last executing test programs: 1m2.813587648s ago: executing program 1 (id=255): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xea, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x25a5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x6e, &(0x7f0000000140)=""/110, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x16, r1, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x10, 0x4, 0x3}, 0x10, r2, r3, 0x2, &(0x7f0000000700)=[0x1, r5, r6, r7], &(0x7f0000000740)=[{0x1, 0x4, 0x10, 0x7}, {0x2, 0x4, 0x8, 0x9}], 0x10, 0xfff}, 0x94) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x1000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m1.473474319s ago: executing program 1 (id=265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "2dd52989a3ffe0d829c845"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40088}, 0x80) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@union={0x9, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x3, 0x491}, {0x3, 0x0, 0x10000}, {0xc, 0x3, 0xc}, {0x5, 0x0, 0x5}, {0x8, 0x1, 0x7}, {0xd, 0x4, 0x8}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x240000, [{0xb, 0x1, 0x6}, {0x9, 0x2, 0x2}]}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000400)=""/132, 0xd5, 0x84, 0x0, 0x6, 0x10000}, 0x28) splice(r2, &(0x7f0000000080)=0x5, r3, &(0x7f0000000340)=0x6, 0x1, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 48.480684296s ago: executing program 1 (id=265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "2dd52989a3ffe0d829c845"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40088}, 0x80) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@union={0x9, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x3, 0x491}, {0x3, 0x0, 0x10000}, {0xc, 0x3, 0xc}, {0x5, 0x0, 0x5}, {0x8, 0x1, 0x7}, {0xd, 0x4, 0x8}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x240000, [{0xb, 0x1, 0x6}, {0x9, 0x2, 0x2}]}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000400)=""/132, 0xd5, 0x84, 0x0, 0x6, 0x10000}, 0x28) splice(r2, &(0x7f0000000080)=0x5, r3, &(0x7f0000000340)=0x6, 0x1, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 35.781870727s ago: executing program 3 (id=439): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="0008000087520100200012800b0001006272696467650000100002800c002e000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0xa) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00000005008b801100000086fefd23c07c1522df3f8774fa2fcba5af994274b2d6c73900b714aeb6f868dec2031ceb87916f10dc6c0d05ee93e8bd15cb66b26669a668686b1a428ee928ca65c2d4905a37df4dcd93eafb57e32bfb46e9362a3e7fa1bd5b2ecc0da9c1238986f9bde7eab246653c362514d699694f37661348a580da25e148d623c265380841f2d1101aa2cd8d63a324e24b2eadbaa32af9dfa1b86273c1225246d7a482795583c39758e27f2881ee7d3268957e8bb11cbb18c86138384074d872d9d67d4d5fcaae5a6639db7e414ea4402b3a779782c9ac222a65a1bc75c6ddb71dd28fa55b46df1e45bdff5be15062a73ee5f5ffa13c090048"], 0x1c}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000002c0)=0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) 35.611999199s ago: executing program 3 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x1, 0x3ff, 0x12, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x8000, 0xd5, 0xff}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x11) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) unshare(0x6a040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/204, 0xcc}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) 34.93268014s ago: executing program 1 (id=265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "2dd52989a3ffe0d829c845"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40088}, 0x80) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@union={0x9, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x3, 0x491}, {0x3, 0x0, 0x10000}, {0xc, 0x3, 0xc}, {0x5, 0x0, 0x5}, {0x8, 0x1, 0x7}, {0xd, 0x4, 0x8}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x240000, [{0xb, 0x1, 0x6}, {0x9, 0x2, 0x2}]}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000400)=""/132, 0xd5, 0x84, 0x0, 0x6, 0x10000}, 0x28) splice(r2, &(0x7f0000000080)=0x5, r3, &(0x7f0000000340)=0x6, 0x1, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 33.674113467s ago: executing program 3 (id=460): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001000000000000000000000071122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) 33.501492903s ago: executing program 3 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x5128ef2c52fe809}, 0x800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xa578349000000}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8094) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) splice(r8, &(0x7f0000000000)=0x7, r8, &(0x7f0000000040)=0x9, 0x0, 0x4) pipe(&(0x7f00000001c0)) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r11, 0x2, 0x6}, 0xfffffffffffffdd9) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r12, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) socket$packet(0x11, 0x2, 0x300) 32.137435431s ago: executing program 3 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e5d100", @ANYRES16, @ANYBLOB="0b060020"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) 31.717510737s ago: executing program 3 (id=467): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000440)="1743284a732ed2", 0x7}, {&(0x7f0000000940)="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", 0x6c6}], 0x3}}], 0x1, 0x2004000) unshare(0x26020480) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2021, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2, 0x80}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {0x0, 0x0, 0x40}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f00000004c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x10, 0x6, 0x508, 0x368, 0x368, 0x1a0, 0xd0, 0x368, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@private2, @private1, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@ipv6={@loopback, @local, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x7fffff00, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'veth0_macvtap\x00', {}, {}, 0x2b, 0x0, 0x3, 0x13}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x18, 0x81, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r7, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) unshare(0x2020000) 25.583894309s ago: executing program 1 (id=265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "2dd52989a3ffe0d829c845"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40088}, 0x80) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@union={0x9, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x3, 0x491}, {0x3, 0x0, 0x10000}, {0xc, 0x3, 0xc}, {0x5, 0x0, 0x5}, {0x8, 0x1, 0x7}, {0xd, 0x4, 0x8}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x240000, [{0xb, 0x1, 0x6}, {0x9, 0x2, 0x2}]}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000400)=""/132, 0xd5, 0x84, 0x0, 0x6, 0x10000}, 0x28) splice(r2, &(0x7f0000000080)=0x5, r3, &(0x7f0000000340)=0x6, 0x1, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 16.274344732s ago: executing program 32 (id=467): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000440)="1743284a732ed2", 0x7}, {&(0x7f0000000940)="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", 0x6c6}], 0x3}}], 0x1, 0x2004000) unshare(0x26020480) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2021, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2, 0x80}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {0x0, 0x0, 0x40}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f00000004c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x10, 0x6, 0x508, 0x368, 0x368, 0x1a0, 0xd0, 0x368, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@private2, @private1, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@ipv6={@loopback, @local, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x7fffff00, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'veth0_macvtap\x00', {}, {}, 0x2b, 0x0, 0x3, 0x13}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x18, 0x81, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r7, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) unshare(0x2020000) 12.55720701s ago: executing program 1 (id=265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "2dd52989a3ffe0d829c845"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40088}, 0x80) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@union={0x9, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x3, 0x491}, {0x3, 0x0, 0x10000}, {0xc, 0x3, 0xc}, {0x5, 0x0, 0x5}, {0x8, 0x1, 0x7}, {0xd, 0x4, 0x8}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x240000, [{0xb, 0x1, 0x6}, {0x9, 0x2, 0x2}]}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000400)=""/132, 0xd5, 0x84, 0x0, 0x6, 0x10000}, 0x28) splice(r2, &(0x7f0000000080)=0x5, r3, &(0x7f0000000340)=0x6, 0x1, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 5.545025372s ago: executing program 4 (id=613): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c0001000600000009000000060005"], 0x8c}, 0x1, 0xba01}, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r1, r4}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x0, 0x4, "31c877323b07"}) 5.309559167s ago: executing program 4 (id=615): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001801a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000000020000000a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x4048010) syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x4, 0x0, 0x10000}) unshare(0x20000400) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x8040) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0x1}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4095, 0x1f}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/214}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/32}], 0x0, &(0x7f00000009c0)=""/126}}], 0x40000000000024a, 0x40002002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x4}, 0x8) 4.653916894s ago: executing program 4 (id=619): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9000000}, 0x48) 4.59140099s ago: executing program 4 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x4e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, &(0x7f0000000200), 0x41000, 0x2, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x60, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[r0], &(0x7f0000000340)=[{0x1, 0x5, 0xd, 0x1}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r0, 0x20, 0x0, 0xe46, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x8, 0x6, 0x200, 0x8e0a, 0x6, 0x4, 0x1, 0x0}, &(0x7f0000000680)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000006c0)={r6, @in={{0x2, 0x4e22, @empty}}, 0xfff, 0xfffc}, 0x90) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex=r4, r1, 0x25, 0x2010, 0x0, @value=r7, @void, @void, @void, r3}, 0x20) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r9, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000000)=0x4, 0x4) sendfile(r8, r10, 0x0, 0x1) 4.045778874s ago: executing program 4 (id=625): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="004200000200020008000500", @ANYRES32=0x0, @ANYBLOB="140012800b00ca3b6fc301006c6f7770616e000004000280"], 0x3c}}, 0x4000) 2.873647724s ago: executing program 4 (id=626): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0x10, 0xd}, {0x6, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x108, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xf7, 0x6, 0x5, 0x2, 0x9, 0xfffffff9, 0x6}}, {0x10, 0x2, [0x5, 0x4, 0x1, 0x9, 0x0, 0x7]}}, {{0x1c, 0x1, {0x6, 0x8, 0xffff, 0x6, 0x2, 0x8, 0x80000001, 0x4}}, {0xc, 0x2, [0x688a, 0x6, 0x7fff, 0xa]}}, {{0x1c, 0x1, {0x3, 0x80, 0x403, 0xff, 0x2, 0x9, 0x7, 0x7}}, {0x12, 0x2, [0x81, 0x6, 0x3, 0x6, 0x7, 0x5, 0x101]}}, {{0x1c, 0x1, {0x49, 0x58, 0xf77, 0x5, 0x1, 0xec8, 0x3ff, 0x1}}, {0x6, 0x2, [0x200]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x108}, 0x1, 0x0, 0x0, 0x80d1}, 0x4000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840", 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x8e}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="410328bd7000fddbdf250700000071ae"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 2.071845696s ago: executing program 2 (id=634): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x800) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0xffffffffffffffca) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/16], 0x48) unshare(0x8040480) bind$rxrpc(0xffffffffffffffff, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)}, 0x80a4) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4084) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) 1.674563193s ago: executing program 2 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x54, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d45cc7242de81ae9b87d0c18640bb308"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.428583906s ago: executing program 2 (id=638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1.26567528s ago: executing program 2 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f000000}, 0x48) 1.211568813s ago: executing program 5 (id=642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x10, 0x6, 0x508, 0x368, 0x368, 0x1a0, 0xd0, 0x368, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@private2, @private1, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@ipv6={@loopback, @local, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x7fffff00, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'veth0_macvtap\x00', {}, {}, 0x2b, 0x0, 0x3, 0x13}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x18, 0x81, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0x20000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.125711584s ago: executing program 0 (id=643): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="2b23b3095985937eda0d0d625b899cc2e7dc7516de2bc8cbb92ce4dd03bb39b349b9ccdbaacab7d4620220bc48778b09ed219c934542cfdcac847f6dcac5674f5a79b820e763a1dc811427be847bb89fa16f6547757a307214676c061fa0da46c0e9f9389b8397c36d2bb22d487cee0ad69dda19039b4691ca9016b1ab03ee22024b6327cf07b0074bb774c133d3b1e8be75526feeffe63071fba86301519e4f9e7875c52a5f5f141b3caef07708de276c11e5bfef674df73b2566734a866cbe413a62f704e35d8b3f8e8ed72ad190479eb26dbd9458f4e2dac4ba16fc7b1314d6d8faa096af727c9a8d1af4601f0a829266684d7419ba49a2f2457668c31dc1cc14a30878f3c4f67bec8c39c4418dc861799bd1a24c325f524debd0f1a331ac103220b7ae9b2a91beff3d1f235c96ece4ae6c4d98f6df7a35ece080892709c5902bc34dbd11d639ef699a006e8b009496f9140a63ba88a76aa3caeb200dda1eae3b4019f670a00af317fa286f7958b06a244620506253a080ebb0d5352a41568ee198d4bc8655b608cabba01025e36c833f6ae6d2a33bd9e27e82cacbeb91d389b5cc233e0e1bc42aecb07b5d7c573c7ced5ab6fa8551bd5db2b0093ccc8d115b8c670c8bcec5b5afbce162a76be12c7f99ae042f3ac5b612f6651b540505ce0b8c8bbe0097560b8bcab2bc1d228a5925c9b168b398a9b17f07a7af56298c979103ced364db6091a8b1015301f741233e96ddc3093f467550eab59033aff934483ecad2e90bbea5ed923bee0891378cc1273ea86ee42f6d8bb18fbb40c1cd3449c3bc38cb41c80f3708532eaa66b5ee5f87cbaab0f7895ccc0fd44dec5e422cb74a026d8ff73863b478062675bdcfc2fa23511f45bf3c5a37d8f4fde3a82da26937fff1ea0837b6a3a0a8f84dc1342f772b75dd178c62023b8837866678753ee63b5f51497480bced093d0645848b3242effc429e6e81302c96f3d01c37c217257625f5399148bfe90fe0f9862bd664af35a56aa7d25f8f45c66d8c66958de378e2c07d0be042116e86b899ef05eec4435dfb79bee7c7c706342db40ebc7129d19a8edcc713acc5ed2ef71fb73550f8a976c3be3ab1d29cb70f254cda6db6835da18de2a666ca8504dfc2e061c3f697e6b6fb5e2bddee996aa7a9386a1ba50e65bbc8d457e060c9fba5a5f0db4a445f9ab2113152858b6b017d7fbcf2c72881020390449d74ed04485948988f7926a3a6521ba4bac2578bb19f49f7caa669e0f41adb00bb6f51fa5974f818597a951250d68598e7c9836da28421311f5786c45a3a7833eeedc5526bd688a611670c0c37fa46c20bd21bea60b8f55e1420a2396e8309f2b33e79754726bf634975e82d3c6b9675588d32c8ab9ae51524c7816545480962f1fc88685a01677eb24a021022e2c9932146ba2490f051838480d8787910813988daacf2b4b7af8a3066f8ee162b51886119d109789e3734eb4546ab8410834e8d006682599872cdb7bb9a351c0ca5bd1d6b1cdd7b6afb16e6679202237274fcf682e87a641d64c65af474cbd717237b6c0192dfd0a254fb1967e2d5636985750cb317331d03d180b334eb6718e0c69983e3ea3eeffee97b4888ad6fe2702505b07968441dec8e518901332a0732c349e4eadddcabe93038da27aeded50d0f50d9b0d9bb76f5b3cc98d445e64c26e4292a78499261402475045394c4563a68d5ba4336d06366de6b1be3e39d5dc0a24eb2ef99b04d3c23a30b771752643b5c807e9043d569539233d758f7f890bb2520ee54fec4f09287cef62789e94c82331307a103a82dcdf7970710b31b6775531fa80a0ad889a887ccc2f37e1d643b218a1aa9d9bb195897be5fc2a9f6e12a7b2a20ed90ac49c625d863449f1218dd8ab09e5f7d8b633303eb1cd42cd55f1eeb33e4bd4aefae91d17282cc1d466666f3eb8f19c7800dc7c10c30695f8c4c2627c026df50cf43434faced69b84809a6c26dff4e69ef1eb2de4b3f3f209425decf51e29e12d2ecc625f86d2f1099e6cf071a2a44b3d98250da0b831e874890e63f61d6641bdb38f5b2a593c05647e9dc6a829e187d92ebaad9b3ee2bf73a1772de239811cfe76fac5ea91285c3d7b839c05dbe03e9f22546547d1da1896828ead3444a01fee65a8b84b18a5d1c513309ee140db4a66a9a793898360333c1e492453fe5228c6361232b0bb7aa49219e7168065e227f51fe480bd141ab20ba89fab179184c728455fe6ebb85e027ef3eeb8c6c27a955eaadb045d7236555c2f4e170abf758830d7bb4b7886bf54ca5e6e158740d90b0fea65e1c02d97bba3371b7ef540560233f1e45fbad527715e49cd075b4c08d62a968b5100767889ed555ae63dfd91c2be55919c9c4b3d141440699dbc5d3cb1976f0508d7fede2fae8b1094b741cbc24847bd64cf37266f4eab1165b4b15ee9839df0a7665da7f286e28b075ee6588576d91d525213c9c9ad9aa3c778f9c0055ecd4fefee7aa46afcb0a7b82a4489bdf95dc567e2ea4cb7f5e76373aadf424bc74dc0d571c86cf4469771833198c574608aabeee3deccac78afb4c68ff831cf3f0ca408f47ee9a48a7e241c01af5f7d3cd8e21eb174859fd85f5e67b2f095b22dcd7e73145137dd8b8ab640c7ac0266e467d347f3cffac4ea14428f4774dfa01b1da724cbf981f11b31b3900007e176839a72e2adff557981e6e924209fede1c3c98b6035a6ffc6ef60e18fa96a15139ab708d8e734b079ab6b2df5f023e56a78f185d04e599dfa7a163f2cdbf831dbac708c2c3104b0a28614ea4f5da8de33c324b3de37d5dd2f24111d9d6822b65bddc7d2fb664ce92c83114ea1d753dcf77751f702064615d30bfb87a8e592eafd342b3f9f66c16bbdf969a1296ace9fc7561e6b661014d2b131044b59911121000f56a8eb3ebdddc172d45e29ad1310ae932b28472dd68e305defdda6f01105203629c28e9a1ccb27200e0a29f7e1edfeaf813e29e08b8d1c2256