last executing test programs: 34.885641025s ago: executing program 0 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) socket$inet6(0xa, 0x4, 0x3) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1}, 0x2102) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x8971, &(0x7f00000010c0)="99803939e155fce925f4b101173a") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000070000000900010049a502c2cea7794a6c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a30000000000800054000000009200012802400018065edeb97f40220090001006d6574610000000014ee01800800034000000000080002400000001308000340000001101400000010000100"/180], 0xb4}}, 0x20050800) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) sendmsg$unix(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000200)='E', 0x1}], 0x1}, 0x0) 34.583455717s ago: executing program 0 (id=212): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a008000", @ANYRES32, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x1003, 0x4) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64120200475400f6a13bb1000000080088a84820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010200000000000000000500000408000440fffffffd000a40000000020900010073797a30000000000900020069f67cf1f5e82f5baf0c1173797a3200000000140000001100010000000000000000000200"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000006000000852000000500000018350000010000000000000000000000821a03000300000085000000d10000001801000020646c5e0bd629686373a9f844eba1e8982500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003bfdffff8500"], &(0x7f0000000200)='GPL\x00', 0x8, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$alg(r6, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="e126971f83d9c6a35c16226730633796eeee482d473c65dfaffdad0d7cce3d97a639c3bd68951fbefecdbd47041b3f6218ff280c22dce145fc6287dd46da87473c506a87440f7338ede0ab50f4247405d663a3690feb6ac9d0158b33ee94689b0e3d29652b04df24551ec72c356be9351f7a76c5514c974cb856d1e6ea0f07af3193", 0x82}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x420}, @iv={0x98, 0x117, 0x2, 0x7d, "e5083f5aee0eb862533f2fa7b64221f67ab484b899800c43a5da266aca2b2cd341582cc5a4ce39660f473cfb0413eb70693f78340bebceedb668ab7f589e9602523e926d8e194c32d3359e3b4bf20d170c0072d536776c2fba7c737e68572b6082635223be33438a8730030c1ece32ea70fb335f559a1a5f589bd8ff8a"}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0xf8, 0x4000}], 0x1, 0x10) r8 = socket(0x15, 0x5, 0x0) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x808600}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x5, 0x41}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4c001) socketpair(0x9, 0xa, 0xb, &(0x7f00000001c0)={0xffffffffffffffff}) connect$packet(r10, &(0x7f0000000240)={0x11, 0x11, r7, 0x1, 0x16, 0x6, @remote}, 0x14) 34.470262985s ago: executing program 0 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084008000000080002400000000008000540000000000800034000000000080007"], 0x9c}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000084) 33.410562944s ago: executing program 0 (id=220): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002080)={&(0x7f0000001c00)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x24439242}}], 0x18}, 0x800) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 22.621029754s ago: executing program 0 (id=220): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002080)={&(0x7f0000001c00)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x24439242}}], 0x18}, 0x800) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 11.316104395s ago: executing program 4 (id=380): r0 = socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@default, @remote, @bcast, @null, @default, @bcast, @bcast, @default]}, &(0x7f00000001c0)=0x48) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}}, 0x0) 10.67040355s ago: executing program 4 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001a00866ff1a82b8d01000000000000000000818017671a199bd5fc129e4871ca8000000000000000000014000100fc00e4000000206ea3c298000000000000"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063118d00000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 10.38996124s ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000100)={0x1, @exit_sniff_mode={{0x804, 0x2}, {0xc9}}}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0)=0x74c, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x108, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000005c0)={r4, 0x10, "144e2549bb086636eef9a2450a41a93f"}, &(0x7f0000000080)=0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@dev}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@dellink={0x28, 0x11, 0x8, 0xb, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x21, 0x3d822}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5539}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000003acf00000050efbae347e8dddba0c8db8c3e2ecf5f47cb4686f158dbcd91dd9b53aab91edaf3af02f9e55003b6e063bb679077a19a8b01e41191f9f407beac2535e3f52acfeb6e031f0dea99c50c44cf0c8d1506d7b733220238d52878a01f9a1d23bda42fdb5bd7e1dadd2965bbf1b2d0d8d57622ec2b61923cec664ee3cdb128c447075489f52047b0ed553da224525e2be7fc563bce1cfebb64bf6795a7db2616373ee0ba72e283d85542452906acd1a6fd47"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.864165884s ago: executing program 4 (id=391): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read(r10, &(0x7f0000000200)=""/85, 0x55) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r9], 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r11, 0x0) socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 9.457583818s ago: executing program 4 (id=392): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=ANY=[@ANYBLOB="ec26000041000701fcfffffffddbdf25017c000004003680d42601"], 0x26ec}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=ANY=[@ANYBLOB="ec26000041000701fcfffffffddbdf25017c000004003680d42601"], 0x26ec}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x0) (async) 9.238724876s ago: executing program 4 (id=394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x0, 0x70bd2b, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xfffffffffffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100004800c00018008"], 0x34}}, 0x0) 5.27865488s ago: executing program 0 (id=220): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002080)={&(0x7f0000001c00)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x24439242}}], 0x18}, 0x800) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 2.408619373s ago: executing program 1 (id=428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) recvmmsg$unix(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000100)=""/35, 0x23}], 0x5, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/206, 0xce}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000001c40)=""/105, 0x69}, {&(0x7f0000001cc0)=""/105, 0x69}, {&(0x7f0000000440)=""/7, 0x7}], 0x6, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x2, 0x40000002, &(0x7f0000000600)={0x77359400}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r6) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r9) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 2.104802161s ago: executing program 3 (id=429): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x2}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000ffff000000000000001400030076657468305f746f5f626f6e64000000080006"], 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000880)="3d026a38", 0x0}, 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.650079993s ago: executing program 3 (id=432): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) mmap(&(0x7f0000185000/0x1000)=nil, 0x1000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r3}) recvmmsg(r4, &(0x7f0000002440), 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r5, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r6) (async) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r7) accept4(r0, 0x0, 0x0, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e20, 0x1000003, 'sh\x00', 0x39, 0x404, 0x20006f}, 0x2c) 1.41813146s ago: executing program 1 (id=434): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="09268a927f9db6eb615dbf8bb21f6588b96748123bb9b11121b1d37d460645a81dd7c7b80a1e73123b480bfd2c83df1550ff521f860b3dd673c743bf5e22de5ec4ce5c9f782f1df7290290892c18abacc9b6e07d22e1f6e634d03f379264be722433ba59d91e0840dee28f72dd5be1219b158fe5e6dc4121904981656bbc715ec45789ea51a1c7d3885193be5b6a2cd2a28960169f702a00cf964e59594a81c0", 0xa0, 0x40140, 0x0, 0x0) 1.277803731s ago: executing program 1 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063017c00000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x102}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x4, 0x0, 0x1ff, 0x276, 0x50, 0xc9ac00000000000, 0x9, 0x10000, 0x81, 0x1ff, 0x5, 0x5, 0x3, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001240)={{r2, 0x7ff, 0x279ba907, 0x3, 0x3, 0x9a9a, 0x80, 0x6cf, 0x5, 0x2, 0x9, 0xfff, 0x7, 0x9, 0x8ca8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000002000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0xfffffffffffffffb, 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="f000000010000004000000000000000000000000000000000000000000000000fe8800000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000"], 0xf0}}, 0x0) (async, rerun: 32) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) unshare(0x28000600) (async, rerun: 32) socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008afb66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0d748713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d954b70000000000008d1f606b381e4903b500000000000000000000004a2357ba5f6000de1cfa88b7165dcf4f2aaee86d4802000000000000008fdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c82bb6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f50b1e9b5d841ea55fe569bb7bf1e78191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce07300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca041bac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b39669500000000000000fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c8d0486cc6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bcb2c14521b8f326138a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a1459134d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa892c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8fa945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20b11884b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc000000000044a212ca6e96e5a5bcbb6eed37760c5f351131134963bd2f90a8e6f3b859b8e37fb346b72b8d7d03ed0fae55c5b2620c1d9a211b3de0f4c4c2f7e7935784a7d01c7978e2a74c9fee6ba00d61f3af18ad2b426a5d376416f45531e94d6554a7417cb721c2bfd383e3"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x9}}, 0x14}}, 0x20004814) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) 1.248086298s ago: executing program 3 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03316844268cb89614f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 1.235040252s ago: executing program 2 (id=438): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) unshare(0x22020600) ppoll(&(0x7f0000000200)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x8000007, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) 1.068731591s ago: executing program 2 (id=439): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0xffffffff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001000000648a63ffdac0b2ffc742a61a2e86a02393f3de08"], 0x48}}, 0x0) 966.000489ms ago: executing program 3 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8bf}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) 965.53183ms ago: executing program 1 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000025c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4040840) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0801}, 0x8048881) 880.800306ms ago: executing program 2 (id=442): socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x11, 0x800000003, 0x12000081) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) pipe(&(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x76, 0x1407, 0x1, 0x0, 0x25dfdbfc}, 0xfffffffffffffe2c}}, 0x4000080) 850.081668ms ago: executing program 3 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002bb"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0x4ceff6ba, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_ethernet(0xa6, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000002980)=""/4098, 0x1002}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x38, r6, 0x1, 0x70bd2d, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x785}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609060000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000100007040000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f00000003c0)) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000826bd700007000000140000008800058007000100696200004c000280080004000400000008000100010000000800010010000000080001001300000008000300070000000800020006000000080004000700000008000200f7ffffff080001001f0000001c0002800800020008000000080002000000000008000200090000001400028008000100100000000800010014000000"], 