last executing test programs: 2.263856845s ago: executing program 2 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1071f}]}, 0x3c}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x90, 0x2, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFACCT_FILTER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4800}, 0x880) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x80, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}]}, 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) 2.060420744s ago: executing program 2 (id=618): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @remote}, 0x6f) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8c37c2b979564e6e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x183}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="250065cdf523000000800020edb910cead178f34ecdbdfa80352e238050000001ae828758ea124b53a030a6693cd83c7c012259e74fa8c5d7e04ce4fc39eacab7c1f070f1096cbbdfe21e817b405c0d6ef3951aff36de3e911cf910d55a04b50971d538b84b07b4b7fd41f3a3334ca1a3b0064bc304e8fb45062799667b7c3d268ed9472c33efbcf7a99b4d6733b7d0a0dad9a933cc383e6e6378a36b1b0b4e2689a7dd1503c76f69ad9987f27d6ae14103983b305c38f3b6eae65b77ed49994eef172", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.538428307s ago: executing program 3 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"], 0x20) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/146, &(0x7f00000000c0)=0x92) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x1, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) 1.503738s ago: executing program 3 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6000000000383a00fe880000000000000000000000000001ff020000000000000000000000000001010f9078000000006000b29500003a00fe8000000000000000000000501b001d20010000000000000000000000000001caa7c1b7f4c336af"], 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2d, 'net_prio'}, {0x2d, 'io'}, {0x38, 'cpuacct'}, {0x2d, 'rlimit'}]}, 0x1f) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x66, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x20}, @ipv4=@udp={{0x9, 0x4, 0x3, 0x1b, 0x88, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x10, 0x1c, 0x0, 0x6, [0xeb78, 0x10001, 0x80]}]}}, {0x4e20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "cc9076053333c98aab3d501bf817920a8da263c567a486ff0a1b2e8f78165e39", "7d591a13c426e5901e02555e5cf04d15", {"853745e0ace7a15e4078ad604dbe515d", "90701aad8601dc8a67b8332ccc4f325c"}}}}}, 0x96) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x0, @multicast2}}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x6d1f841a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000800)="a1dfb9c74e5b8e092aa0177e2890db22bd0a06888e4af2337a7770f4b2cd21cb840337d8e7a49b88a8a4492469744ef29f65d0c82a592bb1fcc0b20a02f32fb0442285cae6768669c57d1307167fc8e561308b50e03c4cc7eed4700d0f352f7b255843c016e2de7a9a2959e2002611d3f767e682b157fb6a224693ccae43c5316acf32ceea756c", 0x87}, {&(0x7f0000000400)="fba22fe8", 0x4}], 0x2, &(0x7f00000008c0)=[@rthdrdstopts={{0x100, 0x29, 0x37, {0x0, 0x1d, '\x00', [@ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x8000, [0x10000]}}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x8, 0x9a, "b29eb5d7fd1cc860b1c1969372c2e6ac249b3c549f87261d2565e1e7c6b0558b3fd59627e49aff0cbcaf1dc0071beba5b4cfd95ec716602a5e48a384ca59789e36e462ffe5ff75d07ab13467afc706ff2b5052190f1d641abc671db4de4d994dc31544f4b360c93165d7e294ddd2c151fe9a23c510b7034189795b9e141a33e9fb3f69c948d8231ef242f5b589ea3963dc145d0db5625eaa61e0"}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x118}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0xb6, @loopback, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000a00)="39194df91955fbc191424cd2303cb2f7b79b19406c5e5faa0165310db6ae6094787f5b9c20a7090fa0adaa70b8bc5ee8ba7d9c3c3ffe19f4fda6be0fe5156c409b9ba694836488b0f56605e4ccce8a705af71055afa2277ceaba22205db68e2938853b9e1d9238fba7ee632529f2df7ced0c166456873699d5a4b412ea88fcba8b762cf590f2", 0x86}, {&(0x7f0000000ac0)="1fddbeeb09e7b2b54d4eb349005ffdc6d3c8c26c6540fb4b4d6d0ec44ed62583925bb152085197d64d2ebb24dd1aa1af6db1a0f230b133e015a70616a693f520d438859f32221a41527a88abcfd07903d7ba9050449214d97a5b3dede8d71f69b0ea6e37d5c9dbd3f6f0d81aef2b115a5a7ef645a3faa47f613f03c2f86cb8bff4b348842f91e847ec234fec49063fe3170d3249b6a67874cba230bf3444c1da8db6114903764e69e98d6bd24f232f", 0xaf}, {&(0x7f0000000b80)="c1529737f81113609c6351d1105ce4297067e1808f872f6755d84896f27f2834ef59395431745599403e0947daa94ab3665838375f2bfe07902c380fbeec067cca8d2155fa06f7bd7f5b8d08de695211fc60627771cc6ea343a1f98b43b57835c5b4295b8165540225b165c9c0", 0x6d}], 0x3, &(0x7f0000000c00)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x377a}}, @hopopts={{0x28, 0x29, 0x36, {0xe8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @pad1]}}}, @hoplimit={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffe}}, @dstopts={{0x18, 0x29, 0x37, {0x3b}}}, @dstopts={{0x28, 0x29, 0x37, {0x6fe3f50bbea2df60, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0x8, 0xcac}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x110}}], 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0), &(0x7f00000002c0)=0xe) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'gretap0\x00'}) 1.212040094s ago: executing program 3 (id=639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x65}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xfffffffffffff54e) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r2, 0x0, r2, 0x0, 0x7ffff041, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c47527ce8448ff8", "cb4d08465e6eac132d6e78a4abd0bf1a", "a9e3f8a0", "929a3d168648d119"}, 0x28) 1.168081584s ago: executing program 0 (id=640): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000780)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 931.033048ms ago: executing program 0 (id=642): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x7, 0x0, &(0x7f00000002c0)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 930.551869ms ago: executing program 2 (id=643): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x23, 0x8, 0x9, 0xc, 0x3, 0x81}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="240000002d0001000000", @ANYRES32, @ANYBLOB="0b000080976b640868"], 0x24}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 929.339026ms ago: executing program 0 (id=645): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000100714020025bd7000fddbdf250500540000000000050054000000000008004400", @ANYRES32=r1, @ANYBLOB="08000100000000000800010000000000050054000000000005005400010000000900020073797a310000000008000100000000000800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4000001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000086c658646a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_sctp(0xa, 0x3, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc2", 0x6, 0x0, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc2", 0x6, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xdf, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', r9, 0x20, 0x1, 0x7f, 0x8, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x65, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@ssrr={0x89, 0x23, 0xb9, [@remote, @remote, @rand_addr=0x64010102, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @local]}, @generic={0x88, 0x8, "12cff33178aa"}, @timestamp={0x44, 0x14, 0xa5, 0x0, 0x5, [0x2, 0x3, 0xaa42, 0x8]}]}}}}}) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000006c0)=""/150, &(0x7f0000000780)=0x96) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x36, r10}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x36, r10}) 896.060015ms ago: executing program 2 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xdb8, @bcast, @bpq0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000072003303160000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x4) readv(r5, &(0x7f00000014c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x16) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r12}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r13 = getuid() sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=@getpolicy={0x254, 0x15, 0x10, 0x70bd27, 0x25dfdbff, {{@in6=@mcast1, @in=@multicast2, 0x4e22, 0xff, 0x4e20, 0x9, 0xa, 0x80, 0x30, 0x0, r4, r7}, 0x6e6bbc, 0x1}, [@algo_auth={0x48, 0x1, {{'sha224-neon\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x952b}, @algo_crypt={0xa4, 0x2, {{'ecb(des3_ede)\x00'}, 0x2e0, "9d34e2f3c3c06ae39c2b8fe088f00a3e26d7a949723747e9288d387c242611bc9d70715981067f51d43975cac404ee02db982ea7f5ff1c457757a69085f6946ea4fdf7847fb5c336ddcc98e4a4ef9cf2917bfb167bb4ddc1c56f6913"}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@mcast1, 0x4e21, 0x2, 0x4e22, 0xb, 0x2, 0x80, 0x0, 0x0, r12, r13}, {@in6=@mcast2, 0x4d2, 0xff}, @in=@local, {0x45c, 0x80000001, 0x9, 0x5, 0xae, 0x6, 0x6, 0x7}, {0x6, 0xd22c, 0x6, 0xfffffffffffffffc}, {0x0, 0x10000, 0x6fb}, 0x70bd26, 0x3504, 0x8, 0x3, 0x80, 0x1b}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0x254}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES32=0xee01, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$netrom_NETROM_T4(r10, 0x103, 0x6, &(0x7f0000001300)=0x4, &(0x7f0000001340)=0x4) 815.986079ms ago: executing program 0 (id=648): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 738.505119ms ago: executing program 0 (id=651): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x3, 0x3a}, 0x1c) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r2, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, r4, 0x0, 0x2, 0x5, 0x10}, {"ab3130a2"}}}}}}, 0x0) syz_emit_ethernet(0x1db, &(0x7f00000003c0)={@local, @link_local, @val={@val, {0x88a8}}, {@ipv4={0x800, @tcp={{0x33, 0x4, 0x3, 0x22, 0x1c5, 0x66, 0x0, 0xb, 0x6, 0x0, @broadcast, @local, {[@cipso={0x86, 0x30, 0x3, [{0x1, 0x2}, {0x5, 0xf, "edb2f7afde5a340d23c6979e22"}, {0x7, 0xa, "f0a38887a4acfe76"}, {0x7, 0x6, "3eeb0d4b"}, {0x5, 0x9, "f268888bf33f66"}]}, @lsrr={0x83, 0xf, 0x58, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x7, [{@rand_addr=0x64010102, 0x1}]}, @cipso={0x86, 0x54, 0x3, [{0x2, 0x8, "e4a572780a84"}, {0x6, 0x8, "a38cec6f02d5"}, {0x2, 0xd, "abe5eda7030225fc12bb3f"}, {0x1, 0xd, "07d8d3ed58659bcd4fdae2"}, {0x6, 0x7, "31914d414c"}, {0x7, 0x5, "17222b"}, {0x0, 0xa, "77b7ffdcf7bb6822"}, {0x7, 0x9, "aa2b2f783fd954"}, {0x6, 0x5, "bc9d7c"}]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x6, [{@multicast2, 0x8}]}, @cipso={0x86, 0xb, 0x0, [{0x2, 0x5, "25dc52"}]}]}}, {{0x4e24, 0x4e23, r3, r4, 0x0, 0x0, 0x8, 0x20, 0x800, 0x0, 0x200, {[@eol, @exp_fastopen={0xfe, 0x5, 0xf989, "ec"}, @window={0x3, 0x3, 0x46}, @sack_perm={0x4, 0x2}]}}, {"5aac3b47f0146add8e61ca19cdf8d10c4d5be18b8eff04c2edcd84ff42e2582c25c8bbcc8affa8f718e5cbaf7d78e642342dd26b45f8e48b183479f8b0b3a09ffe25159eda084e82d1aeffc117b96723a45bd824f00dcccabc8b458cb49898ff6325b98aec6de28d9880b7c22c55c07e54fdfb5f52968ce89d562c3a2b16d422660c331bfeebead4eeecc3913280465dbf71d83919830700a31a57b7ff2f5c6fad809d277874bba9ca583ed84b46012b11cfe3998c02416919349101493a99ff0860f5300efc0a254bfb00f1c7da91be616ecc3fbeb280fa45"}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r6) 