last executing test programs: 5.417761395s ago: executing program 0 (id=429): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) shutdown(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x0, 0x0}, 0x30) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="012229bd7000ffdbdf25820000001400010020010000000000000000000000000002050005c21480f23d"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) 4.61529368s ago: executing program 0 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtaction={0x78, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_gact={0x34, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "42ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x70bd2d, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x785}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) 4.468701672s ago: executing program 0 (id=438): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', &(0x7f000000aa40)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x1a, 0x1, 0x1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x40, 0x100, 0x40d}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket(0x28, 0x800, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000fffffffbffffaaaaaaaaaad608005900002c00002000002f"], 0x3e) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 4.116860209s ago: executing program 0 (id=442): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002e92c4bb800"/24], 0x48}, 0x300}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000742086a6a5c7ce4ada489a6108000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797ac68743442a704bfe6aff70ef4edf62310000000014000480080001400000000008000240000000000a000700726f757465000000140000001100010000000000000000000000000a82eb7a0f946421213387c1cf274ec8"], 0x94}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000020000000000004c0000000f00a9007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async, rerun: 32) r8 = socket(0x40000000002, 0x3, 0x80000000002) (rerun: 32) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) (async) sendto$unix(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) (async, rerun: 32) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000080)) (async, rerun: 32) accept4(r7, 0x0, 0x0, 0x0) (async) socket(0x11, 0x5, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async, rerun: 64) socket$kcm(0x2, 0xa, 0x2) (rerun: 64) 3.870892001s ago: executing program 0 (id=446): pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r2, 0x8f5, 0x100000000000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="969f738aefd16d5b9f752a17f6914e0bdd11521ea7cd041e067fe60043a0d16c85021d4d17d1bda0f4a0bf44a7fcd8a4e92a331fe4cf99ed3ec66d18c4ae7445b83d1ac53f49a150cb956d6821b31a7fb8178792d475eedad4e8101777cbdfbbfb90e87f8a0201b40db7c4d8301742814928c74d93800ec123a87819ad76477a58", 0x81}, {&(0x7f0000000280)="08da93099855456eef448021d2d91cf1d0b957c5cb149222a39b8b84ef5d55590b97416b2ee7037f84dad570a922fcd2b7421fd54eaf6874cc57492ae14bc60e5714f854ec4c364df2d7d9c146b0129fd42bd05a340343d5b870affe24a9e00d2779f828d05079acbb5adb5382f4f0a63e54745852d9244ffbbf2096924fac33eedaf33c3999f90b163cf47263f5ae64e8dca81516cb3864732898fc078dc5c1199c6b7990569659c46500e2eaba91071562f4148dcc491224e1cf19745ef10f3411a0eb812344d32f80c522753a4bc9", 0xd0}], 0x2, &(0x7f00000000c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20040000}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.396298014s ago: executing program 3 (id=456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x0, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6, &(0x7f00000008c0)={[0x800]}, 0x8) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r6, 0x0, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x24}, @jmp={0x5, 0x1, 0xa, 0xb, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f0000000500)='GPL\x00', 0x2, 0x6f, &(0x7f0000000540)=""/111, 0x41100, 0x34, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x3, 0x58, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x5, 0xd, 0x2}], 0x10, 0x754, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000800)=0xfff, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x20}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x54}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000780)=r8}, 0x20) 3.217946073s ago: executing program 1 (id=457): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3.105108683s ago: executing program 3 (id=458): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r3, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380)=0x3d70, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0) 2.714618402s ago: executing program 1 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtaction={0x78, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_gact={0x34, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "42ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x70bd2d, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x785}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) 2.482858947s ago: executing program 1 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.422061713s ago: executing program 2 (id=463): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.362320725s ago: executing program 4 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250300000000000000001600000014000180"], 0x5f}}, 0x0) 2.351013646s ago: executing program 3 (id=465): socket(0x11, 0x4, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) accept4$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @null}, [@rose, @netrom, @rose, @bcast, @rose, @remote, @remote, @null]}, &(0x7f0000000280)=0x48, 0x800) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r4, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.296248495s ago: executing program 2 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@deltfilter={0x100, 0x2d, 0xa10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x1, 0xe}, {0xfff1, 0x8}, {0xfff1, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff5}, @filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x9, 0x3, 0x50, {0xfc, 0x0, 0x2, 0x6, 0x1, 0x4}, {0x9, 0x1, 0x1, 0x7, 0xb, 0x8001}, 0x4, 0x4, 0x5}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2a}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_RATE={0x6, 0x5, {0x1, 0x40}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0xd1, 0x10}}]}, 0x100}, 0x1, 0x0, 0x0, 0xc1}, 0x800) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) 2.258095509s ago: executing program 2 (id=467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) (async) 2.150209082s ago: executing program 2 (id=468): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000300000000002900850000000300000081000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008ec0a0000000000"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="18014db80de51cabead71297d90df007220bb8a9b8225f00000414010028bd7000fedbdf000000000001000000"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000004c0)=0x7ff, 0x4) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff, 0x1, 0x0, 0x6, 0x0, 0x61b}, 0xfffffffffffffdd3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x305480, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r11, &(0x7f0000003440)=[{{&(0x7f0000000400)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, 0x0}}], 0x1, 0x20000010) write$tun(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="00000018018403000a008323561baaaaaaaaaaaaaaaaaaaaaabb88a84e0081004700000c040000200003000092afa54f1bf2b801010000be298b500b5aa964d134c369068274ec79246b73ba2a7d8310d0fdf7efa1164d582b904d86c7777b475c6a0c1ce3ba524098efc8cbdf0f6b4e19"], 0x34) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000125a030affd2000000000000000000"], 0x14}}, 0x0) 1.934363669s ago: executing program 4 (id=469): socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x37, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x2}]}, 0x1c}}, 0x4010) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x204400, 0x0) 1.717935189s ago: executing program 2 (id=470): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) close(r1) pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.71725574s ago: executing program 1 (id=471): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x7f87, 0x1, 0x6, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x68, 0x0, 0xf, 0x2b, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0x52, 0x0, 0xf, [0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r1, 0x0, 0x8, 0xc, 0x1, 0x51, @local, @loopback={0x0, 0x460c6}, 0x8000, 0x0, 0x1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf8400000000000007040000f0ffffffb70200000800fff818230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='\x00}'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x1000) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) 1.595101523s ago: executing program 2 (id=472): unshare(0x62040200) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, 0x0}, 0x138) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x0, 0x10000}) preadv(r2, &(0x7f0000000200), 0x1, 0x2, 0x9) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/136, 0x88}, {&(0x7f0000000340)}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/142, 0x8e}], 0x4}, 0xffffffff}], 0x1, 0x32, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="85a785d98acb0c4b5ea516ba14c40667d4106c1cfc1e47ef2fbe4d26a7d7b2728cb7223be3bad3d869770f948bdb3a3d656226a4050ce633db072d111a38bd33849d8a694a6717b890876e955cb77b5a70e46d07d86b2a6d83be71584de556ea3e2cc24a14a770a17699fe0af14f6130335982496ccb7dafb3bcccb729f9376f73d49a7ba3f41e1396d3f2f9959cdadb401126afd646c6c0c0418783753e57c614120d4df0c212dbd81bcef3a6aad07fcc0f4cf63a5de8ae2feb55ab339447fc46aac0b557ae2c2600af11e467e6d1", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) socket$phonet_pipe(0x23, 0x5, 0x2) 1.477133512s ago: executing program 1 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtaction={0x78, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_gact={0x34, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "42ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x70bd2d, 0xfffffffd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x785}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) 1.28288462s ago: executing program 1 (id=474): socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8104}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 865.221788ms ago: executing program 3 (id=475): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) (async) r1 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x24, 0x0, 0xdf, 0xe8}, 