0x9c}}, 0x20000004) 593.949889ms ago: executing program 1 (id=444): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006272f48ef4271b39fb85040000001f0007000000000000000c001e000200000000"], 0x4c}}, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r8}, 0x38) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000200000470207200000000006004dee000000000000000000000000000000000104"], 0x60) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev, 0x0, r4}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b0000000000488467f85939db2724be916536df900c0298ff90023e0997e75351299272340377043b5a10d180a6bf687f36ac3cd10026b153d10034a6d240a098648b85893f2c1972fa0ef0e84d60b2255ae4b7f2031c81168784d6"], 0x44}}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x40020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x400}]}, 0x3c}}, 0x0) 541.89739ms ago: executing program 1 (id=445): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x200003, 0x1, 0x2, 0xd, 0x0, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2f000004000605000000000000000089a9020073797a3100b5bee2037000"/45], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', r5, 0x4, 0x1, 0x6, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x700, 0x40, 0x9, 0x18f}}) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="6f97fcbf23a828d6abfeb636c9c20d4e3fdd704eeb6543f7ce1873e6efee188d9c47bb1983d03788fbbff887e618fb18636de3c7c812938d6e0bd6a788677b", 0x3f}, {&(0x7f0000000440)="f17cf7c35e8ae4776beab75b7333ffabaabafc996ee65e4ea9c110cf0789c8dba839fedf9b6d0e727da98cc9738825000a41879dd5aa3ea97fe674d9cb", 0x3d}], 0x2, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x30}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000600)="908c8cf96e7a25408b494c9cb310c24e5c8a85d82b171fcc8c858392fcbcae4139038c0fb73ace565591c450e7a4613b3e06726e17f0c7ece560e929a90fd39927e2e372a7a5255a6f3fbc0e0dac7dbc3c3f0d4bff8666e7911090dff955d3becd29a2454da370c3bcbc221aebcaa0054a778f73", 0x74}], 0x1, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @empty}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @dev={0xac, 0x14, 0x14, 0x19}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast2}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000880)="396c1a058be4db0bed63f79cd3ca308d3db1e18e123a7989bc7834edc45a470b3b66d92c990ae5168a0ce3a7dcad56a6e7a5eb74dece2c1599e3aaa8ae2ec4c9d192056a2a838cb80b3357bb135437c9db1af8996435e8e0db0896ea11853fa6f826cafdcbae258d039982a4adeb1b8b7a", 0x71}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000900)="80596053e629004362fec7b7af78120be29eb231dd2efd5e7acbdc7227beb5a02076a1cf5ddaedd6eb957a59afd5fd957d1a61096285360210986618a50e11701d38a92c78090f7448092f1fdec928f1e7f9ee7bbd77d2cdcf1b6d10f57d33dbbe728a868675128bce44de99873310e2a86e821b681502bb9933a9c4f9ce955013e27d7ef2b3496e82df8cf0548a72f1c9eb3623709988d0facb131b8e5de508d83da63d697b718d5e0b5ca00c9656d68141b066654e25ad4b6f522dd8a4387c69ac672e5ddce63c28e6138f18d10057707e4b5269edf89e8eafac24d625a7b3f31f0c79bf93e6954507", 0xea}, {&(0x7f0000000a00)="4fa7cbc7225091d59420e6f831d6c58224e58bac0a95d9557ecd58fb1184306d0a95ec651649d4c29695908b7e1c1751", 0x30}, {&(0x7f0000000a40)="b53e115caffc1cc55af045151db7860f6c17c3", 0x13}], 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000000100000000000000070000000717697f0000ac1e0101e0000002ac1414bb4404b0d300000000001100000000b08366d8000000010000000300000000000000110000000000000000000000010000000600ca0000000000"], 0x60}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002080)=[{&(0x7f0000000bc0)="9298ae24a5d6278931c82246e763be21044b0f0a23fe889cd0aee410a4b182243e8e6230d75247f2e1de5cb89a2019f5500591f9da16b5e3c3d104027e005db48c82ea4bc0661cd0822ebb38a8aa1d7763d7177351e152dbc8f0a23b6206636f74edced11d552b9333808023a3978164232d298cd8518d89ab657e69a81a180b66dfa8da7678dbd528c91c51fb982989c3948c81ce108fb5dab0134ed1356cdfd3696d0cdec4c10341d0f48fe8b9ec558d8afe955d86872b51b8f44a1afd7e", 0xbf}, {&(0x7f0000001dc0)="39c7cda85bd73c41b730c4b70c1f0a55d179f524f2078906efc7809a2ac70a4313618d452d49eb36ad07d13d8a48a9fb2a31cf27515578966863b6eaa76ccf73b15191721c8299d0b359c896970d958f2d2c3e07df890e67ca32de4e7c633016bb2d43cc2a00a5df222d19d4d060ee677f4929c6cd046ab4ac2cd407310f7383e0506c649c3b59d55cd2465c99e4e79d6492ba438184e584e9556b516f1746f8282b56cf5f458e125e241beef7b7fae6de97bd53799c2dbc517aeeb6b20fc2093502ca7e8ef6051cf2dd7404bb25a2bcb62a1b27de40244e7667c14dc5012dfb11f62d35", 0xe4}, {&(0x7f0000000c80)="c1ed3b35e4c584b0d3c1de8b2a162af0396f833f95dec27a343ef2b5690047bf384d3a526f5baed6ecb000e91e39316c5d27b0629b7c8f44f0e17e848bfe4885565fead905cb97d2a0307877d61aefdf81c63886ee55dc7aa90edf6fe0840051955cc254fbffc42356821d6955e834743f54d01db7e095295187cc77eb63d971dfdb351f49b3168c114aa007a58f606a4a", 0x91}, {&(0x7f0000001ec0)="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", 0xff}, {&(0x7f0000001fc0)="bd5a9f72d7e634ee7a96175184d68afaaf", 0x11}, {&(0x7f0000002000)="681cbbf688fc76b755a40885e762d2f63023b914bc50cb21d00ea7b2b2bcaac20012486adb1a173aa920368ea38a1e83461853de100f15a03cd7a6fe029dc5a6407db709b00f27b649f3cc181f86f5a56f74b5bbba2724dc64cd78b6a0e50c1fc2ba11bddde55835f37081f50c20", 0x6e}], 0x6, &(0x7f0000002100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14}}], 0x30}}, {{&(0x7f0000002140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002180)="1b16f90f901d7e43a9e34e560517b170f070710e8d513b35c69fe4ce01d299e6d5da15e5c99572c21e37395364ca952f565044d035be17a56af4d5663ecb0d068032e61c8159315a5d076efff699829ddbd3b304b91adccc784f07eeb379433f4b80619be1e45d8a18eaae0023cefc5d50d7732c667458c389de49a0bb481d58390b51a4cda93de5f060850ced88fba49b3f88ef3cdb0343763aec7521dcbb", 0x9f}, {&(0x7f0000002240)="f3d34d1ab4d4bf8aeba7b4485ac2aea0eedc607d3f36b910e18d1d1704aee118620bbb38c425a742019735d3822f9cec09eaa43237a71788a387c30ae5b02aef1de4f55862234c99a49d66b9123d3f2db4517095ac37070067", 0x59}, {&(0x7f00000022c0)="747be8865376d0e5100f35be0af6240102e60ffae8b25737ab87ba391b46b774f83890034f37376696ab989e1ff5d7df05953618736a1f3c1418a152eef69d0f3bf24171113ed32562d8bbae37c811eb09affbd49d61dd0fd8f881d6cc6262f02231c1245fd844deeb4e7b076348c6ac12e8706bc5453be2240a995423875be3a10e0c424ab60ecded982fefd55575748efecffaded4e977065a35b625b23163b36cbd23695edb28d5cebf67a5df62023d63521ca30490a8b927aca5beda224b60ac47852be98b1527ad9ed6ccd816", 0xcf}], 0x3, &(0x7f0000002400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x85}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x54}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x3e, 0x0, 0x7, [0x24961470, 0x9, 0x9, 0x1]}, @ssrr={0x89, 0x7, 0xb8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x78}}], 0x5, 0x8000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1cf389bc51651d9178a79fbde8c2eba93e94d9c67b67ccd67f4222b82330b603080ad18d967c714d46bd9295d582f150b018c41c50ba13bb182a3eb0523639aac45b6a33523a6e55c57d0b13280d44b665c3c355a4883873", @ANYBLOB="391ee5b65fe50a95972c00eb554ac38d4032aab6238543e2cf0fcd20618357a57fc744989f699b6f73426968770fffada2e17929ca8b95782d074a2f71d4924bc4a63c18afeaa49f1dcf17dbf49b2c", @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="b98d4ca6f59f59a09b3d412b89ad2cede9721a43d13f095d1d0f9a4a3f2393c8500009e2ec0b430fea9f47c4111afdcda22d4404caae0af7c4b8b5338352d8d6ab2490dee91bb13daffbde40eecd2b80f1197161e5407e3dc364d2dcb9fd46622a262dbfe38890777efaa2aba929675a2f60f3023c8f", @ANYBLOB="384cb95abd3cbce14a5c82ed0f98d87a2cecef3b02b245631fabd77e422d8d15b13eb91b434d43", @ANYRESDEC, @ANYRESOCT=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r7, &(0x7f0000000500)="202c818bc328b2", &(0x7f0000000100)=""/186}, 0x20) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2e03a59c, 0x20}, 0xc) r9 = accept$inet6(r8, 0x0, &(0x7f0000000040)) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendto$llc(r7, &(0x7f00000025c0)="670670cad4e595f11c5dac7452c3b93f8d2a7bd3ff42e1a40c263e0b3fe2fadf4b0863508071c1d98a25c5f5e42d7f5c5281dbd02dd27a136113a13233ed297f13b2ed60d6651a6093e7c386518fdbaea44242d2a88752", 0x57, 0xc000, &(0x7f0000002640)={0x1a, 0x6, 0xb8, 0x4, 0x7f, 0x40, @broadcast}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa9, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4f23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 512.321921ms ago: executing program 2 (id=446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="09268a927f9db6eb615dbf8bb21f6588b96748123bb9b11121b1d37d460645a81dd7c7b80a1e73123b480bfd2c83df1550ff521f860b3dd673c743bf5e22de5ec4ce5c9f782f1df7290290892c18abacc9b6e07d22e1f6e634d03f379264be722433ba59d91e0840dee28f72dd5be1219b158fe5e6dc4121904981656bbc715ec45789ea51a1c7d3885193be5b6a2cd2a28960169f702a00cf964e59594a81c0", 0xa0, 0x40140, 0x0, 0x0) 430.666425ms ago: executing program 2 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000086b1e00f9ffffff7f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB='\x00'/28], 0x31) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x100000000}, 0x18) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0x5) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x4eb7, 0xf8, 0x4, 0x0, 0x0, [{{r2}, 0x101}, {{r4}, 0x6198435a}, {{r1}, 0x9}, {{r1}, 0xf53}]}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x2b, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000012a8000000000000001000008500000019000000186c000000000000000000000a00000018100000", @ANYRES32, @ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b705000600edffff84000000a5000000bf9100000000000000000000010000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xcaf, 0xa1, &(0x7f0000000640)=""/161, 0x41000, 0xc, '\x00', 0x0, @xdp=0x25, r4, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x4, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r5, r2, r1], &(0x7f0000000740)=[{0x4, 0x800003, 0x10}, {0x4, 0x5, 0x3, 0x1}, {0x1, 0x5, 0x8, 0x8}], 0x10, 0x8, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8ec1e79ec0035e7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x891e, &(0x7f0000000900)={'bridge0\x00', @multicast}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0xa, 0x2, 0x8, 0x8, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r12 = accept4(r11, 0x0, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (async, rerun: 64) recvmmsg(r12, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0xb61ca152645f47e0, 0x0) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r7, r10}, 0xc) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d00030500000000fcffffff1700008008000000000000000c000f000000000000000000"], 0x28}], 0x1}, 0x0) 3.209341ms ago: executing program 3 (id=448): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xc4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x91, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9a}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xc4}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x14, 0x300, 0x70bd27, 0x25dfdbfb, {0x29, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "8b5c2a115ba9e72fbd"}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) r4 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x90000004}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) 0s ago: executing program 2 (id=449): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000100000000000006000000d800"/28], 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0xb) close(r3) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f00)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000f40)={r6, 0x1, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x7, 0xf0c5faee9aeff5dc, 0x40, 0x3, {{0x2a, 0x4, 0x1, 0x2, 0xa8, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x23, 0x77, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x3, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @cipso={0x86, 0x5b, 0xffffffffffffffff, [{0x7, 0x4, "10ea"}, {0x7, 0x12, "c051e6a3392419858b80b7433099aebd"}, {0x1, 0xc, "5665f27a973ee1f0577e"}, {0x0, 0x11, "99b47c4835f05ca6baf1154523d7d1"}, {0x5, 0x10, "3bc8c4e73ee7df86da2f4c5cbda8"}, {0x1, 0xb, "3ce3267f45565ef3e1"}, {0x0, 0x7, "5553f0b3b3"}]}, @cipso={0x86, 0x13, 0x3, [{0x5, 0xa, "eec4e75017702aa8"}, {0x6, 0x3, ':'}]}]}}}}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000240)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002eda0000000000000000"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000adb3000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000003008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r15 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r15, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r14}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r15, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x198, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x198}}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="183000000000000000000000030000001830000000000000000000000000000018000000000000000000000000000000000000000000000000000000080000001800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x10, 0x2, 0x8}, &(0x7f0000000040)=0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 84.387904][ T5826] cgroup: Unknown subsys