671.998914ms ago: executing program 2 (id=652): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000013000100"/20, @ANYRES16=r0, @ANYBLOB="4048c0f2176df9292ce311a51629bb029af7af7f7538a634888fd404b25ff9e6adff6d1dd0fac192d6486413635b47ed2f945db390b1c3c778d71ef9c5b5cff49f5a34d39083583959aaed910d3cd5b7cb0ee88dfa4ad34c828bac4430f620dc58cf6919ab8dae3811f95a4d1c6b4e4ff5d10c04d2b2b698b2f23569b4ae317284a26180234d02adf24b34512c9a10fdbfd17d5a5025ad4aac0012a5f69b1f46aa16ba7c6839f63d9cc4a4fbf112a24e25fcaf87f8c812198f1f0c0d26fb34750be237da6c79fc4bb35c267d3e37c32249a0d3a4a40dd767627c7ed17c9c36338e"], 0x58}}, 0x4000040) 610.607728ms ago: executing program 0 (id=655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000a00)='|', 0x1, 0x20004004, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 551.890414ms ago: executing program 2 (id=656): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x80000000}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x4083, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000140)="eb", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x5, 0x300) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1}, 0x1}], 0x1, 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r7 = socket(0x1d, 0x2, 0x6) read(r7, &(0x7f0000000200)=""/74, 0x4a) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x4, 0x1fffefff, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings]}, 0x24}, 0x1, 0x0, 0x0, 0x8004880}, 0x0) 548.982714ms ago: executing program 1 (id=657): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040), 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x1c) 509.599496ms ago: executing program 4 (id=658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@ll={0x11, 0x1b, r4, 0x1, 0x9, 0x6, @random="40980eb5d150"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="b8b28225ea772f0daee8c7c98100e05188fb", 0x6e}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x8, {0x0, 0x0, 0x0, r4, 0x51483, 0x22000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @loopback}]}}}]}, 0x40}}, 0x8040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'sit0\x00', @random="c300"}) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc0200000000000001000000001d0000fe8000000000000000000000000000aa67000000001a843fd0000000ff9890780d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"], 0x0) 473.342689ms ago: executing program 1 (id=659): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000195c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d01000008000500100300001500040000000000bc0000002d2fd706ea96b6a201000000e94622f9f022dc6fc1452547c301d5b027e8bbf4e5a6859536b0bebe4bd722103888f86843ce44cb5ce530be199b696bd76bda6ef46745428a8a0574b6a5ef569cc3551a17575b15"], 0x34}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000040014"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7020000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000019680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x106000}, 0xc, &(0x7f0000019640)={&(0x7f00000196c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf2504000000380005801c000280080004000300000008000200400000000800020005000000070001006962000008000100756470000800f25ea73c7000"], 0x4c}}, 0x8080) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="53b37bb9a66bf962f0a2bad18d4b0da28f021eef9044f4243a5ba0ce7b2d503ab130d68e802fed8f5391b21782fcb56f2bcbf4743498e6df7d3af3e172ec27d7a0126c2fa31246f0c165e98554fee65ee7b6505b0ae60cb2a736b6dad81840a1514cfa87ae61b78ea6b3ed4d6855a709f2b7f9b9a60411033d8ca64ecc8d95bfb9d8dd72e1fb637eb59eddc9a6d42a141c8e6526902a7372e4f0", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050000000000140002007767320000000000000000000000000008000700000000000c0008800800008004000080"], 0x44}}, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x4c}}, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x0) getpeername$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r9, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe90}}], 0x1, 0x41, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x118, 0xa, 0x148, 0x0, 0x10, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xf0, 0x118, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan0\x00', {0x0, 0x0, 0x100, 0x1, 0xfffffffd, 0xffffffff, 0x7}}}, @common=@inet=@tos={{0x28}, {0xb4, 0x4, 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x2c0, 0x320, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000019580)=ANY=[@ANYBLOB="14000000160000012dbd70006d74f5b8ac369903fdfbe524d4ec1bb53f84eaad6c"], 0x14}, 0x1, 0x0, 0x0, 0x14094}, 0x40040d1) 391.786613ms ago: executing program 4 (id=660): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r4, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x6, 0x6}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 344.901437ms ago: executing program 4 (id=661): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c0000009500000000000000f17abd909ac734c3b3e1e781164bafa6cc65533be523"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 292.987842ms ago: executing program 3 (id=662): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xc}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006400)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0x50}}, 0x0) close(0x4) socket$kcm(0x29, 0x0, 0x0) 243.916154ms ago: executing program 1 (id=663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x9e, 0xe8, &(0x7f0000000000)="e6763e750de46755230f3830fcd389a83378375c20ba2bad4227c5fa2f7bf37dd7404ce85e52a077e02e53f5b112a64f8d191e1dd3374a8a50a81bc4107c0c8913c24a147be59a2c80f4b164da8b7626f2e92e7d2c39263b81bfa76b83294958804033ba911c8fbedbd890fc54c2c1d736fd784e7815320d22ee0d69922d87950e0c04078b268dbae3f81dc1eeb101c55cc4cb7eb40301e7eb2f7cd0cf84", &(0x7f0000000640)=""/232, 0x2, 0x0, 0x46, 0x27, &(0x7f0000000580)="1a548f2e63e28d129126106110c39bf69205c859896a00dc45576f32d5c67b714f979f1c2896fc642c6bd7612c70c715a43a56e25f1063db5d0362372a925a8643ba72c14bd9", &(0x7f00000000c0)="2c869ddae2625be10fefaba9bf159828cf9666a39cafb204c23c51e5a4437fb5e607371978c5f4", 0x2, 0x0, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000080007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 240.575343ms ago: executing program 4 (id=664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x2, 0x9, 0x7, 0x18, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, r1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 205.706859ms ago: executing program 1 (id=665): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711204000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 197.529569ms ago: executing program 3 (id=666): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@rose, @bcast, @default, @netrom, @default, @null, @null, @bcast]}, &(0x7f0000000180)=0x48, 0x80000) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r0, 0x5, 0x5, 0x8000}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000240)={'netdevsim0\x00', 0xa8ed}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)) r6 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1c, 0x8, 0x5a, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7, 0x7, 0x9, 0x1}}) sendto$packet(r4, &(0x7f0000000340)="1a4df581599117473f0da4c33c6290cb9779f38c36285a1199e9ec4e9a67f8a48f2b9dc62cd813b58e4e8550815edfc8bdabafaad410def1fe0f6513d7bb55379d0fe775fb7453a0ab78ac74d1fe268259877224d03bb71ecc0464309e2a6f0035302de53c49b989e8b124f8f0afec5e7e40387e2783b90711e556ada48718ad3455e78bf46cacda19ec62ac4910250046b83fc7ece9f0271e6edf9679cef3cd75625ef2f3dfa9fd98a818bd91b3ce5d03d5a93246f0a268c5f96c0bd9a537", 0xbf, 0x80, &(0x7f00000004c0)={0x11, 0xf7, r7, 0x1, 0xe, 0x6, @multicast}, 0x14) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000500)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @broadcast}, 0x4, {0x2, 0x4e22, @broadcast}, 'team_slave_1\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x82804080}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1d0, r8, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9a0c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2edca898}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40000000}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1c6672d8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1820, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xedd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x6008800}, 0x40080) syz_genetlink_get_family_id$team(&(0x7f0000000880), r3) close(r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x18, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000104}, 0x4001) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) getsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f00000009c0)=""/24, &(0x7f0000000a00)=0x18) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5396bd99b5971c9d, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xd}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xcd}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x11c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10c}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) socket$pptp(0x18, 0x1, 0x2) accept$inet6(r6, &(0x7f0000000d80)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000dc0)=0x1c) 150.292489ms ago: executing program 4 (id=667): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)) preadv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) 79.990466ms ago: executing program 1 (id=668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x1c, r3, 0x1, 0xc8, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000100"/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 75.874187ms ago: executing program 3 (id=669): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$packet_int(r4, 0x107, 0x9, 0x0, &(0x7f0000000040)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x20, 0x0, 0x0, 0x800, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff43}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x24040001) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x24, r8, 0x300, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004043}, 0x4040) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x50) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x30, r14, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 42.805268ms ago: executing program 1 (id=670): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x2, 0x1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$inet(r3, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="837e3f6b7eb782a45f414eefe54dd1a99f74afbd71268a3286915b0506c727286a7d9b8813594d627988ade18c8accb0f7429f9f48fc5afa9c881e37158b304896d62d5d2345fa1b5097e513038b72c3faca2ae3c4116a8195fd4bde2ef2015cdb8ae7db6692e689ccc37212248138c04cdd0a29c5e572354694e7d5f81e093ff02f16b6a961033243f1fce1d6b6c4cc6bce3492146955c525b302cf54cf0a668bcff4d48a661e5ac1f6ccd0b860eed2d32b633bfda228de6e550b9839fa2d50d57c486b129e2703891e6d57969901c9cfd131fceb4ea71b07d7151fb0cb82ec558a7d680db44126f046d0db6252", @ANYRES8=r4, @ANYRES32=r0], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x0, 