fc92ac63108427c675c99bba330ce0cc299781a2e679008c0b5cdb53f336d32348967da9ada5e62d5067d036ae241af25843f5f22fe696681b2ff6c8a15112218200c5a567063713b0771893b97ecace29a842240f73ce75cb565b2d9a0c98f97228b575bc1632344d0e570dbe5858d82bb66da4f331c602524c49d8b053e9a183df9fa3bb0235b7847ea36f573b68e11868e97108d0e26918d361eec6d671de078caf69269b4d18ee835d336a2a13759933f62254725c4934178e44e11a3909fe586b2680e80f13832aad3684216c526a000aeffab4adf00e0f38e6a064b3fddbbd1005a89777a07d8a5ae7902bdb01b74690c02663ed7619b1094e87c7d7d7b6347e71afd74c64e921143d33830385daa771feaed7c1e8abe79208be79a4624f5b30571756f3bc7aff2b98007bd687f9d89eaf68dcb29a2644e6c9eb28a23f1e59f3556f5cbf7886dc948c5879b0708944f16b6784c3a596d4c8506144f9710ee154548ae3db91bdbf2645e28420eb88b9ad9525c733e9590907e8fec99a1c683bbe4f2b76dc38e5004b9f42424ad2c5b47f7d957edbc117ba259326369c4a60c1c30e849387eb320018125872319fc3f7a084d39f8cd2f93ceceb2dd4404292653c280df0f2e865751c4ee7772f13595c01396a540cc2e1cb008a65a83279efd222b14bd87c70fb644c22032375f2afb300ecfd2fe96eb273d070caac2752aa9ce97bbd5a9f2d05707264fc712188f110f30e38f5f5a7db0945e6fe74975edf6bb8a2febe3e6ac3daa57fda215e028bfc7e50f5ba722c0398c5b9d85e5ba42ef9e9a3cf9f067518c061a1f11b26bc59064bd1440eedfda2776811a88ad0bd1325a811ef8f5b397f329efb6d5201231890843acd9b6fe6ee8913297cc5b76971f6534b3b0bf48441394fa60d19cbe2506e2dee25c1eef768ebc8ecf05463ccd38b69d683cc829c38205ddf01e0f4c5f2b2f5c272530943418d2db22ee17bb3c8797d5cab05d3d9d1503a9b3376bc6bf8f01a2f69d4034534af4ddca2c118b2f2f90fbc4ba00b9131952a57b5ce995ae2c9533b922e3195545d5302f884f17d8f4f1c27783a38d7f20fa73a9ade11b08690cf3dfe19a3c34493b5638f258b2fe15c4783f6380988d2884fca085ac7015eea5bb357acae3c6a0cb145d48e2f29bf9c0216e86d5aefa66e8065e5a35012facfca0017bd051036220ee969d8e2ece0c787ebb89073d72eb6a49ba4ac00ab54952456f9a167f721113b4d7501b4507e48e79b91b157dad61a211395535db14210a5cc27eda62ac928032acebf48da4c43b39d4ae54a65c3fd682166a0d4fd11d4e6c15b477229610080cf240b5203a7470780b65de4c70277d310364fccf46d660e9323eeef3cd2e9393964cd8324a7b73f35a6360cf855703e802eed93ee676276953b2761235b6738508e5218fa1cb5d7e7cf1a1973a57c7fab853a24c5752fd3ffc7050d2204deead51eeb20a425b2c8cd3ee0f2093860e2acdaae48e47be285b1e8030afb53d302a5624ad4b6d381ab978bc41da9a0b62ec4795a80ceecc088ff36c1dc0d6376df4b020cf5fabfd43b776aa6ea1a90a896fb5a9b51d3fdd3d5c0e1be385ed064ad93103c0ae0071d382305281c3bd1d681057ec304404cec99ed4603ed6b73abc3f971f1077cab2bb4755b2e62beeb2ada0435f56ba1e0882507ac28e2ecdd2c1f10ac375df822b9e6c640a680f15bfffbfe11252e7aa42b81c51c1634c35025915fe5edb94efac0b149af18633076128f464320bfe382d5a56507953d75d42e5d2ee492ba7779c138fa61cdb3a953a9463a3183180bbd02884a3ad86d6b00d32e9e9cf0eded3ee28c8ef59adeee724f7a2e5bcb5719943fe23291323626a8763d957df3613bdd8baed151e3943c808e2ab863fb95c78026bd3dc5cd6961f6f3c927497ac8001df8f801397fa9ce1d1ab17a2923cd8c9b7f1239810e6a2ebe560c1620e5bb33204567dc08fb471ad7103ea5fdd73d69ca62c08fcfb3648638931c6583adfcc3ec4f03825aa0f383c9f401b9acc213f24c653bcc22603e98e0ea0443dd18d24c796873ed982ff001a381c7b3ccbcd2b28d4710d077b8adb202974d70ffd575acb39bc7138673f10aed714936a3339efb6f908cd93745432c68794d5df59c0afc374662e04a41faf1634c5fb3dfb98fcc4c60929441e3e714a9d4786a459396bf52b4833ea81faf7fd2d3e364ee69e55b534d85b06de4c7a1d7bb88deebeeeffed0d3759878ae2a8b96d6f66c7311d1d8ae4420d9f8c316efa3b8deb90a8cf5b27d581e8c47ef310eee66af4e517e304d3ff1f8cf0646a1beacf7efc05549c7f34f644c411a8307928f90f2e6c479da3725b5f74fdf03e69aede9b590f0d29e10fb65fa5c53dd5d153c675795b0046cd984754e3a5426be670a994f13c692ccc3d687eca6731c7adf4177e56edf3efcd0205f39559bd07ed0764124d7ffc79ce9cfb56a25f883f47f88939cbc340425c2995d791d2763df74a6b17abb37bab04a272405e7f79a042e57328d7353513deb845c4e0f193d2ed82d826d0bfb3da1b2862336e34ac2d54314a5c2899f740e3aeae489af44dce2ff957423c94297a8d01c048724d8d1253dc456f1dc0fabc272c486487d2da6140eb9f405eb0f3d895ba9e74e8297ac6c6a88f9f3003c2288a2c4f5a24964b55a31d20d053c3f3f6b6f3fcc70ee59e535240e17164b8bac636c2321a6dd7340a9b018cd2670da25b5b7b2c4974933634077191892299c969a1", 0x1000}], 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x20000006}) 1.125144506s ago: executing program 2 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003"], 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x20, 0x6a, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4044) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, 0x0, 0x20010000) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x854) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, &(0x7f0000000440)=0x3f) 962.70789ms ago: executing program 0 (id=645): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009a570b000000000082ce63147fab0e26bc0095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x12}, 0x0) r3 = socket(0x21, 0x2, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4048800) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x40, 0x601, 0x8, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x67, 0x0, 0xea, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x4, 0xca, 0x9, 0x0, 0x45, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x0, 0x8}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000058}, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r10, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x2e0}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x100, @empty, 0xc}], 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="00000000000080002800187f71224dff07a093195cc4132f2d24ba40f1f83be29800f8c613e5be0e3dc7e82ef9e88534a5342dc5df10c5af378b36657dc4b942ef989b67951ff96698da44b68f71bb87ff8f8730207212262be90552aee40f260d31ce0a4109283d1ae783a3c110a30971939ccec3b23df771613c780c97510a5e07fc69324f5d5c089d7d7ef33daee895c78b9b35d8cc9bffe41bc52a3f0a2d830f2f6a355e24ea5a3d12bfde3a713fdd3126015120932dd6c9a0585f999698eb13b1dda789b15c041b59260a7b000000000000984975747a4335694bc54a2a4335d6994dc480b22b6a1209c76c5f11e0c560f37124d2eee21d88aec3608678d868d03b92e56560727c6ab622030dee3fe904b3b2b5049f3e213975a96100e5bf86719b23a9ec53544a0e0b331bb9dc73aa6949b56c25a36e8e28867bd41feee7fb95a1ba01f146cc9363a99f0994bf3f71dcc08e28ec3d3c4492d9b113b0c43c6f0fd1ab216ca7b9bf4dc653432fcc17e79fd500203dce6a9067ffd8d0e52134ce29f8e40a354a5a16e6ddd956b8664573bcb7ff1c14852adecf7fe7fd2941dcfb57f9b70037821674fd8a38a6dc962622d0baf455c4fe08c844936b1e31ab023af756075894e3d44d5d6a231a11082cb9dc6a9f2e8dccb5718ffd93db0650d7adb63786f85213c2"], 0x50}}, 0x4000000) 833.861342ms ago: executing program 5 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0)) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) recvmmsg(r4, &(0x7f0000001940)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/30, 0x1e}], 0x7, &(0x7f0000000640)=""/80, 0x50}, 0xff}, {{&(0x7f00000006c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f00000007c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/177, 0xb1}, {&(0x7f0000000940)=""/82, 0x52}, {&(0x7f00000009c0)=""/25, 0x19}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/120, 0x78}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/253, 0xfd}], 0xa, &(0x7f0000000e00)=""/124, 0x7c}, 0x5}, {{&(0x7f0000000e80)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/245, 0xf5}, {&(0x7f0000001100)=""/246, 0xf6}, {&(0x7f0000001200)=""/25, 0x19}, {&(0x7f0000001240)=""/97, 0x61}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/17, 0x11}, {&(0x7f0000001300)=""/84, 0x54}], 0x8, &(0x7f0000001400)=""/67, 0x43}, 0x1}, {{&(0x7f0000001480)=@alg, 0x80, &(0x7f0000001840)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f00000015c0)=""/35, 0x23}, {&(0x7f0000001600)=""/157, 0x9d}, {&(0x7f0000001780)=""/136, 0x88}, {&(0x7f00000016c0)=""/106, 0x6a}], 0x6, &(0x7f00000018c0)=""/119, 0x77}, 0x7}], 0x4, 0x10040, &(0x7f0000001a40)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 781.787427ms ago: executing program 2 (id=647): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, 0xffffffffffffffff, 0x400000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) r1 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/uts\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x0, 0xffffffed, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048015}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180), 0x2b, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000280)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800) 780.950843ms ago: executing program 0 (id=648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000090a010400000000000000000000000d20000000090a010400000000000000000a0000090900020073797a320000000034000000140a03000000000000000000030000070900010073797a30000000000c0006400000000000000002080003400000000318000000120a"], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4, 0x0}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r1, 0x80000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES64=r4], 0x10) close(r2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000000)=0x6) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x8, 0x3, 0x0, 0x0, "918a76e1efa19e91"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x3c, 0x4, 0x65, 0x3, 0xe9, "0fb538d89ccef0d709728b5d37856fcf82e56ff8e93aed5bf2a5bca4128e7b82f53b879b77ccc09cb6fd69f4d771500c2d035747ec2a61378d1cfb09e326db58084f138a8d60285a41c101ead62dc68d3c6e9764c5a528676177e47ef85f7776578630d4488de9ddbc43e6a2d4ed3fb779cf9adca09e931a84166771d626f2de59cf6e08a52cac23dfc9d07da5087c3dc901dd2d18b9bf9879fc04805c10872f194a25ecd7e5c2be892a8231c025477703f2989553f8ca513a342adb573cacbbad6986d76749730413f7f6e2c339e7a607f360a21177501e1ceda8aa6e3effef13c58d8cf89089ee7076be4697c8f8f5b6bccdbc73f1290d7a237e65afb4959c", 0x2, "f725163615a19aeca4cf44c9bf317f13bd8f105a"}}]}, 0x14c}}, 0x0) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 508.74855ms ago: executing program 5 (id=649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, &(0x7f0000005900)=0xb, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfd9fd}, 0x14}, 0x1, 0x0, 0x0, 0x20000818}, 0x48040) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000019000100ffb61c864680cae41ed6c9f304c4010000000008000100ac141400"/49], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 416.376585ms ago: executing program 0 (id=650): preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/248, 0xf8}, {&(0x7f0000001180)=""/238, 0xee}], 0x4, 0x6, 0x30000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001300)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) sendto$inet6(r0, &(0x7f0000001340)="8a268b385508e3b048bff4ebd56be970e1d9713fc698146cf288b99594522bcfd7e5dfb42112b2852059ac70ae6a1405dde2d5a461ca540cb0eea2f68c138499c510165ec28975766811c32d51b7aba43089194e76a6fba3847607fbe072460152aab6a573230e51d61688a836cb4008ecf56a41f9f3c4513831d6dad543be78fa75366f9f16", 0x86, 0x80, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x2, 0x1, 0x61, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x1, 0x7ff}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@struct={0x7, 0x5, 0x0, 0x4, 0x1, 0xce, [{0xe, 0x4, 0x9}, {0xa, 0x3, 0x3}, {0x1, 0x2, 0x8}, {0x3, 0x0, 0x5}, {0x7, 0x5, 0xe}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @struct={0xf, 0x6, 0x0, 0x4, 0x0, 0x9, [{0x2, 0x0, 0x4}, {0x0, 0x2, 0x2}, {0xb, 0x5, 0xe}, {0xe, 0x0, 0x9}, {0x8, 0x5, 0x9}, {0xd, 0x5, 0x72}]}]}, {0x0, [0x61]}}, &(0x7f0000001880)=""/1, 0xd7, 0x1, 0x1, 0x8000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0x0, 0xc1, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1, 0x5, &(0x7f0000001600)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000001640)='GPL\x00', 0x1, 0x12, &(0x7f0000001680)=""/18, 0x40f00, 0x3, '\x00', r4, @fallback=0x176174b8a5252406, r5, 0x8, &(0x7f0000001900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x2, 0x6, 0xc9, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001b40)=[r6, r7, r8], &(0x7f0000001b80)=[{0x5, 0x3, 0x1, 0xf}, {0x3, 0x4, 0xc, 0x6}, {0x4, 0x5, 0xf, 0x3}], 0x10, 0x4}, 0x94) bind$llc(0xffffffffffffffff, &(0x7f0000001c80)={0x1a, 0x13, 0x5, 0xaf, 0x3, 0xb, @random="e3a8aaddfe38"}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001cc0)={'team0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001d40)={0x0, r7, 0x0, 0x6, &(0x7f0000001d00)='team0\x00', 0x0}, 0x30) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001d80)={r10}, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001dc0)={0x3, 'veth1_to_hsr\x00', {0x5}, 0xfff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x10, 0x70}}}}, [@chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0x40000002}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002fc0)={r3, &(0x7f0000001f40)="a36281d4bfe8fc3239a854f9b7f4d63bcc73231e028401cd00cfa714eb970fc9eba54e1310bab423e4f03da7846f26d28a75046f98bc77fb993ee0f469f99a60ea56108fb6e7ee6b329b1cc22e888ee33e135b00bd8ddc2e7c6e0cb8cc1ccf4937441d99f00070e16ba8a8ff4bfded74f9a6b39688fb9ec592803d25304b586eaa980e833855dc3f0a6e55995720c43d35d7a8035d15a5b5fd4923685f48a90f5d90221cf7f6192ef66ed598b14428046eeecd2bdf530c9eae3cb2b882e65453964695d4484b44509268ffb8fea0ced12e94ea75132ad800c39e0aa906019162dd0062cacaf69d8e15ef60c4fa7ffa5c711ca53e68b2de4215ce2f348997d0e4c0ea1d2b34dbfd59e70d8de17e39c68c8dcc53459d9b9beed24fd90a38a8a56615b1e94913b0472ddf987889543981394e1f2d7299cb62f40fe1706b5156f5a6cfaf2e9dc82444de8686e69981f1b3905f5578871413df76881c464ce0aadd60aece5efe4d0f0895ea22770b695100b3f2e1211cd21984a926afd9760c41f9c8b6b935e4ee915938f4394e7ec6315ab93b642f2b9cca26205ad28ed626ef7664237ead8db69c003fe9b46a4e10c95a6e45da88a9ffdb9242b5758de3abdf1d31b30bd62f5dbf7a9627db141e0139225cc05f1f801fe9129931c0016b4e789a0298347e9603955c234274a72304db09b636a91cc8ea59bd436ba0742f085ad56bf037eb7ec08889f7aa402cebb07b6656b9d4116c763d681ed92c882008537124a07f34a179d107059a362f09980ab47f998a660ac8355a8c390441bb778ee2f0117a85ea06e7fab27096d3444ffe2efb14768e9046203caf3cf2e3854623d056f2e02937701145181edd16fd40b7e5aad4d1ed60824fdc0965913763a3781aeb5941f432d6863d699a63565ee63214843eba28cea0668cf377d52eb877609144104cf3e5128a3558bc7794bc5fb5d2b4777e7f6a1a92cb7dadf66d366adf1391b2627479a970bcfdea5e75d9e1985316d866a25f2afb850d166400456a5aa8cdf4cee357d6fb291c07875a588c12b6cfda4038dbaba94a5a6d65dd066caeeb664759c614be0388b3b141392574305e445abd62cbd1cd2738345df9aed105cefc9d4fa959b8ba8efb86d8e486c1d6249fb88af548cb51d1cba3a5df350a296d917ffc55300066c36f7c9ac83c3a72eb530cb7b8ed9ce5290f809fca5ddb1fe2efe532a2c26c437a23bdcad462bf0db05e224626c7d30bff1868f8e74ea6e51dfb5bbd1b0011ca7cbca1dd1b8c9d24b2690a86b38dfd387a4c4a0acea8b5dcd8e4336c57f0f2e54512795d6eb0a92af1f09a88d308f9f101be7502c375663c168183d67ccc7a2328b5a02502d7886a930573d37e46922e1ae2acc4d4811bda600ad00e4a90f184337a4665e3c776c414e33223fa8021fc1c84ee955e80470276d94d87ceef78ace8330fd7b4edd0c61c3040d002c5ef50453d293f24e4049162124f31edbf8b4b634e14487cfbe7f4618f5cbccfc843cb54c0bb874432ff5bd9bcd43721f9dd287514404ac8e41113e0a33b9cc43f8abdaa2f10f0cad09610dedb8bf835797626dcd450ad8b7bd842769cc4f79f1900d562545045ebdcb5303150de57e7a098da109a4e97017f585a65b685c1c8e3356c56b6c0e399921b8015c4e39071ba75f7ebebe21e4e1da6e4d7ed5bc1fd9d112e9481055ce2b5d47a81e4d1c3c0441a3e0a1f9b8b00032c4be6ea527037ff1b562c8d47d789a550a356ec46670655cccf97b4460223bbb32f5e9fc4f8dcebf67e77aa4f751d5a280809242f26090c0a5755d8fb8352bd361ab7ee57ccf2e882432a962a7d0e1ecde458cf93b449ac36ac4d309c9e19057d58a83a78f19118ba10587ab3158ee65590c2565e3f14a6c46ce75c4816e0d045b52bb3fd0c13cda22783e3791d513493fc7a28fc01b0834212715c7049153e01f5543899edc406469d5f1032495b5c81a73e13eb6d5058d48fd1e92d35cbacb3dacfeadbd3a0b2f26aa6b33f2ecd0ba9c5ebe5b2dbf2c84af9dbd250891fd40506d3227b9c7e0d9f9f076c8aad7b2a3d89d4bd1ffe8469e18c52514cd9bfa1c384d8a42af88a93501a57721883d9a6e9494742a86d7148c99813ce6b626326ca020d6172faf5038d471be2be14aad9978c14910b1be9ced03b91f007bd25c68519f9a4ad032f02fe0c15cadbbef8b8f94c9b3bc5d4996c0caaf8cabb2c54978961e9cca312fadcdb508ef9f4712034e0de627849c381829cee8a9fdf96dc05ab6a73f57a58bf36a2e1f0d5f2a69628d3bb8f793acbfc8b798b5b93bb2e0b21fbaf2dbaf8ffc6a0d388509b9b942e1ad06307a36a86ad4f52aaec7359ae444351e3369ad0bb369423284f8c717168cb088c96a421fccc7ddb677ee6fe0813de1f8a692681771a7d86f428ecc31b5ab6e4e3e25f1bb115f4347c7358191528536cb32599b4be17843f44e0a29637b674d1f5d5b6fc1198236e60b5a60a190232004e00cc037051a6b41f4ed3b104f57ea6dfc6f0f2e4b56bfb7932fe000d3251be6f7a6f5309b9fafd65bd974dea73f94007fecb676d474941092cb155dbc22404e037eeacfcd3b5c339373fa144d1a53adf4d3034a967c7ab7204d4fc182cd4643e7d277125af78011398d915fdf1040db58ea21b8365ca8df7baec594463cc428baae6462db47ecea4218610ca4cd905547fc16f42abfc4c21b8ec3ab59aab73799e8095fb9e685faa249f88e7959ad3143995dae461fb010a8497a25142ad81343f94b134c96fa55e4bf8044f3da6db99b2652832fa5d8ff8509936d8595bab381c7c4cdfb75c92948ca5a27572aafbabc711060516eb13102d0dd862e4694ea1dfb08a9cc48a8d1414f5d4d725acf8ec33b3a7f6399ca090f29f5cd1d8fa857a02428c70f2540a03e5bdab7b386fda922c9a6dd7729b874fb70a700c8b367e19ab28c3f2019764997b44342f81ab6d4b22df5c1d459c4dd607a3a2056b9ca84741c02a29acf50fc755c3e9a6f2c46178d089425bf480b49204a0973ac3771e06593ca54a8664d7a3c195aa51fd5d19dec76fbbe099c028c76eddb26561d63aef2022d36a1e864dda1bad5e5ae97a8ad5f2e744177e3b56ea4a043665ed40054609b4ee9a1a03dcf1e0773d397a166910ae7a5fadc043fa01f10626107039560854ab65efd2cee5e093ec2e65f32abfb3dc8602fa2f0a077e08e654e6b9c48d324697cc3d993914639c9e7e402eedf6e54601ac57199ff20cfa12fde8b545366113b52ac273bf90c97cb6bab687bcdd68d91df4a26526d17d5bffd3d4cfa423002be158845cb1df67f24e4127815d2c53cfa73a5b156ff8193f865e376182f96e182650aec3fabc9ca9b9a79783127c6f3833a4df95a86e42c555d01bf8b033dbe82392fc56f2e57129528a0b34047e1cd2c0a9ec94c86d035517706c75023e50cc736c8e955cf960070f22840a9cb5881f54cb3b31caf951af17c58b2f4eb907fc640df3907f4feec35f012769fbf693e924375365a8fa96dd39bba106bda213f7f4a7132b8ee71b8702d073ea768dd5cac4ed10ec1eef9dcdcda1c81066a45e347282a1628fb42c1e91cee9818dd8c7c7217b2e389a4498fa3ff0c1edaf223679f73576c6bffe3d04ff623b8f90dfe9c73be7241f03b8e162b38f141233f5fae426fdabfff7bb5e23fd74467eca50ea1132e66f706fc10c74cbb02691d0ff0b035a43ffe6a3830d0e145d84e45a6e2c21c01d894a648aaf3c068a7f91098d7eb1c5a396349fab54ff70d1088bd2425f7555fb0497dd419d7b9a5e1542b31d2a4595b3aa84f861e9488a46f118e34e602f2990b12be2330103a9158d20b2e4f7484a7e773041914e1499beb74f90c789903fbf02744412538f5b9ac59f88024fcf8e6fbeb83c4bbc2b888ab9fe209b6983b2d441d4545655f9396731492466aef79e2e0c9739f90a4b2b288b439b3c9645788900dcb879ff3054f6bb2a86d4e17bb5bb9631158c240f38796ad857c0d0b1d9a5f5b9c0c1f0442b0fd375e69934942c2abaf204e34bcd9018823fd1e6d281e7202db60676c34477e42e0a0cfc9682dd707fa984d35eabf30bdf1487b5450cb0b15d9fd9af7e200cfd13c91abb82e14c829049da2d0765f7bd123c6f71669ca56708bd051d0654d344a1adafd36e40ceda57b6774434ebbdc1e0736e07edd17ff1c8197c12a16fa6c1a8731152678780d754abe87fdcbbab4199a09c211c2aed2a131f9f8356a4e5b5b668826cafad223c15f459b63ba51966ceca1da4d410797b0486253fa0d39cf500bb3c7068dcef416a9eceb55e651bbe72ceffad8603c3d960d6918aa92110b657dafca239fa536c19802ca73d5e327c60b6201abd06b309203e2cac6a5dcbd980277a6ab7c559edd084a1dc48f2149ef94903bb64f8823d16d9e2a2b0196f5929e9e3301b44048883bc6a329454136165bbe3d3c4b7fd0ba91aed1dce9e9bb5f98e36be2f3c4226771d9d16b47d82488ca4a90483bdc971a29401bc8fbbf50bcf45326a568d9951670078634103c819c36bfd9ae4a1273e4bc77883b9ff9be452b072790b48157fd86b9d8920b5cd2ba602e23e7327a40921b83697bbe3462ad2a22d1bd3e1ce835fb3caf482c676ed4189aae2e105a927d4f336f631d6042fa882e847e969c32400fde80f882b1a8d0de4099da0916da16c4cd1d0b9077aa8de25b2f6f5d1813a0aa167df9f43e0c805e8a1863279ba55e05e927f3698f8f71be8b870ea4c7571c25c89e9d7f3e884d8a0c3e3ee6a9a9ac125daf6d5825a46e71eb0b1b302268ed44fd3eceddc42fb9cc4257a7693ce04653b356a63e84ace8bec8fc44e7a73933dbea6122d0618068d504f066f08e137e038de8e5ae08d55bd723edd98afe88364a7774d8920d3774ba12c05eb3daec6076d763ba8b8e7f724cf68941cc211a7e8cf9ad62fac0b7bf8da66b786bbf9731eb11b1ba92db2e0f5c1be6420bfaa3553fce53efdb2a05867421493b77949d74065d0d148560b179bf05c1923b0e000dd4b376ae1ef98e4a21689d619695b8c3e7c0f897e2eedc3011f3670252068c14c54cbae8b644813497b46ce21e2fb955aaa24bd8484f896308854503355b5cf4a3a14ce254ffec7c2398c8d8164c87af8e79c2abd73e8e94015112cc0ddab043890da385cf140cd14e7cc36b476dc876566da7c0efe929ad599665e74c9ffe88591e272c89565aa85ab074ccb028493d16a6a1170f8e0992e07bb06cbc8f5b2bc811527816f7e879fc02ea2d51aedff5c46492867f97afc602ed14749efc6318372a00b8fbb194db207a32c4c19cebbc1d6ec6875ca62040a2e9895f4c8e27191bcc7d0992c753f859ec54122e9314cc954b875f9f2be6f9e99ac6a2151cab1d8b8c911d4116fcf83998b40bb4aee2bc856cff16a7dd4eb951590941e2fe833f7db06303e4c5a93c5e35da998c92a8a7983ec8791d18e1bb676961ab0f0665b48259ea784fa723920db6b3656dd7d8ac2803146a52a7fa64aaa8176f64488c877e0f62455d701f5cd4ab3b1bd2d7e18500a609340d79a1ff2c6ddc10736b1e728cc4579bfeec79882761f99d82f1fe0461711190bc18d81923e1bf199417346f05b534204597db83af1eba9716563b7d89778ebaadbb566a64f72e2a5fca9c24f2f333705aaf417c086a947db18f42b6cb8dc03f4da8aa53a41ccf2a7bfad0b7968e8196f8ed1ef555935089ed600c2aa704a22b0278132b1c37c5df10a6d95f341a24295cc6a0911cb9e98a7cf17", &(0x7f0000002f40)=""/78}, 