name 'net' [ 84.521711][ T5826] cgroup: Unknown subsys name 'cpuset' [ 84.531511][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.249684][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.324496][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.332884][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.341820][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.351687][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.364299][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.388085][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.397354][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.405464][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.416167][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.425908][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.446242][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.466398][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.486025][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.494264][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.502699][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.592286][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.607456][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.616018][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.624193][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.632133][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.671211][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.679565][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.691319][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.700443][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.708724][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.161159][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.271121][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.389067][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.490601][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.499362][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.506841][ T5844] bridge_slave_0: entered allmulticast mode [ 91.514234][ T5844] bridge_slave_0: entered promiscuous mode [ 91.557236][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.564415][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.572175][ T5844] bridge_slave_1: entered allmulticast mode [ 91.579572][ T5844] bridge_slave_1: entered promiscuous mode [ 91.587394][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 91.617113][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 91.710701][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.780868][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.834273][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.841822][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.851636][ T5836] bridge_slave_0: entered allmulticast mode [ 91.859327][ T5836] bridge_slave_0: entered promiscuous mode [ 91.868804][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.876403][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.883693][ T5836] bridge_slave_1: entered allmulticast mode [ 91.891880][ T5836] bridge_slave_1: entered promiscuous mode [ 91.899332][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.906612][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.913876][ T5840] bridge_slave_0: entered allmulticast mode [ 91.921469][ T5840] bridge_slave_0: entered promiscuous mode [ 91.948005][ T978] cfg80211: failed to load regulatory.db [ 92.023910][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.031608][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.041859][ T5840] bridge_slave_1: entered allmulticast mode [ 92.049560][ T5840] bridge_slave_1: entered promiscuous mode [ 92.075932][ T5844] team0: Port device team_slave_0 added [ 92.128478][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.158837][ T5844] team0: Port device team_slave_1 added [ 92.185365][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.194698][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.202049][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.209763][ T5851] bridge_slave_0: entered allmulticast mode [ 92.217389][ T5851] bridge_slave_0: entered promiscuous mode [ 92.241814][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.299865][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.309406][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.316963][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.324178][ T5851] bridge_slave_1: entered allmulticast mode [ 92.332495][ T5851] bridge_slave_1: entered promiscuous mode [ 92.370642][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.377707][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.404120][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.457364][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.464572][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.472223][ T5849] bridge_slave_0: entered allmulticast mode [ 92.479930][ T5849] bridge_slave_0: entered promiscuous mode [ 92.489460][ T5836] team0: Port device team_slave_0 added [ 92.497405][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.504380][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.531096][ T5150] Bluetooth: hci0: command tx timeout [ 92.537260][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.559496][ T5840] team0: Port device team_slave_0 added [ 92.579943][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.587601][ T5150] Bluetooth: hci1: command tx timeout [ 92.587794][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.595082][ T5150] Bluetooth: hci2: command tx timeout [ 92.602341][ T5849] bridge_slave_1: entered allmulticast mode [ 92.613137][ T5849] bridge_slave_1: entered promiscuous mode [ 92.623681][ T5836] team0: Port device team_slave_1 added [ 92.661153][ T5840] team0: Port device team_slave_1 added [ 92.667284][ T5150] Bluetooth: hci3: command tx timeout [ 92.686895][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.701308][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.738919][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.746150][ T5150] Bluetooth: hci4: command tx timeout [ 92.751918][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.778405][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.791270][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.798344][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.824336][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.894759][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.908365][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.926118][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.933121][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.959766][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.990989][ T5844] hsr_slave_0: entered promiscuous mode [ 92.998432][ T5844] hsr_slave_1: entered promiscuous mode [ 93.039082][ T5849] team0: Port device team_slave_0 added [ 93.045995][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.052978][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.079405][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.093690][ T5851] team0: Port device team_slave_0 added [ 93.103485][ T5851] team0: Port device team_slave_1 added [ 93.142083][ T5849] team0: Port device team_slave_1 added [ 93.189398][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.199505][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.229321][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.241997][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.249553][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.275553][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.343169][ T5840] hsr_slave_0: entered promiscuous mode [ 93.350159][ T5840] hsr_slave_1: entered promiscuous mode [ 93.356699][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.364512][ T5840] Cannot create hsr debugfs directory [ 93.418364][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.425864][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.452624][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.465896][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.472892][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.499078][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.531210][ T5836] hsr_slave_0: entered promiscuous mode [ 93.539833][ T5836] hsr_slave_1: entered promiscuous mode [ 93.547169][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.554839][ T5836] Cannot create hsr debugfs directory [ 93.636740][ T5851] hsr_slave_0: entered promiscuous mode [ 93.643298][ T5851] hsr_slave_1: entered promiscuous mode [ 93.650186][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.658760][ T5851] Cannot create hsr debugfs directory [ 93.809268][ T5849] hsr_slave_0: entered promiscuous mode [ 93.817524][ T5849] hsr_slave_1: entered promiscuous mode [ 93.823755][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.831875][ T5849] Cannot create hsr debugfs directory [ 94.268831][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.296246][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.325228][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.354363][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.384596][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.406728][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.443009][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.457325][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.534097][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.559161][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.571045][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.584962][ T5150] Bluetooth: hci0: command tx timeout [ 94.601655][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.668753][ T5150] Bluetooth: hci2: command tx timeout [ 94.669046][ T5838] Bluetooth: hci1: command tx timeout [ 94.700720][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.713512][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.728340][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.743689][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.752092][ T5838] Bluetooth: hci3: command tx timeout [ 94.826433][ T5838] Bluetooth: hci4: command tx timeout [ 94.889096][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.909525][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.946603][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.958369][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.992206][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.009342][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.028129][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.054578][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.061883][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.098985][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.106182][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.127478][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.216820][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.223998][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.261877][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.269116][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.311317][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.341841][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.415424][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.433571][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.447848][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.479341][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.563567][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.570770][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.607156][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.621286][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.628999][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.648849][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.656086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.733897][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.741125][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.801419][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.822385][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.862264][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.883621][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.890874][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.944105][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.951312][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.100734][ T5844] veth0_vlan: entered promiscuous mode [ 96.152891][ T5844] veth1_vlan: entered promiscuous mode [ 96.183990][ T5840] veth0_vlan: entered promiscuous mode [ 96.261185][ T5844] veth0_macvtap: entered promiscuous mode [ 96.302058][ T5840] veth1_vlan: entered promiscuous mode [ 96.333730][ T5844] veth1_macvtap: entered promiscuous mode [ 