last executing test programs: 7.124061576s ago: executing program 2 (id=714): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x250002, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) 6.94594269s ago: executing program 2 (id=716): ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x3c8add99fd5285d2}, 0x20008045) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000ec40000900000000000000000003000000"], 0x14}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000600000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000020900010073797a301e000000140000001100010000000000000000000000000a"], 0xc4}}, 0x4008800) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.812772635s ago: executing program 2 (id=717): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) read(r4, &(0x7f0000000040)=""/50, 0x32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10) 5.722020721s ago: executing program 2 (id=727): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030426bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800b0001006d616373656300002000028005000600030000000c00010001000000000000000500070005"], 0x58}}, 0x0) 5.63712702s ago: executing program 2 (id=729): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.372609179s ago: executing program 0 (id=733): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005540)={0x194, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x3e, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b728f347480fcf8036fdd1bd4e534"]}]}]}, @nested={0x130, 0x6, 0x0, 0x1, [@nested={0x12c, 0xce, 0x0, 0x1, [@nested={0x125, 0x13e, 0x0, 0x1, [@generic="4499040c9752d3a79e688177bbeeedd58fb9fe45946e44949027fb413f23864caf51d77cb13970bbd521253c3ca8e81d9b3394f04a4c7c7e47c937814c02818834352ab8b2c0017326c82c0e690eae22ee032665888592a025b75de30198a7244a80c5414922ce290a32c6608d5c55c1ee983f5d438805bd59e32c090e15185665de783e55da81cbb7100dcaf2b29a3fae90f7ec87e36c21679beef1122a475b6792886c075ed6559cea18a234448bd72428e85a63385bdd7493b6cfb1a86452b03b34a0ac931414373ea7e33f22d8eb8bea547952fa42317f2f2a8ca1", @nested={0x44, 0xa0, 0x0, 0x1, [@typed={0x3d, 0x9b, 0x0, 0x0, @binary="d2bd4999934dadc195928a8bb40c08ec6aced01a47ad27465e13d4a404b56c9974bf93efa83bcc61a68d15fa09771175406f1ee154b231e271"}]}]}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.301541108s ago: executing program 2 (id=734): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x130, 0x0, &(0x7f0000000680)="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", 0x0, 0x200006ff, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)="06", 0x1}], 0x1}}], 0x2, 0x4000005) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa2aaaaaaaaaaaaaaaaa000806000186dd06100003aaaaaaaaaaaafe8000000000000000000000000000bbaaaaaaaaaabbfe800000000000000000000000000032582de86a0459169870f09acd3c82518140cb8c39e21481aecd65e77a58cebcf4116a8d04359a14ec1b33ef57c761cae157b218da8f90198865c633f82846364c7825592c37497e898a45bf98e886e55893b24a5f04b1e6652649a56dae2bee2564f69136a499a1419800000000000000"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xb, @private0, 0x6}, @in6={0xa, 0x4e23, 0x8, @remote, 0x1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x3}], 0x64) unshare(0x68060200) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.898108654s ago: executing program 0 (id=736): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xcc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) close(r5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440), 0x77, r8}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000000000000080000000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad9585000000030000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r14, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @mcast2, 0x7}}, 0x3, 0x7}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r15, 0x84, 0x10, 0x0, &(0x7f0000000800)) 4.542056197s ago: executing program 4 (id=738): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040601045c00000000000000000e0000000900020073797a3175042a2076285aacffd31d1f7a000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x400}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r7, 0x10001}, &(0x7f0000000240)=0x8) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0) 4.161283287s ago: executing program 4 (id=742): socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)}, 0x10) 3.607219303s ago: executing program 3 (id=747): socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000101400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 3.370819157s ago: executing program 0 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095", @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r6, 0x2, {0x0, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20040908}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x40000, {0x0, 0x0, 0x4c, 0x0, 0x0, 0x74b01}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0xb}}, 0x14}}, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000c31000220400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010062726964676500000c0002800500190088000000"], 0x3c}}, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006d00000328bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000200020000d9"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) socket(0x6, 0x0, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000007c0)={0x0, 'nr0\x00', {0x3}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x24}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4001, 0x1002a}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.598058761s ago: executing program 4 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r0, 0xffffffffffffffff, 0xf, 0x10, 0x0, @void, @value}, 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'team0\x00', 0x700}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010000104000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000008400000300012800b00010065727370616e0000200002800800150064a21400050016000100000005000a000000000004001200"], 0x50}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x200400, 0x4) 1.481744108s ago: executing program 1 (id=751): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 1.435833518s ago: executing program 0 (id=752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0xc0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x25}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c0001800600060080350000d1000280"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa76bc65a758e9e7170a00004200000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4058, 0xfdd2, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.341860373s ago: executing program 3 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.255998949s ago: executing program 3 (id=754): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x2, 0xfffffffc, 0xfffa, 0x1, 0x3, 0xb, 0x5, 0x8, 0x6, 0xfffffffb, 0xb, 0x0, 0xf7, 0x0, 0x7f, [0x101, 0x3]}}) 1.25000565s ago: executing program 4 (id=755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/103, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000f00000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x134}}, 0x0) 1.170116441s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09090000002000000000010000000000000009410000004c00180003006062726f6164636173742d6c696e6b"], 0x68}}, 0x0) 1.169712834s ago: executing program 0 (id=757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x17c, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x32, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) socket$inet6(0xa, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x5}, 0x18) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x0, 0x0, 0x2b8, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@uncond, 0x0, 0x138, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, [0x0, 0xffffff00, 0xff000000, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffff00, 0xff000000], @ipv4=@multicast2, [0xffffff00, 0x0, 0xff, 0x80800000], 0x8000, 0x2, 0x3c, 0x4e21, 0x4e24, 0x4e20, 0x4e24, 0x40, 0x60}, 0x0, 0x4, 0x4e23, 0x4e22, 0x4e22, 0x4e24}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 0x80, 0x10, [0x2e, 0x21, 0x1f, 0x15, 0x8, 0x4, 0x2f, 0x2f, 0x2e, 0x1e, 0x34, 0x15, 0xa, 0x8, 0x22, 0x2], 0x1, 0x0, 0x61}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0xc, 0x0, 0x0, 0x0, 0x1], 0x3, 0x1}}}, @common=@unspec=@pkttype={{0x28}, {0x10000, 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'ip6tnl0\x00', {0xb}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x18a, 0x800, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) 1.119786731s ago: executing program 3 (id=758): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x2228000, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4080) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) 1.100466619s ago: executing program 4 (id=759): socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)}, 0x10) 797.842655ms ago: executing program 1 (id=760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x2000}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x0, 0x7b}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8, 0x1000, 0x4]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000080) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @in6=@local}, {{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x7, 0x4}, {}, 0x0, 0x2}}}, 0x128}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x48, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) 457.404282ms ago: executing program 0 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffc55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r5, r5, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$kcm(0x2, 0x1, 0x84) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x45, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x200000, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="fefffffe00000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="de08d8c848bb4ef4a91e26b8603ca699387256de087cd34fbac13b6f807136e1273b05fb33d4e4063f0bdc59cdf1bd9484f853543f217dc39a0c27d7848f7ff6dc069f6069f01b28993774a95fe941689595eb7fd08b6cba6050b1f60dc1f846ecce", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000240), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000009f27d972008510000300000018000000000000000300000000000000650000000000000018000000000007000000000000006f6395000000000000008500000007000000950000000000000000", @ANYRESOCT=r4, @ANYRES16=r6], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}]}, 0x0) 375.986786ms ago: executing program 1 (id=762): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x0) (async) r2 = accept4(r0, &(0x7f00000000c0)=@pppol2tpv3in6, &(0x7f0000000140)=0x80, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d41, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x50, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@bridge_delneigh={0xac, 0x1d, 0x100, 0x70bd26, 0x25dfdbfb, {0x1c, 0x0, 0x0, r4, 0x20, 0x20, 0x1}, [@NDA_NH_ID={0x8, 0xd, 0xff}, @NDA_IFINDEX={0x8}, @NDA_FLAGS_EXT={0x8}, @NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_NH_ID={0x8, 0xd, 0xfffffff5}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_PROTOCOL={0x5, 0xc, 0x9d}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}]}, @NDA_IFINDEX={0x8, 0x8, r5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000c}, 0x4800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x86, 0x1, @vifc_lcl_ifindex=r6, @local}, 0x10) 306.091768ms ago: executing program 3 (id=763): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1ffffffd}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0, @alu={0x6, 0x0, 0x9, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 226.774438ms ago: executing program 1 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 182.892003ms ago: executing program 4 (id=765): socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000141400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 67.459166ms ago: executing program 3 (id=766): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 0s ago: executing program 1 (id=767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, &(0x7f0000000240), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2068045}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x35}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 63.821504][ T5815] cgroup: Unknown subsys name 'net' [ 64.017730][ T5815] cgroup: Unknown subsys name 'cpuset' [ 64.026320][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.375213][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.729493][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.737878][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.745996][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.754111][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.754388][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.761777][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.775662][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.780844][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.791875][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.799418][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.804083][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.812627][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.815810][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.821444][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.836763][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.851654][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.853229][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.860074][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.866760][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.875064][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.881408][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.887861][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.894576][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.908315][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.916280][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.512193][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 68.529831][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 68.626976][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 68.711533][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 68.776432][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.786292][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.794127][ T5838] bridge_slave_0: entered allmulticast mode [ 68.801545][ T5838] bridge_slave_0: entered promiscuous mode [ 68.857948][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.865618][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.873769][ T5838] bridge_slave_1: entered allmulticast mode [ 68.881081][ T5838] bridge_slave_1: entered promiscuous mode [ 68.892640][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 68.954118][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.961256][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.969079][ T5827] bridge_slave_0: entered allmulticast mode [ 68.976994][ T5827] bridge_slave_0: entered promiscuous mode [ 69.013895][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.021100][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.028559][ T5827] bridge_slave_1: entered allmulticast mode [ 69.036338][ T5827] bridge_slave_1: entered promiscuous mode [ 69.057337][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.070721][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.162886][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.170177][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.178622][ T5833] bridge_slave_0: entered allmulticast mode [ 69.185858][ T5833] bridge_slave_0: entered promiscuous mode [ 69.194286][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.201387][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.208714][ T5833] bridge_slave_1: entered allmulticast mode [ 69.215819][ T5833] bridge_slave_1: entered promiscuous mode [ 69.235301][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.242503][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.250116][ T5834] bridge_slave_0: entered allmulticast mode [ 69.257298][ T5834] bridge_slave_0: entered promiscuous mode [ 69.286093][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.319986][ T5838] team0: Port device team_slave_0 added [ 69.329794][ T5838] team0: Port device team_slave_1 added [ 69.336177][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.343560][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.350808][ T5834] bridge_slave_1: entered allmulticast mode [ 69.359579][ T5834] bridge_slave_1: entered promiscuous mode [ 69.386468][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.411564][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.426116][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.519496][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.527265][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.534910][ T5826] bridge_slave_0: entered allmulticast mode [ 69.542015][ T5826] bridge_slave_0: entered promiscuous mode [ 69.552120][ T5827] team0: Port device team_slave_0 added [ 