz.8.3792 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 670.510384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.510397][ C1] Call Trace: [ 670.510406][ C1] [ 670.510415][ C1] dump_stack_lvl+0x189/0x250 [ 670.510452][ C1] ? __virt_addr_valid+0x18c/0x540 [ 670.510480][ C1] ? rcu_is_watching+0x15/0xb0 [ 670.510513][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.510543][ C1] ? rcu_is_watching+0x15/0xb0 [ 670.510575][ C1] ? lock_release+0x4b/0x3e0 [ 670.510606][ C1] ? __virt_addr_valid+0x18c/0x540 [ 670.510633][ C1] ? __virt_addr_valid+0x469/0x540 [ 670.510661][ C1] print_report+0xb4/0x290 [ 670.510687][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 670.510710][ C1] kasan_report+0x118/0x150 [ 670.510738][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 670.510767][ C1] rose_timer_expiry+0x471/0x4b0 [ 670.510793][ C1] call_timer_fn+0x17b/0x5f0 [ 670.510820][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 670.510844][ C1] ? call_timer_fn+0xbe/0x5f0 [ 670.510871][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 670.510904][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.510943][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.510961][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 670.510986][ C1] __run_timer_base+0x61a/0x860 [ 670.511011][ C1] ? ktime_get+0x3e/0x1f0 [ 670.511039][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 670.511062][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 670.511096][ C1] run_timer_softirq+0xb7/0x180 [ 670.511122][ C1] handle_softirqs+0x283/0x870 [ 670.511144][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 670.511166][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 670.511191][ C1] __irq_exit_rcu+0xca/0x1f0 [ 670.511210][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 670.511234][ C1] irq_exit_rcu+0x9/0x30 [ 670.511251][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 670.511284][ C1] [ 670.511291][ C1] [ 670.511299][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 670.511321][ C1] RIP: 0010:__rcu_read_lock+0x1c/0x60 [ 670.511348][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 65 48 8b 1c 25 08 00 76 92 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 18 ff 03 8b 03 [ 670.511367][ C1] RSP: 0018:ffffc9000369f528 EFLAGS: 00000a07 [ 670.511387][ C1] RAX: 1ffff1100a3a1088 RBX: ffff888051d08444 RCX: ffff888051d08000 [ 670.511403][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880660880f0 [ 670.511417][ C1] RBP: 0000000000000000 R08: ffff88801aef70e7 R09: 1ffff110035dee1c [ 670.511432][ C1] R10: dffffc0000000000 R11: ffffed10035dee1d R12: ffff88801aef70d8 [ 670.511448][ C1] R13: dffffc0000000000 R14: ffff8880660880f0 R15: ffff88801aef7170 [ 670.511476][ C1] kernfs_root+0x15/0x230 [ 670.511508][ C1] kernfs_add_one+0x2f5/0x520 [ 670.511540][ C1] __kernfs_create_file+0x22b/0x2e0 [ 670.511563][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 670.511593][ C1] internal_create_group+0x66d/0x1110 [ 670.511628][ C1] ? kobject_add+0x155/0x220 [ 670.511652][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 670.511685][ C1] ? rcu_is_watching+0x15/0xb0 [ 670.511718][ C1] sysfs_create_groups+0x59/0x120 [ 670.511749][ C1] ib_setup_port_attrs+0xd96/0x2070 [ 670.511796][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 670.511824][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.511848][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 670.511880][ C1] ? device_add+0x70b/0xb50 [ 670.511914][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 670.511941][ C1] rdma_dev_init_net+0x1dd/0x270 [ 670.511965][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 670.511994][ C1] ops_init+0x359/0x5c0 [ 670.512026][ C1] setup_net+0x219/0x4b0 [ 670.512051][ C1] ? __pfx_setup_net+0x10/0x10 [ 670.512077][ C1] ? down_read_killable+0x1d1/0x350 [ 670.512104][ C1] copy_net_ns+0x32e/0x590 [ 670.512131][ C1] create_new_namespaces+0x3d3/0x700 [ 670.512172][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 670.512207][ C1] ksys_unshare+0x4c8/0x8c0 [ 