0x20) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003040)={&(0x7f0000003000)='wbt_timer\x00', r11, 0x0, 0x7}, 0x18) close(r13) accept4(r2, &(0x7f0000003080), &(0x7f0000003100)=0x80, 0x80800) socket$inet_mptcp(0x2, 0x1, 0x106) write(r0, &(0x7f0000003140)="d8d226efcb6d1cb8ebf789eae39b3995ffa403cb0c924c8acafeb885f821d7c753ef8dff691a5be6376809894fba1fcb9c5561bb6c2e8d8611b6ec42bdce4b1eac871c699b47b3d0d4dceba8ca4d7285265882830e2829ac41359744c9b027e51e11db017abd4f2ba59859841050418e97f42b537f76e47a59124f27fff7115f00d09489bc44c097cb912eae21f3df655178de09cadb3d6a093b0fc9cb38e313e8886d009b44be59832de40aba9b42187ac1d187b3ade7cba2c900", 0xbb) bind$x25(r0, &(0x7f0000003200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0xa8, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x84}, 0x4001) 265.788106ms ago: executing program 5 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r7, @ANYBLOB="050029"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES64=r4, @ANYRES32=r5, @ANYRESDEC=r7, @ANYRES32=r1, @ANYRESHEX=r8], 0x20}}, 0x20004005) 218.377593ms ago: executing program 0 (id=652): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001340)={0xffffffffffffffff, &(0x7f00000002c0)="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", 0x0}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb00"/229], 0x23c}}, 0x0) 185.527859ms ago: executing program 5 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 13.84562ms ago: executing program 5 (id=654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 0s ago: executing program 0 (id=655): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e0000001600ffff8000fdff95000000000000006884d1d9fe4c9ce4c8b7a8e93bb957f5ac915f7683352dbbdb85d8965f40a9372a85319dc353a5b7b7bf0365836f54ae60375c46827cb4d9f8a15bddba79096be7d495c19b3afaa67d2aea409ea69c67cc026d1f0d509b0055e7a371960c7eef346408d031b1249592ccc129485120730762afd7006f54bd541f8be0902162f15e7539ad6623a985526464b4539a3c1d1514fe832e9c47f1c53ca2614ff008000000000000009a86746c75adf63fe215c2b2ca38e4f62f682ef561ee6352c07f000000000000008f31663bd222d47fd495ad27124c6b0ccd410400000000000000eb2b31bb3d0bb8aebfc7ee0200000000000000f0c100e80c53d628404a42176fb1462bddb96075082e486e0d4907d5764185ce2ebfc911064c1f41425fa8fa3eb9848fb36c85ad4e23b580773e82a135107a73be0d78b5eced63b5e0ad7d6b97b8aedf0f33bc79f3a07034b54afbe4ca46e0f64222976090809c7912fa0c112ac3d25141472a7ba550d62c34abc4915fa6cbf0da8d9c3139a6d5b3c8b371c4c25c53350edc8521676bbec5ad4ed0b7eca73574fddbfbccfbed5c9da52fe13fe0d91ce27382ae93353af09acc490c6ef108867e79b444d8a46e20fb2b28a3f0cf39596c20df5e5d5846ba2db1d14e862be6327f22aa774b4dc16e7dec7093d83f211c51df5c170765dbc048f655e6d7ad1134837556d1f8f88b59ca5a26e5908f04ed3f4ec22b3d6e41e9a703bff1f2b34bdeed501a4762605edc7bcc2fcdd2fff4f65db191e5e4b8b33cc093c5e2ec369276c40aaaebd2d5b095bd3d636aa74546968b7b2f41818d03a4a6058a19ad6d96f085f057efdb575b07d3a610fb1bb82a9ce8cf39d6bac2024eb1be3c6f2a24c251728aaf71dcc7f3d01493587a880ef951461a53040a288871ae85b3b06e9ede18b1d9c18e2b100c7943c96723e4a190d3bab1fc9ebeef1024986c494bdfcee8b8a0fbb4e5b807fd27caf63eda9dfcc0d64ba6a74406aa0e1c0b0b7bb1e22fd0c910b03d52f5dc675bfb690d41edbb776e4dc22af46bf5f1edaa5a487b9f1dd0b135de877fd837dfd279b9e2"], &(0x7f0000000880)='GPL\x00', 0x5, 0x2b1, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000}, 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x3}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 77.774094][ T5837] cgroup: Unknown subsys name 'net' [ 77.945666][ T5837] cgroup: Unknown subsys name 'cpuset' [ 77.954509][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.427760][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.313523][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.324558][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.332285][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.342424][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.350278][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.356831][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.357619][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.373175][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.381911][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.389721][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.397539][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.401423][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.405959][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.424716][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.431947][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.433536][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.440776][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.448174][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.454013][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.460998][ T5170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.478484][ T5170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.486486][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.493991][ T5170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.508102][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.516178][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.007041][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 84.137638][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 84.255299][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 84.299373][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 84.315968][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 84.363130][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.370606][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.378391][ T5847] bridge_slave_0: entered allmulticast mode [ 84.386349][ T5847] bridge_slave_0: entered promiscuous mode [ 84.463248][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.470421][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.478023][ T5847] bridge_slave_1: entered allmulticast mode [ 84.485065][ T5847] bridge_slave_1: entered promiscuous mode [ 84.538074][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.545964][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.555286][ T5854] bridge_slave_0: entered allmulticast mode [ 84.563207][ T5854] bridge_slave_0: entered promiscuous mode [ 84.610330][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.617558][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.625458][ T5854] bridge_slave_1: entered allmulticast mode [ 84.632749][ T5854] bridge_slave_1: entered promiscuous mode [ 84.642650][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.668243][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.675393][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.682781][ T5855] bridge_slave_0: entered allmulticast mode [ 84.689847][ T5855] bridge_slave_0: entered promiscuous mode [ 84.716343][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.740927][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.748290][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.756499][ T5855] bridge_slave_1: entered allmulticast mode [ 84.764877][ T5855] bridge_slave_1: entered promiscuous mode [ 84.855154][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.862420][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.869699][ T5862] bridge_slave_0: entered allmulticast mode [ 84.877142][ T5862] bridge_slave_0: entered promiscuous mode [ 84.886489][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.900599][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.934081][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.941264][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.948597][ T5848] bridge_slave_0: entered allmulticast mode [ 84.956158][ T5848] bridge_slave_0: entered promiscuous mode [ 84.967463][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.976927][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.984336][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.991645][ T5862] bridge_slave_1: entered allmulticast mode [ 84.999238][ T5862] bridge_slave_1: entered promiscuous mode [ 85.035821][ T5847] team0: Port device team_slave_0 added [ 85.045100][ T5847] team0: Port device team_slave_1 added [ 85.059568][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.067125][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.075067][ T5848] bridge_slave_1: entered allmulticast mode [ 85.082702][ T5848] bridge_slave_1: entered promiscuous mode [ 85.101893][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.125251][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.171738][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.206927][ T5854] team0: Port device team_slave_0 added [ 85.215730][ T5855] team0: Port device team_slave_0 added [ 85.224922][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.250992][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.262845][ T5854] team0: Port device team_slave_1 added [ 85.270275][ T5855] team0: Port device team_slave_1 added [ 85.290173][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.297503][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.323840][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.336214][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.343440][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.369804][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.434239][ T5862] team0: Port device team_slave_0 added [ 85.478401][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.485474][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.511974][ T5858] Bluetooth: hci2: command tx timeout [ 85.517849][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.525542][ T5852] Bluetooth: hci1: command tx timeout [ 85.532881][ T5862] team0: Port device team_slave_1 added [ 85.534066][ T5858] Bluetooth: hci0: command tx timeout [ 85.540546][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.552004][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.578159][ T5858] Bluetooth: hci4: command tx timeout [ 85.578308][ T5858] Bluetooth: hci3: command tx timeout [ 85.589789][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.602831][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.609774][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.635759][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.649239][ T5848] team0: Port device team_slave_0 added [ 85.657589][ T5848] team0: Port device team_slave_1 added [ 85.664495][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.671524][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.697489][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.798159][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.805554][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.831795][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.858649][ T5847] hsr_slave_0: entered promiscuous mode [ 85.865709][ T5847] hsr_slave_1: entered promiscuous mode [ 85.898087][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.905088][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.931120][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.948284][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.956074][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.982788][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.995307][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.002467][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.028454][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.049819][ T5855] hsr_slave_0: entered promiscuous mode [ 86.056128][ T5855] hsr_slave_1: entered promiscuous mode [ 86.062321][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.069979][ T5855] Cannot create hsr debugfs directory [ 86.094279][ T5854] hsr_slave_0: entered promiscuous mode [ 86.100599][ T5854] hsr_slave_1: entered promiscuous mode [ 86.106937][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.114629][ T5854] Cannot create hsr debugfs directory [ 86.216012][ T5848] hsr_slave_0: entered promiscuous mode [ 86.223830][ T5848] hsr_slave_1: entered promiscuous mode [ 86.229965][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.237741][ T5848] Cannot create hsr debugfs directory [ 86.294714][ T5862] hsr_slave_0: entered promiscuous mode [ 86.301028][ T5862] hsr_slave_1: entered promiscuous mode [ 86.307356][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.315122][ T5862] Cannot create hsr debugfs directory [ 86.895890][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.908527][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.919196][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.938423][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.985875][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.996831][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.013920][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.025574][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.105991][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.127303][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.151394][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.162216][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.241582][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.255320][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.274666][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.284620][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.398989][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.410737][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.433633][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.466219][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.473504][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.506975][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.527569][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.567218][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.571804][ T5858] Bluetooth: hci2: command tx timeout [ 87.575071][ T5852] Bluetooth: hci0: command tx timeout [ 87.579212][ T5858] Bluetooth: hci1: command tx timeout [ 87.595982][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.619908][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.632562][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.639721][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.652773][ T5858] Bluetooth: hci3: command tx timeout [ 87.661436][ T5858] Bluetooth: hci4: command tx timeout [ 87.676689][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.683816][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.695046][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.702145][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.713092][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.720192][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.762248][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.769349][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.779409][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.786510][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.859090][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.883221][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.918994][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.965716][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.972885][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.026158][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.033343][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.167448][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.235335][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.270627][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.277792][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.318441][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.325573][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.438837][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.477932][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.574281][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.747941][ T5848] veth0_vlan: entered promiscuous mode [ 88.766828][ T5854] veth0_vlan: entered promiscuous mode [ 88.781992][ T5848] veth1_vlan: entered promiscuous mode [ 88.814212][ T5854] veth1_vlan: entered promiscuous mode [ 88.825131][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.928520][ T5854] veth0_macvtap: entered promiscuous mode [ 88.938427][ T5848] veth0_macvtap: entered promiscuous mode [ 88.958191][ T5854] veth1_macvtap: entered promiscuous mode [ 88.968193][ T5848] veth1_macvtap: entered promiscuous mode [ 89.045446][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.080208][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.096268][ T5855] veth0_vlan: entered promiscuous mode [ 89.105408][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.120399][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.155548][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.164985][ T3543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.176902][ T3543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.202885][ T3543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.212360][ T3543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.233773][ T5855] veth1_vlan: entered promiscuous mode [ 89.242553][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.255864][ T3543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.287065][ T3543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.296500][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.322366][ T5847] veth0_vlan: entered promiscuous mode [ 89.365740][ T5847] veth1_vlan: entered promiscuous mode [ 89.408055][ T5855] veth0_macvtap: entered promiscuous mode [ 89.436239][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.438022][ T5855] veth1_macvtap: entered promiscuous mode [ 89.461295][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.516913][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.534511][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.570642][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.570843][ T5862] veth0_vlan: entered promiscuous mode [ 89.585033][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.601002][ T5847] veth0_macvtap: entered promiscuous mode [ 89.619323][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.636105][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.643291][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.656687][ T5858] Bluetooth: hci1: command tx timeout [ 89.662177][ T5858] Bluetooth: hci0: command tx timeout [ 89.664749][ T5852] Bluetooth: hci2: command tx timeout [ 89.675459][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.705798][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.713414][ T5862] veth1_vlan: entered promiscuous mode [ 89.731609][ T5852] Bluetooth: hci4: command tx timeout [ 89.731925][ T5858] Bluetooth: hci3: command tx timeout [ 89.749468][ T5847] veth1_macvtap: entered promiscuous mode [ 89.769226][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.853325][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.872244][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.900497][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.924228][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.952223][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.994858][ T3572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.004763][ T3572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.015149][ T3572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034273][ T3572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.047344][ T5862] veth0_macvtap: entered promiscuous mode [ 90.079270][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.083535][ T5862] veth1_macvtap: entered promiscuous mode [ 90.098177][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.179209][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.184825][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.194782][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.220447][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.287490][ T3543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.303868][ T3543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.352556][ T3543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.365798][ T3543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.383731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.396554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.475596][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.493177][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571345][ T5980] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 90.588390][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.606105][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.675469][ T5982] delete_channel: no stack [ 90.732160][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.792587][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.810341][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.007353][ T5989] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 91.184176][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.201297][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.243129][ T5997] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 91.263365][ T5996] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 91.285731][ T5997] netlink: 208 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.298221][ T5996] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 91.656116][ T923] cfg80211: failed to load regulatory.db [ 91.731590][ T5858] Bluetooth: hci0: command tx timeout [ 91.741379][ T5858] Bluetooth: hci2: command tx timeout [ 91.741490][ T5852] Bluetooth: hci1: command tx timeout [ 91.813521][ T5852] Bluetooth: hci4: command tx timeout [ 91.815655][ T5858] Bluetooth: hci3: command tx timeout [ 91.858732][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 91.922170][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 92.330424][ T6032] tipc: Started in network mode [ 92.348991][ T6032] tipc: Node identity 3aae10b84893, cluster identity 4711 [ 92.366365][ T6032] tipc: Enabled bearer , priority 0 [ 92.403099][ T6033] syzkaller0: entered promiscuous mode [ 92.408580][ T6033] syzkaller0: entered allmulticast mode [ 92.543883][ T6036] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 92.593717][ T6033] tipc: Resetting bearer [ 92.632987][ T6035] 8021q: VLANs not supported on vcan0 [ 92.659123][ T6038] 8021q: VLANs not supported on vcan0 [ 92.820046][ T6032] tipc: Resetting bearer [ 92.877208][ T6032] tipc: Disabling bearer [ 93.344674][ T6071] netlink: 256 bytes leftover after parsing attributes in process `syz.1.25'. [ 93.609819][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 93.789204][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 93.801309][ T6087] TCP: TCP_TX_DELAY enabled [ 94.034477][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.306332][ T6102] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.308086][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 94.458290][ T6108] IPVS: Error joining to the multicast group [ 94.702445][ T6123] openvswitch: netlink: Actions may not be safe on all matching packets [ 95.924809][ T6158] trusted_key: syz.0.52 sent an empty control message without MSG_MORE. [ 96.089177][ T6161] __nla_validate_parse: 2 callbacks suppressed [ 96.089196][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 96.185493][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 96.268476][ T6170] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 96.276677][ T6171] Illegal XDP return value 4294967274 on prog (id 19) dev N/A, expect packet loss! [ 96.319841][ T6170] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.56'. [ 96.488865][ T6177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.115940][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 97.145078][ T6206] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 97.160313][ T6206] netlink: 208 bytes leftover after parsing attributes in process `syz.2.66'. [ 97.248451][ T6218] Zero length message leads to an empty skb [ 97.325617][ T6222] Cannot find set identified by id 0 to match [ 97.360051][ T6223] Cannot find set identified by id 0 to match [ 97.730022][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.761040][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.907628][ T6247] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 97.935782][ T6250] netlink: 288 bytes leftover after parsing attributes in process `syz.1.76'. [ 97.976209][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 97.989861][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'. [ 98.066587][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'. [ 98.302669][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 98.471766][ T30] audit: type=1800 audit(1752278027.632:2): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.85" name="memory.events" dev="tmpfs" ino=124 res=0 errno=0 [ 98.495522][ T6281] netlink: 'syz.1.87': attribute type 30 has an invalid length. [ 98.779083][ T6299] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 99.028881][ T6314] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 99.138417][ T6315] syz_tun: entered allmulticast mode [ 99.234047][ T6310] syz_tun: left allmulticast mode [ 100.088734][ T6332] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 101.191755][ T6358] @ÿ: renamed from veth0_vlan (while UP) [ 101.208973][ T6366] __nla_validate_parse: 3 callbacks suppressed [ 101.208990][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 101.302516][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 101.455702][ T6375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.480875][ T6362] syzkaller0: entered allmulticast mode [ 101.585103][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 101.601222][ T6377] netlink: 96 bytes leftover after parsing attributes in process `syz.0.112'. [ 102.068603][ T6399] netlink: 68 bytes leftover after parsing attributes in process `syz.0.119'. [ 102.098047][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 102.140298][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 102.149854][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 102.164472][ T6409] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 102.173953][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 102.174560][ T6409] netlink: 208 bytes leftover after parsing attributes in process `syz.4.120'. [ 102.293778][ T6415] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 102.310779][ T6417] xt_HMARK: proto mask must be zero with L3 mode [ 102.399014][ T6421] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 102.764219][ T6433] syzkaller0: entered promiscuous mode [ 102.779857][ T6433] syzkaller0: entered allmulticast mode [ 103.658453][ T6480] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 104.439521][ T6486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.723917][ T6489] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 104.833606][ T6494] bridge0: port 3(erspan0) entered blocking state [ 104.841271][ T6494] bridge0: port 3(erspan0) entered disabled state [ 104.861391][ T6494] erspan0: entered allmulticast mode [ 104.917553][ T6494] erspan0: entered promiscuous mode [ 104.938992][ T6494] bridge0: port 3(erspan0) entered blocking state [ 104.945688][ T6494] bridge0: port 3(erspan0) entered forwarding state [ 105.065513][ T6499] erspan0: left allmulticast mode [ 105.073134][ T6499] erspan0: left promiscuous mode [ 105.112051][ T6499] bridge0: port 3(erspan0) entered disabled state [ 105.386279][ T6521] x_tables: duplicate underflow at hook 2 [ 105.834030][ T6529] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 105.846576][ T6529] macsec1: entered promiscuous mode [ 105.852482][ T6529] macsec1: entered allmulticast mode [ 105.857971][ T6529] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 106.517499][ T6547] __nla_validate_parse: 11 callbacks suppressed [ 106.517516][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 107.027442][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.166'. [ 107.030852][ T6556] syzkaller1: entered promiscuous mode [ 107.048414][ T6556] syzkaller1: entered allmulticast mode [ 107.093695][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 107.147956][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 107.157457][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 107.406199][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 107.424318][ T6581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'. [ 107.756476][ T6567] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 107.773369][ T6567] netlink: 208 bytes leftover after parsing attributes in process `syz.1.167'. [ 107.894663][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 108.041438][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 108.098966][ T6606] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 108.122662][ T6600] block nbd0: Unsupported socket: shutdown callout must be supported. [ 108.915887][ T6639] vlan2: entered promiscuous mode [ 108.932034][ T6639] bond0: entered promiscuous mode [ 108.937087][ T6639] bond_slave_0: entered promiscuous mode [ 108.952484][ T6639] bond_slave_1: entered promiscuous mode [ 109.373828][ T6652] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 109.382181][ T6654] IPv6: Can't replace route, no match found [ 109.402217][ T6652] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 110.031498][ T6653] netlink: 'syz.1.191': attribute type 3 has an invalid length. [ 110.134150][ T6681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.528705][ T6693] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 110.582486][ T6693] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 110.701899][ T6693] bond1: entered promiscuous mode [ 110.707312][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.813347][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.825166][ T6697] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 110.871253][ T6697] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 110.910697][ T6697] bond1: (slave vcan1): making interface the new active one [ 110.936821][ T6697] vcan1: entered promiscuous mode [ 110.946981][ T6710] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.949040][ T6697] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 111.179255][ T6719] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 111.379974][ T6731] netlink: 'syz.1.216': attribute type 10 has an invalid length. [ 111.454088][ T6731] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.520760][ T6735] team_slave_0: entered promiscuous mode [ 111.526609][ T6735] team_slave_1: entered promiscuous mode [ 111.550263][ T6735] macvtap1: entered promiscuous mode [ 111.571031][ T6735] team0: entered promiscuous mode [ 111.618960][ T6735] macvtap1: entered allmulticast mode [ 111.630332][ T6735] team0: entered allmulticast mode [ 111.637441][ T6735] team_slave_0: entered allmulticast mode [ 111.643987][ T6735] team_slave_1: entered allmulticast mode [ 111.653525][ T6735] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.663493][ T6742] team0: left allmulticast mode [ 111.671910][ T6742] team_slave_0: left allmulticast mode [ 111.686790][ T6742] team_slave_1: left allmulticast mode [ 111.697054][ T6742] team0: left promiscuous mode [ 111.722598][ T6742] team_slave_0: left promiscuous mode [ 111.728252][ T6742] team_slave_1: left promiscuous mode [ 111.792016][ T6755] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 111.798093][ T6755] syzkaller1: Linktype set failed because interface is up [ 111.811442][ T5957] syzkaller1: tun_net_xmit 90 [ 112.367063][ T6759] __nla_validate_parse: 11 callbacks suppressed [ 112.367080][ T6759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'. [ 112.464525][ T6780] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 112.744289][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.235'. [ 112.912648][ T6795] netlink: 48 bytes leftover after parsing attributes in process `syz.4.235'. [ 112.978333][ T6801] lo speed is unknown, defaulting to 1000 [ 112.999825][ T6801] lo speed is unknown, defaulting to 1000 [ 113.029743][ T6801] lo speed is unknown, defaulting to 1000 [ 113.055802][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 113.066032][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 113.076991][ T6806] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 113.084906][ T6806] netlink: 208 bytes leftover after parsing attributes in process `syz.1.238'. [ 113.145766][ T6808] netlink: 212 bytes leftover after parsing attributes in process `syz.4.239'. [ 113.156569][ T6808] openvswitch: netlink: Flow key attr not present in new flow. [ 113.205351][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 113.392588][ T6816] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 113.468457][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 113.590316][ T6801] infiniband syz1: set active [ 113.594788][ T6820] netlink: 96 bytes leftover after parsing attributes in process `syz.0.245'. [ 113.601371][ T6801] infiniband syz1: added lo [ 113.608528][ T5938] lo speed is unknown, defaulting to 1000 [ 113.653643][ T6801] RDS/IB: syz1: added [ 113.678546][ T6801] smc: adding ib device syz1 with port count 1 [ 113.685051][ T6801] smc: ib device syz1 port 1 has pnetid [ 113.692091][ T5938] lo speed is unknown, defaulting to 1000 [ 