96.442270][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.458131][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.477437][ T5840] veth0_macvtap: entered promiscuous mode [ 96.490147][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.515803][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.531118][ T5840] veth1_macvtap: entered promiscuous mode [ 96.548808][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.568433][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.581719][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.591485][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.669237][ T5838] Bluetooth: hci0: command tx timeout [ 96.676796][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.689754][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.701575][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.732954][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.748054][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.760423][ T5838] Bluetooth: hci2: command tx timeout [ 96.762533][ T5150] Bluetooth: hci1: command tx timeout [ 96.766927][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.783114][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.827835][ T5150] Bluetooth: hci3: command tx timeout [ 96.870739][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.884605][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.896986][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.908358][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.917202][ T5150] Bluetooth: hci4: command tx timeout [ 97.023189][ T5836] veth0_vlan: entered promiscuous mode [ 97.058033][ T5849] veth0_vlan: entered promiscuous mode [ 97.067134][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.097968][ T5836] veth1_vlan: entered promiscuous mode [ 97.103774][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.130377][ T5849] veth1_vlan: entered promiscuous mode [ 97.204777][ T5851] veth0_vlan: entered promiscuous mode [ 97.232268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.251086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.272874][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.284620][ T5849] veth0_macvtap: entered promiscuous mode [ 97.290600][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.310034][ T5851] veth1_vlan: entered promiscuous mode [ 97.360680][ T5849] veth1_macvtap: entered promiscuous mode [ 97.400884][ T5836] veth0_macvtap: entered promiscuous mode [ 97.438270][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.448159][ T5836] veth1_macvtap: entered promiscuous mode [ 97.468807][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.471197][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.489278][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.499502][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.510300][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.522787][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.523277][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.542116][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.557423][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.568028][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.578800][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.590295][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.618965][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.630915][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.641538][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.650421][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.683734][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.706173][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.722337][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.748973][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.767905][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.778885][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.797611][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.820633][ T5851] veth0_macvtap: entered promiscuous mode [ 97.863632][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.907214][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.925020][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.945432][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.968587][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.979171][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.006456][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.019102][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.028604][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.038913][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.048236][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.064784][ T5851] veth1_macvtap: entered promiscuous mode [ 98.097840][ T5921] xt_hashlimit: size too large, truncated to 1048576 [ 98.354355][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.493180][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.523636][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.535074][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.547349][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.568746][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.605516][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.620760][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.639464][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.757029][ T5150] Bluetooth: hci0: command tx timeout [ 98.788153][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.825519][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.829134][ T5150] Bluetooth: hci2: command tx timeout [ 98.832868][ T5838] Bluetooth: hci1: command tx timeout [ 98.907238][ T5150] Bluetooth: hci3: command tx timeout [ 98.980595][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.981206][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.002904][ T5150] Bluetooth: hci4: command tx timeout [ 99.014317][ T5929] xt_connbytes: Forcing CT accounting to be enabled [ 99.021546][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.031506][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.035064][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.042583][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.059738][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.071832][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.081778][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.083923][ T5929] Cannot find add_set index 0 as target [ 99.101267][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.122729][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.206505][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.215541][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.224373][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.236342][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.542021][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.552666][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.640763][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.651989][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.087501][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.111548][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.254097][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.303092][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.536008][ T5950] lo speed is unknown, defaulting to 1000 [ 100.587699][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.613380][ T5950] lo speed is unknown, defaulting to 1000 [ 100.727680][ T5950] lo speed is unknown, defaulting to 1000 [ 100.771442][ T5950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.826037][ T5950] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.163868][ T5950] lo speed is unknown, defaulting to 1000 [ 101.386705][ T24] IPVS: starting estimator thread 0... [ 101.401706][ T5957] lo speed is unknown, defaulting to 1000 [ 101.467100][ T5946] sctp: failed to load transform for md5: -2 [ 101.485636][ T5968] IPVS: using max 33 ests per chain, 79200 per kthread [ 101.586135][ T5950] lo speed is unknown, defaulting to 1000 [ 101.681893][ T5950] lo speed is unknown, defaulting to 1000 [ 101.949991][ T5950] lo speed is unknown, defaulting to 1000 [ 101.962906][ T5950] lo speed is unknown, defaulting to 1000 [ 102.005650][ T5950] lo speed is unknown, defaulting to 1000 [ 102.071762][ T5950] lo speed is unknown, defaulting to 1000 [ 102.088420][ T5950] lo speed is unknown, defaulting to 1000 [ 102.657143][ T5983] lo speed is unknown, defaulting to 1000 [ 103.193371][ T5986] xt_hashlimit: size too large, truncated to 1048576 [ 104.153754][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 104.217286][ T6019] bond0: Unable to set down delay as MII monitoring is disabled [ 104.509833][ T6029] openvswitch: netlink: Actions may not be safe on all matching packets [ 104.602213][ T6013] lo speed is unknown, defaulting to 1000 [ 104.933927][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 104.971055][ T6037] pimreg3: entered allmulticast mode [ 105.423535][ T6054] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 105.557408][ T6052] lo speed is unknown, defaulting to 1000 [ 106.135692][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 106.405656][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 106.915654][ T6077] Bluetooth: MGMT ver 1.23 [ 107.064730][ T6077] warning: `syz.2.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.484400][ T6088] pim6reg1: entered allmulticast mode [ 107.486720][ T6091] netlink: 'syz.1.44': attribute type 5 has an invalid length. [ 107.516391][ T6092] bond_slave_0: entered promiscuous mode [ 107.522372][ T6092] bond_slave_1: entered promiscuous mode [ 107.533679][ T6092] macsec1: entered promiscuous mode [ 107.541925][ T6092] bond0: entered promiscuous mode [ 107.557000][ T6092] bond0: left promiscuous mode [ 107.562842][ T6092] bond_slave_0: left promiscuous mode [ 107.568399][ T6092] bond_slave_1: left promiscuous mode [ 108.360777][ T6115] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.48'. [ 108.400483][ T6115] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.702149][ T6130] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002 [ 108.951498][ T6136] bond_slave_0: entered promiscuous mode [ 108.957342][ T6136] bond_slave_1: entered promiscuous mode [ 108.982773][ T6136] macsec1: entered promiscuous mode [ 109.006774][ T6136] bond0: entered promiscuous mode [ 109.022688][ T6136] bond0: left promiscuous mode [ 109.028884][ T6136] bond_slave_0: left promiscuous mode [ 109.034439][ T6136] bond_slave_1: left promiscuous mode [ 109.065038][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 109.072047][ T5150] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 109.232412][ T6147] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 110.258332][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.292258][ T6173] x_tables: duplicate entry at hook 1 [ 110.847455][ T6178] netlink: 'syz.2.68': attribute type 9 has an invalid length. [ 111.272563][ T6189] Zero length message leads to an empty skb [ 111.761360][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 111.831153][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 111.943506][ T6197] bridge_slave_1: left allmulticast mode [ 111.949560][ T6197] bridge_slave_1: left promiscuous mode [ 111.956605][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.992022][ T6197] bridge_slave_0: left allmulticast mode [ 112.005097][ T6197] bridge_slave_0: left promiscuous mode [ 112.016910][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.846879][ T6242] bond_slave_0: entered promiscuous mode [ 113.852711][ T6242] bond_slave_1: entered promiscuous mode [ 113.919587][ T6242] macsec1: entered promiscuous mode [ 113.974925][ T6242] bond0: entered promiscuous mode [ 114.067546][ T6242] bond0: left promiscuous mode [ 114.129887][ T6242] bond_slave_0: left promiscuous mode [ 114.135507][ T6242] bond_slave_1: left promiscuous mode [ 114.591659][ T6263] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 114.722844][ T6265] FAULT_INJECTION: forcing a failure. [ 114.722844][ T6265] name failslab, interval 1, probability 0, space 0, times 1 [ 114.729211][ T6266] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.744738][ T6266] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.754782][ T6266] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.764199][ T6266] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.785400][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.0.90 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 114.785431][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.785447][ T6265] Call Trace: [ 114.785456][ T6265] [ 114.785465][ T6265] dump_stack_lvl+0x241/0x360 [ 114.785506][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.785536][ T6265] ? __pfx__printk+0x10/0x10 [ 114.785569][ T6265] ? __pfx___might_resched+0x10/0x10 [ 114.785607][ T6265] should_fail_ex+0x424/0x570 [ 114.785635][ T6265] should_failslab+0xac/0x100 [ 