69.572770][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.582083][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.608802][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.622871][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.632582][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.640960][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.648323][ T5826] bridge_slave_1: entered allmulticast mode [ 69.656021][ T5826] bridge_slave_1: entered promiscuous mode [ 69.669205][ T5827] team0: Port device team_slave_1 added [ 69.690550][ T5833] team0: Port device team_slave_0 added [ 69.698688][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.706068][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.732587][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.746691][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.806153][ T5833] team0: Port device team_slave_1 added [ 69.812792][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.820480][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.846695][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.878455][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.891175][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.904386][ T5845] Bluetooth: hci0: command tx timeout [ 69.904391][ T5837] Bluetooth: hci1: command tx timeout [ 69.928344][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.937526][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.964015][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.983685][ T5837] Bluetooth: hci2: command tx timeout [ 69.989289][ T5845] Bluetooth: hci4: command tx timeout [ 69.994185][ T5834] team0: Port device team_slave_0 added [ 69.995868][ T5845] Bluetooth: hci3: command tx timeout [ 70.004745][ T5834] team0: Port device team_slave_1 added [ 70.022117][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.029543][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.055708][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.068626][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.075681][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.101763][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.210916][ T5826] team0: Port device team_slave_0 added [ 70.221255][ T5826] team0: Port device team_slave_1 added [ 70.235304][ T5838] hsr_slave_0: entered promiscuous mode [ 70.241764][ T5838] hsr_slave_1: entered promiscuous mode [ 70.253101][ T5827] hsr_slave_0: entered promiscuous mode [ 70.261366][ T5827] hsr_slave_1: entered promiscuous mode [ 70.268262][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.278087][ T5827] Cannot create hsr debugfs directory [ 70.284882][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.291948][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.318254][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.367702][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.375173][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.401642][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.450749][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.460171][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.487522][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.510330][ T5833] hsr_slave_0: entered promiscuous mode [ 70.516893][ T5833] hsr_slave_1: entered promiscuous mode [ 70.522990][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.530639][ T5833] Cannot create hsr debugfs directory [ 70.556763][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.563861][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.590333][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.776630][ T5834] hsr_slave_0: entered promiscuous mode [ 70.782852][ T5834] hsr_slave_1: entered promiscuous mode [ 70.789646][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.797248][ T5834] Cannot create hsr debugfs directory [ 70.808386][ T5826] hsr_slave_0: entered promiscuous mode [ 70.814742][ T5826] hsr_slave_1: entered promiscuous mode [ 70.820854][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.828629][ T5826] Cannot create hsr debugfs directory [ 71.201215][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.227576][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.249926][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.269477][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.317124][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.347357][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.374020][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.396409][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.434549][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.441044][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.453157][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.468988][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.497278][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.518966][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.576703][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.611543][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.639282][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.679349][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.714903][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.768655][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.780204][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.810132][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.822129][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.857540][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.931334][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.938645][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.952713][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.965826][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.972988][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.987594][ T5845] Bluetooth: hci0: command tx timeout [ 71.987605][ T5837] Bluetooth: hci1: command tx timeout [ 72.047508][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.063843][ T5845] Bluetooth: hci3: command tx timeout [ 72.064191][ T5837] Bluetooth: hci4: command tx timeout [ 72.069273][ T5836] Bluetooth: hci2: command tx timeout [ 72.105605][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.112766][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.170351][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.179584][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.186883][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.212805][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.282080][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.296864][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.315790][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.346476][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.353722][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.370273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.377418][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.397025][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.404237][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.429254][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.448493][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.455716][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.517355][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.524559][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.560196][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.581739][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.588875][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.690183][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.701153][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.885967][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.945850][ T5838] veth0_vlan: entered promiscuous mode [ 73.016458][ T5838] veth1_vlan: entered promiscuous mode [ 73.045662][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.079350][ T5838] veth0_macvtap: entered promiscuous mode [ 73.108721][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.122489][ T5833] veth0_vlan: entered promiscuous mode [ 73.147217][ T5838] veth1_macvtap: entered promiscuous mode [ 73.174670][ T5833] veth1_vlan: entered promiscuous mode [ 73.252878][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.269126][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.310433][ T5834] veth0_vlan: entered promiscuous mode [ 73.321070][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.331895][ T5826] veth0_vlan: entered promiscuous mode [ 73.349493][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.359448][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.371245][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.380848][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.391933][ T5833] veth0_macvtap: entered promiscuous mode [ 73.404006][ T5834] veth1_vlan: entered promiscuous mode [ 73.415479][ T5826] veth1_vlan: entered promiscuous mode [ 73.432773][ T5833] veth1_macvtap: entered promiscuous mode [ 73.533223][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.551384][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.565063][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.608795][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.619565][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.635222][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.678280][ T5834] veth0_macvtap: entered promiscuous mode [ 73.686550][ T5826] veth0_macvtap: entered promiscuous mode [ 73.698625][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.714588][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.726746][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.735880][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.746371][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.756183][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.773076][ T5834] veth1_macvtap: entered promiscuous mode [ 73.800546][ T5826] veth1_macvtap: entered promiscuous mode [ 73.836200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.845870][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.871517][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.897064][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.909605][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.920558][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.934738][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.966540][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.993422][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.003269][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.017845][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.027852][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.038344][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.049617][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.064012][ T5836] Bluetooth: hci0: command tx timeout [ 74.068419][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.069434][ T5836] Bluetooth: hci1: command tx timeout [ 74.109319][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.122576][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.137939][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.152243][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.152530][ T5845] Bluetooth: hci2: command tx timeout [ 74.162255][ T5837] Bluetooth: hci3: command tx timeout [ 74.168498][ T5836] Bluetooth: hci4: command tx timeout [ 74.179504][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.213232][ T5827] veth0_vlan: entered promiscuous mode [ 74.238945][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.250410][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.263593][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.272631][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.283579][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.293759][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.306832][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.317927][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.329618][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.338438][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.347325][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.356389][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.359501][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.382594][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.399199][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.408282][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.417510][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.426676][ T5911] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.427007][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.440098][ T5911] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 74.460245][ T5827] veth1_vlan: entered promiscuous mode [ 74.474644][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.498191][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.528872][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.547305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.556341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.704432][ T5827] veth0_macvtap: entered promiscuous mode [ 74.718142][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.737385][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.767871][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.795360][ T5912] Zero length message leads to an empty skb [ 74.841936][ T5827] veth1_macvtap: entered promiscuous mode [ 74.878708][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.909240][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959276][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.973715][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.032443][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.045916][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.052069][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.068280][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.095637][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.124343][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.137492][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.149282][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.159465][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.170238][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.182823][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.215909][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.253336][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.263197][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.277086][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.287603][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.298196][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.309294][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.321968][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.344376][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.390813][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.401811][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.412912][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.424772][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882209][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.935123][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.044970][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 76.098408][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 76.144166][ T5836] Bluetooth: hci1: command tx timeout [ 76.144187][ T5837] Bluetooth: hci0: command tx timeout [ 76.172517][ T5949] syz.3.10 (5949) used greatest stack depth: 19840 bytes left [ 76.178088][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.190187][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.224177][ T5837] Bluetooth: hci3: command tx timeout [ 76.227196][ T5836] Bluetooth: hci4: command tx timeout [ 76.229616][ T5837] Bluetooth: hci2: command tx timeout [ 76.522763][ T5956] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 76.799806][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 76.810939][ T5958] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 76.828594][ T5958] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 76.847937][ T5958] bond1: (slave vcan1): making interface the new active one [ 76.860135][ T5958] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 76.881529][ T5968] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 76.916568][ T5882] IPVS: starting estimator thread 0... [ 76.922131][ T5962] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 76.939297][ T5962] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 77.008734][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 77.046961][ T5969] IPVS: using max 31 ests per chain, 74400 per kthread [ 77.170084][ T5958] bond1: (slave vcan1): Releasing backup interface [ 77.194069][ T5958] bond1: (slave vcan2): making interface the new active one [ 77.363469][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 