113.701110][ T6801] lo speed is unknown, defaulting to 1000 [ 113.744163][ T6826] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 113.906197][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.187586][ T6801] lo speed is unknown, defaulting to 1000 [ 114.344191][ T6846] bond1: (slave ip6gretap0): making interface the new active one [ 114.362142][ T6846] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 114.377609][ T6841] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 114.829845][ T6801] lo speed is unknown, defaulting to 1000 [ 115.183409][ T6801] lo speed is unknown, defaulting to 1000 [ 115.399655][ T6870] erspan0: entered promiscuous mode [ 115.405520][ T6870] macvtap1: entered promiscuous mode [ 115.417672][ T6870] macvtap1: entered allmulticast mode [ 115.423822][ T6870] erspan0: entered allmulticast mode [ 115.438997][ T6870] erspan0: left allmulticast mode [ 115.445323][ T6870] erspan0: left promiscuous mode [ 115.532667][ T6801] lo speed is unknown, defaulting to 1000 [ 115.556559][ T6875] netem: incorrect ge model size [ 115.576572][ T6875] netem: change failed [ 115.860940][ T6852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.886715][ T6852] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.073211][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.200505][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.384205][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.576273][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.705026][ T6901] erspan0: entered promiscuous mode [ 116.721451][ T6901] macvtap1: entered promiscuous mode [ 116.728875][ T6901] macvtap1: entered allmulticast mode [ 116.756565][ T6901] erspan0: entered allmulticast mode [ 116.799449][ T6906] erspan0: left allmulticast mode [ 116.818517][ T6906] erspan0: left promiscuous mode [ 116.877768][ T6914] veth0: entered promiscuous mode [ 116.911269][ T6914] netlink: zone id is out of range [ 116.916459][ T6914] netlink: zone id is out of range [ 116.947494][ T6904] lo speed is unknown, defaulting to 1000 [ 116.981666][ T6914] netlink: zone id is out of range [ 116.986811][ T6914] netlink: get zone limit has 8 unknown bytes [ 117.204283][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.215763][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.226031][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.241848][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.249810][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.340572][ T36] bridge_slave_1: left allmulticast mode [ 117.353303][ T36] bridge_slave_1: left promiscuous mode [ 117.370475][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.448226][ T36] bridge_slave_0: left allmulticast mode [ 117.483881][ T36] bridge_slave_0: left promiscuous mode [ 117.514488][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.534956][ T6931] __nla_validate_parse: 13 callbacks suppressed [ 117.534970][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 118.062879][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 118.217542][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.235742][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.247329][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 118.257852][ T36] bond0 (unregistering): Released all slaves [ 118.326970][ T36] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 118.335060][ T36] vcan1: left promiscuous mode [ 118.341245][ T36] bond1 (unregistering): Released all slaves [ 118.479487][ T6941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.553064][ T6923] lo speed is unknown, defaulting to 1000 [ 118.589188][ T6941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.790589][ T6941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.973359][ T6941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.126145][ T6955] lo speed is unknown, defaulting to 1000 [ 119.288436][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.332182][ T5858] Bluetooth: hci3: command tx timeout [ 119.368230][ T6645] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.416357][ T6645] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.488279][ T3511] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.693320][ T6923] chnl_net:caif_netlink_parms(): no params data found [ 119.758311][ T6968] lo speed is unknown, defaulting to 1000 [ 119.963399][ T6998] netlink: 256 bytes leftover after parsing attributes in process `syz.4.284'. [ 120.021785][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.034322][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.055441][ T6923] bridge_slave_0: entered allmulticast mode [ 120.073091][ T6923] bridge_slave_0: entered promiscuous mode [ 120.090032][ T6998] tipc: Enabled bearer , priority 10 [ 120.102338][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.109971][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.122074][ T6923] bridge_slave_1: entered allmulticast mode [ 120.129782][ T6923] bridge_slave_1: entered promiscuous mode [ 120.430775][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 120.494890][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.544057][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.635199][ T36] hsr_slave_0: left promiscuous mode [ 120.645299][ T36] hsr_slave_1: left promiscuous mode [ 120.651441][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.658835][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.674824][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.682296][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.700760][ T36] veth1_macvtap: left promiscuous mode [ 120.706535][ T36] veth0_macvtap: left promiscuous mode [ 120.712382][ T36] veth1_vlan: left promiscuous mode [ 120.717678][ T36] veth0_vlan: left promiscuous mode [ 121.047125][ T36] team0 (unregistering): Port device team_slave_1 removed [ 121.080428][ T36] team0 (unregistering): Port device team_slave_0 removed [ 121.222995][ T5957] tipc: Node number set to 1916604600 [ 121.411130][ T5858] Bluetooth: hci3: command tx timeout [ 121.438141][ T6923] team0: Port device team_slave_0 added [ 121.496260][ T6923] team0: Port device team_slave_1 added [ 121.589012][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.611161][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.646483][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.673043][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.685011][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.723933][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.301239][ T7034] netlink: 96 bytes leftover after parsing attributes in process `syz.3.290'. [ 122.390448][ T6923] hsr_slave_0: entered promiscuous mode [ 122.466080][ T6923] hsr_slave_1: entered promiscuous mode [ 122.483894][ T6923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.508192][ T6923] Cannot create hsr debugfs directory [ 122.934928][ T7051] lo speed is unknown, defaulting to 1000 [ 123.491838][ T5858] Bluetooth: hci3: command tx timeout [ 123.865887][ T7081] bond2: entered promiscuous mode [ 123.931169][ T7081] bond2: entered allmulticast mode [ 123.966036][ T7081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.004306][ T7082] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 124.245554][ T5918] IPVS: starting estimator thread 0... [ 124.261347][ T7101] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 124.269265][ T7098] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 124.347762][ T7100] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 124.351244][ T7102] IPVS: using max 35 ests per chain, 84000 per kthread [ 124.564325][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 124.715184][ T6923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.749775][ T6923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.805301][ T6923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.839766][ T6923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.064348][ T7122] netlink: 'syz.3.307': attribute type 27 has an invalid length. [ 125.178036][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.259128][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.333136][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.340349][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.369541][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.376716][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.571492][ T5858] Bluetooth: hci3: command tx timeout [ 125.933949][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 126.002392][ T7168] sock: sock_set_timeout: `syz.2.314' (pid 7168) tries to set negative timeout [ 126.202800][ T6923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.389351][ T6923] veth0_vlan: entered promiscuous mode [ 126.447435][ T6923] veth1_vlan: entered promiscuous mode [ 126.535943][ T7183] netlink: 96 bytes leftover after parsing attributes in process `syz.0.320'. [ 126.597953][ T6923] veth0_macvtap: entered promiscuous mode [ 126.624812][ T6923] veth1_macvtap: entered promiscuous mode [ 126.735524][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.900650][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.935385][ T7186] dvmrp0: entered allmulticast mode [ 127.030541][ T7192] lo speed is unknown, defaulting to 1000 [ 127.107479][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 127.276818][ T6645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.290056][ T3511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.326929][ T3511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.404072][ T3511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.480944][ T7226] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 127.618575][ T7229] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 127.661996][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 127.758784][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.330'. [ 127.968378][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.999520][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 128.011080][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.140961][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.176553][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 128.178348][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.764942][ T7267] lo speed is unknown, defaulting to 1000 [ 129.134405][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.364118][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.482125][ T7295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.345'. [ 129.555826][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.718097][ T7302] netlink: 'syz.3.344': attribute type 12 has an invalid length. [ 129.732072][ T7302] netlink: 'syz.3.344': attribute type 29 has an invalid length. [ 129.740712][ T7302] netlink: 148 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.763434][ T7302] netlink: 51 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.858647][ T1094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.927684][ T7316] tipc: Enabled bearer , priority 0 [ 130.013714][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 130.023383][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 130.050312][ T7319] IPv6: NLM_F_REPLACE set, but no existing node found! [ 130.089860][ T7316] tipc: Disabling bearer [ 130.265689][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.277934][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.292396][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.310014][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.320201][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.563167][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 130.735268][ T1094] bridge_slave_1: left allmulticast mode [ 130.740965][ T1094] bridge_slave_1: left promiscuous mode [ 130.791811][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.839205][ T1094] bridge_slave_0: left allmulticast mode [ 130.860147][ T1094] bridge_slave_0: left promiscuous mode [ 130.867269][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.008641][ T7366] netlink: 14 bytes leftover after parsing attributes in process `syz.4.355'. [ 131.596440][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.613494][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.628404][ T1094] bond0 (unregistering): Released all slaves [ 131.663650][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.672336][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.720384][ T7327] lo speed is unknown, defaulting to 1000 [ 131.863453][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 132.383883][ T5852] Bluetooth: hci3: command tx timeout [ 132.616508][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736669][ T7422] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 132.743709][ T5851] IPVS: starting estimator thread 0... [ 132.752447][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 132.770607][ T7424] netlink: 108 bytes leftover after parsing attributes in process `syz.2.370'. [ 132.858105][ T7425] IPVS: using max 28 ests per chain, 67200 per kthread [ 132.896060][ T7424] vlan2: entered allmulticast mode [ 132.954034][ T7424] veth1: entered allmulticast mode [ 132.980242][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 133.061593][ T7436] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 133.101902][ T7436] NCSI netlink: No device for ifindex 813332851 [ 133.140065][ T1094] hsr_slave_0: left promiscuous mode [ 133.162907][ T1094] hsr_slave_1: left promiscuous mode [ 133.174289][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.190743][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.214345][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.232348][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.279322][ T1094] veth1_macvtap: left promiscuous mode [ 133.285086][ T7452] xt_hashlimit: size too large, truncated to 1048576 [ 133.287733][ T1094] veth0_macvtap: left promiscuous mode [ 133.298022][ T1094] veth1_vlan: left promiscuous mode [ 133.303795][ T1094] veth0_vlan: left promiscuous mode [ 133.964104][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 134.000435][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 134.451483][ T5852] Bluetooth: hci3: command tx timeout [ 134.675973][ T7479] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 134.843280][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.868741][ T7487] batadv_slave_0: entered promiscuous mode [ 134.895806][ T7327] chnl_net:caif_netlink_parms(): no params data found [ 135.017647][ T7494] Cannot find add_set index 0 as target [ 135.028696][ T7486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.218874][ T7486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.269176][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.278388][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.286080][ T7327] bridge_slave_0: entered allmulticast mode [ 135.302650][ T7327] bridge_slave_0: entered promiscuous mode [ 135.330088][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.341236][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.352383][ T7327] bridge_slave_1: entered allmulticast mode [ 135.360146][ T7327] bridge_slave_1: entered promiscuous mode [ 135.419809][ T7486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.502095][ T7327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.516585][ T7327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.564700][ T7486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.726557][ T7327] team0: Port device team_slave_0 added [ 135.750119][ T7327] team0: Port device team_slave_1 added [ 135.862535][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.869678][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.897724][ T7327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.004691][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.023585][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.051299][ T7535] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 136.058963][ T7535] __nla_validate_parse: 4 callbacks suppressed [ 136.058976][ T7535] netlink: 224 bytes leftover after parsing attributes in process `syz.2.400'. [ 136.080189][ T7327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.091387][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 136.107052][ T3543] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.136898][ T3543] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.165203][ T7533] syz.0.399: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 136.185296][ T6645] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.194135][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.0.399 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 136.194159][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.194177][ T7533] Call Trace: [ 136.194184][ T7533] [ 136.194193][ T7533] dump_stack_lvl+0x189/0x250 [ 136.194230][ T7533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.194252][ T7533] ? __pfx__printk+0x10/0x10 [ 136.194277][ T7533] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 136.194300][ T7533] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 136.194324][ T7533] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 136.194350][ T7533] warn_alloc+0x214/0x310 [ 136.194375][ T7533] ? stack_depot_save_flags+0x40/0x900 [ 136.194405][ T7533] ? __pfx_warn_alloc+0x10/0x10 [ 136.194432][ T7533] ? kasan_save_track+0x4f/0x80 [ 136.194452][ T7533] ? xskq_create+0x56/0x170 [ 136.194472][ T7533] ? xsk_init_queue+0xb0/0x110 [ 136.194491][ T7533] ? xsk_setsockopt+0x4dc/0x8d0 [ 136.194509][ T7533] ? do_sock_setsockopt+0x257/0x3e0 [ 136.194533][ T7533] ? __x64_sys_setsockopt+0x18b/0x220 [ 136.194558][ T7533] ? do_syscall_64+0xfa/0x3b0 [ 136.194591][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.194617][ T7533] __vmalloc_node_range_noprof+0x125/0x12f0 [ 136.194669][ T7533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.194698][ T7533] ? __kasan_kmalloc+0x93/0xb0 [ 136.194722][ T7533] vmalloc_user_noprof+0xad/0xf0 [ 136.194745][ T7533] ? xskq_create+0xbf/0x170 [ 