0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4067, &(0x7f0000000040)=0xfe3) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c"], 0xc4}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) sendmsg$nl_route(r3, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r5, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x4000}, 0x20040880) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[], 0x20) (async) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000000000080012000200020000000000000000001000320003000000000000000000000010003300000000000000000000000008fc020000000000000efa47680000000000000000030005000000000002000000ac1414aa00000000000000000300060000000000020000000000000000000000000000000000a00000"], 0x80}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000180059"], 0xfe33) (async) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000000000000000000000000001042081000002892f00000800000086dd88a8"], 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 681.948396ms ago: executing program 4 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x102, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 681.686726ms ago: executing program 0 (id=477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="911046000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xc, 0x18, 0xd, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @none, 0x8}, 0xe) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) 641.077438ms ago: executing program 3 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="271303c4be5eba000000002800"/24], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x24, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x7, 0x6, 0x17, 0x4, 0x4, 0x1}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="060000001405000003000000050000008186db52", @ANYRES32=r3, @ANYBLOB="008000"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000000100"/20, @ANYRES32=r7, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x50) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ff64729870616e000010000280050016000000000004001200"/40], 0x40}}, 0x80) write$cgroup_int(r6, &(0x7f0000000240)=0x3, 0x12) 570.850603ms ago: executing program 4 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250300000000000000001600000014000180"], 0x5f}}, 0x0) 187.631277ms ago: executing program 4 (id=480): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty, 0x400}, 0x1c) r2 = socket(0x2b, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x800) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x6, 0xffff, 0x0, 0x0, {[@mss={0x2, 0x4, 0x3}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x201, 0xd}, @exp_smc={0xfe, 0x6}, @nop, @sack={0x5, 0x16, [0x5, 0x5, 0x1, 0x0, 0xc0]}, @generic={0x5, 0xd, "829e7a6ae7a3b5e1824601"}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) 184.62451ms ago: executing program 3 (id=481): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote, @loopback, @local, 0x5, 0x400, 0xfffc, 0x100, 0x8, 0x200}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote, @loopback, @local, 0x5, 0x400, 0xfffc, 0x100, 0x8, 0x200}) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) 0s ago: executing program 4 (id=482): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000001780)={&(0x7f00000016c0)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14, &(0x7f0000001740)={&(0x7f0000001700)="e59434dd807daa496117180746ef7b7eba3f839d32c92b378e78e3", 0x1b}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000000) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18040000000000000000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYRESOCT=r1], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000280)=0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000104050000000000000000000700000006000640005ce800050001"], 0x24}}, 0x2000004) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, 0x0, &(0x7f00000000c0)=""/66}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0x200, '\x00', r8, r9, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) socket$alg(0x26, 0x5, 0x0) unshare(0x400) socket(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="2d0055076fd78200feffdf835bd5e755d758f24da2b2bb0fc4bf3efed342b81e65253d8d0c23", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r7], 0x20) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="a67f00000000000000fc") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 67.224544][ T5810] cgroup: Unknown subsys name 'net' [ 67.400505][ T5810] cgroup: Unknown subsys name 'cpuset' [ 67.408816][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.701000][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.139188][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.165915][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.195446][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.206812][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.209883][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.215689][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.229923][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.231268][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.237194][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.250125][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.260508][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.260693][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.274749][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.275944][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.283211][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.290820][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.296801][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.303255][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.311539][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.320284][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.324748][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.332028][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.343300][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.355759][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.379080][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.419323][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426799][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.922249][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.992764][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.112139][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 72.222934][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 72.276078][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 72.302975][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.310729][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.318893][ T5826] bridge_slave_0: entered allmulticast mode [ 72.326570][ T5826] bridge_slave_0: entered promiscuous mode [ 72.390865][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.398272][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.405819][ T5826] bridge_slave_1: entered allmulticast mode [ 72.412835][ T5826] bridge_slave_1: entered promiscuous mode [ 72.453800][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.460994][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.470631][ T5823] bridge_slave_0: entered allmulticast mode [ 72.478048][ T5823] bridge_slave_0: entered promiscuous mode [ 72.533598][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.540880][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.548538][ T5823] bridge_slave_1: entered allmulticast mode [ 72.555640][ T5823] bridge_slave_1: entered promiscuous mode [ 72.584259][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.593878][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.601134][ T5820] bridge_slave_0: entered allmulticast mode [ 72.609729][ T5820] bridge_slave_0: entered promiscuous mode [ 72.632816][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.644142][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.682394][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.689819][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.697653][ T5820] bridge_slave_1: entered allmulticast mode [ 72.704654][ T5820] bridge_slave_1: entered promiscuous mode [ 72.772700][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.780137][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.788051][ T5822] bridge_slave_0: entered allmulticast mode [ 72.794977][ T5822] bridge_slave_0: entered promiscuous mode [ 72.816836][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.829536][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.841369][ T5826] team0: Port device team_slave_0 added [ 72.859340][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.867157][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.874444][ T5822] bridge_slave_1: entered allmulticast mode [ 72.881745][ T5822] bridge_slave_1: entered promiscuous mode [ 72.935737][ T5826] team0: Port device team_slave_1 added [ 72.943134][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.950719][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.958553][ T5821] bridge_slave_0: entered allmulticast mode [ 72.965727][ T5821] bridge_slave_0: entered promiscuous mode [ 72.974792][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.982504][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.989735][ T5821] bridge_slave_1: entered allmulticast mode [ 72.997424][ T5821] bridge_slave_1: entered promiscuous mode [ 73.022297][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.046519][ T5823] team0: Port device team_slave_0 added [ 73.066298][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.079798][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.103088][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.110337][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.136476][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.150364][ T5823] team0: Port device team_slave_1 added [ 73.184384][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.209470][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.217367][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.243582][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.268260][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.281557][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.323196][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.330334][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.356840][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.394880][ T5820] team0: Port device team_slave_0 added [ 73.396365][ T5833] Bluetooth: hci2: command tx timeout [ 73.400691][ T5138] Bluetooth: hci4: command tx timeout [ 73.409940][ T5833] Bluetooth: hci3: command tx timeout [ 73.415593][ T5820] team0: Port device team_slave_1 added [ 73.437673][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.444630][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.471108][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.481875][ T5833] Bluetooth: hci1: command tx timeout [ 73.481882][ T5138] Bluetooth: hci0: command tx timeout [ 73.506086][ T5822] team0: Port device team_slave_0 added [ 73.540745][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.548011][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.574465][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.588445][ T5821] team0: Port device team_slave_0 added [ 73.597101][ T5822] team0: Port device team_slave_1 added [ 73.620309][ T5826] hsr_slave_0: entered promiscuous mode [ 73.627015][ T5826] hsr_slave_1: entered promiscuous mode [ 73.634704][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.642272][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.668415][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.681664][ T5821] team0: Port device team_slave_1 added [ 73.770823][ T5823] hsr_slave_0: entered promiscuous mode [ 73.778595][ T5823] hsr_slave_1: entered promiscuous mode [ 73.784616][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.792678][ T5823] Cannot create hsr debugfs directory [ 73.812046][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.819139][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.845127][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.857391][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.864357][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.891774][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.904128][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.911430][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.938242][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.967838][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.974806][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001355][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.042196][ T5820] hsr_slave_0: entered promiscuous mode [ 74.048884][ T5820] hsr_slave_1: entered promiscuous mode [ 74.055044][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.063045][ T5820] Cannot create hsr debugfs directory [ 74.195008][ T5821] hsr_slave_0: entered promiscuous mode [ 74.206565][ T5821] hsr_slave_1: entered promiscuous mode [ 74.212661][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.221944][ T5821] Cannot create hsr debugfs directory [ 74.248166][ T5822] hsr_slave_0: entered promiscuous mode [ 74.254526][ T5822] hsr_slave_1: entered promiscuous mode [ 74.260950][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.268564][ T5822] Cannot create hsr debugfs directory [ 74.738104][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.762076][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.788244][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.809033][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.831175][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.853268][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.863783][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.889647][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.951209][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.963494][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.977681][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.990800][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.071120][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.094222][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.104932][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.137112][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.244279][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.261947][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.273442][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.286835][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.323712][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.411831][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.422785][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.457230][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.464521][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.476405][ T5833] Bluetooth: hci4: command tx timeout [ 75.476456][ T5829] Bluetooth: hci3: command tx timeout [ 75.487727][ T5138] Bluetooth: hci2: command tx timeout [ 75.522953][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.530177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.544026][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.555577][ T5138] Bluetooth: hci1: command tx timeout [ 75.561015][ T5829] Bluetooth: hci0: command tx timeout [ 75.595105][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.602329][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.635121][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.657694][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.664823][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.732695][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.748757][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.778562][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.807791][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.815613][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.852745][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.864081][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.871305][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.906694][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.924599][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.931804][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.957957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.965108][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.012328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.019538][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.078086][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.085308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.171583][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.242403][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.253138][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.455038][ T5821] veth0_vlan: entered promiscuous mode [ 76.483303][ T5821] veth1_vlan: entered promiscuous mode [ 76.507616][ T5826] veth0_vlan: entered promiscuous mode [ 76.534280][ T5826] veth1_vlan: entered promiscuous mode [ 76.614628][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.640158][ T5821] veth0_macvtap: entered promiscuous mode [ 76.667085][ T5821] veth1_macvtap: entered promiscuous mode [ 76.694698][ T5826] veth0_macvtap: entered promiscuous mode [ 76.723881][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.738691][ T5826] veth1_macvtap: entered promiscuous mode [ 76.773515][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.818425][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.830899][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.843763][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.854369][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.869113][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.886146][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.900844][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.913342][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.940016][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.950510][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.962910][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971788][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.990994][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.001675][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.010593][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.019781][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.043955][ T5822] veth0_vlan: entered promiscuous mode [ 77.107774][ T5822] veth1_vlan: entered promiscuous mode [ 77.234446][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.247678][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.292886][ T5823] veth0_vlan: entered promiscuous mode [ 77.310998][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.322930][ T5822] veth0_macvtap: entered promiscuous mode [ 77.330587][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.370222][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.373834][ T5822] veth1_macvtap: entered promiscuous mode [ 77.381467][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.408826][ T5820] veth0_vlan: entered promiscuous mode [ 77.421770][ T5820] veth1_vlan: entered promiscuous mode [ 77.449925][ T5823] veth1_vlan: entered promiscuous mode [ 77.483547][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.496660][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.504523][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.510628][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.513813][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.538423][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.551433][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.555594][ T5138] Bluetooth: hci3: command tx timeout [ 77.561805][ T5833] Bluetooth: hci4: command tx timeout [ 77.574225][ T5829] Bluetooth: hci2: command tx timeout [ 77.577507][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.592401][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.604214][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.614405][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.624877][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.635364][ T5833] Bluetooth: hci1: command tx timeout [ 77.640906][ T5829] Bluetooth: hci0: command tx timeout [ 77.645074][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.689272][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.717019][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726197][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.734915][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.771709][ T5912] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 77.773877][ T5823] veth0_macvtap: entered promiscuous mode [ 77.799515][ T5820] veth0_macvtap: entered promiscuous mode [ 77.811488][ T5912] veth1_macvtap: left