114.785658][ T6265] __kmalloc_noprof+0xdf/0x4d0 [ 114.785678][ T6265] ? bpf_test_init+0xc2/0x170 [ 114.785710][ T6265] bpf_test_init+0xc2/0x170 [ 114.785743][ T6265] bpf_prog_test_run_xdp+0x492/0x1200 [ 114.785796][ T6265] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.785828][ T6265] ? __fget_files+0x2a/0x420 [ 114.785851][ T6265] ? __fget_files+0x2a/0x420 [ 114.785875][ T6265] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.785908][ T6265] bpf_prog_test_run+0x2e4/0x360 [ 114.785942][ T6265] __sys_bpf+0x4ee/0x8b0 [ 114.785970][ T6265] ? __pfx___sys_bpf+0x10/0x10 [ 114.786010][ T6265] ? ksys_write+0x275/0x2d0 [ 114.786054][ T6265] __x64_sys_bpf+0x7c/0x90 [ 114.786078][ T6265] do_syscall_64+0xf3/0x210 [ 114.786099][ T6265] ? clear_bhb_loop+0x45/0xa0 [ 114.786125][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.786145][ T6265] RIP: 0033:0x7f3f5ff8e169 [ 114.786175][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.786192][ T6265] RSP: 002b:00007f3f60d55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.786214][ T6265] RAX: ffffffffffffffda RBX: 00007f3f601b5fa0 RCX: 00007f3f5ff8e169 [ 114.786229][ T6265] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 114.786242][ T6265] RBP: 00007f3f60d55090 R08: 0000000000000000 R09: 0000000000000000 [ 114.786255][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.786267][ T6265] R13: 0000000000000000 R14: 00007f3f601b5fa0 R15: 00007fff29e49078 [ 114.786299][ T6265] [ 115.780989][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 115.814024][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 115.855385][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 116.160788][ T6295] netlink: 'syz.0.98': attribute type 10 has an invalid length. [ 116.192729][ T6293] netlink: 'syz.3.96': attribute type 21 has an invalid length. [ 116.202703][ T6295] team0: Device ipvlan1 failed to register rx_handler [ 116.566190][ T6300] sctp: failed to load transform for md5: -2 [ 116.858233][ T6311] netlink: 'syz.3.102': attribute type 12 has an invalid length. [ 117.309401][ T6338] x_tables: duplicate underflow at hook 2 [ 117.319501][ T6338] netlink: 'syz.1.106': attribute type 9 has an invalid length. [ 117.327562][ T6338] netlink: 'syz.1.106': attribute type 6 has an invalid length. [ 117.336776][ T6338] netlink: 'syz.1.106': attribute type 7 has an invalid length. [ 117.378442][ T6338] netlink: 'syz.1.106': attribute type 8 has an invalid length. [ 117.522762][ T6349] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 117.533437][ T6345] bridge1: entered promiscuous mode [ 117.546814][ T6349] netlink: 236 bytes leftover after parsing attributes in process `syz.2.109'. [ 117.575821][ T6345] bridge1: entered allmulticast mode [ 117.585462][ T6349] NCSI netlink: No device for ifindex 813332851 [ 117.790208][ T6355] team0: Device ipvlan2 failed to register rx_handler [ 117.959739][ T6362] sctp: [Deprecated]: syz.0.113 (pid 6362) Use of int in max_burst socket option. [ 117.959739][ T6362] Use struct sctp_assoc_value instead [ 117.984535][ T6369] tipc: Can't bind to reserved service type 0 [ 118.013977][ T6367] sctp: [Deprecated]: syz.0.113 (pid 6367) Use of int in max_burst socket option. [ 118.013977][ T6367] Use struct sctp_assoc_value instead [ 118.298517][ T6375] bond_slave_0: entered promiscuous mode [ 118.304287][ T6375] bond_slave_1: entered promiscuous mode [ 118.325227][ T6375] macsec1: entered promiscuous mode [ 118.360568][ T6375] bond0: entered promiscuous mode [ 118.377648][ T6375] bond0: left promiscuous mode [ 118.384478][ T6375] bond_slave_0: left promiscuous mode [ 118.390091][ T6375] bond_slave_1: left promiscuous mode [ 118.441453][ T6379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.116'. [ 119.031710][ T6404] tipc: Enabling of bearer rejected, failed to enable media [ 119.220929][ T6410] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 119.417431][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 119.435297][ T6425] netlink: 'syz.3.124': attribute type 21 has an invalid length. [ 119.443221][ T6425] netlink: 128 bytes leftover after parsing attributes in process `syz.3.124'. [ 119.481187][ T6410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.535341][ T6424] dvmrp0: entered allmulticast mode [ 119.556928][ T6425] netlink: 3 bytes leftover after parsing attributes in process `syz.3.124'. [ 119.872326][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'. [ 119.874970][ T5150] Bluetooth: hci4: command tx timeout [ 120.308965][ T6454] netlink: 3 bytes leftover after parsing attributes in process `syz.3.127'. [ 120.528517][ T6454] batadv1: entered promiscuous mode [ 120.539178][ T6454] batadv1: entered allmulticast mode [ 120.561046][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 120.612186][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.675322][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.697993][ T6459] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 120.855446][ T978] hid-generic 0005:0C45:0A0F.0001: item fetching failed at offset 0/2 [ 120.873578][ T978] hid-generic 0005:0C45:0A0F.0001: probe with driver hid-generic failed with error -22 [ 120.969298][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 122.121913][ T6504] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 122.354349][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'. [ 122.454440][ T6519] validate_nla: 4 callbacks suppressed [ 122.454462][ T6519] netlink: 'syz.1.143': attribute type 9 has an invalid length. [ 122.474732][ T6519] netlink: 'syz.1.143': attribute type 6 has an invalid length. [ 122.511622][ T6519] netlink: 'syz.1.143': attribute type 9 has an invalid length. [ 122.536684][ T6519] netlink: 'syz.1.143': attribute type 6 has an invalid length. [ 122.570933][ T6526] netlink: 'syz.3.145': attribute type 11 has an invalid length. [ 122.863461][ T6540] ip6t_rpfilter: unknown options [ 123.627485][ T6577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.155'. [ 123.760836][ T6577] xt_hashlimit: size too large, truncated to 1048576 [ 124.390694][ T6600] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.703591][ T6608] bridge_slave_0: left allmulticast mode [ 124.745409][ T6608] bridge_slave_0: left promiscuous mode [ 124.779163][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.919503][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 125.490065][ T6608] bridge_slave_1: left allmulticast mode [ 125.536213][ T6608] bridge_slave_1: left promiscuous mode [ 125.547559][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.580893][ T6608] bond0: (slave bond_slave_0): Releasing backup interface [ 125.737534][ T6608] bond0: (slave bond_slave_1): Releasing backup interface [ 125.825843][ T6608] team0: Port device team_slave_0 removed [ 125.853610][ T6608] team0: Port device team_slave_1 removed [ 125.860931][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.874134][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.886430][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.900207][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.938689][ T6608] syz.1.167 (6608) used greatest stack depth: 19192 bytes left [ 126.108731][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 126.400316][ T6659] netlink: 'syz.3.181': attribute type 2 has an invalid length. [ 126.442220][ T6659] netlink: 164 bytes leftover after parsing attributes in process `syz.3.181'. [ 126.801098][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 127.208158][ T6669] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.217502][ T6669] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.227975][ T6669] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.237263][ T6669] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.326294][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.339940][ T6672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.360590][ T6683] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 127.379605][ T6683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.430330][ T6672] syz.1.184 (6672) used greatest stack depth: 18936 bytes left [ 127.438354][ T6681] vlan2: entered promiscuous mode [ 127.443419][ T6681] bond0: entered promiscuous mode [ 127.460930][ T6681] bond_slave_0: entered promiscuous mode [ 127.469976][ T6681] bond_slave_1: entered promiscuous mode [ 127.750250][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 127.812146][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 127.856052][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 128.034365][ T6712] netlink: 332 bytes leftover after parsing attributes in process `syz.1.196'. [ 128.055354][ T6711] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 128.083481][ T6711] þ€: entered promiscuous mode [ 128.106818][ T6715] netlink: 'syz.2.197': attribute type 39 has an invalid length. [ 128.312015][ T6721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.199'. [ 128.580018][ T6736] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.823506][ T6749] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 129.161740][ T6767] __nla_validate_parse: 6 callbacks suppressed [ 129.161762][ T6767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.210'. [ 129.219120][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.212'. [ 129.241557][ T6727] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 129.352123][ T6772] ip6gretap1: entered allmulticast mode [ 130.430694][ T5150] Bluetooth: hci0: command 0x0401 tx timeout [ 130.570339][ T6795] netlink: 'syz.4.219': attribute type 21 has an invalid length. [ 131.211976][ T6823] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 131.415422][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.440767][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.450621][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.460238][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.469313][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.448858][ T6863] sctp: [Deprecated]: syz.3.235 (pid 6863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.448858][ T6863] Use struct sctp_sack_info instead [ 132.484453][ T6864] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 132.515899][ T6864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.234'. [ 132.573492][ T6834] chnl_net:caif_netlink_parms(): no params data found [ 132.691567][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 132.818338][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 132.959416][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.988105][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.006730][ T6834] bridge_slave_0: entered allmulticast mode [ 133.025698][ T6834] bridge_slave_0: entered promiscuous mode [ 133.069372][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.114031][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.126153][ T6834] bridge_slave_1: entered allmulticast mode [ 133.134110][ T6834] bridge_slave_1: entered promiscuous mode [ 133.164270][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 133.173281][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 133.183536][ T6886] netlink: 1 bytes leftover after parsing attributes in process `syz.4.240'. [ 133.289042][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.320790][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.360420][ T6888] sctp: [Deprecated]: syz.3.241 (pid 6888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.360420][ T6888] Use struct sctp_sack_info instead [ 133.418497][ T6893] netlink: 'syz.4.243': attribute type 39 has an invalid length. [ 133.453644][ T5922] IPVS: starting estimator thread 0... [ 133.459412][ T6895] openvswitch: netlink: IP tunnel TTL not specified. [ 133.482160][ T6834] team0: Port device team_slave_0 added [ 133.492541][ T6834] team0: Port device team_slave_1 added [ 133.547437][ T5838] Bluetooth: hci3: command tx timeout [ 133.555985][ T6896] IPVS: using max 26 ests per chain, 62400 per kthread [ 133.596875][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.603888][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.671311][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.758188][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.780945][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.808033][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 133.819250][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.949527][ T6907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.998764][ T6912] netlink: 56 bytes leftover after parsing attributes in process `syz.1.249'. [ 134.008232][ T6907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.172965][ T6834] hsr_slave_0: entered promiscuous mode [ 134.184093][ T6834] hsr_slave_1: entered promiscuous mode [ 134.203276][ T6834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.215379][ T6834] Cannot create hsr debugfs directory [ 134.296024][ T6907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.313003][ T6907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.411235][ T6907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.427042][ T6907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.460113][ T6919] __nla_validate_parse: 1 callbacks suppressed [ 134.460137][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'. [ 134.654824][ T6907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.675903][ T6907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.890866][ T6907] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.902518][ T6907] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.950984][ T6907] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.953008][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 134.960333][ T6907] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.977642][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 134.991439][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 135.001500][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 135.015808][ T6941] netlink: 'syz.1.256': attribute type 18 has an invalid length. [ 135.023807][ T6940] netlink: 'syz.1.256': attribute type 18 has an invalid length. [ 135.047853][ T6907] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.066310][ T6907] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.157038][ T6834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.457997][ T6834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.567930][ T6907] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.586681][ T6907] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.628794][ T5838] Bluetooth: hci3: command tx timeout [ 135.836205][ T6834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.068349][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 136.076011][ T6834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.389264][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.269'. [ 136.398875][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.269'. [ 136.466373][ T6834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.513578][ T6834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.562816][ T6834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.606169][ T6834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.772790][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.271'. [ 136.865470][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.048335][ T7005] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 137.073081][ T7002] geneve2: entered allmulticast mode [ 137.143946][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.445259][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.534064][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.541312][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.577015][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.584229][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.705091][ T5838] Bluetooth: hci3: command tx timeout [ 138.039230][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.056434][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.461767][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.642723][ T6834] veth0_vlan: entered promiscuous mode [ 138.717473][ T6834] veth1_vlan: entered promiscuous mode [ 138.866212][ T7062] netlink: 'syz.4.290': attribute type 11 has an invalid length. [ 138.870637][ T6834] veth0_macvtap: entered promiscuous mode [ 138.927605][ T7064] vlan0: entered promiscuous mode [ 139.096806][ T6834] veth1_macvtap: entered promiscuous mode [ 139.165777][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.182411][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.193091][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.204292][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.234596][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.238188][ T7075] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 139.264363][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.291923][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.328887][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.347716][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.423782][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.441864][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.467297][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.500328][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.521071][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.553490][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.578368][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.621718][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.726490][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.754977][ T6834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.779254][ T6834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.788451][ T5838] Bluetooth: hci3: command tx timeout [ 139.794319][ T6834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.794389][ T6834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.162419][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.200720][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.294625][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.316703][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.280794][ T1162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.361419][ T7145] caif0: entered promiscuous mode [ 141.392309][ T7145] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 141.442090][ T1162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.603363][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.775266][ T7143] bond1: (slave veth3): Enslaving as an active interface with a down link [ 141.797200][ T7156] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 141.803114][ T7149] IPv6: Can't replace route, no match found [ 141.812221][ T7156] __nla_validate_parse: 4 callbacks suppressed [ 141.812241][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.314'. [ 141.874427][ T1162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.953424][ T7156] dummy0: entered promiscuous mode [ 141.964681][ T7156] bridge0: port 1(dummy0) entered blocking state [ 141.994808][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 142.006209][ T7156] bridge0: port 1(dummy0) entered disabled state [ 142.027909][ T7156] dummy0: entered allmulticast mode [ 142.055346][ T7156] bridge0: port 1(dummy0) entered blocking state [ 142.061944][ T7156] bridge0: port 1(dummy0) entered forwarding state [ 142.234572][ T1162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.622872][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.632049][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.640747][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.649101][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.657861][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.063756][ T7175] pim6reg1: entered promiscuous mode [ 143.071964][ T7175] pim6reg1: entered allmulticast mode [ 143.086512][ T7181] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.095848][ T7181] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.104626][ T7181] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.113469][ T7181] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.123464][ T7181] vxlan0: entered promiscuous mode [ 143.130919][ T7181] vxlan0: entered allmulticast mode [ 143.149638][ T7181] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.160234][ T7181] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.169677][ T7181] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.179225][ T7181] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.183483][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.321'. [ 143.238693][ T1162] bridge_slave_1: left allmulticast mode [ 143.244763][ T1162] bridge_slave_1: left promiscuous mode [ 143.252187][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.266618][ T1162] bridge_slave_0: left allmulticast mode [ 143.272300][ T1162] bridge_slave_0: left promiscuous mode [ 143.280782][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.698031][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.710353][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.721010][ T1162] bond0 (unregistering): Released all slaves [ 143.737803][ T7187] netlink: 'syz.2.321': attribute type 21 has an invalid length. [ 143.746563][ T7187] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.747066][ T5838] Bluetooth: hci3: command tx timeout [ 144.924784][ T7240] xt_CT: No such helper "snmp" [ 145.068529][ T1162] hsr_slave_0: left promiscuous mode [ 145.141552][ T1162] hsr_slave_1: left promiscuous mode [ 145.150393][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.172169][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.216177][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.238735][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.321487][ T1162] veth1_macvtap: left promiscuous mode [ 145.349889][ T1162] veth0_macvtap: left promiscuous mode [ 145.376816][ T1162] veth1_vlan: left promiscuous mode [ 145.382355][ T1162] veth0_vlan: left promiscuous mode [ 145.428471][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 146.189354][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 146.227931][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 146.716714][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 146.825026][ T5838] Bluetooth: hci3: command tx timeout [ 147.036492][ T7288] xt_addrtype: ipv6 does not support BROADCAST matching [ 147.080531][ T7291] netlink: 'syz.4.340': attribute type 39 has an invalid length. [ 147.261346][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.273594][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.283120][ T7172] bridge_slave_0: entered allmulticast mode [ 147.291052][ T7172] bridge_slave_0: entered promiscuous mode [ 147.298851][ T7297] syzkaller1: entered promiscuous mode [ 147.304534][ T7297] syzkaller1: entered allmulticast mode [ 147.373066][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.380880][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.388361][ T7172] bridge_slave_1: entered allmulticast mode [ 147.402368][ T7172] bridge_slave_1: entered promiscuous mode [ 147.496160][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.588895][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.798690][ T7314] xt_socket: unknown flags 0xd0 [ 147.898409][ T7172] team0: Port device team_slave_0 added [ 147.939511][ T7172] team0: Port device team_slave_1 added [ 148.217387][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.224410][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.363312][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.440175][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.479618][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.571122][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.905448][ T5838] Bluetooth: hci3: command tx timeout [ 148.954016][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 148.956943][ T7172] hsr_slave_0: entered promiscuous mode [ 148.999052][ T7172] hsr_slave_1: entered promiscuous mode [ 149.022666][ T7172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.032378][ T7172] Cannot create hsr debugfs directory [ 149.039563][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 149.611848][ T7387] pim6reg: entered allmulticast mode [ 149.995236][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 150.985663][ T5838] Bluetooth: hci3: command tx timeout [ 151.538272][ T7172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.590334][ T7444] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.618071][ T7172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.644606][ T7172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.665313][ T7449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.374'. [ 151.683859][ T7172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.708563][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 151.740310][ T7450] Bluetooth: MGMT ver 1.23 [ 152.091083][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.216950][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.273714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.281000][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.348282][ T7471] netlink: 136 bytes leftover after parsing attributes in process `syz.4.378'. [ 152.372585][ T7471] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 152.426632][ T7479] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 152.462358][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.469632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.760469][ T7490] IPVS: set_ctl: invalid protocol: 136 172.20.20.23:20001 [ 152.785130][ T7490] sctp: [Deprecated]: syz.1.381 (pid 7490) Use of int in max_burst socket option deprecated. [ 152.785130][ T7490] Use struct sctp_assoc_value instead [ 154.152803][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.911398][ T7172] veth0_vlan: entered promiscuous mode [ 154.949690][ T7172] veth1_vlan: entered promiscuous mode [ 155.077634][ T7172] veth0_macvtap: entered