136.194768][ T7533] xskq_create+0xbf/0x170 [ 136.194793][ T7533] xsk_init_queue+0xb0/0x110 [ 136.194816][ T7533] xsk_setsockopt+0x4dc/0x8d0 [ 136.194840][ T7533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.194860][ T7533] ? __pfx_aa_sk_perm+0x10/0x10 [ 136.194881][ T7533] ? __lock_acquire+0xab9/0xd20 [ 136.194905][ T7533] ? aa_sock_opt_perm+0x74/0x110 [ 136.194932][ T7533] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 136.194958][ T7533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.194980][ T7533] do_sock_setsockopt+0x257/0x3e0 [ 136.195010][ T7533] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 136.195040][ T7533] ? __fget_files+0x2a/0x420 [ 136.195071][ T7533] __x64_sys_setsockopt+0x18b/0x220 [ 136.195104][ T7533] do_syscall_64+0xfa/0x3b0 [ 136.195125][ T7533] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.195147][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.195163][ T7533] ? clear_bhb_loop+0x60/0xb0 [ 136.195184][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.195200][ T7533] RIP: 0033:0x7fc14b98e929 [ 136.195224][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.195239][ T7533] RSP: 002b:00007fc14c7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.195274][ T7533] RAX: ffffffffffffffda RBX: 00007fc14bbb5fa0 RCX: 00007fc14b98e929 [ 136.195288][ T7533] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 136.195299][ T7533] RBP: 00007fc14ba10b39 R08: 0000000000000004 R09: 0000000000000000 [ 136.195310][ T7533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.195321][ T7533] R13: 0000000000000000 R14: 00007fc14bbb5fa0 R15: 00007fffc011abe8 [ 136.195351][ T7533] [ 136.196707][ T7533] Mem-Info: [ 136.532917][ T5852] Bluetooth: hci3: command tx timeout [ 136.538480][ T7533] active_anon:5021 inactive_anon:0 isolated_anon:0 [ 136.538480][ T7533] active_file:1487 inactive_file:39848 isolated_file:0 [ 136.538480][ T7533] unevictable:768 dirty:257 writeback:0 [ 136.538480][ T7533] slab_reclaimable:10906 slab_unreclaimable:98678 [ 136.538480][ T7533] mapped:30186 shmem:1365 pagetables:1044 [ 136.538480][ T7533] sec_pagetables:0 bounce:0 [ 136.538480][ T7533] kernel_misc_reclaimable:0 [ 136.538480][ T7533] free:1323675 free_pcp:20530 free_cma:0 [ 136.619285][ T7533] Node 0 active_anon:19968kB inactive_anon:0kB active_file:5948kB inactive_file:159192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120772kB dirty:1040kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:3900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.665996][ T7533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.730220][ T7533] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.771020][ T7533] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 136.792149][ T7533] Node 0 DMA32 free:1384300kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20152kB inactive_anon:0kB active_file:5948kB inactive_file:157636kB unevictable:1536kB writepending:1056kB present:3129332kB managed:2558280kB mlocked:0kB bounce:0kB free_pcp:56484kB local_pcp:21184kB free_cma:0kB [ 136.832943][ T7533] lowmem_reserve[]: 0 0 1 1 1 [ 136.841813][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 136.862066][ T7533] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 136.900634][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 136.911586][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 136.922640][ T7564] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 136.930290][ T7564] netlink: 208 bytes leftover after parsing attributes in process `syz.3.404'. [ 136.943043][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 136.948803][ T7533] Node 1 Normal free:3899560kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:12096kB free_cma:0kB [ 136.981104][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 136.986142][ T7533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.025727][ T3511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.062350][ T7533] Node 0 DMA32: 995*4kB (UM) 452*8kB (UM) 87*16kB (UME) 131*32kB (UM) 14*64kB (UME) 37*128kB (UME) 74*256kB (UM) 26*512kB (UM) 9*1024kB (UME) 6*2048kB (UME) 320*4096kB (UM) = 1383292kB [ 137.086240][ T7533] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 137.120379][ T7560] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.156092][ T7327] hsr_slave_0: entered promiscuous mode [ 137.181665][ T7327] hsr_slave_1: entered promiscuous mode [ 137.187670][ T7327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.200729][ T7533] Node 1 Normal: 174*4kB (UM) 36*8kB (UME) 45*16kB (UME) 62*32kB (UME) 25*64kB (UME) 4*128kB (UME) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 950*4096kB (ME) = 3899560kB [ 137.219651][ T7327] Cannot create hsr debugfs directory [ 137.235040][ T7533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.245402][ T7533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.263957][ T7533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.274739][ T7533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.289685][ T7533] 42947 total pagecache pages [ 137.297159][ T7533] 0 pages in swap cache [ 137.301551][ T7533] Free swap = 124996kB [ 137.305840][ T7533] Total swap = 124996kB [ 137.311322][ T7533] 2097051 pages RAM [ 137.315305][ T7533] 0 pages HighMem/MovableOnly [ 137.319997][ T7533] 425439 pages reserved [ 137.324629][ T7533] 0 pages cma reserved [ 137.387735][ T7545] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 137.446310][ T7567] lo speed is unknown, defaulting to 1000 [ 137.589484][ T7574] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 137.653266][ T7574] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 137.686069][ T7575] gretap1: entered promiscuous mode [ 137.831237][ T7582] netlink: 52 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.861206][ T7582] netlink: 52 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.889399][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'. [ 137.902123][ T7582] netlink: 52 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.920968][ T7586] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 137.937138][ T7568] syzkaller1: entered promiscuous mode [ 137.944133][ T7568] syzkaller1: entered allmulticast mode [ 137.991415][ T7586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.063071][ T7589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.070093][ T7589] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.103056][ T7589] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 138.252656][ T7586] gretap1: entered promiscuous mode [ 138.288382][ T7586] bond3: (slave gretap1): making interface the new active one [ 138.319132][ T7586] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 138.612832][ T5852] Bluetooth: hci3: command tx timeout [ 138.903521][ T7601] netlink: 'syz.0.416': attribute type 32 has an invalid length. [ 138.934514][ T7601] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 139.024996][ T7599] tap0: tun_chr_ioctl cmd 1074025675 [ 139.044487][ T7599] tap0: persist disabled [ 139.070393][ T7327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.137981][ T7327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.237637][ T7327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.315799][ T7327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.423983][ T7617] lo speed is unknown, defaulting to 1000 [ 139.524570][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.545163][ T7327] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.572846][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.580024][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.595555][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.602731][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.257377][ T7327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.440768][ T7327] veth0_vlan: entered promiscuous mode [ 140.486083][ T7327] veth1_vlan: entered promiscuous mode [ 140.575662][ T7327] veth0_macvtap: entered promiscuous mode [ 140.617588][ T7327] veth1_macvtap: entered promiscuous mode [ 140.676285][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.713774][ T7327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.752183][ T3543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.770308][ T3543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.792629][ T3543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.816587][ T3543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.983679][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.011782][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.102199][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.110772][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.433687][ T7676] __nla_validate_parse: 15 callbacks suppressed [ 141.433704][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 141.723853][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 141.891578][ T5858] Bluetooth: hci3: command 0x0405 tx timeout [ 141.962049][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 142.085544][ T7695] lo speed is unknown, defaulting to 1000 [ 142.157170][ T7700] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 142.288496][ T7707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.475668][ T7712] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 142.529477][ T7713] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 142.608828][ T6645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.993536][ T7727] : entered promiscuous mode [ 143.269299][ T6645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.407659][ T6645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.515721][ T6645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.531637][ T7750] netlink: 'syz.2.457': attribute type 13 has an invalid length. [ 143.539976][ T7750] netlink: 'syz.2.457': attribute type 17 has an invalid length. [ 143.568139][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.580147][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.588441][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.596494][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.605033][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.710650][ T7750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.735108][ T7756] x_tables: duplicate underflow at hook 1 [ 143.755495][ T923] lo speed is unknown, defaulting to 1000 [ 143.774988][ T7749] tipc: Enabled bearer , priority 0 [ 143.830363][ T7753] syzkaller0: entered promiscuous mode [ 143.848643][ T7753] syzkaller0: entered allmulticast mode [ 143.865760][ T7747] lo speed is unknown, defaulting to 1000 [ 143.883834][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.912441][ T7753] tipc: Resetting bearer [ 144.186491][ T7764] tipc: Started in network mode [ 144.194985][ T7764] tipc: Node identity cea44306b7bd, cluster identity 4711 [ 144.204460][ T7764] tipc: Enabled bearer , priority 0 [ 144.223271][ T6645] bridge_slave_1: left allmulticast mode [ 144.239273][ T6645] bridge_slave_1: left promiscuous mode [ 144.257439][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.268364][ T6645] bridge_slave_0: left allmulticast mode [ 144.276747][ T6645] bridge_slave_0: left promiscuous mode [ 144.282886][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.343796][ T7766] netlink: 'syz.3.462': attribute type 9 has an invalid length. [ 144.369153][ T7766] netlink: 'syz.3.462': attribute type 6 has an invalid length. [ 145.023705][ T6645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.034683][ T6645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.044857][ T6645] bond0 (unregistering): Released all slaves [ 145.058832][ T7764] syzkaller0: entered promiscuous mode [ 145.064538][ T7764] syzkaller0: entered allmulticast mode [ 145.087010][ T7751] lo speed is unknown, defaulting to 1000 [ 145.094636][ T7748] tipc: Resetting bearer [ 145.133395][ T7748] tipc: Disabling bearer [ 145.161843][ T7763] tipc: Resetting bearer [ 145.196752][ T7763] tipc: Disabling bearer [ 145.594465][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 145.609089][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.618852][ T7749] lo speed is unknown, defaulting to 1000 [ 145.627371][ T7782] netlink: 'syz.0.466': attribute type 9 has an invalid length. [ 145.635925][ T7782] netlink: 324 bytes leftover after parsing attributes in process `syz.0.466'. [ 145.651872][ T5852] Bluetooth: hci3: command tx timeout [ 145.763131][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 145.797938][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 146.199325][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 146.285506][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 146.450954][ T6645] hsr_slave_0: left promiscuous mode [ 146.457880][ T6645] hsr_slave_1: left promiscuous mode [ 146.464104][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.471970][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.479736][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.487979][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.507386][ T6645] veth1_macvtap: left promiscuous mode [ 146.513092][ T6645] veth0_macvtap: left promiscuous mode [ 146.518745][ T6645] veth1_vlan: left promiscuous mode [ 146.525052][ T6645] veth0_vlan: left promiscuous mode [ 146.868372][ T6645] team0 (unregistering): Port device team_slave_1 removed [ 146.899073][ T6645] team0 (unregistering): Port device team_slave_0 removed [ 147.374440][ T7804] wireguard0: entered promiscuous mode [ 147.380123][ T7804] wireguard0: entered allmulticast mode [ 147.514824][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.522618][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.529932][ T7751] bridge_slave_0: entered allmulticast mode [ 147.538018][ T7751] bridge_slave_0: entered promiscuous mode [ 147.552418][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.559771][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.567049][ T7751] bridge_slave_1: entered allmulticast mode [ 147.575224][ T7751] bridge_slave_1: entered promiscuous mode [ 147.638361][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.672084][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.741285][ T5852] Bluetooth: hci3: command tx timeout [ 147.748505][ T7751] team0: Port device team_slave_0 added [ 147.784937][ T7751] team0: Port device team_slave_1 added [ 147.793653][ T7812] netlink: 'syz.0.473': attribute type 4 has an invalid length. [ 147.847966][ T7818] netlink: 'syz.0.473': attribute type 4 has an invalid length. [ 147.886595][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.893995][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.923865][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.944612][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.951650][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.982022][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.005570][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 148.021380][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 148.041774][ T7819] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 148.049447][ T7819] netlink: 208 bytes leftover after parsing attributes in process `syz.2.475'. [ 148.216515][ T7751] hsr_slave_0: entered promiscuous mode [ 148.229621][ T7751] hsr_slave_1: entered promiscuous mode [ 148.256558][ T7751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.278112][ T7751] Cannot create hsr debugfs directory [ 148.494858][ T7834] netlink: 'syz.4.479': attribute type 4 has an invalid length. [ 148.748547][ T7839] netlink: 'syz.4.481': attribute type 9 has an invalid length. [ 148.805002][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 148.864594][ T7837] syz.0.480 (7837) used greatest stack depth: 17992 bytes left [ 149.136844][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 149.146030][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 149.372684][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 149.428483][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 149.458001][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 149.480810][ T7751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.542746][ T7863] tipc: Enabled bearer , priority 0 [ 149.559296][ T7751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.580863][ T7751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.595083][ T7751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.614598][ T7863] tipc: Resetting bearer [ 149.751678][ T7863] tipc: Disabling bearer [ 149.811424][ T5852] Bluetooth: hci3: command tx timeout [ 149.827483][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.847856][ T7751] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.865185][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.872338][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.896912][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.904056][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.948502][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 149.983278][ T7889] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 150.069192][ T7893] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.082131][ T7893] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 150.092856][ T7893] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 150.203075][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.289406][ T7751] veth0_vlan: entered promiscuous mode [ 150.316302][ T7751] veth1_vlan: entered promiscuous mode [ 150.401256][ T7751] veth0_macvtap: entered promiscuous mode [ 150.445503][ T7751] veth1_macvtap: entered promiscuous mode [ 150.496579][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.526668][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.542946][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.553622][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.568115][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.580217][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.703339][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.736730][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.819707][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.853255][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.906287][ T7923] x_tables: duplicate underflow at hook 3 [ 151.143069][ T7932] lo speed is unknown, defaulting to 1000 [ 151.949379][ T3543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.739909][ T7977] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 152.817158][ T3543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.829752][ T7978] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 152.883194][ T7977] team0: Port device dummy0 added [ 152.930656][ T7978] team0: Port device dummy0 removed [ 152.953451][ T7978] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.015803][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.025980][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.034563][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.061575][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.071332][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.117603][ T7988] lo speed is unknown, defaulting to 1000 [ 153.676128][ T3543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.739119][ T8009] __nla_validate_parse: 9 callbacks suppressed [ 153.739137][ T8009] netlink: 96 bytes leftover after parsing attributes in process `syz.2.524'. [ 153.790542][ T3543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.871660][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 154.144400][ T3543] bridge_slave_1: left allmulticast mode [ 154.168738][ T3543] bridge_slave_1: left promiscuous mode [ 154.201865][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.222239][ T3543] bridge_slave_0: left allmulticast mode [ 154.231825][ T3543] bridge_slave_0: left promiscuous mode [ 154.237578][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.417153][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.427793][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.682909][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.695872][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.706636][ T3543] bond0 (unregistering): Released all slaves [ 154.763268][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.950183][ T8030] team0 (unregistering): Port device team_slave_0 removed [ 154.961511][ T8030] team0 (unregistering): Port device team_slave_1 removed [ 154.997939][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.014026][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.029566][ T7988] bridge_slave_0: entered allmulticast mode [ 155.038696][ T7988] bridge_slave_0: entered promiscuous mode [ 155.095763][ T8042] bridge_slave_0: left allmulticast mode [ 155.106497][ T8042] bridge_slave_0: left promiscuous mode [ 155.114321][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.137665][ T8042] bridge_slave_1: left allmulticast mode [ 155.143530][ T8042] bridge_slave_1: left promiscuous mode [ 155.149329][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.166381][ T8042] bond0: (slave bond_slave_0): Releasing backup interface [ 155.174255][ T5858] Bluetooth: hci3: command tx timeout [ 155.184688][ T8042] bond_slave_0: left promiscuous mode [ 155.202313][ T8042] bond0: (slave bond_slave_1): Releasing backup interface [ 155.211375][ T8042] bond_slave_1: left promiscuous mode [ 155.233169][ T8042] team0: Port device team_slave_0 removed [ 155.257238][ T8042] team0: Port device team_slave_1 removed [ 155.274494][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.285015][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.336442][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.367001][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.393722][ T7988] bridge_slave_1: entered allmulticast mode [ 155.409370][ T7988] bridge_slave_1: entered promiscuous mode [ 155.508021][ T8055] netlink: 96 bytes leftover after parsing attributes in process `syz.0.535'. [ 155.574110][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.597600][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.617961][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 155.718721][ T8066] netlink: 'syz.4.537': attribute type 5 has an invalid length. [ 155.747911][ T7988] team0: Port device team_slave_0 added [ 155.756900][ T7988] team0: Port device team_slave_1 added [ 155.849440][ T8069] netlink: 156 bytes leftover after parsing attributes in process `syz.0.538'. [ 155.922184][ T8071] netlink: 'syz.2.539': attribute type 9 has an invalid length. [ 155.932659][ T8071] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.539'. [ 156.077100][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.089600][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.136480][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.161006][ T8074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 156.170631][ T8074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 156.199502][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.220592][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.266136][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.295976][ T8080] @: renamed from vlan0 (while UP) [ 156.346788][ T3543] hsr_slave_0: left promiscuous mode [ 156.368068][ T3543] hsr_slave_1: left promiscuous mode [ 156.385479][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.399869][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.414019][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.450003][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.528721][ T3543] veth1_macvtap: left promiscuous mode [ 156.543349][ T3543] veth0_macvtap: left promiscuous mode [ 156.549083][ T3543] veth1_vlan: left promiscuous mode [ 156.554840][ T3543] veth0_vlan: left promiscuous mode [ 156.664634][ T8098] netlink: 'syz.2.545': attribute type 16 has an invalid length. [ 156.675375][ T8098] netlink: 'syz.2.545': attribute type 17 has an invalid length. [ 156.783930][ T8100] IPv6: NLM_F_REPLACE set, but no existing node found! [ 156.936988][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 156.967852][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 157.254702][ T5858] Bluetooth: hci3: command tx timeout [ 157.354460][ T8103] netlink: 'syz.4.546': attribute type 7 has an invalid length. [ 157.362826][ T8103] netlink: 'syz.4.546': attribute type 8 has an invalid length. [ 157.406429][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.414641][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.502545][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.522272][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.691091][ T5938] lo speed is unknown, defaulting to 1000 [ 157.696876][ T5938] syz1: Port: 1 Link DOWN [ 157.807640][ T3572] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.837998][ T3572] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.873180][ T5957] lo speed is unknown, defaulting to 1000 [ 157.940239][ T7988] hsr_slave_0: entered promiscuous mode [ 157.951470][ T7988] hsr_slave_1: entered promiscuous mode [ 157.960875][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.980697][ T7988] Cannot create hsr debugfs directory [ 157.991445][ T3572] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.025153][ T3572] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.095950][ T8110] lo speed is unknown, defaulting to 1000 [ 159.305254][ T8130] lo speed is unknown, defaulting to 1000 [ 159.335198][ T5858] Bluetooth: hci3: command tx timeout [ 159.345163][ T8108] syz.0.547: vmalloc error: size 3194880, failed to allocated page array size 6240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 159.391796][ T8108] CPU: 0 UID: 0 PID: 8108 Comm: syz.0.547 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 159.391822][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.391832][ T8108] Call Trace: [ 159.391839][ T8108] [ 159.391847][ T8108] dump_stack_lvl+0x189/0x250 [ 159.391878][ T8108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.391901][ T8108] ? __pfx__printk+0x10/0x10 [ 159.391926][ T8108] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.391952][ T8108] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.391977][ T8108] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 159.392003][ T8108] warn_alloc+0x214/0x310 [ 159.392041][ T8108] ? __pfx_warn_alloc+0x10/0x10 [ 159.392075][ T8108] ? __get_vm_area_node+0x28f/0x300 [ 159.392098][ T8108] ? ip_set_sockfn_get+0x13a/0xc30 [ 159.392120][ T8108] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 159.392173][ T8108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.392196][ T8108] ? ip_set_sockfn_get+0x13a/0xc30 [ 159.392216][ T8108] ? __get_vm_area_node+0x28f/0x300 [ 159.392239][ T8108] ? ip_set_sockfn_get+0x13a/0xc30 [ 159.392258][ T8108] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 159.392282][ T8108] ? ip_set_sockfn_get+0x13a/0xc30 [ 159.392327][ T8108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.392358][ T8108] ? ip_set_sockfn_get+0x13a/0xc30 [ 159.392377][ T8108] vmalloc_noprof+0xb2/0xf0 [ 159.392399][ T8108] ? ip_set_sockfn_get+0x13a/0xc30 [ 159.392419][ T8108] ip_set_sockfn_get+0x13a/0xc30 [ 159.392444][ T8108] nf_getsockopt+0x26b/0x290 [ 159.392479][ T8108] ip_getsockopt+0x1c4/0x220 [ 159.392508][ T8108] ? __pfx_ip_getsockopt+0x10/0x10 [ 159.392534][ T8108] ? sock_common_getsockopt+0x2d/0xb0 [ 159.392560][ T8108] do_sock_getsockopt+0x35d/0x650 [ 159.392590][ T8108] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 159.392617][ T8108] ? do_syscall_64+0x40/0x3b0 [ 159.392640][ T8108] ? __fget_files+0x3a0/0x420 [ 159.392662][ T8108] ? __fget_files+0x2a/0x420 [ 159.392693][ T8108] __x64_sys_getsockopt+0x1a5/0x250 [ 159.392719][ T8108] ? do_syscall_64+0x40/0x3b0 [ 159.392745][ T8108] ? do_syscall_64+0x40/0x3b0 [ 159.392773][ T8108] do_syscall_64+0xfa/0x3b0 [ 159.392795][ T8108] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.392818][ T8108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.392836][ T8108] ? clear_bhb_loop+0x60/0xb0 [ 159.392857][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.392874][ T8108] RIP: 0033:0x7fc14b98e929 [ 159.392890][ T8108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.392904][ T8108] RSP: 002b:00007fc14c7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 159.392923][ T8108] RAX: ffffffffffffffda RBX: 00007fc14bbb6080 RCX: 00007fc14b98e929 [ 159.392936][ T8108] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000008 [ 159.392946][ T8108] RBP: 00007fc14ba10b39 R08: 0000200000000040 R09: 0000000000000000 [ 159.392958][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.392968][ T8108] R13: 0000000000000000 R14: 00007fc14bbb6080 R15: 00007fffc011abe8 [ 159.392996][ T8108] [ 159.393003][ T8108] Mem-Info: [ 159.709826][ T8108] active_anon:10879 inactive_anon:0 isolated_anon:0 [ 159.709826][ T8108] active_file:1521 inactive_file:39870 isolated_file:0 [ 159.709826][ T8108] unevictable:769 dirty:187 writeback:0 [ 159.709826][ T8108] slab_reclaimable:11337 slab_unreclaimable:113239 [ 159.709826][ T8108] mapped:38094 shmem:7153 pagetables:1152 [ 159.709826][ T8108] sec_pagetables:0 bounce:0 [ 159.709826][ T8108] kernel_misc_reclaimable:0 [ 159.709826][ T8108] free:1241120 free_pcp:30538 free_cma:0 [ 159.781280][ T8108] Node 0 active_anon:43616kB inactive_anon:0kB active_file:6084kB inactive_file:159280kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:152376kB dirty:740kB writeback:0kB shmem:27076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.881599][ T8108] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 159.958891][ T8108] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.139187][ T8108] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 160.201226][ T8108] Node 0 DMA32 free:1046796kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45368kB inactive_anon:0kB active_file:6084kB inactive_file:157724kB unevictable:1540kB writepending:736kB present:3129332kB managed:2558280kB mlocked:4kB bounce:0kB free_pcp:96152kB local_pcp:33680kB free_cma:0kB [ 160.285291][ T8108] lowmem_reserve[]: 0 0 1 1 1 [ 160.290144][ T8108] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 160.361304][ T8108] lowmem_reserve[]: 0 0 0 0 0 [ 160.366082][ T8108] Node 1 Normal free:3900892kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19552kB local_pcp:11552kB free_cma:0kB [ 160.401811][ T8108] lowmem_reserve[]: 0 0 0 0 0 [ 160.406635][ T8108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.427293][ T8108] Node 0 DMA32: 2*4kB (UE) 2*8kB (E) 4*16kB (ME) 1*32kB (M) 2*64kB (UE) 1*128kB (U) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 0*2048kB 255*4096kB (M) = 1046648kB [ 160.444925][ T8108] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 160.494254][ T8136] lo speed is unknown, defaulting to 1000 [ 160.495272][ T8108] Node 1 Normal: 171*4kB (UM) 36*8kB (UME) 45*16kB (UME) 88*32kB (UME) 33*64kB (UME) 4*128kB (UME) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 950*4096kB (ME) = 3900892kB [ 160.526743][ T8108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.537549][ T8108] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.555146][ T8108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.565140][ T8108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.582103][ T8108] 48541 total pagecache pages [ 160.586796][ T8108] 0 pages in swap cache [ 160.590957][ T8108] Free swap = 124996kB [ 160.595700][ T8108] Total swap = 124996kB [ 160.599875][ T8108] 2097051 pages RAM [ 160.604058][ T8108] 0 pages HighMem/MovableOnly [ 160.608822][ T8108] 425439 pages reserved [ 160.613633][ T8108] 0 pages cma reserved [ 160.618842][ T7988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.652705][ T7988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.707450][ T7988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.727906][ T7988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.936260][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.984951][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.008717][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.015993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.112431][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.119585][ T8168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.412533][ T5858] Bluetooth: hci3: command tx timeout [ 162.204440][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.217203][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.226263][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.237145][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.245568][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.385427][ T8194] lo speed is unknown, defaulting to 1000 [ 162.416527][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.493433][ T7988] veth0_vlan: entered promiscuous mode [ 162.517907][ T7988] veth1_vlan: entered promiscuous mode [ 162.596138][ T7988] veth0_macvtap: entered promiscuous mode [ 162.628603][ T7988] veth1_macvtap: entered promiscuous mode [ 162.825738][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.866399][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.917505][ T8168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.952356][ T8168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.974570][ T8168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.046520][ T8168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.327373][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.346687][ T8226] netlink: 'syz.4.563': attribute type 1 has an invalid length. [ 163.353599][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.440830][ T8226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.486556][ T8226] __nla_validate_parse: 7 callbacks suppressed [ 163.486570][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.563'. [ 163.547841][ T8228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.558302][ T8228] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 163.570605][ T8228] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 163.597407][ T8230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.564'. [ 163.617256][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.640491][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.827821][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 164.160068][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.167715][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.178982][ T8194] bridge_slave_0: entered allmulticast mode [ 164.188067][ T8194] bridge_slave_0: entered promiscuous mode [ 164.210434][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.229663][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.238133][ T8194] bridge_slave_1: entered allmulticast mode [ 164.248939][ T8194] bridge_slave_1: entered promiscuous mode [ 164.262832][ T8246] lo speed is unknown, defaulting to 1000 [ 164.307239][ T5858] Bluetooth: hci5: command tx timeout [ 164.427186][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.504988][ T8168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.576348][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.715606][ T8194] team0: Port device team_slave_0 added [ 164.733920][ T8194] team0: Port device team_slave_1 added [ 164.797627][ T8168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.812440][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.819506][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.846337][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.867251][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.874489][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.902466][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.960579][ T8168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.033296][ T8194] hsr_slave_0: entered promiscuous mode [ 165.039642][ T8194] hsr_slave_1: entered promiscuous mode [ 165.047223][ T8194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.055539][ T8194] Cannot create hsr debugfs directory [ 165.113582][ T8168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.266320][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 