promiscuous mode [ 77.841828][ T5913] netlink: 'syz.2.3': attribute type 15 has an invalid length. [ 77.870195][ T5823] veth1_macvtap: entered promiscuous mode [ 77.898546][ T5820] veth1_macvtap: entered promiscuous mode [ 77.973936][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.998990][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.025740][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.037799][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.048902][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.060301][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.079077][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.097574][ T5919] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.123166][ T5919] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 78.155781][ T5919] tipc: Started in network mode [ 78.160801][ T5919] tipc: Node identity 4, cluster identity 4711 [ 78.167927][ T5919] tipc: Node number set to 4 [ 78.174201][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.194794][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.209429][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.220063][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.230101][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.240846][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.252855][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.263883][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.277298][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.286937][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.298704][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.308614][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.319187][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.329098][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.343510][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.361769][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.392649][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.408037][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.419256][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.428202][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.449936][ T5921] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 78.458311][ T5921] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 78.468457][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 78.482448][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.493303][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.503273][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.525318][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.535525][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.546270][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.556814][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.567635][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.579832][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.615937][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.624787][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.633744][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.643077][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.709660][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.722865][ T5928] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.744779][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.753911][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.819929][ T5934] tipc: Can't bind to reserved service type 0 [ 78.823259][ T5933] Zero length message leads to an empty skb [ 78.973013][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.025510][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.144501][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.173809][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.218823][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.249656][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.293337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.323924][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.334138][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 79.366970][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.375091][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.460620][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 79.636526][ T5829] Bluetooth: hci2: command tx timeout [ 79.642475][ T5829] Bluetooth: hci4: command tx timeout [ 79.648603][ T5833] Bluetooth: hci3: command tx timeout [ 79.716908][ T5833] Bluetooth: hci0: command tx timeout [ 79.722366][ T5833] Bluetooth: hci1: command tx timeout [ 79.765628][ T5968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18'. [ 79.776688][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 79.789289][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 79.911399][ T5971] netlink: 164 bytes leftover after parsing attributes in process `syz.3.19'. [ 80.123976][ T5984] netlink: 160 bytes leftover after parsing attributes in process `syz.2.22'. [ 80.592664][ T6008] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 80.624838][ T6008] netlink: 'syz.4.29': attribute type 39 has an invalid length. [ 80.744529][ T6016] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 80.841012][ T6010] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 80.920245][ T6020] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 81.380520][ T6045] FAULT_INJECTION: forcing a failure. [ 81.380520][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.418430][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.1.43 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 81.418458][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 81.418471][ T6045] Call Trace: [ 81.418481][ T6045] [ 81.418489][ T6045] dump_stack_lvl+0x189/0x250 [ 81.418522][ T6045] ? __lock_acquire+0xaac/0xd20 [ 81.418547][ T6045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.418577][ T6045] ? __pfx__printk+0x10/0x10 [ 81.418594][ T6045] ? __might_fault+0xb0/0x130 [ 81.418626][ T6045] should_fail_ex+0x414/0x560 [ 81.418656][ T6045] _copy_from_iter+0x1db/0x15a0 [ 81.418685][ T6045] ? __lock_acquire+0xaac/0xd20 [ 81.418706][ T6045] ? __pfx__copy_from_iter+0x10/0x10 [ 81.418736][ T6045] ? page_copy_sane+0x4e/0x280 [ 81.418756][ T6045] copy_page_from_iter+0x7b/0x100 [ 81.418778][ T6045] tun_get_user+0x1b13/0x3c20 [ 81.418803][ T6045] ? tun_get_user+0x687/0x3c20 [ 81.418837][ T6045] ? __pfx_tun_get_user+0x10/0x10 [ 81.418856][ T6045] ? aa_file_perm+0x11f/0xed0 [ 81.418874][ T6045] ? aa_file_perm+0x3e7/0xed0 [ 81.418904][ T6045] ? ref_tracker_alloc+0x318/0x460 [ 81.418923][ T6045] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 81.418950][ T6045] ? tun_get+0x1c/0x2f0 [ 81.418976][ T6045] ? tun_get+0x1c/0x2f0 [ 81.418995][ T6045] ? tun_get+0x1c/0x2f0 [ 81.419020][ T6045] tun_chr_write_iter+0x113/0x200 [ 81.419043][ T6045] vfs_write+0x548/0xa90 [ 81.419068][ T6045] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 81.419089][ T6045] ? __pfx_vfs_write+0x10/0x10 [ 81.419118][ T6045] ? __fget_files+0x2a/0x420 [ 81.419148][ T6045] ksys_write+0x145/0x250 [ 81.419165][ T6045] ? rcu_is_watching+0x15/0xb0 [ 81.419190][ T6045] ? __pfx_ksys_write+0x10/0x10 [ 81.419212][ T6045] ? do_syscall_64+0xba/0x210 [ 81.419238][ T6045] do_syscall_64+0xf6/0x210 [ 81.419261][ T6045] ? clear_bhb_loop+0x45/0xa0 [ 81.419286][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.419301][ T6045] RIP: 0033:0x7f5407d8d41f [ 81.419321][ T6045] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 81.419335][ T6045] RSP: 002b:00007f5408c6e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 81.419356][ T6045] RAX: ffffffffffffffda RBX: 00007f5407fb5fa0 RCX: 00007f5407d8d41f [ 81.419368][ T6045] RDX: 000000000000007e RSI: 0000200000000080 RDI: 00000000000000c8 [ 81.419378][ T6045] RBP: 00007f5408c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 81.419388][ T6045] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 81.419398][ T6045] R13: 0000000000000000 R14: 00007f5407fb5fa0 R15: 00007ffc232cd9d8 [ 81.419426][ T6045] [ 81.930196][ T6055] IPv6: NLM_F_REPLACE set, but no existing node found! [ 82.645629][ T6099] netlink: 'syz.3.60': attribute type 2 has an invalid length. [ 82.661728][ T6100] TCP: tcp_parse_options: Illegal window scaling value 172 > 14 received [ 82.845142][ T6108] netlink: 'syz.1.63': attribute type 2 has an invalid length. [ 82.864936][ T6109] netlink: 'syz.1.63': attribute type 2 has an invalid length. [ 82.940278][ T6111] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.949338][ T6111] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.958131][ T6111] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.967851][ T6111] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.969205][ T6108] netlink: 'syz.1.63': attribute type 8 has an invalid length. [ 83.004723][ T6109] netlink: 'syz.1.63': attribute type 8 has an invalid length. [ 83.293494][ T6119] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 83.309920][ T6122] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 83.332322][ T6119] openvswitch: netlink: Message has 13 unknown bytes. [ 83.514505][ T6130] __nla_validate_parse: 13 callbacks suppressed [ 83.514523][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 83.535462][ T6132] FAULT_INJECTION: forcing a failure. [ 83.535462][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 83.548291][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.0.70 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 83.548312][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.548319][ T6132] Call Trace: [ 83.548325][ T6132] [ 83.548331][ T6132] dump_stack_lvl+0x189/0x250 [ 83.548360][ T6132] ? __lock_acquire+0xaac/0xd20 [ 83.548378][ T6132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.548395][ T6132] ? __pfx__printk+0x10/0x10 [ 83.548412][ T6132] ? __lock_acquire+0xaac/0xd20 [ 83.548432][ T6132] should_fail_ex+0x414/0x560 [ 83.548455][ T6132] should_failslab+0xa8/0x100 [ 83.548473][ T6132] kmem_cache_alloc_noprof+0x73/0x3c0 [ 83.548488][ T6132] ? skb_clone+0x212/0x3a0 [ 83.548501][ T6132] ? __pfx_skb_network_protocol+0x10/0x10 [ 83.548520][ T6132] skb_clone+0x212/0x3a0 [ 83.548534][ T6132] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 83.548549][ T6132] dev_queue_xmit_nit+0x416/0xcc0 [ 83.548562][ T6132] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 83.548584][ T6132] dev_hard_start_xmit+0x1be/0x830 [ 83.548601][ T6132] ? rcu_read_lock_bh_held+0x79/0xe0 [ 83.548624][ T6132] __dev_queue_xmit+0x1adf/0x3a70 [ 83.548641][ T6132] ? kasan_save_track+0x3e/0x80 [ 83.548655][ T6132] ? __netlink_deliver_tap+0x404/0x850 [ 83.548671][ T6132] ? __dev_queue_xmit+0x27e/0x3a70 [ 83.548687][ T6132] ? __sys_sendto+0x3bd/0x520 [ 83.548699][ T6132] ? do_syscall_64+0xf6/0x210 [ 83.548725][ T6132] ? __pfx___dev_queue_xmit+0x10/0x10 [ 83.548751][ T6132] ? __copy_skb_header+0xa7/0x550 [ 83.548767][ T6132] ? __asan_memcpy+0x40/0x70 [ 83.548779][ T6132] ? __skb_clone+0x63/0x7a0 [ 83.548797][ T6132] ? __skb_clone+0x483/0x7a0 [ 83.548817][ T6132] ? skb_clone+0x246/0x3a0 [ 83.548834][ T6132] __netlink_deliver_tap+0x5ad/0x850 [ 83.548857][ T6132] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.548871][ T6132] netlink_deliver_tap+0x19c/0x1b0 [ 83.548884][ T6132] netlink_sendskb+0x68/0x140 [ 83.548904][ T6132] ctrl_getfamily+0x499/0x590 [ 83.548921][ T6132] ? __pfx_ctrl_getfamily+0x10/0x10 [ 83.548937][ T6132] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 83.548959][ T6132] genl_family_rcv_msg_doit+0x212/0x300 [ 83.548980][ T6132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 83.549015][ T6132] genl_rcv_msg+0x60e/0x790 [ 83.549035][ T6132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.549050][ T6132] ? __pfx_ctrl_getfamily+0x10/0x10 [ 83.549066][ T6132] ? ref_tracker_free+0x63a/0x7d0 [ 83.549077][ T6132] ? __copy_skb_header+0xa7/0x550 [ 83.549099][ T6132] netlink_rcv_skb+0x219/0x490 [ 83.549112][ T6132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.549129][ T6132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.549160][ T6132] ? down_read+0x1ad/0x2e0 [ 83.549180][ T6132] genl_rcv+0x28/0x40 [ 83.549194][ T6132] netlink_unicast+0x758/0x8d0 [ 83.549220][ T6132] netlink_sendmsg+0x805/0xb30 [ 83.549240][ T6132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.549256][ T6132] ? aa_sock_msg_perm+0x94/0x160 [ 83.549271][ T6132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.549284][ T6132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.549298][ T6132] __sock_sendmsg+0x219/0x270 [ 83.549318][ T6132] __sys_sendto+0x3bd/0x520 [ 83.549333][ T6132] ? __pfx___sys_sendto+0x10/0x10 [ 83.549353][ T6132] ? count_memcg_event_mm+0x92/0x3b0 [ 83.549398][ T6132] __x64_sys_sendto+0xde/0x100 [ 83.549414][ T6132] do_syscall_64+0xf6/0x210 [ 83.549431][ T6132] ? clear_bhb_loop+0x45/0xa0 [ 83.549446][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.549458][ T6132] RIP: 0033:0x7f2ea1f907fc [ 83.549471][ T6132] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 83.549481][ T6132] RSP: 002b:00007f2ea2de2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 83.549494][ T6132] RAX: ffffffffffffffda RBX: 00007f2ea2de2fc0 RCX: 00007f2ea1f907fc [ 83.549503][ T6132] RDX: 0000000000000020 RSI: 00007f2ea2de3010 RDI: 0000000000000005 [ 83.549511][ T6132] RBP: 0000000000000000 R08: 00007f2ea2de2f14 R09: 000000000000000c [ 83.549518][ T6132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 83.549525][ T6132] R13: 00007f2ea2de2f68 R14: 00007f2ea2de3010 R15: 0000000000000000 [ 83.549547][ T6132] [ 84.094565][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 84.251630][ T6141] hsr_slave_1 (unregistering): left promiscuous mode [ 84.300165][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.428814][ T6154] : renamed from vlan0 (while UP) [ 84.441678][ T6159] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 84.608931][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 84.742706][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 84.781365][ T6176] netlink: 14 bytes leftover after parsing attributes in process `syz.0.84'. [ 84.790569][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 84.898559][ T6181] TCP: tcp_parse_options: Illegal window scaling value 172 > 14 received [ 84.913100][ T6183] netlink: 'syz.1.87': attribute type 12 has an invalid length. [ 84.925608][ T6183] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.87'. [ 85.114905][ T6179] team0 (unregistering): Port device team_slave_0 removed [ 85.127803][ T6179] team0 (unregistering): Port device team_slave_1 removed [ 85.266227][ T6192] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 85.654041][ T6204] sctp: failed to load transform for md5: -2 [ 86.062122][ T6226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'. [ 86.081735][ T6199] xt_hashlimit: invalid rate [ 86.166194][ T6226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'. [ 86.206840][ T6229] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.618699][ T6242] sctp: [Deprecated]: syz.3.105 (pid 6242) Use of int in max_burst socket option. [ 86.618699][ T6242] Use struct sctp_assoc_value instead [ 86.768697][ T975] cfg80211: failed to load regulatory.db [ 86.792462][ T6241] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 86.976665][ T6261] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 87.052433][ T6267] warning: `syz.0.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.244891][ T6279] syz_tun: entered promiscuous mode [ 87.320274][ T6278] syz_tun: left promiscuous mode [ 87.365091][ T6288] openvswitch: netlink: EtherType 0 is less than min 600 [ 87.493491][ T6302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 87.851340][ T6323] sctp: [Deprecated]: syz.4.132 (pid 6323) Use of int in max_burst socket option. [ 87.851340][ T6323] Use struct sctp_assoc_value instead [ 87.920118][ T6320] erspan0: entered promiscuous mode [ 87.945440][ T6320] macvtap1: entered promiscuous mode [ 87.951002][ T6320] macvtap1: entered allmulticast mode [ 87.998147][ T6320] erspan0: entered allmulticast mode [ 88.022098][ T6330] veth1_to_bond: entered allmulticast mode [ 88.034625][ T6329] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 88.095941][ T6335] veth1_to_bond: entered promiscuous mode [ 88.340787][ T6319] veth1_to_bond: left promiscuous mode [ 88.369183][ T6319] veth1_to_bond: left allmulticast mode [ 88.594184][ T6367] __nla_validate_parse: 8 callbacks suppressed [ 88.594202][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 88.846298][ T6380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.986948][ T6387] Bluetooth: MGMT ver 1.23 [ 89.176213][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 89.263846][ T6412] netlink: 'syz.3.152': attribute type 21 has an invalid length. [ 89.299482][ T6413] netlink: 'syz.3.152': attribute type 21 has an invalid length. [ 89.316833][ T6412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.152'. [ 89.345389][ T6413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.152'. [ 89.570466][ T6426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.772808][ T6442] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 89.817603][ T6426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.831841][ T6445] sctp: [Deprecated]: syz.3.164 (pid 6445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.831841][ T6445] Use struct sctp_sack_info instead [ 89.858558][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.165'. [ 89.901960][ T6445] sctp: [Deprecated]: syz.3.164 (pid 6445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.901960][ T6445] Use struct sctp_sack_info instead [ 90.061310][ T6450] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 90.072176][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 90.118148][ T6426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.201752][ T6460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.270617][ T6426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.451624][ T6426] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.498537][ T6426] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.553717][ T6426] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.588150][ T6426] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.732295][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 90.781737][ T6487] FAULT_INJECTION: forcing a failure. [ 90.781737][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 90.884306][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.4.179 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 90.884333][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 90.884342][ T6487] Call Trace: [ 90.884348][ T6487] [ 90.884355][ T6487] dump_stack_lvl+0x189/0x250 [ 90.884385][ T6487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.884407][ T6487] ? __pfx__printk+0x10/0x10 [ 90.884429][ T6487] ? __pfx___might_resched+0x10/0x10 [ 90.884443][ T6487] ? fs_reclaim_acquire+0x7d/0x100 [ 90.884468][ T6487] should_fail_ex+0x414/0x560 [ 90.884497][ T6487] should_failslab+0xa8/0x100 [ 90.884519][ T6487] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 90.884538][ T6487] ? __alloc_skb+0x112/0x2d0 [ 90.884559][ T6487] __alloc_skb+0x112/0x2d0 [ 90.884578][ T6487] netlink_ack+0x146/0xa50 [ 90.884591][ T6487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.884611][ T6487] ? ref_tracker_free+0x63a/0x7d0 [ 90.884626][ T6487] ? __copy_skb_header+0xa7/0x550 [ 90.884666][ T6487] netlink_rcv_skb+0x2a0/0x490 [ 90.884684][ T6487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.884705][ T6487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.884744][ T6487] ? down_read+0x1ad/0x2e0 [ 90.884770][ T6487] genl_rcv+0x28/0x40 [ 90.884788][ T6487] netlink_unicast+0x758/0x8d0 [ 90.884825][ T6487] netlink_sendmsg+0x805/0xb30 [ 90.884849][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.884867][ T6487] ? aa_sock_msg_perm+0x94/0x160 [ 90.884884][ T6487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.884901][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.884919][ T6487] __sock_sendmsg+0x219/0x270 [ 90.884945][ T6487] __sys_sendto+0x3bd/0x520 [ 90.884965][ T6487] ? __pfx___sys_sendto+0x10/0x10 [ 90.884979][ T6487] ? count_memcg_event_mm+0x92/0x3b0 [ 90.885036][ T6487] __x64_sys_sendto+0xde/0x100 [ 90.885058][ T6487] do_syscall_64+0xf6/0x210 [ 90.885081][ T6487] ? clear_bhb_loop+0x45/0xa0 [ 90.885102][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.885118][ T6487] RIP: 0033:0x7eff6c7907fc [ 90.885133][ T6487] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 90.885147][ T6487] RSP: 002b:00007eff6a5f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 90.885168][ T6487] RAX: ffffffffffffffda RBX: 00007eff6a5f4fc0 RCX: 00007eff6c7907fc [ 90.885178][ T6487] RDX: 0000000000000020 RSI: 00007eff6a5f5010 RDI: 0000000000000005 [ 90.885186][ T6487] RBP: 0000000000000000 R08: 00007eff6a5f4f14 R09: 000000000000000c [ 90.885195][ T6487] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 90.885203][ T6487] R13: 00007eff6a5f4f68 R14: 00007eff6a5f5010 R15: 0000000000000000 [ 90.885228][ T6487] [ 