0x7, 0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x0, 0x7, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x0, 0x7, 0x12e}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x0) 0s ago: executing program 4 (id=671): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8000, 0x700, 0x2, 0x2, {{0x9, 0x4, 0x0, 0x2f, 0x24, 0x67, 0x0, 0x3c, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0x0, [{@multicast1, 0xe3}]}, @noop]}}}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0xc) (async) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000006b119800000000008510000002000000850000000500000095003300000000009500a50500000000cfb916cfb1841e8e83c8d00c2a06d3fd305b68b234e73739634ac40c039206000000000000009b0cac928bd5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 58.884191][ T5820] cgroup: Unknown subsys name 'net' [ 59.036489][ T5820] cgroup: Unknown subsys name 'cpuset' [ 59.045337][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.345146][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.013509][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.034445][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.042387][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.055251][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.063053][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.071505][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.079223][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.087038][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.095448][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.098832][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.109925][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.111160][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.126054][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.133539][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.134361][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.149984][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.157177][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.157893][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.172433][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.180712][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.188760][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.196110][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.197729][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.204285][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.211769][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.217800][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.227579][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.240342][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.247812][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.258662][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.659987][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 64.692905][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 64.775823][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 64.807421][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 64.875063][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.882270][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.890615][ T5837] bridge_slave_0: entered allmulticast mode [ 64.898045][ T5837] bridge_slave_0: entered promiscuous mode [ 64.910742][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.917938][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.925163][ T5837] bridge_slave_1: entered allmulticast mode [ 64.931999][ T5837] bridge_slave_1: entered promiscuous mode [ 64.977840][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 64.997147][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.006588][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.013796][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.020983][ T5833] bridge_slave_0: entered allmulticast mode [ 65.028322][ T5833] bridge_slave_0: entered promiscuous mode [ 65.035620][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.042673][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.050046][ T5833] bridge_slave_1: entered allmulticast mode [ 65.057344][ T5833] bridge_slave_1: entered promiscuous mode [ 65.085616][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.135990][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.147712][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.165074][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.172242][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.180309][ T5834] bridge_slave_0: entered allmulticast mode [ 65.187372][ T5834] bridge_slave_0: entered promiscuous mode [ 65.206060][ T5837] team0: Port device team_slave_0 added [ 65.217951][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.225367][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.232516][ T5834] bridge_slave_1: entered allmulticast mode [ 65.239338][ T5834] bridge_slave_1: entered promiscuous mode [ 65.270003][ T5837] team0: Port device team_slave_1 added [ 65.299164][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.306543][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.314058][ T5830] bridge_slave_0: entered allmulticast mode [ 65.320605][ T5830] bridge_slave_0: entered promiscuous mode [ 65.365193][ T5833] team0: Port device team_slave_0 added [ 65.377714][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.384994][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.392935][ T5830] bridge_slave_1: entered allmulticast mode [ 65.400298][ T5830] bridge_slave_1: entered promiscuous mode [ 65.410703][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.417770][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.443807][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.457081][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.464174][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.490319][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.504373][ T5833] team0: Port device team_slave_1 added [ 65.518540][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.530271][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.598971][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.606496][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.614043][ T5839] bridge_slave_0: entered allmulticast mode [ 65.621055][ T5839] bridge_slave_0: entered promiscuous mode [ 65.628801][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.636613][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.643872][ T5839] bridge_slave_1: entered allmulticast mode [ 65.650725][ T5839] bridge_slave_1: entered promiscuous mode [ 65.657857][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.664877][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.692449][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.705389][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.712370][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.739765][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.754500][ T5834] team0: Port device team_slave_0 added [ 65.762369][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.774114][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.823691][ T5834] team0: Port device team_slave_1 added [ 65.850687][ T5837] hsr_slave_0: entered promiscuous mode [ 65.857502][ T5837] hsr_slave_1: entered promiscuous mode [ 65.887597][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.900208][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.922738][ T5830] team0: Port device team_slave_0 added [ 65.940428][ T5833] hsr_slave_0: entered promiscuous mode [ 65.946860][ T5833] hsr_slave_1: entered promiscuous mode [ 65.952900][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.961106][ T5833] Cannot create hsr debugfs directory [ 65.985277][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.992231][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.018667][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.031359][ T5830] team0: Port device team_slave_1 added [ 66.064592][ T5839] team0: Port device team_slave_0 added [ 66.070817][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.078273][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.104932][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.122581][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.129676][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.155722][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.175383][ T5839] team0: Port device team_slave_1 added [ 66.197149][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.204472][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.231020][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.274657][ T5146] Bluetooth: hci2: command tx timeout [ 66.280605][ T5841] Bluetooth: hci1: command tx timeout [ 66.328912][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.338978][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.364881][ T5841] Bluetooth: hci3: command tx timeout [ 66.365909][ T5841] Bluetooth: hci4: command tx timeout [ 66.366221][ T5841] Bluetooth: hci0: command tx timeout [ 66.383832][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.396553][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.403701][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.429917][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.452975][ T5834] hsr_slave_0: entered promiscuous mode [ 66.459126][ T5834] hsr_slave_1: entered promiscuous mode [ 66.465276][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.472867][ T5834] Cannot create hsr debugfs directory [ 66.486542][ T5830] hsr_slave_0: entered promiscuous mode [ 66.492977][ T5830] hsr_slave_1: entered promiscuous mode [ 66.499121][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.506904][ T5830] Cannot create hsr debugfs directory [ 66.596456][ T5839] hsr_slave_0: entered promiscuous mode [ 66.602554][ T5839] hsr_slave_1: entered promiscuous mode [ 66.608937][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.616774][ T5839] Cannot create hsr debugfs directory [ 