promiscuous mode [ 155.137109][ T7172] veth1_macvtap: entered promiscuous mode [ 155.248847][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.332260][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.405470][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.440050][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.481755][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.506863][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.528386][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.548662][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.570229][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.587599][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.748073][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.822415][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.876683][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.915448][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.934469][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.965209][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.997647][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.042090][ T7172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.055792][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.065322][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.069686][ T7172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.086193][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.103543][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.112716][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.121827][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.140976][ T7172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.149815][ T7172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.159093][ T7172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.174370][ T7172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.192149][ T7605] netlink: 'syz.3.403': attribute type 5 has an invalid length. [ 156.428310][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.472148][ T7623] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.513412][ T7620] veth2: entered allmulticast mode [ 156.583177][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.773415][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.819935][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.964044][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.001345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.014603][ T7636] syz.3.409: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 157.062642][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.3.409 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 157.062673][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.062685][ T7636] Call Trace: [ 157.062693][ T7636] [ 157.062702][ T7636] dump_stack_lvl+0x241/0x360 [ 157.062740][ T7636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.062768][ T7636] ? __pfx__printk+0x10/0x10 [ 157.062795][ T7636] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 157.062822][ T7636] ? __rcu_read_unlock+0xa1/0x110 [ 157.062852][ T7636] warn_alloc+0x27c/0x410 [ 157.062884][ T7636] ? __pfx_warn_alloc+0x10/0x10 [ 157.062917][ T7636] ? xskq_create+0xb6/0x170 [ 157.062946][ T7636] ? __get_vm_area_node+0x1c8/0x2d0 [ 157.062967][ T7636] ? __get_vm_area_node+0x25c/0x2d0 [ 157.062994][ T7636] __vmalloc_node_range_noprof+0x634/0x1390 [ 157.063050][ T7636] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.063080][ T7636] ? __kasan_kmalloc+0x9d/0xb0 [ 157.063116][ T7636] vmalloc_user_noprof+0x74/0x80 [ 157.063140][ T7636] ? xskq_create+0xb6/0x170 [ 157.063166][ T7636] xskq_create+0xb6/0x170 [ 157.063198][ T7636] xsk_init_queue+0xa1/0x100 [ 157.063229][ T7636] xsk_setsockopt+0x4f9/0x840 [ 157.063260][ T7636] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.063288][ T7636] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.063311][ T7636] ? __lock_acquire+0xad5/0xd80 [ 157.063349][ T7636] ? aa_sock_opt_perm+0x79/0x120 [ 157.063381][ T7636] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.063407][ T7636] do_sock_setsockopt+0x3b1/0x710 [ 157.063437][ T7636] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 157.063457][ T7636] ? __fget_files+0x2a/0x420 [ 157.063478][ T7636] ? __fget_files+0x39d/0x420 [ 157.063495][ T7636] ? __fget_files+0x2a/0x420 [ 157.063524][ T7636] __x64_sys_setsockopt+0x187/0x210 [ 157.063553][ T7636] do_syscall_64+0xf3/0x210 [ 157.063574][ T7636] ? clear_bhb_loop+0x45/0xa0 [ 157.063600][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.063620][ T7636] RIP: 0033:0x7f897618e169 [ 157.063639][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.063656][ T7636] RSP: 002b:00007f8973ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.063678][ T7636] RAX: ffffffffffffffda RBX: 00007f89763b5fa0 RCX: 00007f897618e169 [ 157.063693][ T7636] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 157.063705][ T7636] RBP: 00007f8976210a68 R08: 0000000000000004 R09: 0000000000000000 [ 157.063718][ T7636] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 157.063730][ T7636] R13: 0000000000000000 R14: 00007f89763b5fa0 R15: 00007fff1a90f908 [ 157.063763][ T7636] [ 157.063772][ T7636] Mem-Info: [ 157.347100][ T7636] active_anon:5560 inactive_anon:0 isolated_anon:0 [ 157.347100][ T7636] active_file:1837 inactive_file:38339 isolated_file:0 [ 157.347100][ T7636] unevictable:768 dirty:26 writeback:0 [ 157.347100][ T7636] slab_reclaimable:9952 slab_unreclaimable:101615 [ 157.347100][ T7636] mapped:28958 shmem:1495 pagetables:809 [ 157.347100][ T7636] sec_pagetables:0 bounce:0 [ 157.347100][ T7636] kernel_misc_reclaimable:0 [ 157.347100][ T7636] free:1341958 free_pcp:588 free_cma:0 [ 157.415855][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 157.420920][ T7636] Node 0 active_anon:22240kB inactive_anon:0kB active_file:7348kB inactive_file:153280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115832kB dirty:104kB writeback:0kB shmem:4444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10864kB pagetables:3136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.454386][ T1162] bridge_slave_1: left allmulticast mode [ 157.462190][ T1162] bridge_slave_1: left promiscuous mode [ 157.462896][ T7636] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.476272][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.512858][ T7636] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.550383][ T1162] bridge_slave_0: left allmulticast mode [ 157.559537][ T1162] bridge_slave_0: left promiscuous mode [ 157.567456][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.585955][ T7636] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 157.592062][ T7636] Node 0 DMA32 free:1443360kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:22232kB inactive_anon:0kB active_file:7348kB inactive_file:153180kB unevictable:1536kB writepending:104kB present:3129332kB managed:2547444kB mlocked:0kB bounce:0kB free_pcp:1984kB local_pcp:1436kB free_cma:0kB [ 157.649875][ T7636] lowmem_reserve[]: 0 0 0 0 0 [ 157.658197][ T7636] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.705731][ T7636] lowmem_reserve[]: 0 0 0 0 0 [ 157.711688][ T7636] Node 1 Normal free:3910300kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.746545][ T7636] lowmem_reserve[]: 0 0 0 0 0 [ 157.753048][ T7636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.773697][ T7636] Node 0 DMA32: 7*4kB (UME) 23*8kB (UME) 167*16kB (UME) 199*32kB (UME) 46*64kB (UME) 69*128kB (UME) 33*256kB (ME) 51*512kB (UME) 41*1024kB (UME) 9*2048kB (UME) 324*4096kB (UM) = 1443108kB [ 157.800192][ T7636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 157.822802][ T7636] Node 1 Normal: 253*4kB (UE) 69*8kB (UME) 46*16kB (UME) 231*32kB (UME) 101*64kB (UME) 33*128kB (UME) 17*256kB (UME) 7*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910300kB [ 157.846699][ T7636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.857054][ T7636] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.866479][ T7636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.880503][ T7636] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.890288][ T7636] 41671 total pagecache pages [ 157.895595][ T7636] 0 pages in swap cache [ 157.899788][ T7636] Free swap = 124996kB [ 157.904086][ T7636] Total swap = 124996kB [ 157.909445][ T7636] 2097051 pages RAM [ 157.913328][ T7636] 0 pages HighMem/MovableOnly [ 157.921478][ T7636] 428532 pages reserved [ 157.926047][ T7636] 0 pages cma reserved [ 158.185415][ T5150] Bluetooth: hci4: command tx timeout [ 158.261498][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.276803][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.290222][ T1162] bond0 (unregistering): Released all slaves [ 158.640348][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.678434][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.701422][ T7609] bridge_slave_0: entered allmulticast mode [ 158.731011][ T7609] bridge_slave_0: entered promiscuous mode [ 158.770578][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.782227][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.791641][ T7609] bridge_slave_1: entered allmulticast mode [ 158.808881][ T7609] bridge_slave_1: entered promiscuous mode [ 159.085454][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.159389][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.242850][ T7687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.259172][ T1162] hsr_slave_0: left promiscuous mode [ 159.290444][ T1162] hsr_slave_1: left promiscuous mode [ 159.315763][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.323259][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.351337][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.389915][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.507476][ T1162] veth1_macvtap: left promiscuous mode [ 159.513129][ T1162] veth0_macvtap: left promiscuous mode [ 159.535127][ T1162] veth1_vlan: left promiscuous mode [ 159.540551][ T1162] veth0_vlan: left promiscuous mode [ 159.685227][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.695580][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.704016][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.714324][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.722441][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.097664][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 160.141059][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 160.265178][ T5150] Bluetooth: hci4: command tx timeout [ 160.609038][ T7609] team0: Port device team_slave_0 added [ 160.633788][ T7609] team0: Port device team_slave_1 added [ 160.776704][ T7710] netlink: 68 bytes leftover after parsing attributes in process `syz.2.422'. [ 160.807294][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.821734][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.872904][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.897484][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.904594][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.951468][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.965932][ T7710] netlink: 68 bytes leftover after parsing attributes in process `syz.2.422'. [ 161.057901][ T7718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.102999][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.191369][ T7609] hsr_slave_0: entered promiscuous mode [ 161.230436][ T7609] hsr_slave_1: entered promiscuous mode [ 161.245859][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.275330][ T7609] Cannot create hsr debugfs directory [ 161.585362][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 161.785412][ T5150] Bluetooth: hci3: command tx timeout [ 162.059872][ T1162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.062083][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 162.085885][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 162.095362][ T7763] netlink: 76 bytes leftover after parsing attributes in process `syz.2.431'. [ 162.114028][ T7762] IPv6: sit1: Disabled Multicast RS [ 162.145864][ T7762] sit1: entered allmulticast mode [ 162.271883][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 162.345430][ T5150] Bluetooth: hci4: command tx timeout [ 162.360178][ T1162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.620617][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 162.655905][ T1162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.979265][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.442'. [ 162.995822][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.442'. [ 163.018431][ T1162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.044763][ T7803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.443'. [ 163.155889][ T7800] batadv0: entered promiscuous mode [ 163.162946][ T7800] bond0: entered promiscuous mode [ 163.181410][ T7800] bond_slave_0: entered promiscuous mode [ 163.187462][ T7800] bond_slave_1: entered promiscuous mode [ 163.197894][ T7800] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 