165.595651][ T8272] netlink: 'syz.0.576': attribute type 11 has an invalid length. [ 165.612200][ T8272] netlink: 244 bytes leftover after parsing attributes in process `syz.0.576'. [ 165.776462][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 165.814317][ T8168] bridge_slave_1: left allmulticast mode [ 165.826745][ T8168] bridge_slave_1: left promiscuous mode [ 165.834906][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.855703][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.864217][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 165.877798][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.886297][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.910986][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.921558][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.929159][ T8168] bridge_slave_0: left allmulticast mode [ 165.937707][ T8168] bridge_slave_0: left promiscuous mode [ 165.963533][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.193561][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 166.204163][ T8291] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 166.359266][ T8168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.370110][ T8168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.378909][ T5858] Bluetooth: hci5: command tx timeout [ 166.392533][ T8168] bond0 (unregistering): Released all slaves [ 166.627899][ T8293] tipc: Resetting bearer [ 167.566648][ T6644] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.629104][ T6644] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.671279][ T6644] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.738958][ T8279] lo speed is unknown, defaulting to 1000 [ 167.738971][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.967828][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.589'. [ 167.975371][ T5858] Bluetooth: hci3: command tx timeout [ 168.068153][ T8194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.096076][ T8194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.162510][ T8194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.204667][ T8194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.313132][ T8326] lo speed is unknown, defaulting to 1000 [ 168.458024][ T5858] Bluetooth: hci5: command tx timeout [ 168.540924][ T8344] tipc: Started in network mode [ 168.571330][ T8344] tipc: Node identity a6b2a8a6f22c, cluster identity 4711 [ 168.579949][ T8344] tipc: Enabled bearer , priority 0 [ 168.644432][ T8345] syzkaller0: entered promiscuous mode [ 168.652390][ T8345] syzkaller0: entered allmulticast mode [ 168.807327][ T8168] hsr_slave_0: left promiscuous mode [ 168.829030][ T8168] hsr_slave_1: left promiscuous mode [ 168.835476][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.846478][ T8168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.866054][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.874951][ T8168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.912726][ T8168] veth1_macvtap: left promiscuous mode [ 168.919537][ T8168] veth0_macvtap: left promiscuous mode [ 168.928783][ T8168] veth1_vlan: left promiscuous mode [ 168.938881][ T8168] veth0_vlan: left promiscuous mode [ 169.340024][ T8168] team0 (unregistering): Port device team_slave_1 removed [ 169.374567][ T8168] team0 (unregistering): Port device team_slave_0 removed [ 169.571881][ T5967] tipc: Node number set to 1419684006 [ 169.698477][ T8345] tipc: Resetting bearer [ 169.745032][ T8343] tipc: Resetting bearer [ 169.786037][ T8343] tipc: Disabling bearer [ 169.937177][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.018522][ T8359] netlink: 96 bytes leftover after parsing attributes in process `syz.2.597'. [ 170.051375][ T5858] Bluetooth: hci3: command tx timeout [ 170.132490][ T8194] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.157691][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.165394][ T6644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.263767][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.270926][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.347411][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 170.393852][ T8370] netlink: 'syz.0.599': attribute type 5 has an invalid length. [ 170.443904][ T8370] netlink: 'syz.0.599': attribute type 7 has an invalid length. [ 170.527030][ T8372] batman_adv: batadv0: Adding interface: gretap1 [ 170.536512][ T5858] Bluetooth: hci5: command tx timeout [ 170.541115][ T8372] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.601213][ T8372] batman_adv: batadv0: Interface activated: gretap1 [ 170.630888][ T8370] : entered promiscuous mode [ 170.787872][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.799189][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.808158][ T8279] bridge_slave_0: entered allmulticast mode [ 170.820308][ T8279] bridge_slave_0: entered promiscuous mode [ 170.836201][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.865998][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.873506][ T8279] bridge_slave_1: entered allmulticast mode [ 170.884258][ T8279] bridge_slave_1: entered promiscuous mode [ 170.990850][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.045615][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.247624][ T8279] team0: Port device team_slave_0 added [ 171.265007][ T8279] team0: Port device team_slave_1 added [ 171.405910][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.423328][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.450274][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.474731][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.484912][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.554941][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.711908][ T8279] hsr_slave_0: entered promiscuous mode [ 171.732625][ T8279] hsr_slave_1: entered promiscuous mode [ 171.767139][ T8279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.787008][ T8279] Cannot create hsr debugfs directory [ 171.884459][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.961513][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 172.122405][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.133754][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.135251][ T5858] Bluetooth: hci3: command tx timeout [ 172.188768][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.333297][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.342495][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.583211][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.596595][ T8194] veth0_vlan: entered promiscuous mode [ 172.614612][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 172.652020][ T8194] veth1_vlan: entered promiscuous mode [ 172.680768][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 172.801295][ T8194] veth0_macvtap: entered promiscuous mode [ 172.860910][ T8194] veth1_macvtap: entered promiscuous mode [ 172.886603][ T8279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.910654][ T8279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.954146][ T8279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.984507][ T8279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.039911][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.061745][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.246470][ T8174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.260598][ T8174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.329993][ T8459] syzkaller0: entered promiscuous mode [ 173.341532][ T8459] syzkaller0: entered allmulticast mode [ 173.379450][ T8174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.397889][ T8174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.212853][ T5858] Bluetooth: hci3: command tx timeout [ 174.521273][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.553969][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.653699][ T8174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.668138][ T8174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.745330][ T8478] netlink: 'syz.0.627': attribute type 2 has an invalid length. [ 174.875756][ T8476] lo speed is unknown, defaulting to 1000 [ 174.885302][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.983642][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.023909][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.031225][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.103782][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.110880][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.190044][ T8491] netlink: 'syz.5.556': attribute type 1 has an invalid length. [ 175.494236][ T8513] __nla_validate_parse: 4 callbacks suppressed [ 175.494254][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 175.936899][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.024009][ T8279] veth0_vlan: entered promiscuous mode [ 176.087847][ T8279] veth1_vlan: entered promiscuous mode [ 176.259026][ T8279] veth0_macvtap: entered promiscuous mode [ 176.315468][ T8279] veth1_macvtap: entered promiscuous mode [ 176.416157][ T8545] netlink: 88 bytes leftover after parsing attributes in process `syz.2.644'. [ 176.458755][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.499068][ T8545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.644'. [ 176.537094][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 176.564765][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.580029][ T6644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.590920][ T6644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.718286][ T6644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.736571][ T6644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.757634][ T8551] syzkaller0: entered allmulticast mode [ 176.826548][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 176.999205][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.033963][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.244358][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.283246][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.451629][ T8424] ------------[ cut here ]------------ [ 177.457272][ T8424] refcount_t: underflow; use-after-free. [ 177.463355][ T8424] WARNING: CPU: 1 PID: 8424 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 177.472841][ T8424] Modules linked in: [ 177.476884][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: kbnepd 1Èw2; Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 177.489185][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.499444][ T8424] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 177.505619][ T8424] Code: 80 53 e2 8b e8 17 59 c2 fc 90 0f 0b 90 90 eb d7 e8 9b 7a fe fc c6 05 b7 67 ca 0a 01 90 48 c7 c7 e0 53 e2 8b e8 f7 58 c2 fc 90 <0f> 0b 90 90 eb b7 e8 7b 7a fe fc c6 05 94 67 ca 0a 01 90 48 c7 c7 [ 177.525312][ T8424] RSP: 0018:ffffc90002ee7700 EFLAGS: 00010246 [ 177.531399][ T8424] RAX: d50662e5a628f400 RBX: 0000000000000003 RCX: ffff888069babc00 [ 177.539366][ T8424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 177.547380][ T8424] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 177.555790][ T8424] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dffffc0000000000 [ 177.564090][ T8424] R13: ffff88804a9e9c60 R14: ffff88804a9e9c78 R15: ffffffff85f6c0d0 [ 177.572285][ T8424] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 177.581271][ T8424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.587851][ T8424] CR2: 00007fc14bb7f2d8 CR3: 0000000033ce8000 CR4: 00000000003526f0 [ 177.595847][ T8424] Call Trace: [ 177.599116][ T8424] [ 177.602061][ T8424] klist_dec_and_del+0x3c7/0x3d0 [ 177.606997][ T8424] ? __pfx_klist_children_put+0x10/0x10 [ 177.612580][ T8424] klist_del+0xa6/0x110 [ 177.616732][ T8424] device_del+0x280/0x8e0 [ 177.621086][ T8424] ? _raw_spin_unlock_irq+0x2e/0x50 [ 177.626277][ T8424] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 177.632370][ T8424] ? __pfx_device_del+0x10/0x10 [ 177.637218][ T8424] ? netdev_unregister_kobject+0x344/0x450 [ 177.643051][ T8424] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 177.649474][ T8424] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 177.656718][ T8424] ? rtnl_net_dev_lock+0x257/0x2f0 [ 177.662123][ T8424] unregister_netdevice_queue+0x33c/0x380 [ 177.667839][ T8424] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 177.674116][ T8424] ? rtnl_net_dev_lock+0x36/0x2f0 [ 177.679155][ T8424] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 177.684308][ T8424] unregister_netdev+0x1f/0x60 [ 177.689068][ T8424] bnep_session+0x294d/0x2b40 [ 177.693793][ T8424] ? trace_sched_exit_tp+0x38/0x120 [ 177.698984][ T8424] ? __lock_acquire+0xab9/0xd20 [ 177.703881][ T8424] ? __pfx_bnep_session+0x10/0x10 [ 177.708900][ T8424] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 177.714814][ T8424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.721148][ T8424] ? __pfx_woken_wake_function+0x10/0x10 [ 177.726766][ T8424] ? __kthread_parkme+0x7b/0x200 [ 177.731769][ T8424] ? __kthread_parkme+0x1a1/0x200 [ 177.736789][ T8424] kthread+0x70e/0x8a0 [ 177.740859][ T8424] ? __pfx_bnep_session+0x10/0x10 [ 177.745900][ T8424] ? __pfx_kthread+0x10/0x10 [ 177.750505][ T8424] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.756112][ T8424] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.761651][ T8424] ? __pfx_kthread+0x10/0x10 [ 177.766247][ T8424] ret_from_fork+0x3fc/0x770 [ 177.770833][ T8424] ? __pfx_ret_from_fork+0x10/0x10 [ 177.775962][ T8424] ? __switch_to_asm+0x39/0x70 [ 177.780736][ T8424] ? __switch_to_asm+0x33/0x70 [ 177.785523][ T8424] ? __pfx_kthread+0x10/0x10 [ 177.790115][ T8424] ret_from_fork_asm+0x1a/0x30 [ 177.794914][ T8424] [ 177.797935][ T8424] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.805208][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: kbnepd 1Èw2; Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 177.817434][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.827486][ T8424] Call Trace: [ 177.830766][ T8424] [ 177.833690][ T8424] dump_stack_lvl+0x99/0x250 [ 177.838274][ T8424] ? __asan_memcpy+0x40/0x70 [ 177.842854][ T8424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.848056][ T8424] ? __pfx__printk+0x10/0x10 [ 177.852653][ T8424] panic+0x2db/0x790 [ 177.856544][ T8424] ? __pfx_panic+0x10/0x10 [ 177.860973][ T8424] ? show_trace_log_lvl+0x4fb/0x550 [ 177.866177][ T8424] ? ret_from_fork_asm+0x1a/0x30 [ 177.871111][ T8424] __warn+0x31b/0x4b0 [ 177.875084][ T8424] ? refcount_warn_saturate+0x11a/0x1d0 [ 177.880628][ T8424] ? refcount_warn_saturate+0x11a/0x1d0 [ 177.886182][ T8424] report_bug+0x2be/0x4f0 [ 177.890506][ T8424] ? refcount_warn_saturate+0x11a/0x1d0 [ 177.896062][ T8424] ? refcount_warn_saturate+0x11a/0x1d0 [ 177.901611][ T8424] ? refcount_warn_saturate+0x11c/0x1d0 [ 177.907161][ T8424] handle_bug+0x84/0x160 [ 177.911397][ T8424] exc_invalid_op+0x1a/0x50 [ 177.915895][ T8424] asm_exc_invalid_op+0x1a/0x20 [ 177.920737][ T8424] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 177.926883][ T8424] Code: 80 53 e2 8b e8 17 59 c2 fc 90 0f 0b 90 90 eb d7 e8 9b 7a fe fc c6 05 b7 67 ca 0a 01 90 48 c7 c7 e0 53 e2 8b e8 f7 58 c2 fc 90 <0f> 0b 90 90 eb b7 e8 7b 7a fe fc c6 05 94 67 ca 0a 01 90 48 c7 c7 [ 177.946477][ T8424] RSP: 0018:ffffc90002ee7700 EFLAGS: 00010246 [ 177.952533][ T8424] RAX: d50662e5a628f400 RBX: 0000000000000003 RCX: ffff888069babc00 [ 177.960498][ T8424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 177.968475][ T8424] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 177.976457][ T8424] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dffffc0000000000 [ 177.984434][ T8424] R13: ffff88804a9e9c60 R14: ffff88804a9e9c78 R15: ffffffff85f6c0d0 [ 177.992407][ T8424] ? __pfx_klist_children_put+0x10/0x10 [ 177.997971][ T8424] klist_dec_and_del+0x3c7/0x3d0 [ 178.002910][ T8424] ? __pfx_klist_children_put+0x10/0x10 [ 178.008541][ T8424] klist_del+0xa6/0x110 [ 178.012709][ T8424] device_del+0x280/0x8e0 [ 178.017041][ T8424] ? _raw_spin_unlock_irq+0x2e/0x50 [ 178.022239][ T8424] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 178.028331][ T8424] ? __pfx_device_del+0x10/0x10 [ 178.033193][ T8424] ? netdev_unregister_kobject+0x344/0x450 [ 178.038998][ T8424] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 178.045446][ T8424] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 178.052213][ T8424] ? rtnl_net_dev_lock+0x257/0x2f0 [ 178.057330][ T8424] unregister_netdevice_queue+0x33c/0x380 [ 178.063051][ T8424] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 178.069295][ T8424] ? rtnl_net_dev_lock+0x36/0x2f0 [ 178.074332][ T8424] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 178.079470][ T8424] unregister_netdev+0x1f/0x60 [ 178.084239][ T8424] bnep_session+0x294d/0x2b40 [ 178.088935][ T8424] ? trace_sched_exit_tp+0x38/0x120 [ 178.094138][ T8424] ? __lock_acquire+0xab9/0xd20 [ 178.098998][ T8424] ? __pfx_bnep_session+0x10/0x10 [ 178.104016][ T8424] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.109909][ T8424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.116244][ T8424] ? __pfx_woken_wake_function+0x10/0x10 [ 178.121872][ T8424] ? __kthread_parkme+0x7b/0x200 [ 178.126805][ T8424] ? __kthread_parkme+0x1a1/0x200 [ 178.131922][ T8424] kthread+0x70e/0x8a0 [ 178.136013][ T8424] ? __pfx_bnep_session+0x10/0x10 [ 178.141035][ T8424] ? __pfx_kthread+0x10/0x10 [ 178.145654][ T8424] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.150842][ T8424] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.156033][ T8424] ? __pfx_kthread+0x10/0x10 [ 178.160641][ T8424] ret_from_fork+0x3fc/0x770 [ 178.165227][ T8424] ? __pfx_ret_from_fork+0x10/0x10 [ 178.170343][ T8424] ? __switch_to_asm+0x39/0x70 [ 178.175112][ T8424] ? __switch_to_asm+0x33/0x70 [ 178.179870][ T8424] ? __pfx_kthread+0x10/0x10 [ 178.184461][ T8424] ret_from_fork_asm+0x1a/0x30 [ 178.189236][ T8424] [ 179.303342][ T8424] Shutting down cpus with NMI [ 179.308428][ T8424] Kernel Offset: disabled [ 179.312754][ T8424] Rebooting in 86400 seconds..