91.579881][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.588969][ T6520] netlink: 'syz.3.190': attribute type 21 has an invalid length. [ 91.628380][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.669984][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 91.852454][ T6533] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 91.872109][ T6539] FAULT_INJECTION: forcing a failure. [ 91.872109][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 91.896364][ T6540] netlink: 'syz.4.196': attribute type 33 has an invalid length. [ 91.927079][ T6540] netlink: 'syz.4.196': attribute type 33 has an invalid length. [ 91.936256][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz.2.197 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 91.936281][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.936291][ T6539] Call Trace: [ 91.936298][ T6539] [ 91.936305][ T6539] dump_stack_lvl+0x189/0x250 [ 91.936340][ T6539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.936363][ T6539] ? __pfx__printk+0x10/0x10 [ 91.936377][ T6539] ? __lock_acquire+0xaac/0xd20 [ 91.936414][ T6539] should_fail_ex+0x414/0x560 [ 91.936444][ T6539] should_failslab+0xa8/0x100 [ 91.936473][ T6539] kmem_cache_alloc_noprof+0x73/0x3c0 [ 91.936493][ T6539] ? skb_clone+0x212/0x3a0 [ 91.936517][ T6539] skb_clone+0x212/0x3a0 [ 91.936539][ T6539] __netlink_deliver_tap+0x404/0x850 [ 91.936567][ T6539] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.936586][ T6539] netlink_deliver_tap+0x19c/0x1b0 [ 91.936604][ T6539] netlink_sendskb+0x68/0x140 [ 91.936631][ T6539] netlink_rcv_skb+0x2a0/0x490 [ 91.936649][ T6539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.936671][ T6539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.936711][ T6539] ? down_read+0x1ad/0x2e0 [ 91.936737][ T6539] genl_rcv+0x28/0x40 [ 91.936755][ T6539] netlink_unicast+0x758/0x8d0 [ 91.936791][ T6539] netlink_sendmsg+0x805/0xb30 [ 91.936818][ T6539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.936838][ T6539] ? aa_sock_msg_perm+0x94/0x160 [ 91.936857][ T6539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.936874][ T6539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.936891][ T6539] __sock_sendmsg+0x219/0x270 [ 91.936918][ T6539] __sys_sendto+0x3bd/0x520 [ 91.936938][ T6539] ? __pfx___sys_sendto+0x10/0x10 [ 91.936952][ T6539] ? count_memcg_event_mm+0x92/0x3b0 [ 91.937003][ T6539] ? rcu_is_watching+0x15/0xb0 [ 91.937031][ T6539] __x64_sys_sendto+0xde/0x100 [ 91.937053][ T6539] do_syscall_64+0xf6/0x210 [ 91.937076][ T6539] ? clear_bhb_loop+0x45/0xa0 [ 91.937096][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.937112][ T6539] RIP: 0033:0x7fc7491907fc [ 91.937128][ T6539] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 91.937140][ T6539] RSP: 002b:00007fc74a008ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 91.937158][ T6539] RAX: ffffffffffffffda RBX: 00007fc74a008fc0 RCX: 00007fc7491907fc [ 91.937169][ T6539] RDX: 0000000000000020 RSI: 00007fc74a009010 RDI: 0000000000000005 [ 91.937179][ T6539] RBP: 0000000000000000 R08: 00007fc74a008f14 R09: 000000000000000c [ 91.937188][ T6539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 91.937197][ T6539] R13: 00007fc74a008f68 R14: 00007fc74a009010 R15: 0000000000000000 [ 91.937226][ T6539] [ 92.285063][ T6540] netlink: 'syz.4.196': attribute type 33 has an invalid length. [ 92.325649][ T6540] netlink: 'syz.4.196': attribute type 33 has an invalid length. [ 92.327413][ T6544] veth0: entered promiscuous mode [ 92.427145][ T6543] veth0: left promiscuous mode [ 92.471236][ T5910] IPVS: starting estimator thread 0... [ 92.565763][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.596024][ T6547] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.260361][ T6599] validate_nla: 62 callbacks suppressed [ 93.260379][ T6599] netlink: 'syz.3.214': attribute type 72 has an invalid length. [ 93.818556][ T6621] batadv1: entered promiscuous mode [ 93.824849][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 93.913951][ T6627] netlink: 'syz.2.225': attribute type 32 has an invalid length. [ 93.924097][ T6627] __nla_validate_parse: 74 callbacks suppressed [ 93.924114][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 93.987714][ T6627] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 94.103254][ T6627] team0: Port device wlan1 added [ 94.180276][ T6634] netlink: 'syz.1.227': attribute type 72 has an invalid length. [ 94.210356][ T6634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.227'. [ 94.848014][ T6653] batman_adv: batadv0: Adding interface: ip6gretap1 [ 94.854682][ T6653] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.905953][ T6653] batman_adv: batadv0: Interface activated: ip6gretap1 [ 95.272063][ T6675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.459130][ T6679] netlink: 'syz.3.240': attribute type 21 has an invalid length. [ 96.052916][ T6684] netlink: 'syz.2.242': attribute type 72 has an invalid length. [ 96.131521][ T6684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.242'. [ 96.524918][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 96.641361][ T6713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.250'. [ 96.711391][ T6717] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 97.089674][ T6728] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 97.218911][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 97.239870][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 97.378741][ T6741] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 97.393667][ T6740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.257'. [ 97.528983][ T6745] veth3: entered promiscuous mode [ 97.714668][ T6760] bond0: option mode: unable to set because the bond device has slaves [ 97.766829][ T6756] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 98.034232][ T6772] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 98.487176][ T6793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.273'. [ 98.772434][ T6812] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 99.371219][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 99.437194][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 99.573357][ T6837] netlink: 'syz.4.289': attribute type 9 has an invalid length. [ 99.594707][ T6839] syzkaller1: entered promiscuous mode [ 99.600763][ T6839] syzkaller1: entered allmulticast mode [ 99.867485][ T6856] netlink: 'syz.1.296': attribute type 7 has an invalid length. [ 99.913531][ T6856] netlink: 'syz.1.296': attribute type 8 has an invalid length. [ 99.918317][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 100.001012][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 100.363628][ T6890] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.309'. [ 100.490144][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 100.525822][ T6900] netlink: 'syz.3.311': attribute type 7 has an invalid length. [ 100.545376][ T6900] netlink: 'syz.3.311': attribute type 8 has an invalid length. [ 100.734229][ T6909] netlink: 'syz.4.314': attribute type 16 has an invalid length. [ 100.752525][ T6909] netlink: 'syz.4.314': attribute type 17 has an invalid length. [ 100.776487][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 100.865825][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.874138][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.910474][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 100.987499][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 101.025519][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 101.102661][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.139949][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.371761][ T6934] netlink: 'syz.1.323': attribute type 7 has an invalid length. [ 101.387677][ T6934] netlink: 'syz.1.323': attribute type 8 has an invalid length. [ 101.397259][ T6909] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.422064][ T6909] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.459938][ T6909] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.485265][ T6909] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.749741][ T6950] block nbd0: not configured, cannot reconfigure [ 102.071281][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 102.112632][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 102.739438][ T6978] netlink: 'syz.4.335': attribute type 7 has an invalid length. [ 103.460376][ T7005] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20001 [ 103.649573][ T7018] xt_recent: Unsupported userspace flags (00000048) [ 103.700006][ T7018] nbd: device at index 64 is going down [ 104.288223][ T7031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.300514][ T7031] bond0: (slave bond2): Enslaving as an active interface with an up link [ 105.049213][ T7058] __nla_validate_parse: 14 callbacks suppressed [ 105.049230][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 105.859236][ T7077] validate_nla: 5 callbacks suppressed [ 105.859253][ T7077] netlink: 'syz.3.360': attribute type 7 has an invalid length. [ 105.909538][ T7077] netlink: 'syz.3.360': attribute type 8 has an invalid length. [ 106.223507][ T7091] batadv_slave_1: entered promiscuous mode [ 106.232463][ T7091] batadv0: entered promiscuous mode [ 106.247462][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 106.290242][ T7090] batadv0: left promiscuous mode [ 106.300895][ T7090] batadv_slave_1: left promiscuous mode [ 107.599961][ T7124] netlink: 'syz.1.374': attribute type 7 has an invalid length. [ 107.635778][ T7124] netlink: 'syz.1.374': attribute type 8 has an invalid length. [ 107.874511][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 107.884114][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 107.884149][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 107.885490][ T7138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.377'. [ 107.979257][ T7108] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 108.279648][ T7155] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.361711][ T7158] xt_ipcomp: unknown flags F7 [ 108.512694][ T7163] netlink: 'syz.0.386': attribute type 7 has an invalid length. [ 108.533767][ T7163] netlink: 'syz.0.386': attribute type 8 has an invalid length. [ 108.690477][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.388'. [ 108.700272][ T7167] tipc: Invalid UDP bearer configuration [ 108.700326][ T7167] tipc: Enabling of bearer rejected, failed to enable media [ 108.853796][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 109.427721][ T7189] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 