66.742505][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.759357][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.791938][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.822709][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.914052][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.924183][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.935024][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.971784][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.017580][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.030147][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.048487][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.069476][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.114947][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.146847][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.161962][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.199867][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.214852][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.229960][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.250265][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.259686][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.331457][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.385963][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.409750][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.425915][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.433300][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.463859][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.479431][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.486581][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.514594][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.535773][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.542910][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.572276][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.579402][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.598866][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.608850][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.640468][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.647589][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.675791][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.697098][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.704218][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.716266][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.771932][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.801523][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.808734][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.841554][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.848721][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.894918][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.941227][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.948397][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.998692][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.005857][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.109782][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.220906][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.255118][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.295646][ T5834] veth0_vlan: entered promiscuous mode [ 68.330796][ T5834] veth1_vlan: entered promiscuous mode [ 68.354661][ T5146] Bluetooth: hci1: command tx timeout [ 68.357973][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.360099][ T5146] Bluetooth: hci2: command tx timeout [ 68.434021][ T5146] Bluetooth: hci0: command tx timeout [ 68.434053][ T5841] Bluetooth: hci4: command tx timeout [ 68.434085][ T5841] Bluetooth: hci3: command tx timeout [ 68.501045][ T5833] veth0_vlan: entered promiscuous mode [ 68.516140][ T5834] veth0_macvtap: entered promiscuous mode [ 68.527950][ T5833] veth1_vlan: entered promiscuous mode [ 68.539261][ T5839] veth0_vlan: entered promiscuous mode [ 68.548852][ T5834] veth1_macvtap: entered promiscuous mode [ 68.597939][ T5839] veth1_vlan: entered promiscuous mode [ 68.615856][ T5833] veth0_macvtap: entered promiscuous mode [ 68.625826][ T5833] veth1_macvtap: entered promiscuous mode [ 68.654205][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.668190][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.682144][ T5839] veth0_macvtap: entered promiscuous mode [ 68.704511][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.714485][ T5839] veth1_macvtap: entered promiscuous mode [ 68.721618][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.734167][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.742901][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.752154][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.776679][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.787531][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.798889][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.819907][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.830638][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.841468][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.852165][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.864487][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.887360][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.898313][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.909590][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.921065][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.930765][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.939584][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.948633][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.975856][ T5837] veth0_vlan: entered promiscuous mode [ 68.982977][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.996784][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.007313][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.017916][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.029239][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.042765][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051770][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.061291][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.070369][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.105213][ T5837] veth1_vlan: entered promiscuous mode [ 69.146995][ T5830] veth0_vlan: entered promiscuous mode [ 69.229576][ T5830] veth1_vlan: entered promiscuous mode [ 69.252137][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.252460][ T5837] veth0_macvtap: entered promiscuous mode [ 69.268514][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.292807][ T5830] veth0_macvtap: entered promiscuous mode [ 69.322198][ T5830] veth1_macvtap: entered promiscuous mode [ 69.338779][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.338958][ T5837] veth1_macvtap: entered promiscuous mode [ 69.354711][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.369876][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.378455][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.386673][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.401297][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.411379][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.422183][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.432554][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.444632][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.456290][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.468944][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.480109][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.490253][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.500954][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.511413][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.521897][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.532720][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.556651][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.580227][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.589602][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.598378][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.612186][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.612348][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.623604][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.632986][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.649336][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.660134][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.670408][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.682015][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.692236][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.702968][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.714764][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.750086][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.771341][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.784664][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.794667][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.809076][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.819452][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.830540][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.840551][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.851069][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.860973][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.871524][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.883947][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.975207][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.991842][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.009944][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.020065][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.044525][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.052437][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.066828][ T5920] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.131668][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.161052][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.303627][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.319991][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.341701][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.367421][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.434020][ T5849] Bluetooth: hci2: command tx timeout [ 70.439529][ T5841] Bluetooth: hci1: command tx timeout [ 70.468911][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.486767][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.512354][ T5927] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.523694][ T5841] Bluetooth: hci0: command tx timeout [ 70.523741][ T5841] Bluetooth: hci4: command tx timeout [ 70.533558][ T5849] Bluetooth: hci3: command tx timeout [ 70.546508][ T5934] x_tables: duplicate underflow at hook 1 [ 70.682498][ T5934] can: request_module (can-proto-4) failed. [ 70.817163][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.931915][ T5950] macvlan1: entered promiscuous mode [ 70.942134][ T5950] macvlan1: left promiscuous mode [ 70.996644][ T5953] bridge0: entered promiscuous mode [ 71.014525][ T5953] macvlan2: entered promiscuous mode [ 71.056088][ T5953] Zero length message leads to an empty skb [ 71.071074][ T5952] macvlan3: entered promiscuous mode [ 71.145965][ T5957] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 71.271357][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 71.717263][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.725553][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.965871][ T6007] xt_nat: multiple ranges no longer supported [ 71.979607][ T6006] vlan2: entered allmulticast