78.824312][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.862800][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.225741][ T6016] team0: Port device team_slave_0 removed [ 79.346000][ T6020] __nla_validate_parse: 7 callbacks suppressed [ 79.346019][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 79.393585][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27'. [ 79.402434][ T6022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.27'. [ 79.674393][ T6033] !: renamed from dummy0 (while UP) [ 80.028081][ T6045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 80.797717][ T6066] batadv1: entered promiscuous mode [ 81.213751][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 81.222511][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 81.341319][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 81.364778][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 81.451141][ T6084] bond2: entered promiscuous mode [ 81.456776][ T6084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.402446][ T6084] bond2 (unregistering): Released all slaves [ 83.924759][ T6151] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 84.286430][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 84.303575][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 84.313801][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 84.513168][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 84.551791][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 84.886708][ T6155] batadv1: entered promiscuous mode [ 84.962083][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 85.053432][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 85.240262][ T6185] netlink: 'syz.1.58': attribute type 29 has an invalid length. [ 85.270963][ T6184] netlink: 88 bytes leftover after parsing attributes in process `syz.4.57'. [ 85.462638][ T6200] netlink: 56 bytes leftover after parsing attributes in process `syz.2.59'. [ 85.692658][ T6216] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 85.913667][ T6220] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.623663][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 86.794473][ T9] cfg80211: failed to load regulatory.db [ 86.802344][ T6255] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 87.369690][ T6270] tipc: Started in network mode [ 87.374781][ T6270] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.382625][ T6270] tipc: Enabled bearer , priority 10 [ 87.390899][ T9] IPVS: starting estimator thread 0... [ 87.490029][ T6289] netlink: 'syz.1.84': attribute type 39 has an invalid length. [ 87.499090][ T6286] IPVS: using max 34 ests per chain, 81600 per kthread [ 87.563619][ T6293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.85'. [ 88.128593][ T6315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.90'. [ 88.401501][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 88.427377][ T6325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.494034][ T5882] tipc: Node number set to 2886997162 [ 88.686072][ T6331] veth1_to_team: entered promiscuous mode [ 88.697265][ T6334] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 88.739975][ T6323] tipc: Started in network mode [ 88.750694][ T6323] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.778949][ T6323] tipc: Enabled bearer , priority 10 [ 89.572448][ T6365] __nla_validate_parse: 1 callbacks suppressed [ 89.572467][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 89.873507][ T6374] bridge_slave_1: left allmulticast mode [ 89.879362][ T6374] bridge_slave_1: left promiscuous mode [ 89.886578][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.894254][ T5882] tipc: Node number set to 2886997162 [ 89.906300][ T6374] bridge_slave_0: left allmulticast mode [ 89.917457][ T6374] bridge_slave_0: left promiscuous mode [ 89.926681][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.082127][ T6377] netlink: 'syz.0.112': attribute type 2 has an invalid length. [ 90.125166][ T6377] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 90.161451][ T6377] netlink: 224 bytes leftover after parsing attributes in process `syz.0.112'. [ 90.566518][ T6396] tipc: Can't bind to reserved service type 1 [ 90.755660][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 90.913121][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 91.629010][ T6444] vlan0: entered promiscuous mode [ 91.672074][ T6444] team0: Port device vlan0 added [ 91.941125][ T6465] netlink: 892 bytes leftover after parsing attributes in process `syz.4.131'. [ 92.634724][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'. [ 92.843745][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'. [ 93.021255][ T6508] netlink: 'syz.0.142': attribute type 16 has an invalid length. [ 93.062351][ T6508] netlink: 'syz.0.142': attribute type 3 has an invalid length. [ 93.087753][ T6508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.142'. [ 93.218057][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 93.252479][ T6508] netlink: 312 bytes leftover after parsing attributes in process `syz.0.142'. [ 93.295606][ T6508] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 93.617977][ T6529] tipc: Started in network mode [ 93.623766][ T6529] tipc: Node identity 2d1414aa, cluster identity 4711 [ 93.631041][ T6529] tipc: Enabling of bearer rejected, failed to enable media [ 93.639773][ T5938] IPVS: starting estimator thread 0... [ 93.745543][ T6530] IPVS: using max 37 ests per chain, 88800 per kthread [ 94.970372][ T6583] veth0_to_bond: entered promiscuous mode [ 95.057653][ T6586] veth0_to_bond: left promiscuous mode [ 95.292291][ T6599] __nla_validate_parse: 3 callbacks suppressed [ 95.292307][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 95.333616][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.162'. [ 95.395551][ T6599] netlink: 'syz.1.162': attribute type 22 has an invalid length. [ 95.409639][ T6600] netlink: 'syz.1.162': attribute type 22 has an invalid length. [ 95.545877][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.167'. [ 96.078315][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 96.126967][ T6640] vxcan1: tx address claim with dlc 0 [ 96.244097][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 97.053257][ T6663] smc: net device bond0 applied user defined pnetid SYZ0 [ 97.074664][ T6663] smc: net device bond0 erased user defined pnetid SYZ0 [ 97.105677][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.183'. [ 97.184315][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 97.273485][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 97.852187][ T6692] tipc: Enabling of bearer rejected, failed to enable media [ 97.959051][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 98.070912][ T6704] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 98.230999][ T6704] bond2: entered promiscuous mode [ 98.267237][ T6704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.486557][ T6721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.191'. [ 98.518762][ T6717] bond0: (slave bond_slave_0): Releasing backup interface [ 98.541856][ T6717] bond0: (slave bond_slave_1): Releasing backup interface [ 98.591011][ T6717] team0: Port device team_slave_0 removed [ 98.615814][ T6717] team0: Port device team_slave_1 removed [ 98.625431][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.633930][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.642835][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.650427][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.671301][ T6717] team0: Port device vlan0 removed [ 99.127458][ T6742] team0: entered allmulticast mode [ 99.154831][ T6742] team_slave_0: entered allmulticast mode [ 99.166512][ T6742] team_slave_1: entered allmulticast mode [ 99.222812][ T6746] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 99.235436][ T6746] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 99.244032][ T6746] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 99.544334][ T6771] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 99.755028][ T6782] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 100.070356][ T6799] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.233939][ T6808] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 100.532737][ T6822] __nla_validate_parse: 4 callbacks suppressed [ 100.532763][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 100.551388][ T6831] netlink: 'syz.3.217': attribute type 39 has an invalid length. [ 100.584674][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 