163.424369][ T7807] tipc: Started in network mode [ 163.445189][ T7807] tipc: Node identity 7, cluster identity 4711 [ 163.461599][ T7807] tipc: Node number set to 7 [ 163.495369][ T7807] tipc: Cannot configure node identity twice [ 163.586894][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.604549][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.630732][ T7701] bridge_slave_0: entered allmulticast mode [ 163.650034][ T7701] bridge_slave_0: entered promiscuous mode [ 163.703612][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.745444][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.783400][ T7701] bridge_slave_1: entered allmulticast mode [ 163.819730][ T7701] bridge_slave_1: entered promiscuous mode [ 163.865225][ T5150] Bluetooth: hci3: command tx timeout [ 172.010833][ C0] hrtimer: interrupt took 8066536948 ns [ 172.055907][ T5150] Bluetooth: hci4: command tx timeout [ 172.061412][ T5150] Bluetooth: hci3: command tx timeout [ 268.954835][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 268.961970][ C1] rcu: 0-...!: (1 ticks this GP) idle=d26c/1/0x4000000000000000 softirq=29288/29288 fqs=9 [ 268.972734][ C1] rcu: (detected by 1, t=10502 jiffies, g=21757, q=675 ncpus=2) [ 268.980514][ C1] Sending NMI from CPU 1 to CPUs 0: [ 268.980551][ C0] NMI backtrace for cpu 0 [ 268.980577][ C0] CPU: 0 UID: 0 PID: 7837 Comm: modprobe Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 268.980598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.980612][ C0] RIP: 0010:timerqueue_del+0x51/0x100 [ 268.980644][ C0] Code: c1 ec 03 41 80 3c 2c 00 74 08 4c 89 ef e8 e7 b5 04 f6 49 8b 5d 00 48 89 df 4c 89 ee e8 b8 78 9a f5 4c 39 eb 0f 84 99 00 00 00 4a 76 9a f5 49 8d 5e 08 49 89 df 49 c1 ef 03 41 80 3c 2f 00 74 [ 268.980658][ C0] RSP: 0018:ffffc90000007d08 EFLAGS: 00000003 [ 268.980677][ C0] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffff88802d58da00 [ 268.980688][ C0] RDX: 0000000000010000 RSI: ffff888143ee0340 RDI: 0000000000000001 [ 268.980699][ C0] RBP: dffffc0000000000 R08: ffffffff8c284468 R09: 1ffffffff20bfb8e [ 268.980711][ C0] R10: dffffc0000000000 R11: fffffbfff20bfb8f R12: 1ffff110287dc068 [ 268.980723][ C0] R13: ffff888143ee0340 R14: ffff8880b8627890 R15: ffff8880b86276c0 [ 268.980736][ C0] FS: 0000000000000000(0000) GS:ffff888124fab000(0000) knlGS:0000000000000000 [ 268.980749][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.980760][ C0] CR2: 00007f15ad9183b0 CR3: 00000000580b6000 CR4: 00000000003526f0 [ 268.980775][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.980784][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 268.980794][ C0] Call Trace: [ 268.980803][ C0] [ 268.980815][ C0] __hrtimer_run_queues+0x3db/0xd40 [ 268.980842][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 268.980873][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 268.980897][ C0] ? sched_clock_cpu+0x77/0x4d0 [ 268.980923][ C0] ? rcu_is_watching+0x15/0xb0 [ 268.980941][ C0] hrtimer_interrupt+0x403/0xa40 [ 268.980980][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 268.981013][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 268.981039][ C0] [ 268.981044][ C0] [ 268.981051][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.981069][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 268.981092][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 268.981105][ C0] RSP: 0018:ffffc90003966f88 EFLAGS: 00000206 [ 268.981119][ C0] RAX: 258a52f5f296e600 RBX: ffffffff8ed3df20 RCX: 258a52f5f296e600 [ 268.981131][ C0] RDX: 0000000000000000 RSI: ffffffff8e4d854b RDI: ffffffff8ca1c5c0 [ 268.981143][ C0] RBP: ffffffff93675020 R08: 0000000000000000 R09: 0000000000000000 [ 268.981153][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.981162][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 268.981185][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 268.981205][ C0] ? tomoyo_check_open_permission+0x25a/0x4f0 [ 268.981224][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 268.981243][ C0] unwind_next_frame+0xd5/0x23b0 [ 268.981260][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 268.981281][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 268.981300][ C0] ? tomoyo_check_open_permission+0x25a/0x4f0 [ 268.981319][ C0] ? tomoyo_check_open_permission+0x25a/0x4f0 [ 268.981338][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.981358][ C0] arch_stack_walk+0x11e/0x150 [ 268.981381][ C0] ? tomoyo_check_open_permission+0x25a/0x4f0 [ 268.981403][ C0] stack_trace_save+0x11a/0x1d0 [ 268.981423][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 268.981450][ C0] kasan_save_track+0x3f/0x80 [ 268.981473][ C0] ? kasan_save_track+0x3f/0x80 [ 268.981493][ C0] ? __kasan_kmalloc+0x9d/0xb0 [ 268.981515][ C0] ? __kmalloc_noprof+0x28e/0x4d0 [ 268.981530][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 268.981552][ C0] ? tomoyo_check_open_permission+0x25a/0x4f0 [ 268.981600][ C0] __kasan_kmalloc+0x9d/0xb0 [ 268.981625][ C0] __kmalloc_noprof+0x28e/0x4d0 [ 268.981641][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 268.981666][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 268.981696][ C0] tomoyo_check_open_permission+0x25a/0x4f0 [ 268.981718][ C0] ? tomoyo_check_open_permission+0x209/0x4f0 [ 268.981737][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 268.981756][ C0] ? security_inode_follow_link+0xbe/0x340 [ 268.981803][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 268.981820][ C0] ? tomoyo_file_open+0x168/0x220 [ 268.981847][ C0] security_file_open+0xac/0x250 [ 268.981864][ C0] do_dentry_open+0x320/0x1960 [ 268.981886][ C0] ? vfs_open+0x31/0x370 [ 268.981905][ C0] vfs_open+0x3b/0x370 [ 268.981923][ C0] path_openat+0x2caf/0x35d0 [ 268.981952][ C0] ? stack_depot_save_flags+0x44/0x940 [ 268.981975][ C0] ? kasan_save_track+0x51/0x80 [ 268.982006][ C0] ? __pfx_path_openat+0x10/0x10 [ 268.982023][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.982051][ C0] do_filp_open+0x284/0x4e0 [ 268.982072][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 268.982090][ C0] ? do_raw_spin_lock+0x151/0x370 [ 268.982130][ C0] do_sys_openat2+0x12b/0x1d0 [ 268.982149][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.982168][ C0] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 268.982190][ C0] __x64_sys_openat+0x249/0x2a0 [ 268.982209][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 268.982233][ C0] ? do_syscall_64+0xb6/0x210 [ 268.982251][ C0] do_syscall_64+0xf3/0x210 [ 268.982266][ C0] ? clear_bhb_loop+0x45/0xa0 [ 268.982285][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.982302][ C0] RIP: 0033:0x7f15adb93a46 [ 268.982322][ C0] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 0a 48 01 00 48 83 c8 ff c3 31 [ 268.982335][ C0] RSP: 002b:00007ffcca2af908 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 268.982351][ C0] RAX: ffffffffffffffda RBX: 00007ffcca2afb68 RCX: 00007f15adb93a46 [ 268.982363][ C0] RDX: 0000000000080000 RSI: 00007ffcca2af980 RDI: 00000000ffffff9c [ 268.982374][ C0] RBP: 00007ffcca2af970 R08: 0000000000080000 R09: 00007ffcca2af980 [ 268.982385][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffcca2af980 [ 268.982396][ C0] R13: 0000000000000009 R14: 00007ffcca2afb4f R15: 00000000ffffffff [ 268.982416][ C0] [ 268.982543][ C1] rcu: rcu_preempt kthread starved for 9671 jiffies! g21757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 269.602900][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 269.612897][ C1] rcu: RCU grace-period kthread stack dump: [ 269.618795][ C1] task:rcu_preempt state:R running task stack:26952 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 269.632319][ C1] Call Trace: [ 269.635615][ C1] [ 269.638570][ C1] __schedule+0x1b88/0x5240 [ 269.643114][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 269.649050][ C1] ? rcu_is_watching+0x15/0xb0 [ 269.653833][ C1] ? schedule+0x163/0x360 [ 269.658192][ C1] ? __pfx___schedule+0x10/0x10 [ 269.663088][ C1] ? schedule+0x90/0x360 [ 269.667362][ C1] ? schedule+0x90/0x360 [ 269.671626][ C1] schedule+0x163/0x360 [ 269.675817][ C1] schedule_timeout+0x15b/0x2b0 [ 269.680689][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 269.686083][ C1] ? __pfx_process_timeout+0x10/0x10 [ 269.691394][ C1] ? prepare_to_swait_event+0x1e5/0x340 [ 269.696957][ C1] ? prepare_to_swait_event+0x308/0x340 [ 269.702528][ C1] rcu_gp_fqs_loop+0x2e1/0x1340 [ 269.707418][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 269.713598][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 269.718932][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 269.724858][ C1] ? finish_swait+0xdb/0x200 [ 269.729468][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 269.734691][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 269.739313][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 269.744544][ C1] ? __kthread_parkme+0x1a8/0x200 [ 269.749588][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 269.754811][ C1] kthread+0x7b7/0x940 [ 269.758906][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 269.764139][ C1] ? __pfx_kthread+0x10/0x10 [ 269.768747][ C1] ? __pfx_kthread+0x10/0x10 [ 269.773354][ C1] ? __pfx_kthread+0x10/0x10 [ 269.777963][ C1] ? __pfx_kthread+0x10/0x10 [ 269.782570][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.787788][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 269.793359][ C1] ? __pfx_kthread+0x10/0x10 [ 269.797972][ C1] ret_from_fork+0x4b/0x80 [ 269.802405][ C1] ? __pfx_kthread+0x10/0x10 [ 269.807017][ C1] ret_from_fork_asm+0x1a/0x30 [ 269.811824][ C1] [ 269.814855][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 269.821196][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 269.833188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.843258][ C1] Workqueue: events_unbound toggle_allocation_gate [ 269.849806][ C1] RIP: 0010:smp_call_function_many_cond+0x1bac/0x2d40 [ 269.856595][ C1] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 68 dc 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 18 d8 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 269.876221][ C1] RSP: 0018:ffffc90000117640 EFLAGS: 00000293 [ 269.882312][ C1] RAX: ffffffff81b6e2cd RBX: 1ffff110170c823d RCX: ffff88801d6dda00 [ 269.890302][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 269.898288][ C1] RBP: ffffc90000117840 R08: ffffffff81b6e298 R09: 1ffffffff20bfb8e [ 269.906275][ C1] R10: dffffc0000000000 R11: fffffbfff20bfb8f R12: ffff8880b873ad08 [ 269.914270][ C1] R13: ffff8880b86411e8 R14: ffff8880b873ad00 R15: 0000000000000000 [ 269.922270][ C1] FS: 0000000000000000(0000) GS:ffff8881250ab000(0000) knlGS:0000000000000000 [ 269.931212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.937810][ C1] CR2: 00007f9e4be7a440 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 269.945799][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.953783][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.961766][ C1] Call Trace: [ 269.965060][ C1] [ 269.968011][ C1] ? __text_poke+0xb83/0xe20 [ 269.972626][ C1] ? kmem_cache_alloc_bulk_noprof+0x15b/0x7c0 [ 269.978720][ C1] ? kmem_cache_alloc_bulk_noprof+0x15b/0x7c0 [ 269.984819][ C1] ? perf_event_text_poke+0x262/0x330 [ 269.990209][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 269.995610][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 270.001972][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 270.007741][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 270.012898][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 270.018056][ C1] text_poke_bp_batch+0x728/0xb30 [ 270.023131][ C1] ? kmem_cache_alloc_bulk_noprof+0x15b/0x7c0 [ 270.029221][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 270.034798][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 270.041079][ C1] text_poke_finish+0x30/0x50 [ 270.045785][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 270.051795][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 270.057715][ C1] static_key_enable+0x1a/0x20 [ 270.062536][ C1] toggle_allocation_gate+0xc0/0x250 [ 270.067854][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 270.073791][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 270.079534][ C1] process_scheduled_works+0xac3/0x18e0 [ 270.085139][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.091160][ C1] ? assign_work+0x367/0x3d0 [ 270.095783][ C1] worker_thread+0x870/0xd50 [ 270.100420][ C1] ? __kthread_parkme+0x1a8/0x200 [ 270.105467][ C1] ? __pfx_worker_thread+0x10/0x10 [ 270.110608][ C1] kthread+0x7b7/0x940 [ 270.114699][ C1] ? __pfx_worker_thread+0x10/0x10 [ 270.119837][ C1] ? __pfx_kthread+0x10/0x10 [ 270.124443][ C1] ? __pfx_kthread+0x10/0x10 [ 270.129052][ C1] ? __pfx_kthread+0x10/0x10 [ 270.133759][ C1] ? __pfx_kthread+0x10/0x10 [ 270.138370][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.143591][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 270.148818][ C1] ? __pfx_kthread+0x10/0x10 [ 270.153428][ C1] ret_from_fork+0x4b/0x80 [ 270.157861][ C1] ? __pfx_kthread+0x10/0x10 [ 270.162469][ C1] ret_from_fork_asm+0x1a/0x30 [ 270.167277][ C1]