mode [ 72.071702][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 72.097634][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 72.474646][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30'. [ 72.514211][ T5849] Bluetooth: hci1: command tx timeout [ 72.519675][ T5849] Bluetooth: hci2: command tx timeout [ 72.593347][ T5849] Bluetooth: hci3: command tx timeout [ 72.594220][ T5146] Bluetooth: hci0: command tx timeout [ 72.605013][ T5841] Bluetooth: hci4: command tx timeout [ 73.108241][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 73.174079][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 73.621963][ T6091] openvswitch: netlink: Tunnel attr 176 out of range max 16 [ 73.743843][ T6096] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.35'. [ 73.965191][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 74.140881][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.166958][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.319954][ T6124] openvswitch: netlink: IP tunnel dst address not specified [ 74.466159][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 74.491782][ T6134] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 74.545559][ T6136] x_tables: duplicate underflow at hook 1 [ 74.567240][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.575921][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.604720][ T6138] Cannot find add_set index 0 as target [ 74.692895][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.709451][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.769419][ T6138] x_tables: duplicate underflow at hook 1 [ 74.804565][ T6120] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.814981][ T6120] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.833241][ T6120] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.848139][ T6120] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.129388][ T6152] __nla_validate_parse: 1 callbacks suppressed [ 75.129407][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 75.169982][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 75.196858][ T6152] netlink: 'syz.0.50': attribute type 7 has an invalid length. [ 75.223426][ T6160] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.51'. [ 75.241460][ T6152] netlink: 'syz.0.50': attribute type 8 has an invalid length. [ 75.260380][ T6160] openvswitch: netlink: Unknown key attributes 20 [ 75.275613][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 75.351160][ T6152] ip6gretap0: entered promiscuous mode [ 75.368631][ T6152] batadv_slave_1: entered promiscuous mode [ 75.420193][ T6152] ip6gretap0: left promiscuous mode [ 75.463111][ T6152] batadv_slave_1: left promiscuous mode [ 75.478710][ T53] tipc: Subscription rejected, illegal request [ 75.512517][ T6169] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 75.530625][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 76.237399][ T6218] syzkaller0: entered allmulticast mode [ 76.387029][ T6226] dvmrp0: entered allmulticast mode [ 76.405323][ T6218] syzkaller0: left allmulticast mode [ 76.453203][ T6226] can: request_module (can-proto-4) failed. [ 77.073776][ T6261] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 77.587321][ T6278] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 77.639596][ T6278] netlink: 224 bytes leftover after parsing attributes in process `syz.4.78'. [ 77.653583][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 77.735698][ T6285] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20003 [ 77.756011][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 77.770845][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 77.780183][ T6299] netlink: 'syz.2.81': attribute type 20 has an invalid length. [ 78.243968][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 78.281853][ T6329] Bluetooth: MGMT ver 1.23 [ 78.414273][ T6329] lo: entered promiscuous mode [ 78.443471][ T6329] tunl0: entered promiscuous mode [ 78.493709][ T6329] gre0: entered promiscuous mode [ 78.551791][ T6329] gretap0: entered promiscuous mode [ 78.609904][ T6329] erspan0: entered promiscuous mode [ 78.673437][ T6329] ip_vti0: entered promiscuous mode [ 78.987675][ T6360] bond0: entered promiscuous mode [ 79.019792][ T6360] bond_slave_0: entered promiscuous mode [ 79.046754][ T6360] bond_slave_1: entered promiscuous mode [ 79.072873][ T6360] batadv0: entered promiscuous mode [ 79.117925][ T6360] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 79.358728][ T6385] netlink: 'syz.1.98': attribute type 21 has an invalid length. [ 79.374881][ T6387] Cannot find add_set index 0 as target [ 79.620029][ T6402] netlink: 'syz.0.104': attribute type 2 has an invalid length. [ 79.642700][ T6402] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 79.829187][ T6412] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 80.318397][ T6440] __nla_validate_parse: 1 callbacks suppressed [ 80.318416][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 80.326364][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 80.356579][ T5841] Bluetooth: hci0: command tx timeout [ 80.413812][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 80.544548][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 80.544695][ T6451] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 80.599184][ T6451] syzkaller1: Refused to change device type [ 80.641151][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 80.669107][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.914930][ T6471] netlink: 'syz.1.124': attribute type 6 has an invalid length. [ 80.932345][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 81.700398][ T6515] netlink: 156 bytes leftover after parsing attributes in process `syz.2.136'. [ 81.720454][ T6515] netlink: 156 bytes leftover after parsing attributes in process `syz.2.136'. [ 81.786595][ T6518] netlink: 'syz.0.137': attribute type 4 has an invalid length. [ 81.794976][ T6518] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.137'. [ 81.808302][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 81.817337][ T6518] netlink: 'syz.0.137': attribute type 3 has an invalid length. [ 81.834358][ T6518] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.843474][ T6518] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.852201][ T6518] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.861184][ T6518] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.967397][ T8] cfg80211: failed to load regulatory.db [ 82.097607][ T6531] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.125838][ T6528] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 82.419792][ T6544] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 82.705546][ T6553] netlink: 'syz.3.149': attribute type 178 has an invalid length. [ 82.752737][ T6553] netlink: 'syz.3.149': attribute type 178 has an invalid length. [ 82.868729][ T6559] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 83.416660][ T6596] netlink: 'syz.4.160': attribute type 7 has an invalid length. [ 83.441452][ T6596] netlink: 'syz.4.160': attribute type 8 has an invalid length. [ 84.359442][ T6644] nbd0: detected capacity change from 0 to 256 [ 84.529801][ T5841] block nbd0: Receive control failed (result -104) [ 84.590377][ T6659] netlink: 'syz.1.177': attribute type 7 has an invalid length. [ 84.602451][ T6659] gretap0: entered promiscuous mode [ 84.619199][ T6659] gretap0: left promiscuous mode [ 84.909094][ T6676] macvlan3: entered promiscuous mode [ 84.959884][ T6680] macvlan3: entered promiscuous mode [ 85.086635][ T6687] bond1: entered promiscuous mode [ 85.092275][ T6687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.466862][ T6713] validate_nla: 1 callbacks suppressed [ 85.466881][ T6713] netlink: 'syz.4.188': attribute type 5 has an invalid length. [ 85.570383][ T6713] : entered promiscuous mode [ 85.712206][ T6725] __nla_validate_parse: 69 callbacks suppressed [ 85.712223][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 85.750880][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 85.950468][ T6733] tipc: Enabling of bearer rejected, failed to enable media [ 86.408806][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 86.621994][ T6777] Driver unsupported XDP return value 0 on prog (id 163) dev N/A, expect packet loss! [ 86.878652][ T6786] syzkaller1: entered promiscuous mode [ 86.892601][ T6786] syzkaller1: entered allmulticast mode [ 87.011246][ T6797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.260838][ T6806] netlink: 'syz.4.219': attribute type 19 has an invalid length. [ 87.788270][ T6840] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.229'. [ 87.826626][ T6840] openvswitch: netlink: Flow key attr not present in new flow. [ 87.927429][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 87.946255][ T6847] netlink: 'syz.4.232': attribute type 1 has an invalid length. [ 87.972616][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 88.014410][ T6849] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 88.615027][ T6879] tipc: Enabling of bearer rejected, media not registered [ 88.656847][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 88.666749][ T6883] netlink: 'syz.1.244': attribute type 7 has an invalid length. [ 88.693592][ T6879] netlink: 'syz.2.243': attribute type 12 has an invalid length. [ 88.700305][ T6883] netlink: 'syz.1.244': attribute type 8 has an invalid length. [ 88.701348][ T6879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.243'. [ 88.761559][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 88.801560][ T6883] gretap0: entered promiscuous mode [ 88.823588][ T6883] gretap0: left promiscuous mode [ 88.993587][ T6897] netlink: 256 bytes leftover after parsing attributes in process `syz.0.248'. [ 89.184035][ T6909] netlink: 'syz.0.252': attribute type 11 has an invalid length. [ 89.577363][ T6928] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.617543][ T6928] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 89.645770][ T6933] bond0: entered allmulticast mode [ 89.652117][ T6933] bond_slave_0: entered allmulticast mode [ 89.661450][ T6935] netlink: 'syz.4.261': attribute type 7 has an invalid length. [ 89.671318][ T6933] bond_slave_1: entered allmulticast mode [ 89.682413][ T6935] netlink: 'syz.4.261': attribute type 8 has an invalid length. [ 89.922675][ T6947] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 3, id = 0 [ 90.445972][ T6977] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 90.476398][ T6977] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 90.843423][ T5841] Bluetooth: hci2: command tx timeout [ 91.067530][ T7015] __nla_validate_parse: 10 callbacks suppressed [ 91.067548][ T7015] netlink: 181316 bytes leftover after parsing attributes in process `syz.2.285'. [ 91.092380][ T7015] netlink: zone id is out of range [ 91.099031][ T7015] netlink: zone id is out of range [ 91.104467][ T7018] x_tables: duplicate entry at hook 1 [ 91.111016][ T7018] sctp: [Deprecated]: syz.0.286 (pid 7018) Use of int in max_burst socket option. [ 