109.557573][ T7191] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 109.581949][ T7191] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 109.621078][ T7191] netlink: 2 bytes leftover after parsing attributes in process `syz.0.396'. [ 109.655146][ T7195] netlink: 'syz.1.398': attribute type 7 has an invalid length. [ 109.678300][ T7195] netlink: 'syz.1.398': attribute type 8 has an invalid length. [ 109.857888][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'. [ 109.867364][ T7200] erspan1: entered promiscuous mode [ 109.872591][ T7200] erspan1: entered allmulticast mode [ 109.952669][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.011089][ T6995] Set syz1 is full, maxelem 65536 reached [ 110.153286][ T7222] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 110.176283][ T7224] Bluetooth: MGMT ver 1.23 [ 110.389091][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.414'. [ 110.570206][ T7246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.610843][ T7250] bond1: (slave veth3): Enslaving as an active interface with a down link [ 110.630269][ T7246] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 110.640591][ T7256] FAULT_INJECTION: forcing a failure. [ 110.640591][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 110.640621][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.1.418 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 110.640640][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 110.640649][ T7256] Call Trace: [ 110.640655][ T7256] [ 110.640662][ T7256] dump_stack_lvl+0x189/0x250 [ 110.640692][ T7256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.640714][ T7256] ? __pfx__printk+0x10/0x10 [ 110.640733][ T7256] ? __pfx___might_resched+0x10/0x10 [ 110.640749][ T7256] ? fs_reclaim_acquire+0x7d/0x100 [ 110.640776][ T7256] should_fail_ex+0x414/0x560 [ 110.640805][ T7256] should_failslab+0xa8/0x100 [ 110.640828][ T7256] __kmalloc_noprof+0xcb/0x4f0 [ 110.640847][ T7256] ? iovec_from_user+0x87/0x250 [ 110.640870][ T7256] iovec_from_user+0x87/0x250 [ 110.640906][ T7256] __import_iovec+0x163/0x7f0 [ 110.640936][ T7256] import_iovec+0x74/0xa0 [ 110.640960][ T7256] ___sys_recvmsg+0x43a/0x510 [ 110.640987][ T7256] ? __pfx____sys_recvmsg+0x10/0x10 [ 110.641031][ T7256] ? __fget_files+0x3a0/0x420 [ 110.641060][ T7256] do_recvmmsg+0x307/0x760 [ 110.641085][ T7256] ? __pfx_do_recvmmsg+0x10/0x10 [ 110.641111][ T7256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.641148][ T7256] __x64_sys_recvmmsg+0x190/0x240 [ 110.641166][ T7256] ? rcu_is_watching+0x15/0xb0 [ 110.641190][ T7256] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 110.641213][ T7256] ? do_syscall_64+0xba/0x210 [ 110.641237][ T7256] do_syscall_64+0xf6/0x210 [ 110.641262][ T7256] ? clear_bhb_loop+0x45/0xa0 [ 110.641281][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.641296][ T7256] RIP: 0033:0x7f5407d8e969 [ 110.641310][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.641323][ T7256] RSP: 002b:00007f5408c4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 110.641339][ T7256] RAX: ffffffffffffffda RBX: 00007f5407fb6080 RCX: 00007f5407d8e969 [ 110.641350][ T7256] RDX: 0000000000000001 RSI: 0000200000009500 RDI: 0000000000000004 [ 110.641360][ T7256] RBP: 00007f5408c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 110.641369][ T7256] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 110.641378][ T7256] R13: 0000000000000001 R14: 00007f5407fb6080 R15: 00007ffc232cd9d8 [ 110.641404][ T7256] [ 110.887217][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.417'. [ 110.956861][ T7261] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 111.073427][ T7269] validate_nla: 3 callbacks suppressed [ 111.073444][ T7269] netlink: 'syz.0.424': attribute type 7 has an invalid length. [ 111.088530][ T7269] netlink: 'syz.0.424': attribute type 8 has an invalid length. [ 111.197716][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.427'. [ 111.412470][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.431'. [ 111.567362][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 111.584167][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.432'. [ 111.594068][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 111.603164][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.432'. [ 112.035416][ T7306] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 112.095360][ T7308] netlink: 'syz.0.436': attribute type 7 has an invalid length. [ 112.105321][ T7308] netlink: 'syz.0.436': attribute type 8 has an invalid length. [ 112.424384][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 112.600212][ T7326] netlink: del zone limit has 4 unknown bytes [ 112.616460][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 112.637634][ T7327] block nbd0: not configured, cannot reconfigure [ 112.776266][ T7335] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.809623][ T7336] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.846837][ T7340] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 112.990808][ T7348] netlink: 'syz.1.448': attribute type 7 has an invalid length. [ 113.005375][ T7348] netlink: 'syz.1.448': attribute type 8 has an invalid length. [ 113.177331][ T7355] syzkaller1: entered promiscuous mode [ 113.191167][ T7355] syzkaller1: entered allmulticast mode [ 113.715436][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 114.067483][ T7388] netlink: 'syz.1.461': attribute type 7 has an invalid length. [ 114.075743][ T7389] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 114.094263][ T7388] netlink: 'syz.1.461': attribute type 8 has an invalid length. [ 114.213931][ T7391] bridge_slave_0: left allmulticast mode [ 114.247477][ T7391] bridge_slave_0: left promiscuous mode [ 114.254316][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.294501][ T7391] bridge_slave_1: left allmulticast mode [ 114.329045][ T7391] bridge_slave_1: left promiscuous mode [ 114.343996][ T7397] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 114.374546][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.410909][ T7391] bond0: (slave bond_slave_0): Releasing backup interface [ 114.424109][ T7391] bond0: (slave bond_slave_1): Releasing backup interface [ 114.513503][ T7391] team0: Port device team_slave_0 removed [ 114.543005][ T7391] team0: Port device team_slave_1 removed [ 114.554353][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.563555][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.574677][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.584878][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.643246][ T7394] team0: Mode changed to "loadbalance" [ 114.836863][ T7416] bridge_slave_0: left allmulticast mode [ 114.850013][ T7416] bridge_slave_0: left promiscuous mode [ 114.860040][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.870420][ T7391] syz.1.462 (7391) used greatest stack depth: 20192 bytes left [ 114.902327][ T7416] bridge_slave_1: left allmulticast mode [ 114.925469][ T7416] bridge_slave_1: left promiscuous mode [ 114.931773][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.950158][ T7416] bond1: (slave veth0_to_bond): Releasing active interface [ 114.963537][ T7416] bond0: (slave bond_slave_0): Releasing backup interface [ 114.977713][ T7416] bond0: (slave bond_slave_1): Releasing backup interface [ 115.006727][ T7416] team0: Port device team_slave_0 removed [ 115.023228][ T7416] team0: Port device team_slave_1 removed [ 115.043458][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.054057][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.094511][ T7416] bond1: (slave veth3): Releasing active interface [ 115.250203][ T7433] netlink: 'syz.1.473': attribute type 7 has an invalid length. [ 115.262788][ T7433] netlink: 'syz.1.473': attribute type 8 has an invalid length. [ 116.261080][ T7456] __nla_validate_parse: 5 callbacks suppressed [ 116.261096][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.478'. [ 116.289728][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.479'. [ 116.582910][ T7463] ------------[ cut here ]------------ [ 116.588665][ T7463] memcpy: detected field-spanning write (size 128) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 116.643938][ T7464] ================================================================== [ 116.652041][ T7464] BUG: KASAN: stack-out-of-bounds in ipv6_addr_prefix+0x6e/0x1d0 [ 116.659872][ T7464] Read of size 8191 at addr ffffc9000bc07a94 by task syz.3.481/7464 [ 116.665934][ T7463] WARNING: CPU: 1 PID: 7463 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 116.667840][ T7464] [ 116.667853][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.3.481 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 116.667870][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 116.667880][ T7464] Call Trace: [ 116.667889][ T7464] [ 116.667897][ T7464] dump_stack_lvl+0x189/0x250 [ 116.667922][ T7464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.667943][ T7464] ? __pfx__printk+0x10/0x10 [ 116.667959][ T7464] ? __pfx__printk+0x10/0x10 [ 116.667971][ T7464] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 116.667992][ T7464] ? __virt_addr_valid+0xc3/0x540 [ 116.668013][ T7464] print_report+0xb4/0x290 [ 116.668030][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 116.668050][ T7464] kasan_report+0x118/0x150 [ 116.668067][ T7464] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 116.668086][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 116.668109][ T7464] kasan_check_range+0x29a/0x2b0 [ 116.668127][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 116.668148][ T7464] __asan_memcpy+0x29/0x70 [ 116.668169][ T7464] ipv6_addr_prefix+0x6e/0x1d0 [ 116.668190][ T7464] ip6_route_info_create+0x629/0xa70 [ 116.668210][ T7464] ip6_route_add+0x29/0x2f0 [ 116.668225][ T7464] ? ipv6_route_ioctl+0x313/0x480 [ 116.668242][ T7464] ipv6_route_ioctl+0x35c/0x480 [ 116.668261][ T7464] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 116.668289][ T7464] inet6_ioctl+0x219/0x280 [ 116.668307][ T7464] ? __pfx_inet6_ioctl+0x10/0x10 [ 116.668331][ T7464] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.668357][ T7464] sock_do_ioctl+0xd9/0x300 [ 116.668380][ T7464] ? __pfx_sock_do_ioctl+0x10/0x10 [ 116.668399][ T7464] ? __lock_acquire+0xaac/0xd20 [ 116.668424][ T7464] sock_ioctl+0x576/0x790 [ 116.668445][ T7464] ? __pfx_sock_ioctl+0x10/0x10 [ 116.668465][ T7464] ? __fget_files+0x3a0/0x420 [ 116.668483][ T7464] ? __fget_files+0x2a/0x420 [ 116.668502][ T7464] ? bpf_lsm_file_ioctl+0x9/0x20 [ 116.668521][ T7464] ? __pfx_sock_ioctl+0x10/0x10 [ 116.668539][ T7464] __se_sys_ioctl+0xf9/0x170 [ 116.668555][ T7464] do_syscall_64+0xf6/0x210 [ 116.668576][ T7464] ? clear_bhb_loop+0x45/0xa0 [ 116.668593][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.668608][ T7464] RIP: 0033:0x7f0f6638e969 [ 116.668623][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.668636][ T7464] RSP: 002b:00007f0f6718d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.668653][ T7464] RAX: ffffffffffffffda RBX: 00007f0f665b6160 RCX: 00007f0f6638e969 [ 116.668664][ T7464] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000005 [ 116.668674][ T7464] RBP: 00007f0f66410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 116.668683][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.668692][ T7464] R13: 0000000000000001 R14: 00007f0f665b6160 R15: 00007ffdb97b2c28 [ 116.668710][ T7464] [ 116.668715][ T7464] [ 116.677511][ T7463] Modules linked in: [ 116.679603][ T7464] The buggy address belongs to stack of task syz.3.481/7464 [ 116.691494][ T7463] [ 116.701478][ T7464] and is located at offset 84 in frame: [ 116.701486][ T7464] ipv6_route_ioctl+0x0/0x480 [ 116.701505][ T7464] [ 116.701509][ T7464] This frame has 1 object: [ 116.701518][ T7464] [32, 208) 'cfg' [ 116.701525][ T7464] [ 116.701534][ T7464] The buggy address belongs to the virtual mapping at [ 116.701534][ T7464] [ffffc9000bc00000, ffffc9000bc09000) created by: [ 116.701534][ T7464] copy_process+0x544/0x3b80 [ 116.701554][ T7464] [ 116.701559][ T7464] The buggy address belongs to the physical page: [ 116.701572][ T7464] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888027103fc0 pfn:0x27103 [ 116.701594][ T7464] memcg:ffff888032ff4002 [ 116.701602][ T7464] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 116.701628][ T7464] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 116.701641][ T7464] raw: ffff888027103fc0 0000000000000000 00000001ffffffff ffff888032ff4002 [ 116.701649][ T7464] page dumped because: kasan: bad access detected [ 116.701664][ T7464] page_owner tracks the page as allocated [ 116.701670][ T7464] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7460, tgid 7460 (syz.3.481), ts 116574923056, free_ts 116556121851 [ 116.701696][ T7464] post_alloc_hook+0x1d8/0x230 [ 116.701716][ T7464] get_page_from_freelist+0x21e0/0x22c0 [ 116.701736][ T7464] __alloc_frozen_pages_noprof+0x181/0x370 [ 116.701757][ T7464] alloc_pages_mpol+0x232/0x4a0 [ 116.701774][ T7464] alloc_pages_noprof+0xa9/0x190 [ 116.701792][ T7464] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 116.701810][ T7464] __vmalloc_node_noprof+0x7d/0x90 [ 116.701826][ T7464] dup_task_struct+0x3e7/0x860 [ 116.701839][ T7464] copy_process+0x544/0x3b80 [ 116.701851][ T7464] kernel_clone+0x21e/0x870 [ 116.701864][ T7464] __se_sys_clone3+0x256/0x2d0 [ 116.701879][ T7464] do_syscall_64+0xf6/0x210 [ 116.701898][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.701912][ T7464] page last free pid 7448 tgid 7448 stack trace: [ 116.701920][ T7464] __free_frozen_pages+0xb14/0xce0 [ 116.701937][ T7464] __folio_put+0x21b/0x2c0 [ 116.701958][ T7464] napi_pp_put_page+0x147/0x2c0 [ 116.701974][ T7464] skb_release_data+0x6be/0x890 [ 116.701989][ T7464] sk_skb_reason_drop+0x127/0x170 [ 116.702003][ T7464] skb_queue_purge_reason+0x2c8/0x360 [ 116.702024][ T7464] packet_release+0xb28/0xce0 [ 116.702039][ T7464] sock_close+0xc0/0x240 [ 116.702056][ T7464] __fput+0x449/0xa70 [ 116.702073][ T7464] task_work_run+0x1d1/0x260 [ 116.702090][ T7464] resume_user_mode_work+0x5e/0x80 [ 116.702108][ T7464] syscall_exit_to_user_mode+0x9a/0x120 [ 116.702126][ T7464] do_syscall_64+0x103/0x210 [ 116.702143][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.702164][ T7464] [ 116.702168][ T7464] Memory state around the buggy address: [ 116.702177][ T7464] ffffc9000bc07a00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 116.702187][ T7464] ffffc9000bc07a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.702197][ T7464] >ffffc9000bc07b00: 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 116.702205][ T7464] ^ [ 116.705504][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.3.481 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 116.708386][ T7464] ffffc9000bc07b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 116.713031][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 116.718200][ T7464] ffffc9000bc07c00: 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 116.718208][ T7464] ================================================================== [ 117.327680][ T7463] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 117.333339][ T7463] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 117.353016][ T7463] RSP: 0000:ffffc9000bc17920 EFLAGS: 00010246 [ 117.359150][ T7463] RAX: c44d6e02937a8500 RBX: ffff8880319a3050 RCX: ffff88807bc49e00 [ 117.367868][ T7463] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 117.376237][ T7463] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 117.384241][ T7463] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000080 [ 117.392301][ T7463] R13: 1ffff92001782f4e R14: ffffc9000bc17a84 R15: 0000000000000080 [ 117.400416][ T7463] FS: 00007f0f671ae6c0(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 117.409415][ T7463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.416155][ T7463] CR2: 00007f2ea2180178 CR3: 000000005975c000 CR4: 00000000003526f0 [ 117.424145][ T7463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.432168][ T7463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.440201][ T7463] Call Trace: [ 117.443499][ T7463] [ 117.446496][ T7463] ip6_route_info_create+0x5cc/0xa70 [ 117.451804][ T7463] ip6_route_add+0x29/0x2f0 [ 117.456359][ T7463] ? ipv6_route_ioctl+0x313/0x480 [ 117.461400][ T7463] ipv6_route_ioctl+0x35c/0x480 [ 117.466390][ T7463] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 117.472171][ T7463] inet6_ioctl+0x219/0x280 [ 117.477453][ T7463] ? __pfx_inet6_ioctl+0x10/0x10 [ 117.482426][ T7463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.488602][ T7463] sock_do_ioctl+0xd9/0x300 [ 117.493133][ T7463] ? __pfx_sock_do_ioctl+0x10/0x10 [ 117.498336][ T7463] ? __lock_acquire+0xaac/0xd20 [ 117.503223][ T7463] sock_ioctl+0x576/0x790 [ 117.507609][ T7463] ? __pfx_sock_ioctl+0x10/0x10 [ 117.512486][ T7463] ? __fget_files+0x3a0/0x420 [ 117.517234][ T7463] ? __fget_files+0x2a/0x420 [ 117.521866][ T7463] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.526849][ T7463] ? __pfx_sock_ioctl+0x10/0x10 [ 117.531717][ T7463] __se_sys_ioctl+0xf9/0x170 [ 117.536413][ T7463] do_syscall_64+0xf6/0x210 [ 117.540936][ T7463] ? clear_bhb_loop+0x45/0xa0 [ 117.545664][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.551568][ T7463] RIP: 0033:0x7f0f6638e969 [ 117.556247][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.576587][ T7463] RSP: 002b:00007f0f671ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.585053][ T7463] RAX: ffffffffffffffda RBX: 00007f0f665b6080 RCX: 00007f0f6638e969 [ 117.593429][ T7463] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000005 [ 117.601482][ T7463] RBP: 00007f0f66410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 117.609530][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.617554][ T7463] R13: 0000000000000000 R14: 00007f0f665b6080 R15: 00007ffdb97b2c28 [ 117.625578][ T7463] [ 117.625671][ T7464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.625685][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.3.481 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 117.625705][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.625714][ T7464] Call Trace: [ 117.625723][ T7464] [ 117.625730][ T7464] dump_stack_lvl+0x99/0x250 [ 117.625756][ T7464] ? __asan_memcpy+0x40/0x70 [ 117.625773][ T7464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.625794][ T7464] ? __pfx__printk+0x10/0x10 [ 117.625814][ T7464] panic+0x2db/0x790 [ 117.625837][ T7464] ? __pfx_panic+0x10/0x10 [ 117.625859][ T7464] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 117.625879][ T7464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 117.625897][ T7464] ? print_memory_metadata+0x314/0x400 [ 117.625917][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 117.625938][ T7464] check_panic_on_warn+0x89/0xb0 [ 117.625968][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 117.625987][ T7464] end_report+0x78/0x160 [ 117.626006][ T7464] kasan_report+0x129/0x150 [ 117.626023][ T7464] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 117.626042][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 117.626066][ T7464] kasan_check_range+0x29a/0x2b0 [ 117.626085][ T7464] ? ipv6_addr_prefix+0x6e/0x1d0 [ 117.626114][ T7464] __asan_memcpy+0x29/0x70 [ 117.626130][ T7464] ipv6_addr_prefix+0x6e/0x1d0 [ 117.626153][ T7464] ip6_route_info_create+0x629/0xa70 [ 117.626173][ T7464] ip6_route_add+0x29/0x2f0 [ 117.626189][ T7464] ? ipv6_route_ioctl+0x313/0x480 [ 117.626205][ T7464] ipv6_route_ioctl+0x35c/0x480 [ 117.626225][ T7464] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 117.626254][ T7464] inet6_ioctl+0x219/0x280 [ 117.626276][ T7464] ? __pfx_inet6_ioctl+0x10/0x10 [ 117.626301][ T7464] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.626327][ T7464] sock_do_ioctl+0xd9/0x300 [ 117.626349][ T7464] ? __pfx_sock_do_ioctl+0x10/0x10 [ 117.626370][ T7464] ? __lock_acquire+0xaac/0xd20 [ 117.626395][ T7464] sock_ioctl+0x576/0x790 [ 117.626416][ T7464] ? __pfx_sock_ioctl+0x10/0x10 [ 117.626436][ T7464] ? __fget_files+0x3a0/0x420 [ 117.626455][ T7464] ? __fget_files+0x2a/0x420 [ 117.626475][ T7464] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.626494][ T7464] ? __pfx_sock_ioctl+0x10/0x10 [ 117.626513][ T7464] __se_sys_ioctl+0xf9/0x170 [ 117.626529][ T7464] do_syscall_64+0xf6/0x210 [ 117.626551][ T7464] ? clear_bhb_loop+0x45/0xa0 [ 117.626569][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.626584][ T7464] RIP: 0033:0x7f0f6638e969 [ 117.626599][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.626612][ T7464] RSP: 002b:00007f0f6718d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.626634][ T7464] RAX: ffffffffffffffda RBX: 00007f0f665b6160 RCX: 00007f0f6638e969 [ 117.626646][ T7464] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000005 [ 117.626656][ T7464] RBP: 00007f0f66410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 117.626666][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.626676][ T7464] R13: 0000000000000001 R14: 00007f0f665b6160 R15: 00007ffdb97b2c28 [ 117.626694][ T7464] [ 117.628818][ T7464] Kernel Offset: disabled