670.512236][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 670.512260][ C1] ? rcu_is_watching+0x15/0xb0 [ 670.512299][ C1] __x64_sys_unshare+0x38/0x50 [ 670.512324][ C1] do_syscall_64+0xf6/0x210 [ 670.512347][ C1] ? clear_bhb_loop+0x45/0xa0 [ 670.512370][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.512391][ C1] RIP: 0033:0x7fbb4618e969 [ 670.512409][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.512428][ C1] RSP: 002b:00007fbb46f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 670.512451][ C1] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618e969 [ 670.512467][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 670.512480][ C1] RBP: 00007fbb46210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 670.512493][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.512505][ C1] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 670.512530][ C1] [ 670.512537][ C1] [ 671.015206][ C1] Allocated by task 1150: [ 671.019533][ C1] kasan_save_track+0x3e/0x80 [ 671.024217][ C1] __kasan_kmalloc+0x93/0xb0 [ 671.028814][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 671.034195][ C1] igmp6_group_dropped+0x3ac/0xf10 [ 671.039316][ C1] __ipv6_dev_mc_dec+0x2d2/0x390 [ 671.044262][ C1] __ipv6_ifa_notify+0x43d/0xac0 [ 671.049212][ C1] addrconf_ifdown+0xe69/0x1880 [ 671.054086][ C1] addrconf_notify+0x1bc/0x1010 [ 671.058961][ C1] notifier_call_chain+0x1b3/0x3e0 [ 671.064086][ C1] dev_close_many+0x29c/0x410 [ 671.068773][ C1] unregister_netdevice_many_notify+0x834/0x2320 [ 671.075128][ C1] default_device_exit_batch+0x819/0x890 [ 671.080790][ C1] ops_undo_list+0x522/0x990 [ 671.085391][ C1] cleanup_net+0x4c5/0x8a0 [ 671.089826][ C1] process_scheduled_works+0xadb/0x17a0 [ 671.095399][ C1] worker_thread+0x8a0/0xda0 [ 671.100003][ C1] kthread+0x70e/0x8a0 [ 671.104088][ C1] ret_from_fork+0x4b/0x80 [ 671.108548][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.113330][ C1] [ 671.115661][ C1] Freed by task 18208: [ 671.119729][ C1] kasan_save_track+0x3e/0x80 [ 671.124437][ C1] kasan_save_free_info+0x46/0x50 [ 671.129522][ C1] __kasan_slab_free+0x62/0x70 [ 671.134308][ C1] kmem_cache_free_bulk+0x2d1/0x520 [ 671.139525][ C1] kvfree_rcu_bulk+0xe5/0x1e0 [ 671.144219][ C1] kfree_rcu_monitor+0x211/0x2a0 [ 671.149167][ C1] process_scheduled_works+0xadb/0x17a0 [ 671.154726][ C1] worker_thread+0x8a0/0xda0 [ 671.159318][ C1] kthread+0x70e/0x8a0 [ 671.163400][ C1] ret_from_fork+0x4b/0x80 [ 671.167832][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.172600][ C1] [ 671.174926][ C1] Last potentially related work creation: [ 671.180640][ C1] kasan_save_stack+0x3e/0x60 [ 671.185355][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 671.190570][ C1] kvfree_call_rcu+0xbb/0x410 [ 671.195263][ C1] mld_clear_delrec+0x193/0x5d0 [ 671.200124][ C1] ipv6_mc_destroy_dev+0x45/0x5a0 [ 671.205169][ C1] addrconf_ifdown+0x139e/0x1880 [ 671.210132][ C1] addrconf_notify+0x1bc/0x1010 [ 671.215079][ C1] notifier_call_chain+0x1b3/0x3e0 [ 671.220195][ C1] unregister_netdevice_many_notify+0x15d8/0x2320 [ 671.226640][ C1] default_device_exit_batch+0x819/0x890 [ 671.232282][ C1] ops_undo_list+0x522/0x990 [ 671.236884][ C1] cleanup_net+0x4c5/0x8a0 [ 671.241309][ C1] process_scheduled_works+0xadb/0x17a0 [ 671.246868][ C1] worker_thread+0x8a0/0xda0 [ 671.251459][ C1] kthread+0x70e/0x8a0 [ 671.255535][ C1] ret_from_fork+0x4b/0x80 [ 671.259966][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.264738][ C1] [ 671.267070][ C1] The buggy address belongs to the object at ffff888037f38000 [ 671.267070][ C1] which belongs to the cache kmalloc-512 of size 512 [ 671.281218][ C1] The buggy address is located 42 bytes inside of [ 671.281218][ C1] freed 512-byte region [ffff888037f38000, ffff888037f38200) [ 671.294946][ C1] [ 671.297276][ C1] The buggy address belongs to the physical page: [ 671.303702][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37f38 [ 671.312465][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 671.320962][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 671.328508][ C1] page_type: f5(slab) [ 671.332492][ C1] raw: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 671.341075][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 671.349670][ C1] head: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 671.358345][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 671.367024][ C1] head: 00fff00000000002 ffffea0000dfce01 00000000ffffffff 00000000ffffffff [ 671.375702][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 671.384380][ C1] page dumped because: kasan: bad access detected [ 671.390801][ C1] page_owner tracks the page as allocated [ 671.396556][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 239361417286, free_ts 236582208647 [ 671.417770][ C1] post_alloc_hook+0x1d8/0x230 [ 671.422569][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 671.428140][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 671.433965][ C1] alloc_pages_mpol+0x232/0x4a0 [ 671.438828][ C1] allocate_slab+0x8a/0x3b0 [ 671.443336][ C1] ___slab_alloc+0xbfc/0x1480 [ 671.448035][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 671.453420][ C1] __ipv6_dev_mc_inc+0x420/0xaf0 [ 671.458375][ C1] addrconf_dad_work+0x3d0/0x14b0 [ 671.463411][ C1] process_scheduled_works+0xadb/0x17a0 [ 671.469036][ C1] worker_thread+0x8a0/0xda0 [ 671.473647][ C1] kthread+0x70e/0x8a0 [ 671.477736][ C1] ret_from_fork+0x4b/0x80 [ 671.482158][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.486928][ C1] page last free pid 10382 tgid 10382 stack trace: [ 671.493435][ C1] __free_frozen_pages+0xb14/0xce0 [ 671.498574][ C1] __folio_put+0x21b/0x2c0 [ 671.502993][ C1] skb_release_data+0x4df/0x8b0 [ 671.508030][ C1] kfree_skb_list_reason+0x25d/0x460 [ 671.513333][ C1] skb_release_data+0x5e2/0x8b0 [ 671.518202][ C1] sk_skb_reason_drop+0x127/0x170 [ 671.523239][ C1] kcm_release+0x149/0x5c0 [ 671.527680][ C1] sock_close+0xc0/0x240 [ 671.531923][ C1] __fput+0x449/0xa70 [ 671.535916][ C1] task_work_run+0x1d1/0x260 [ 671.540513][ C1] resume_user_mode_work+0x5e/0x80 [ 671.545633][ C1] syscall_exit_to_user_mode+0x9a/0x120 [ 671.551202][ C1] do_syscall_64+0x103/0x210 [ 671.555817][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.561812][ C1] [ 671.564140][ C1] Memory state around the buggy address: [ 671.569776][ C1] ffff888037f37f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 671.577874][ C1] ffff888037f37f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 671.585940][ C1] >ffff888037f38000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 671.594014][ C1] ^ [ 671.599395][ C1] ffff888037f38080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 671.607469][ C1] ffff888037f38100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 671.615625][ C1] ================================================================== [ 671.623931][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 671.631150][ C1] CPU: 1 UID: 0 PID: 20074 Comm: syz.8.3792 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 671.643229][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.653297][ C1] Call Trace: [ 671.656606][ C1] [ 671.659465][ C1] dump_stack_lvl+0x99/0x250 [ 671.664085][ C1] ? __asan_memcpy+0x40/0x70 [ 671.668689][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.673906][ C1] ? __pfx__printk+0x10/0x10 [ 671.678507][ C1] panic+0x2db/0x790 [ 671.682419][ C1] ? __pfx_panic+0x10/0x10 [ 671.686854][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 671.692761][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 671.698668][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 671.705017][ C1] ? print_memory_metadata+0x314/0x400 [ 671.710491][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 671.715613][ C1] check_panic_on_warn+0x89/0xb0 [ 671.720563][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 671.725695][ C1] end_report+0x78/0x160 [ 671.729965][ C1] kasan_report+0x129/0x150 [ 671.734480][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 671.739605][ C1] rose_timer_expiry+0x471/0x4b0 [ 671.744578][ C1] call_timer_fn+0x17b/0x5f0 [ 671.749182][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 671.754651][ C1] ? call_timer_fn+0xbe/0x5f0 [ 671.759337][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 671.764464][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 671.769765][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.774964][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 671.780433][ C1] __run_timer_base+0x61a/0x860 [ 671.785298][ C1] ? ktime_get+0x3e/0x1f0 [ 671.789637][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 671.795016][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 671.801269][ C1] run_timer_softirq+0xb7/0x180 [ 671.806134][ C1] handle_softirqs+0x283/0x870 [ 671.810907][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 671.815701][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 671.821102][ C1] __irq_exit_rcu+0xca/0x1f0 [ 671.825698][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 671.830903][ C1] irq_exit_rcu+0x9/0x30 [ 671.835147][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 671.840794][ C1] [ 671.843762][ C1] [ 671.846713][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 671.852737][ C1] RIP: 0010:__rcu_read_lock+0x1c/0x60 [ 671.858142][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 65 48 8b 1c 25 08 00 76 92 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 18 ff 03 8b 03 [ 671.877848][ C1] RSP: 0018:ffffc9000369f528 EFLAGS: 00000a07 [ 671.883924][ C1] RAX: 1ffff1100a3a1088 RBX: ffff888051d08444 RCX: ffff888051d08000 [ 671.891925][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880660880f0 [ 671.899902][ C1] RBP: 0000000000000000 R08: ffff88801aef70e7 R09: 1ffff110035dee1c [ 671.907907][ C1] R10: dffffc0000000000 R11: ffffed10035dee1d R12: ffff88801aef70d8 [ 671.915889][ C1] R13: dffffc0000000000 R14: ffff8880660880f0 R15: ffff88801aef7170 [ 671.923887][ C1] kernfs_root+0x15/0x230 [ 671.928243][ C1] kernfs_add_one+0x2f5/0x520 [ 671.932938][ C1] __kernfs_create_file+0x22b/0x2e0 [ 671.938145][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 671.943546][ C1] internal_create_group+0x66d/0x1110 [ 671.948944][ C1] ? kobject_add+0x155/0x220 [ 671.953562][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 671.959391][ C1] ? rcu_is_watching+0x15/0xb0 [ 671.964169][ C1] sysfs_create_groups+0x59/0x120 [ 671.969203][ C1] ib_setup_port_attrs+0xd96/0x2070 [ 671.974423][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 671.980111][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 671.985491][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 671.991482][ C1] ? device_add+0x70b/0xb50 [ 671.996016][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 672.001050][ C1] rdma_dev_init_net+0x1dd/0x270 [ 672.005996][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 672.011465][ C1] ops_init+0x359/0x5c0 [ 672.015636][ C1] setup_net+0x219/0x4b0 [ 672.019886][ C1] ? __pfx_setup_net+0x10/0x10 [ 672.024661][ C1] ? down_read_killable+0x1d1/0x350 [ 672.029896][ C1] copy_net_ns+0x32e/0x590 [ 672.034324][ C1] create_new_namespaces+0x3d3/0x700 [ 672.039627][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 672.045361][ C1] ksys_unshare+0x4c8/0x8c0 [ 672.049873][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 672.054905][ C1] ? rcu_is_watching+0x15/0xb0 [ 672.059689][ C1] __x64_sys_unshare+0x38/0x50 [ 672.064458][ C1] do_syscall_64+0xf6/0x210 [ 672.068980][ C1] ? clear_bhb_loop+0x45/0xa0 [ 672.073666][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.079566][ C1] RIP: 0033:0x7fbb4618e969 [ 672.084022][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.103641][ C1] RSP: 002b:00007fbb46f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 672.112068][ C1] RAX: ffffffffffffffda RBX: 00007fbb463b5fa0 RCX: 00007fbb4618e969 [ 672.120051][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 672.128025][ C1] RBP: 00007fbb46210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 672.136004][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.143982][ C1] R13: 0000000000000000 R14: 00007fbb463b5fa0 R15: 00007ffe7312aab8 [ 672.151964][ C1] [ 672.155227][ C1] Kernel Offset: disabled [ 672.159559][ C1] Rebooting in 86400 seconds..