91.111016][ T7018] Use struct sctp_assoc_value instead [ 91.133377][ T7015] netlink: zone id is out of range [ 91.150899][ T7015] netlink: zone id is out of range [ 91.162389][ T7015] netlink: zone id is out of range [ 91.174637][ T7015] netlink: zone id is out of range [ 91.191801][ T7015] netlink: zone id is out of range [ 91.741057][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 91.772101][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'. [ 92.005829][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 92.053861][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 92.432747][ T7101] sctp: [Deprecated]: syz.2.309 (pid 7101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.432747][ T7101] Use struct sctp_sack_info instead [ 92.816325][ T7123] netlink: 56 bytes leftover after parsing attributes in process `syz.4.317'. [ 93.078850][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 93.315860][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 93.351480][ T7158] netlink: 104 bytes leftover after parsing attributes in process `syz.4.323'. [ 93.742066][ T7181] netlink: 'syz.0.329': attribute type 4 has an invalid length. [ 93.767452][ T7177] xt_CT: No such helper "snmp" [ 94.063361][ T7200] net_ratelimit: 11 callbacks suppressed [ 94.063379][ T7200] openvswitch: netlink: Missing key (keys=40, expected=100) [ 94.647805][ T7242] netlink: 'syz.2.341': attribute type 27 has an invalid length. [ 94.734665][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 95.332174][ T7280] syz.0.349 (7280) used greatest stack depth: 17904 bytes left [ 95.763056][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.833434][ T7312] pimreg3: entered allmulticast mode [ 95.851058][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.858312][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.907333][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.946634][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.972863][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.002501][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.023428][ T7323] openvswitch: netlink: Key type 34 is out of range max 32 [ 96.124132][ T7334] __nla_validate_parse: 7 callbacks suppressed [ 96.124153][ T7334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.360'. [ 113.546873][ T5841] Bluetooth: hci4: link tx timeout [ 113.552271][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.594834][ T40] block nbd0: Possible stuck request ffff8880260b5080: control (read@0,4096B). Runtime 30 seconds [ 115.643330][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 133.155621][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.686822][ T40] block nbd0: Possible stuck request ffff8880260b5080: control (read@0,4096B). Runtime 60 seconds [ 145.721297][ T5208] udevd[5208]: worker [5854] /devices/virtual/block/nbd0 is taking a long time [ 153.695085][ T7449] SET target dimension over the limit! [ 153.719885][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.751165][ T7454] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 153.758069][ T7454] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.138655][ T7477] set match dimension is over the limit! [ 154.176566][ T7481] nbd: must specify a device to reconfigure [ 154.392607][ T7497] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 154.421606][ T7497] netlink: 209800 bytes leftover after parsing attributes in process `syz.4.380'. [ 154.442961][ T7502] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 154.451560][ T7502] netlink: 156 bytes leftover after parsing attributes in process `syz.3.383'. [ 154.514545][ T7502] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 154.603678][ T7504] net veth1_virt_wifi : renamed from virt_wifi0 [ 154.746479][ T7513] netlink: 9 bytes leftover after parsing attributes in process `syz.3.388'. [ 154.755472][ T7517] lo: entered promiscuous mode [ 154.755605][ T7517] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 154.782988][ T7517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.820889][ T7513] 0: renamed from hsr_slave_1 (while UP) [ 154.860186][ T7513] 0: entered allmulticast mode [ 154.869835][ T7513] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 154.915830][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 154.937806][ T7524] netlink: 180 bytes leftover after parsing attributes in process `syz.0.391'. [ 155.036071][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 155.128900][ T7538] vcan1: entered promiscuous mode [ 155.134918][ T7538] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 155.146927][ T7538] bond1: (slave vcan1): Error -95 calling set_mac_address [ 155.310352][ T7547] Bluetooth: MGMT ver 1.23 [ 155.347607][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.399'. [ 155.467735][ T7556] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 155.564679][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 155.640236][ T7560] bridge_slave_1: left allmulticast mode [ 155.650687][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 155.651955][ T7560] bridge_slave_1: left promiscuous mode [ 155.672613][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.697129][ T7560] bridge_slave_0: left allmulticast mode [ 155.703463][ T7569] trusted_key: syz.0.406 sent an empty control message without MSG_MORE. [ 155.705908][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 155.715954][ T7560] bridge_slave_0: left promiscuous mode [ 155.728514][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.824753][ T7562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.934758][ T7567] 0 (unregistering): left promiscuous mode [ 156.101459][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.206714][ T7583] xt_connbytes: Forcing CT accounting to be enabled [ 156.220773][ T7592] batadv_slave_1: entered promiscuous mode [ 156.234055][ T7593] xt_connbytes: Forcing CT accounting to be enabled [ 156.241274][ T7593] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.402581][ T7589] batadv_slave_1: left promiscuous mode [ 157.021864][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.032014][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.041135][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.052575][ T7646] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.066067][ T7646] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.093971][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.102229][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.109790][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.117226][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.125183][ T7646] wlan0 speed is unknown, defaulting to 1000 [ 157.454559][ T7664] openvswitch: netlink: Duplicate or invalid key (type 0). [ 157.461828][ T7664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.780730][ T7681] openvswitch: netlink: IP tunnel dst address not specified [ 158.143351][ T7690] tipc: Started in network mode [ 158.148453][ T7690] tipc: Node identity e20cfb2a0aae, cluster identity 4711 [ 158.173568][ T7690] tipc: Enabled bearer , priority 0 [ 158.180655][ T7691] syzkaller0: entered promiscuous mode [ 158.195951][ T7691] syzkaller0: entered allmulticast mode [ 158.360518][ T7697] tipc: Resetting bearer [ 158.410893][ T7697] tipc: Disabling bearer [ 158.651944][ T7731] ip6gre1: entered allmulticast mode [ 158.737713][ T7737] syz_tun: entered allmulticast mode [ 158.774847][ T7725] syz_tun: left allmulticast mode [ 158.956304][ T7752] xt_cgroup: xt_cgroup: no path or classid specified [ 159.156959][ T7765] geneve2: entered promiscuous mode [ 159.162286][ T7765] geneve2: entered allmulticast mode [ 159.209443][ T7768] netlink: 'syz.0.468': attribute type 7 has an invalid length. [ 159.218157][ T7768] netlink: 'syz.0.468': attribute type 8 has an invalid length. [ 159.248195][ T7768] gretap0: entered promiscuous mode [ 159.260246][ T7768] gretap0: left promiscuous mode [ 159.461756][ T7773] netlink: 'syz.4.471': attribute type 2 has an invalid length. [ 159.564080][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 159.764556][ T7773] infiniband syz!: set active [ 159.769597][ T7773] infiniband syz!: added team_slave_0 [ 159.849432][ T7773] RDS/IB: syz!: added [ 159.854506][ T7773] smc: adding ib device syz! with port count 1 [ 159.861138][ T7773] smc: ib device syz! port 1 has pnetid [ 159.978303][ T7803] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.007958][ T7807] __nla_validate_parse: 14 callbacks suppressed [ 160.007978][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 160.392041][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 160.412575][ T7829] netlink: 25 bytes leftover after parsing attributes in process `syz.2.486'. [ 160.715154][ T7839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.490'. [ 160.721767][ T7838] netlink: 56 bytes leftover after parsing attributes in process `syz.1.490'. [ 160.768423][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 160.781047][ T7843] vlan2: entered promiscuous mode [ 160.786437][ T7843] vlan2: entered allmulticast mode [ 160.791586][ T7843] hsr_slave_1: entered allmulticast mode [ 160.872570][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 160.956845][ T7847] tipc: Invalid UDP bearer configuration [ 160.956890][ T7847] tipc: Enabling of bearer rejected, failed to enable media [ 161.180581][ T7854] FAULT_INJECTION: forcing a failure. [ 161.180581][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.194205][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.4.496 Not tainted 6.14.0-rc3-syzkaller-00157-g29b036be1b0b #0 [ 161.194226][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.194240][ T7854] Call Trace: [ 161.194250][ T7854] [ 161.194257][ T7854] dump_stack_lvl+0x241/0x360 [ 161.194294][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.194311][ T7854] ? __pfx__printk+0x10/0x10 [ 161.194328][ T7854] ? __pfx_lock_release+0x10/0x10 [ 161.194358][ T7854] should_fail_ex+0x40a/0x550 [ 161.194382][ T7854] _copy_from_user+0x2d/0xb0 [ 161.194401][ T7854] copy_msghdr_from_user+0xae/0x680 [ 161.194426][ T7854] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.194442][ T7854] ? __fget_files+0x2a/0x410 [ 161.194466][ T7854] ? __fget_files+0x2a/0x410 [ 161.194495][ T7854] __sys_sendmsg+0x209/0x350 [ 161.194521][ T7854] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.194554][ T7854] ? do_sys_openat2+0x17a/0x1d0 [ 161.194599][ T7854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.194623][ T7854] ? do_syscall_64+0x100/0x230 [ 161.194646][ T7854] ? do_syscall_64+0xb6/0x230 [ 161.194668][ T7854] do_syscall_64+0xf3/0x230 [ 161.194686][ T7854] ? clear_bhb_loop+0x35/0x90 [ 161.194710][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.194729][ T7854] RIP: 0033:0x7f071a18d169 [ 161.194748][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.194761][ T7854] RSP: 002b:00007f071aff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.194778][ T7854] RAX: ffffffffffffffda RBX: 00007f071a3a5fa0 RCX: 00007f071a18d169 [ 161.194790][ T7854] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 161.194800][ T7854] RBP: 00007f071aff8090 R08: 0000000000000000 R09: 0000000000000000 [ 161.194809][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.194819][ T7854] R13: 0000000000000000 R14: 00007f071a3a5fa0 R15: 00007ffe253412e8 [ 161.194845][ T7854] [ 161.462857][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 161.608672][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'. [ 161.618492][ T7868] netlink: 'syz.4.503': attribute type 7 has an invalid length. [ 161.626751][ T7868] netlink: 'syz.4.503': attribute type 8 has an invalid length. [ 161.656999][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 161.690631][ T7864] xt_bpf: check failed: parse error [ 161.751482][ T7863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.388494][ T7910] netlink: 'syz.3.516': attribute type 7 has an invalid length. [ 162.402179][ T7910] netlink: 'syz.3.516': attribute type 8 has an invalid length. [ 162.417149][ T7910] gretap0: entered promiscuous mode [ 162.438356][ T7910] gretap0: left promiscuous mode [ 162.822926][ T7923] openvswitch: netlink: IP tunnel dst address not specified [ 162.957627][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.157317][ T7945] bridge0: entered promiscuous mode [ 163.234584][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.243370][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.254712][ T7953] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 163.272803][ T7944] bridge0: left promiscuous mode [ 163.311511][ T7953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.350007][ T7955] bond1: (slave gretap1): making interface the new active one [ 163.359602][ T7955] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 163.381317][ T7957] veth1_macvtap: left promiscuous mode [ 163.425253][ T7957] macsec0: entered promiscuous mode [ 163.441305][ T7959] veth1_macvtap: entered promiscuous mode [ 163.457673][ T7959] macsec0: left promiscuous mode [ 163.982012][ T7998] IPVS: Error joining to the multicast group [ 164.157720][ T8001] wlan0 speed is unknown, defaulting to 1000 [ 164.254465][ T8012] wlan0 speed is unknown, defaulting to 1000 [ 164.445079][ T7975] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 164.966942][ T8010] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 165.050516][ T8018] __nla_validate_parse: 22 callbacks suppressed [ 165.050537][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 165.286744][ T8057] x_tables: duplicate underflow at hook 2 [ 165.437990][ T8060] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 165.477949][ T8063] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 165.599298][ T8063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.640913][ T8073] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 165.654811][ T8065] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 165.713676][ T5841] Bluetooth: hci0: command 0x080f tx timeout [ 166.026806][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 166.059626][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.069872][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.103923][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.123350][ T8091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.166062][ T8100] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 166.193311][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 166.211104][ T8100] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 166.223497][ T8097] tipc: Started in network mode [ 166.228386][ T8097] tipc: Node identity , cluster identity 4711 [ 166.240334][ T8097] tipc: Failed to set node id, please configure manually [ 166.259977][ T8097] tipc: Enabling of bearer rejected, failed to enable media [ 166.499275][ T8116] FAULT_INJECTION: forcing a failure. [ 166.499275][ T8116] name failslab, interval 1, probability 0, space 0, times 1 [ 166.501652][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.584'. [ 166.531186][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.4.585 Not tainted 6.14.0-rc3-syzkaller-00157-g29b036be1b0b #0 [ 166.531210][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.531220][ T8116] Call Trace: [ 166.531226][ T8116] [ 166.531233][ T8116] dump_stack_lvl+0x241/0x360 [ 166.531259][ T8116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.531276][ T8116] ? __pfx__printk+0x10/0x10 [ 166.531305][ T8116] should_fail_ex+0x40a/0x550 [ 166.531330][ T8116] should_failslab+0xac/0x100 [ 166.531349][ T8116] ? skb_clone+0x20c/0x390 [ 166.531363][ T8116] kmem_cache_alloc_noprof+0x70/0x380 [ 166.531389][ T8116] skb_clone+0x20c/0x390 [ 166.531407][ T8116] __netlink_deliver_tap+0x3c4/0x7f0 [ 166.531430][ T8116] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.531443][ T8116] netlink_deliver_tap+0x19d/0x1b0 [ 166.531457][ T8116] netlink_unicast+0x7c4/0x990 [ 166.531484][ T8116] ? __pfx_netlink_unicast+0x10/0x10 [ 166.531502][ T8116] ? __virt_addr_valid+0x45f/0x530 [ 166.531518][ T8116] ? __phys_addr_symbol+0x2f/0x70 [ 166.531538][ T8116] ? __check_object_size+0x47a/0x730 [ 166.531559][ T8116] netlink_sendmsg+0x8de/0xcb0 [ 166.531587][ T8116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.531609][ T8116] ? aa_sock_msg_perm+0x91/0x160 [ 166.531635][ T8116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.531649][ T8116] __sock_sendmsg+0x221/0x270 [ 166.531669][ T8116] ____sys_sendmsg+0x53a/0x860 [ 166.531699][ T8116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.531718][ T8116] ? __fget_files+0x2a/0x410 [ 166.531741][ T8116] ? __fget_files+0x2a/0x410 [ 166.531770][ T8116] __sys_sendmsg+0x269/0x350 [ 166.531797][ T8116] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.531833][ T8116] ? do_sys_openat2+0x17a/0x1d0 [ 166.531881][ T8116] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.531905][ T8116] ? do_syscall_64+0x100/0x230 [ 166.531928][ T8116] ? do_syscall_64+0xb6/0x230 [ 166.531950][ T8116] do_syscall_64+0xf3/0x230 [ 166.531976][ T8116] ? clear_bhb_loop+0x35/0x90 [ 166.532000][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.532019][ T8116] RIP: 0033:0x7f071a18d169 [ 166.532034][ T8116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.532048][ T8116] RSP: 002b:00007f071aff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.532066][ T8116] RAX: ffffffffffffffda RBX: 00007f071a3a5fa0 RCX: 00007f071a18d169 [ 166.532078][ T8116] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 166.532088][ T8116] RBP: 00007f071aff8090 R08: 0000000000000000 R09: 0000000000000000 [ 166.532098][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.532108][ T8116] R13: 0000000000000000 R14: 00007f071a3a5fa0 R15: 00007ffe253412e8 [ 166.532135][ T8116] [ 166.547727][ T8119] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.586'. [ 166.562595][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 166.586956][ T8119] netlink: get zone limit has 8 unknown bytes [ 166.599537][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 166.850277][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 166.889871][ T8133] netlink: 'syz.1.590': attribute type 12 has an invalid length. [ 167.066443][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'. [ 167.309956][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.495416][ T8174] batadv_slave_1: entered promiscuous mode [ 167.518622][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 167.539800][ T8173] batadv_slave_1: left promiscuous mode [ 167.753303][ T8191] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 167.770057][ T8191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 168.024655][ T8207] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.613'. [ 168.049766][ T8215] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 168.058008][ T8207] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 168.077124][ T8209] tipc: Started in network mode [ 168.082045][ T8209] tipc: Node identity 8ee9f9880b63, cluster identity 4711 [ 168.094132][ T8209] tipc: Enabled bearer , priority 0 [ 168.136135][ T8209] +: renamed from syzkaller0 [ 168.147020][ T8209] tipc: Disabling bearer [ 168.576791][ T8247] can: request_module (can-proto-0) failed. [ 168.689395][ T8258] netlink: 'syz.0.633': attribute type 14 has an invalid length. [ 168.696450][ T8257] netlink: 'syz.1.631': attribute type 7 has an invalid length. [ 168.704970][ T8257] netlink: 'syz.1.631': attribute type 8 has an invalid length. [ 168.711963][ T5916] IPVS: starting estimator thread 0... [ 168.726544][ T8257] gretap0: entered promiscuous mode [ 168.740679][ T8257] gretap0: left promiscuous mode [ 168.767845][ T8262] syzkaller1: entered promiscuous mode [ 168.774068][ T8262] syzkaller1: entered allmulticast mode [ 168.789172][ T8262] bridge2: entered promiscuous mode [ 168.794863][ T8262] bridge2: entered allmulticast mode [ 168.807009][ T8260] IPVS: using max 23 ests per chain, 55200 per kthread [ 168.823945][ T8262] team0: Port device bridge2 added [ 168.889382][ T8269] ip6_vti0: entered allmulticast mode [ 168.913524][ T8271] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 168.921341][ T8271] NCSI netlink: No device for ifindex 131080 [ 168.936383][ T8271] nbd: must specify a size in bytes for the device [ 169.748200][ T8323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.804252][ T8323] xt_hashlimit: max too large, truncated to 1048576 [ 170.219684][ T8354] ================================================================== [ 170.227791][ T8354] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 170.235781][ T8354] Read of size 4 at addr ffff8880121525b8 by task syz.4.671/8354 [ 170.243489][ T8354] [ 170.245803][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.4.671 Not tainted 6.14.0-rc3-syzkaller-00157-g29b036be1b0b #0 [ 170.245818][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.245826][ T8354] Call Trace: [ 170.245831][ T8354] [ 170.245838][ T8354] dump_stack_lvl+0x241/0x360 [ 170.245856][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.245868][ T8354] ? __pfx__printk+0x10/0x10 [ 170.245880][ T8354] ? _printk+0xd5/0x120 [ 170.245891][ T8354] ? __virt_addr_valid+0x183/0x530 [ 170.245902][ T8354] ? __virt_addr_valid+0x183/0x530 [ 170.245914][ T8354] print_report+0x16e/0x5b0 [ 170.245929][ T8354] ? __virt_addr_valid+0x183/0x530 [ 170.245939][ T8354] ? __virt_addr_valid+0x183/0x530 [ 170.245949][ T8354] ? __virt_addr_valid+0x45f/0x530 [ 170.245960][ T8354] ? __phys_addr+0xba/0x170 [ 170.245977][ T8354] ? hci_sock_get_cookie+0x49/0x50 [ 170.245993][ T8354] kasan_report+0x143/0x180 [ 170.246007][ T8354] ? hci_sock_get_cookie+0x49/0x50 [ 170.246023][ T8354] hci_sock_get_cookie+0x49/0x50 [ 170.246037][ T8354] mgmt_cmd_status+0x1be/0x4d0 [ 170.246054][ T8354] cmd_complete_rsp+0x114/0x180 [ 170.246071][ T8354] mgmt_pending_foreach+0xd1/0x130 [ 170.246085][ T8354] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 170.246101][ T8354] __mgmt_power_off+0x189/0x440 [ 170.246117][ T8354] ? __pfx___mgmt_power_off+0x10/0x10 [ 170.246134][ T8354] ? __mutex_trylock_common+0x183/0x2e0 [ 170.246149][ T8354] ? __pfx___might_resched+0x10/0x10 [ 170.246166][ T8354] ? __pfx___mutex_trylock_common+0x10/0x10 [ 170.246180][ T8354] ? rcu_is_watching+0x15/0xb0 [ 170.246193][ T8354] ? trace_contention_end+0x3c/0x120 [ 170.246206][ T8354] ? __mutex_lock+0x397/0x1010 [ 170.246223][ T8354] ? __mutex_unlock_slowpath+0x227/0x800 [ 170.246239][ T8354] ? hci_dev_close_sync+0x60d/0x1260 [ 170.246252][ T8354] ? _raw_spin_lock_irq+0xdf/0x120 [ 170.246265][ T8354] ? __pfx___mutex_lock+0x10/0x10 [ 170.246279][ T8354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.246296][ T8354] ? _raw_spin_unlock_irq+0x2e/0x50 [ 170.246308][ T8354] ? drain_workqueue+0x2d3/0x3a0 [ 170.246336][ T8354] ? hci_discovery_set_state+0x57/0x180 [ 170.246352][ T8354] hci_dev_close_sync+0x6ff/0x1260 [ 170.246367][ T8354] ? __pfx_enable_work+0x10/0x10 [ 170.246384][ T8354] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 170.246400][ T8354] hci_dev_close+0x112/0x210 [ 170.246415][ T8354] sock_do_ioctl+0x158/0x460 [ 170.246432][ T8354] ? __pfx_sock_do_ioctl+0x10/0x10 [ 170.246450][ T8354] sock_ioctl+0x626/0x8e0 [ 170.246463][ T8354] ? __pfx_sock_ioctl+0x10/0x10 [ 170.246480][ T8354] ? __fget_files+0x2a/0x410 [ 170.246497][ T8354] ? __fget_files+0x2a/0x410 [ 170.246514][ T8354] ? __pfx_sock_ioctl+0x10/0x10 [ 170.246526][ T8354] __se_sys_ioctl+0xf5/0x170 [ 170.246539][ T8354] do_syscall_64+0xf3/0x230 [ 170.246554][ T8354] ? clear_bhb_loop+0x35/0x90 [ 170.246572][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.246587][ T8354] RIP: 0033:0x7f071a18d169 [ 170.246599][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.246609][ T8354] RSP: 002b:00007f071aff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.246623][ T8354] RAX: ffffffffffffffda RBX: 00007f071a3a5fa0 RCX: 00007f071a18d169 [ 170.246632][ T8354] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 170.246640][ T8354] RBP: 00007f071a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.246647][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.246655][ T8354] R13: 0000000000000000 R14: 00007f071a3a5fa0 R15: 00007ffe253412e8 [ 170.246668][ T8354] [ 170.246672][ T8354] [ 170.599639][ T8354] Allocated by task 6329: [ 170.603952][ T8354] kasan_save_track+0x3f/0x80 [ 170.608621][ T8354] __kasan_kmalloc+0x98/0xb0 [ 170.613199][ T8354] __kmalloc_noprof+0x285/0x4c0 [ 170.618034][ T8354] sk_prot_alloc+0xe0/0x210 [ 170.622526][ T8354] sk_alloc+0x3e/0x370 [ 170.626584][ T8354] bt_sock_alloc+0x3c/0x340 [ 170.631069][ T8354] hci_sock_create+0xa1/0x190 [ 170.635739][ T8354] bt_sock_create+0x161/0x230 [ 170.640410][ T8354] __sock_create+0x4c0/0xa30 [ 170.644987][ T8354] __sys_socket+0x150/0x3c0 [ 170.649491][ T8354] __x64_sys_socket+0x7a/0x90 [ 170.654205][ T8354] do_syscall_64+0xf3/0x230 [ 170.658717][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.664626][ T8354] [ 170.666951][ T8354] Freed by task 8355: [ 170.670919][ T8354] kasan_save_track+0x3f/0x80 [ 170.675593][ T8354] kasan_save_free_info+0x40/0x50 [ 170.680615][ T8354] __kasan_slab_free+0x59/0x70 [ 170.685371][ T8354] kfree+0x196/0x430 [ 170.689256][ T8354] __sk_destruct+0x50c/0x690 [ 170.693846][ T8354] mgmt_pending_remove+0x13e/0x1a0 [ 170.698963][ T8354] mgmt_pending_foreach+0xd1/0x130 [ 170.704082][ T8354] mgmt_index_removed+0x133/0x390 [ 170.709104][ T8354] hci_sock_bind+0xd70/0x12d0 [ 170.713772][ T8354] __sys_bind+0x1e4/0x290 [ 170.718090][ T8354] __x64_sys_bind+0x7a/0x90 [ 170.722582][ T8354] do_syscall_64+0xf3/0x230 [ 170.727089][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.732995][ T8354] [ 170.735313][ T8354] The buggy address belongs to the object at ffff888012152000 [ 170.735313][ T8354] which belongs to the cache kmalloc-2k of size 2048 [ 170.749354][ T8354] The buggy address is located 1464 bytes inside of [ 170.749354][ T8354] freed 2048-byte region [ffff888012152000, ffff888012152800) [ 170.763315][ T8354] [ 170.765625][ T8354] The buggy address belongs to the physical page: [ 170.772017][ T8354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12150 [ 170.780776][ T8354] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.789263][ T8354] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 170.796804][ T8354] page_type: f5(slab) [ 170.800770][ T8354] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 170.809337][ T8354] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 170.817904][ T8354] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 170.826580][ T8354] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 170.835257][ T8354] head: 00fff00000000003 ffffea0000485401 ffffffffffffffff 0000000000000000 [ 170.843921][ T8354] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 170.852581][ T8354] page dumped because: kasan: bad access detected [ 170.858988][ T8354] page_owner tracks the page as allocated [ 170.864683][ T8354] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5942, tgid 5942 (kworker/0:7), ts 71738044315, free_ts 71737558197 [ 170.885959][ T8354] post_alloc_hook+0x1f4/0x240 [ 170.890721][ T8354] get_page_from_freelist+0x365c/0x37a0 [ 170.896267][ T8354] __alloc_frozen_pages_noprof+0x292/0x710 [ 170.902058][ T8354] alloc_pages_mpol+0x311/0x660 [ 170.906896][ T8354] allocate_slab+0x8f/0x3a0 [ 170.911383][ T8354] ___slab_alloc+0xc27/0x14a0 [ 170.916051][ T8354] __slab_alloc+0x58/0xa0 [ 170.920369][ T8354] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 170.926773][ T8354] kmalloc_reserve+0x111/0x2a0 [ 170.931529][ T8354] __alloc_skb+0x1f3/0x440 [ 170.935932][ T8354] mld_newpack+0x17c/0xc70 [ 170.940337][ T8354] add_grec+0x1492/0x19a0 [ 170.944653][ T8354] mld_send_initial_cr+0x228/0x4b0 [ 170.949757][ T8354] mld_dad_work+0x44/0x500 [ 170.954159][ T8354] process_scheduled_works+0xabe/0x18e0 [ 170.959780][ T8354] worker_thread+0x870/0xd30 [ 170.964357][ T8354] page last free pid 5995 tgid 5995 stack trace: [ 170.970781][ T8354] free_frozen_pages+0xe0d/0x10e0 [ 170.975796][ T8354] __put_partials+0x160/0x1c0 [ 170.980470][ T8354] put_cpu_partial+0x17c/0x250 [ 170.985223][ T8354] __slab_free+0x290/0x380 [ 170.989631][ T8354] qlist_free_all+0x9a/0x140 [ 170.994210][ T8354] kasan_quarantine_reduce+0x14f/0x170 [ 170.999659][ T8354] __kasan_slab_alloc+0x23/0x80 [ 171.004496][ T8354] kmem_cache_alloc_noprof+0x1d9/0x380 [ 171.009944][ T8354] getname_flags+0xb7/0x540 [ 171.014436][ T8354] user_path_at+0x24/0x60 [ 171.018759][ T8354] __se_sys_chdir+0xbc/0x220 [ 171.023334][ T8354] do_syscall_64+0xf3/0x230 [ 171.027824][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.033706][ T8354] [ 171.036015][ T8354] Memory state around the buggy address: [ 171.041629][ T8354] ffff888012152480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.049672][ T8354] ffff888012152500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.057716][ T8354] >ffff888012152580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.065759][ T8354] ^ [ 171.071630][ T8354] ffff888012152600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.079672][ T8354] ffff888012152680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.087718][ T8354] ================================================================== [ 171.175341][ T8354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.182582][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.4.671 Not tainted 6.14.0-rc3-syzkaller-00157-g29b036be1b0b #0 [ 171.193184][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.203261][ T8354] Call Trace: [ 171.206553][ T8354] [ 171.209503][ T8354] dump_stack_lvl+0x241/0x360 [ 171.214218][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.219426][ T8354] ? __pfx__printk+0x10/0x10 [ 171.224032][ T8354] ? preempt_schedule+0xe1/0xf0 [ 171.228898][ T8354] ? vscnprintf+0x5d/0x90 [ 171.233240][ T8354] panic+0x349/0x880 [ 171.237138][ T8354] ? check_panic_on_warn+0x21/0xb0 [ 171.242262][ T8354] ? __pfx_panic+0x10/0x10 [ 171.246686][ T8354] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 171.252677][ T8354] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.259016][ T8354] ? print_report+0x519/0x5b0 [ 171.263712][ T8354] check_panic_on_warn+0x86/0xb0 [ 171.268668][ T8354] ? hci_sock_get_cookie+0x49/0x50 [ 171.273800][ T8354] end_report+0x77/0x160 [ 171.278070][ T8354] kasan_report+0x154/0x180 [ 171.282592][ T8354] ? hci_sock_get_cookie+0x49/0x50 [ 171.287724][ T8354] hci_sock_get_cookie+0x49/0x50 [ 171.292661][ T8354] mgmt_cmd_status+0x1be/0x4d0 [ 171.297423][ T8354] cmd_complete_rsp+0x114/0x180 [ 171.302270][ T8354] mgmt_pending_foreach+0xd1/0x130 [ 171.307378][ T8354] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 171.312742][ T8354] __mgmt_power_off+0x189/0x440 [ 171.317580][ T8354] ? __pfx___mgmt_power_off+0x10/0x10 [ 171.322940][ T8354] ? __mutex_trylock_common+0x183/0x2e0 [ 171.328472][ T8354] ? __pfx___might_resched+0x10/0x10 [ 171.333750][ T8354] ? __pfx___mutex_trylock_common+0x10/0x10 [ 171.339650][ T8354] ? rcu_is_watching+0x15/0xb0 [ 171.344419][ T8354] ? trace_contention_end+0x3c/0x120 [ 171.349704][ T8354] ? __mutex_lock+0x397/0x1010 [ 171.354464][ T8354] ? __mutex_unlock_slowpath+0x227/0x800 [ 171.360088][ T8354] ? hci_dev_close_sync+0x60d/0x1260 [ 171.365364][ T8354] ? _raw_spin_lock_irq+0xdf/0x120 [ 171.370552][ T8354] ? __pfx___mutex_lock+0x10/0x10 [ 171.375570][ T8354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.381539][ T8354] ? _raw_spin_unlock_irq+0x2e/0x50 [ 171.386724][ T8354] ? drain_workqueue+0x2d3/0x3a0 [ 171.391651][ T8354] ? hci_discovery_set_state+0x57/0x180 [ 171.397192][ T8354] hci_dev_close_sync+0x6ff/0x1260 [ 171.402296][ T8354] ? __pfx_enable_work+0x10/0x10 [ 171.407226][ T8354] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 171.412761][ T8354] hci_dev_close+0x112/0x210 [ 171.417346][ T8354] sock_do_ioctl+0x158/0x460 [ 171.421924][ T8354] ? __pfx_sock_do_ioctl+0x10/0x10 [ 171.427027][ T8354] sock_ioctl+0x626/0x8e0 [ 171.431341][ T8354] ? __pfx_sock_ioctl+0x10/0x10 [ 171.436176][ T8354] ? __fget_files+0x2a/0x410 [ 171.440758][ T8354] ? __fget_files+0x2a/0x410 [ 171.445341][ T8354] ? __pfx_sock_ioctl+0x10/0x10 [ 171.450179][ T8354] __se_sys_ioctl+0xf5/0x170 [ 171.454756][ T8354] do_syscall_64+0xf3/0x230 [ 171.459252][ T8354] ? clear_bhb_loop+0x35/0x90 [ 171.463921][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.469801][ T8354] RIP: 0033:0x7f071a18d169 [ 171.474203][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.493798][ T8354] RSP: 002b:00007f071aff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.502204][ T8354] RAX: ffffffffffffffda RBX: 00007f071a3a5fa0 RCX: 00007f071a18d169 [ 171.510165][ T8354] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 171.518126][ T8354] RBP: 00007f071a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.526091][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.534064][ T8354] R13: 0000000000000000 R14: 00007f071a3a5fa0 R15: 00007ffe253412e8 [ 171.542053][ T8354] [ 171.545403][ T8354] Kernel Offset: disabled [ 171.549719][ T8354] Rebooting in 86400 seconds..