100.595251][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.625248][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 100.745658][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.218'. [ 100.756211][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.218'. [ 100.770747][ T6844] netlink: 168 bytes leftover after parsing attributes in process `syz.2.219'. [ 100.788307][ T6840] bond0: entered promiscuous mode [ 100.793565][ T6840] bond_slave_0: entered promiscuous mode [ 100.799418][ T6840] bond_slave_1: entered promiscuous mode [ 100.966806][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'. [ 101.078689][ T6813] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 101.496655][ T6873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.227'. [ 101.715728][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 101.862333][ T6886] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 102.281513][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 103.938160][ T6979] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.958341][ T6981] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 103.996937][ T6979] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.114009][ T6983] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 104.201345][ T6983] bond2: entered promiscuous mode [ 104.208012][ T6983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.209412][ T6990] block nbd0: not configured, cannot reconfigure [ 104.279791][ T6990] raw_sendmsg: syz.4.267 forgot to set AF_INET. Fix it! [ 104.294537][ T6997] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.947807][ T7063] __nla_validate_parse: 9 callbacks suppressed [ 105.947824][ T7063] netlink: 240 bytes leftover after parsing attributes in process `syz.1.286'. [ 105.981899][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 106.028993][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 106.720392][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 106.825949][ T7089] ipvlan2: entered allmulticast mode [ 106.831292][ T7089] macsec0: entered allmulticast mode [ 106.837268][ T7089] veth1_macvtap: entered allmulticast mode [ 107.014010][ T7093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.185870][ T7093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.456523][ T7093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.617679][ T7093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.795485][ T7134] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.309'. [ 107.958157][ T7093] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.990070][ T7093] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.999999][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 108.022758][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 108.038111][ T7093] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.086948][ T7093] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316191][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 108.342596][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 108.370171][ T7144] xt_TCPMSS: Only works on TCP SYN packets [ 108.406416][ T7151] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 108.582848][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 109.120772][ T7174] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.129860][ T7174] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.138785][ T7174] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.147644][ T7174] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.197951][ T7184] xt_hashlimit: size too large, truncated to 1048576 [ 109.233222][ T7178] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 109.501255][ T7195] wireguard0: entered promiscuous mode [ 109.998060][ T7213] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 111.471778][ T7277] __nla_validate_parse: 8 callbacks suppressed [ 111.471795][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 112.290480][ T7268] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.310359][ T7268] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.319652][ T7268] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.328765][ T7268] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.465059][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.474873][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.487864][ T7270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.659663][ T7284] netlink: 72 bytes leftover after parsing attributes in process `syz.4.354'. [ 112.748916][ T7291] pim6reg: entered allmulticast mode [ 112.766528][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 112.803395][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 112.812464][ T7291] pim6reg: left allmulticast mode [ 113.449603][ T7305] : entered promiscuous mode [ 113.600984][ T7315] Cannot find set identified by id 0 to match [ 113.632002][ T7301] tipc: Started in network mode [ 113.640492][ T5882] IPVS: starting estimator thread 0... [ 113.646678][ T7301] tipc: Node identity ac1414aa, cluster identity 4711 [ 113.664773][ T7301] tipc: Enabled bearer , priority 10 [ 113.764213][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.365'. [ 113.773419][ T7318] IPVS: using max 43 ests per chain, 103200 per kthread [ 113.788419][ T7321] netlink: 'syz.4.363': attribute type 10 has an invalid length. [ 113.834709][ T7320] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 114.009691][ T7321] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.148220][ T7339] netlink: 108 bytes leftover after parsing attributes in process `syz.1.368'. [ 114.174823][ T7320] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.201323][ T7328] tipc: Started in network mode [ 114.210629][ T7328] tipc: Node identity 7f000001, cluster identity 4711 [ 114.220197][ T7328] tipc: Enabled bearer , priority 10 [ 114.411006][ T7348] x_tables: duplicate underflow at hook 3 [ 114.549132][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.375'. [ 114.775301][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 114.784570][ T5938] tipc: Node number set to 2886997162 [ 114.832305][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 114.946761][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 115.333423][ T47] tipc: Node number set to 2130706433 [ 115.820404][ T7412] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 115.828993][ T7412] netlink: 'syz.4.392': attribute type 2 has an invalid length. [ 116.151173][ T7439] netlink: 'syz.1.398': attribute type 2 has an invalid length. [ 116.235683][ T7439] þ: entered promiscuous mode [ 116.406370][ T7455] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 116.488778][ T7459] __nla_validate_parse: 5 callbacks suppressed [ 116.488796][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 116.514088][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 116.523126][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 116.574981][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 116.594886][ T7460] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'. [ 116.603620][ T7459] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'. [ 116.619176][ T7455] bond3 (unregistering): Released all slaves [ 116.927618][ T7479] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 117.011135][ T7485] netlink: 'syz.2.411': attribute type 4 has an invalid length. [ 117.097662][ T7485] netlink: 'syz.2.411': attribute type 4 has an invalid length. [ 117.688638][ T7496] netlink: 'syz.2.414': attribute type 37 has an invalid length. [ 117.710441][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 117.837124][ T7499] tipc: Enabling of bearer rejected, already enabled [ 118.009040][ T7504] netlink: 'syz.0.417': attribute type 74 has an invalid length. [ 118.062455][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 118.072893][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 118.330960][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.421'. [ 118.370059][ T7525] netlink: 'syz.4.422': attribute type 29 has an invalid length. [ 119.689658][ T7580] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 119.817642][ T7587] sctp: [Deprecated]: syz.3.438 (pid 7587) Use of int in max_burst socket option deprecated. [ 119.817642][ T7587] Use struct sctp_assoc_value instead [ 119.916014][ T7585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 119.935600][ T7585] bond3: (slave bond4): making interface the new active one [ 119.947508][ T7585] bond3: (slave bond4): Enslaving as an active interface with an up link [ 120.210360][ T7606] IPv6: Can't replace route, no match found [ 120.227957][ T7606] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 121.850637][ T7681] __nla_validate_parse: 9 callbacks suppressed [ 121.850655][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 121.951887][ T7694] FAULT_INJECTION: forcing a failure. [ 121.951887][ T7694] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.955566][ T7695] netlink: 44 bytes leftover after parsing attributes in process `syz.0.468'. [ 122.001156][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.2.470 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 122.001182][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.001193][ T7694] Call Trace: [ 122.001200][ T7694] [ 122.001205][ T7694] dump_stack_lvl+0x189/0x250 [ 122.001232][ T7694] ? __lock_acquire+0xaac/0xd20 [ 122.001249][ T7694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.001262][ T7694] ? __pfx__printk+0x10/0x10 [ 122.001271][ T7694] ? __might_fault+0xb0/0x130 [ 122.001289][ T7694] should_fail_ex+0x414/0x560 [ 122.001305][ T7694] _copy_from_user+0x2d/0xb0 [ 122.001318][ T7694] __sys_bpf+0x1ed/0x860 [ 122.001331][ T7694] ? __pfx___sys_bpf+0x10/0x10 [ 122.001348][ T7694] ? ksys_write+0x1f0/0x250 [ 122.001365][ T7694] __x64_sys_bpf+0x7c/0x90 [ 122.001375][ T7694] do_syscall_64+0xf6/0x210 [ 122.001388][ T7694] ? clear_bhb_loop+0x45/0xa0 [ 122.001403][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.001416][ T7694] RIP: 0033:0x7f7f8178e969 [ 122.001434][ T7694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.001447][ T7694] RSP: 002b:00007f7f82522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.001467][ T7694] RAX: ffffffffffffffda RBX: 00007f7f819b6080 RCX: 00007f7f8178e969 [ 122.001478][ T7694] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f [ 122.001487][ T7694] RBP: 00007f7f82522090 R08: 0000000000000000 R09: 0000000000000000 [ 122.001497][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.001505][ T7694] R13: 0000000000000001 R14: 00007f7f819b6080 R15: 00007fff9b2c7f48 [ 122.001522][ T7694] [ 122.182195][ T7681] netlink: 56 bytes leftover after parsing attributes in process `syz.0.468'. [ 122.393436][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 122.402625][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 123.080134][ T7734] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 123.873060][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 124.178979][ T7770] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 124.190743][ T47] IPVS: starting estimator thread 0... [ 124.207438][ T7759] tipc: Enabled bearer , priority 10 [ 124.283847][ T7774] IPVS: using max 33 ests per chain, 79200 per kthread [ 124.511522][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 124.573321][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 124.577375][ T7788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 124.779145][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 124.789895][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 125.517872][ T7807] netlink: 'syz.0.507': attribute type 7 has an invalid length. [ 125.536830][ T7807] netlink: 'syz.0.507': attribute type 39 has an invalid length. [ 125.767999][ T7821] FAULT_INJECTION: forcing a failure. [ 125.767999][ T7821] name failslab, interval 1, probability 0, space 0, times 1 [ 125.789049][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.1.508 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 125.789076][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 125.789086][ T7821] Call Trace: [ 125.789093][ T7821] [ 125.789106][ T7821] dump_stack_lvl+0x189/0x250 [ 125.789135][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.789157][ T7821] ? __pfx__printk+0x10/0x10 [ 125.789180][ T7821] ? __pfx___might_resched+0x10/0x10 [ 125.789194][ T7821] ? fs_reclaim_acquire+0x7d/0x100 [ 125.789221][ T7821] should_fail_ex+0x414/0x560 [ 125.789250][ T7821] should_failslab+0xa8/0x100 [ 125.789272][ T7821] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 125.789292][ T7821] ? __d_alloc+0x31/0x6f0 [ 125.789319][ T7821] __d_alloc+0x31/0x6f0 [ 125.789346][ T7821] path_from_stashed+0x46c/0x8f0 [ 125.789375][ T7821] ? __pfx_path_from_stashed+0x10/0x10 [ 125.789398][ T7821] ? bpf_map_offload_info_fill_ns+0x1c1/0x260 [ 125.789421][ T7821] bpf_map_offload_info_fill+0xa7/0x270 [ 125.789438][ T7821] ? __pfx_bpf_map_offload_info_fill+0x10/0x10 [ 125.789455][ T7821] ? __fget_files+0x3a0/0x420 [ 125.789477][ T7821] ? bpf_obj_get_info_by_fd+0x77e/0x2f30 [ 125.789503][ T7821] bpf_obj_get_info_by_fd+0xcae/0x2f30 [ 125.789526][ T7821] ? _parse_integer_limit+0x1ae/0x1f0 [ 125.789552][ T7821] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 125.789596][ T7821] ? __lock_acquire+0xaac/0xd20 [ 125.789626][ T7821] ? __might_fault+0xb0/0x130 [ 125.789662][ T7821] ? bpf_lsm_bpf+0x9/0x20 [ 125.789679][ T7821] ? security_bpf+0x7e/0x300 [ 125.789705][ T7821] __sys_bpf+0x77a/0x860 [ 125.789727][ T7821] ? __pfx___sys_bpf+0x10/0x10 [ 125.789758][ T7821] ? ksys_write+0x1f0/0x250 [ 125.789774][ T7821] ? rcu_is_watching+0x15/0xb0 [ 125.789807][ T7821] __x64_sys_bpf+0x7c/0x90 [ 125.789825][ T7821] do_syscall_64+0xf6/0x210 [ 125.789847][ T7821] ? clear_bhb_loop+0x45/0xa0 [ 125.789867][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.789883][ T7821] RIP: 0033:0x7f69bef8e969 [ 125.789898][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.789912][ T7821] RSP: 002b:00007f69bfda0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.789935][ T7821] RAX: ffffffffffffffda RBX: 00007f69bf1b5fa0 RCX: 00007f69bef8e969 [ 125.789946][ T7821] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f [ 125.789957][ T7821] RBP: 00007f69bfda0090 R08: 0000000000000000 R09: 0000000000000000 [ 125.789966][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.789975][ T7821] R13: 0000000000000000 R14: 00007f69bf1b5fa0 R15: 00007ffff69385c8 [ 125.790002][ T7821] [ 126.320005][ T7823] tipc: Enabling of bearer rejected, already enabled [ 127.405524][ T7900] netlink: 'syz.4.522': attribute type 4 has an invalid length. [ 127.789183][ T7912] __nla_validate_parse: 4 callbacks suppressed [ 127.789199][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 127.972785][ T7921] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 128.001376][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 128.268572][ T7914] tipc: Enabled bearer , priority 10 [ 128.383636][ T5837] Bluetooth: hci4: command tx timeout [ 128.493319][ T7942] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 128.685916][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 128.750286][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 128.827896][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 128.838130][ T7958] FAULT_INJECTION: forcing a failure. [ 128.838130][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 128.877462][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.2.544 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 128.877485][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.877494][ T7958] Call Trace: [ 128.877501][ T7958] [ 128.877508][ T7958] dump_stack_lvl+0x189/0x250 [ 128.877539][ T7958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.877561][ T7958] ? __pfx__printk+0x10/0x10 [ 128.877582][ T7958] ? __pfx___might_resched+0x10/0x10 [ 128.877602][ T7958] should_fail_ex+0x414/0x560 [ 128.877631][ T7958] should_failslab+0xa8/0x100 [ 128.877654][ T7958] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 128.877674][ T7958] ? __alloc_skb+0x112/0x2d0 [ 128.877692][ T7958] __alloc_skb+0x112/0x2d0 [ 128.877711][ T7958] netlink_sendmsg+0x5c6/0xb30 [ 128.877736][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.877754][ T7958] ? aa_sock_msg_perm+0x94/0x160 [ 128.877773][ T7958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.877791][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.877807][ T7958] __sock_sendmsg+0x219/0x270 [ 128.877832][ T7958] ____sys_sendmsg+0x505/0x830 [ 128.877855][ T7958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.877881][ T7958] ? import_iovec+0x74/0xa0 [ 128.877904][ T7958] ___sys_sendmsg+0x21f/0x2a0 [ 128.877924][ T7958] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.877976][ T7958] ? __fget_files+0x2a/0x420 [ 128.877995][ T7958] ? __fget_files+0x3a0/0x420 [ 128.878024][ T7958] __x64_sys_sendmsg+0x19b/0x260 [ 128.878044][ T7958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.878076][ T7958] ? do_syscall_64+0xba/0x210 [ 128.878099][ T7958] do_syscall_64+0xf6/0x210 [ 128.878119][ T7958] ? clear_bhb_loop+0x45/0xa0 [ 128.878139][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.878154][ T7958] RIP: 0033:0x7f7f8178e969 [ 128.878169][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.878182][ T7958] RSP: 002b:00007f7f82543038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.878199][ T7958] RAX: ffffffffffffffda RBX: 00007f7f819b5fa0 RCX: 00007f7f8178e969 [ 128.878211][ T7958] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 128.878220][ T7958] RBP: 00007f7f82543090 R08: 0000000000000000 R09: 0000000000000000 [ 128.878230][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.878239][ T7958] R13: 0000000000000000 R14: 00007f7f819b5fa0 R15: 00007fff9b2c7f48 [ 128.878265][ T7958] [ 129.286118][ T10] tipc: Node number set to 756290730 [ 130.334701][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 130.369122][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 130.438931][ T7999] tipc: Enabling of bearer rejected, already enabled [ 131.100108][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 131.251078][ T8033] netlink: 48 bytes leftover after parsing attributes in process `syz.4.569'. [ 131.331608][ T8033] vti0: entered promiscuous mode [ 131.966136][ T8053] FAULT_INJECTION: forcing a failure. [ 131.966136][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 132.011230][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: syz.4.576 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 132.011254][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 132.011264][ T8053] Call Trace: [ 132.011270][ T8053] [ 132.011278][ T8053] dump_stack_lvl+0x189/0x250 [ 132.011309][ T8053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.011331][ T8053] ? __pfx__printk+0x10/0x10 [ 132.011354][ T8053] ? ref_tracker_alloc+0x318/0x460 [ 132.011374][ T8053] should_fail_ex+0x414/0x560 [ 132.011402][ T8053] should_failslab+0xa8/0x100 [ 132.011425][ T8053] kmem_cache_alloc_noprof+0x73/0x3c0 [ 132.011444][ T8053] ? skb_clone+0x212/0x3a0 [ 132.011464][ T8053] skb_clone+0x212/0x3a0 [ 132.011484][ T8053] __netlink_deliver_tap+0x404/0x850 [ 132.011521][ T8053] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.011543][ T8053] netlink_deliver_tap+0x19c/0x1b0 [ 132.011567][ T8053] netlink_unicast+0x72f/0x8d0 [ 132.011599][ T8053] netlink_sendmsg+0x805/0xb30 [ 132.011623][ T8053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.011643][ T8053] ? aa_sock_msg_perm+0x94/0x160 [ 132.011660][ T8053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.011676][ T8053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.011692][ T8053] __sock_sendmsg+0x219/0x270 [ 132.011716][ T8053] ____sys_sendmsg+0x505/0x830 [ 132.011740][ T8053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.011765][ T8053] ? import_iovec+0x74/0xa0 [ 132.011789][ T8053] ___sys_sendmsg+0x21f/0x2a0 [ 132.011809][ T8053] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.011861][ T8053] ? __fget_files+0x2a/0x420 [ 132.011879][ T8053] ? __fget_files+0x3a0/0x420 [ 132.011908][ T8053] __x64_sys_sendmsg+0x19b/0x260 [ 132.011927][ T8053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.011960][ T8053] ? do_syscall_64+0xba/0x210 [ 132.011985][ T8053] do_syscall_64+0xf6/0x210 [ 132.012005][ T8053] ? clear_bhb_loop+0x45/0xa0 [ 132.012026][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.012041][ T8053] RIP: 0033:0x7fbe4e98e969 [ 132.012056][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.012069][ T8053] RSP: 002b:00007fbe4f89f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.012087][ T8053] RAX: ffffffffffffffda RBX: 00007fbe4ebb5fa0 RCX: 00007fbe4e98e969 [ 132.012099][ T8053] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 132.012109][ T8053] RBP: 00007fbe4f89f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.012118][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.012127][ T8053] R13: 0000000000000000 R14: 00007fbe4ebb5fa0 R15: 00007ffc5409ea38 [ 132.012154][ T8053] [ 132.762797][ T8078] netlink: 21 bytes leftover after parsing attributes in process `syz.0.584'. [ 132.855617][ T8078] gretap0: entered promiscuous mode [ 132.875307][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952535][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'. [ 133.039624][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 133.123012][ T8093] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 133.178923][ T8093] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 133.468091][ T8097] FAULT_INJECTION: forcing a failure. [ 133.468091][ T8097] name failslab, interval 1, probability 0, space 0, times 0 [ 133.482435][ T8097] CPU: 0 UID: 0 PID: 8097 Comm: syz.2.589 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 133.482459][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.482467][ T8097] Call Trace: [ 133.482475][ T8097] [ 133.482482][ T8097] dump_stack_lvl+0x189/0x250 [ 133.482512][ T8097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.482534][ T8097] ? __pfx__printk+0x10/0x10 [ 133.482553][ T8097] ? __pfx___might_resched+0x10/0x10 [ 133.482569][ T8097] ? fs_reclaim_acquire+0x7d/0x100 [ 133.482596][ T8097] should_fail_ex+0x414/0x560 [ 133.482626][ T8097] should_failslab+0xa8/0x100 [ 133.482648][ T8097] __kmalloc_noprof+0xcb/0x4f0 [ 133.482666][ T8097] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.482683][ T8097] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 133.482709][ T8097] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 133.482737][ T8097] genl_family_rcv_msg_doit+0xb8/0x300 [ 133.482763][ T8097] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 133.482784][ T8097] ? rcu_is_watching+0x15/0xb0 [ 133.482811][ T8097] ? apparmor_capable+0x137/0x1b0 [ 133.482833][ T8097] ? bpf_lsm_capable+0x9/0x20 [ 133.482853][ T8097] ? security_capable+0x7e/0x2e0 [ 133.482876][ T8097] genl_rcv_msg+0x60e/0x790 [ 133.482901][ T8097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.482918][ T8097] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 133.482935][ T8097] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 133.482951][ T8097] ? __pfx_nl80211_post_doit+0x10/0x10 [ 133.482970][ T8097] ? ref_tracker_free+0x63a/0x7d0 [ 133.482985][ T8097] ? __copy_skb_header+0xa7/0x550 [ 133.483013][ T8097] netlink_rcv_skb+0x219/0x490 [ 133.483037][ T8097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.483058][ T8097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.483105][ T8097] ? down_read+0x1ad/0x2e0 [ 133.483137][ T8097] genl_rcv+0x28/0x40 [ 133.483154][ T8097] netlink_unicast+0x758/0x8d0 [ 133.483186][ T8097] netlink_sendmsg+0x805/0xb30 [ 133.483211][ T8097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.483230][ T8097] ? aa_sock_msg_perm+0x94/0x160 [ 133.483248][ T8097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.483267][ T8097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.483281][ T8097] __sock_sendmsg+0x219/0x270 [ 133.483303][ T8097] ____sys_sendmsg+0x505/0x830 [ 133.483325][ T8097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.483348][ T8097] ? import_iovec+0x74/0xa0 [ 133.483369][ T8097] ___sys_sendmsg+0x21f/0x2a0 [ 133.483390][ T8097] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.483444][ T8097] ? __fget_files+0x2a/0x420 [ 133.483463][ T8097] ? __fget_files+0x3a0/0x420 [ 133.483492][ T8097] __x64_sys_sendmsg+0x19b/0x260 [ 133.483511][ T8097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.483619][ T8097] ? do_syscall_64+0xba/0x210 [ 133.483660][ T8097] do_syscall_64+0xf6/0x210 [ 133.483679][ T8097] ? clear_bhb_loop+0x45/0xa0 [ 133.483697][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.483711][ T8097] RIP: 0033:0x7f7f8178e969 [ 133.483726][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.483738][ T8097] RSP: 002b:00007f7f82543038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.483755][ T8097] RAX: ffffffffffffffda RBX: 00007f7f819b5fa0 RCX: 00007f7f8178e969 [ 133.483767][ T8097] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 133.483777][ T8097] RBP: 00007f7f82543090 R08: 0000000000000000 R09: 0000000000000000 [ 133.483787][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.483797][ T8097] R13: 0000000000000000 R14: 00007f7f819b5fa0 R15: 00007fff9b2c7f48 [ 133.483824][ T8097] [ 134.225778][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 134.976385][ T8120] tap0: tun_chr_ioctl cmd 1074812118 [ 135.488620][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 135.585557][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 135.677380][ T8139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.603'. [ 135.845554][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 136.427479][ T8163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.477715][ T8163] team0: Port device bond2 added [ 136.665020][ T8007] Set syz1 is full, maxelem 65536 reached [ 136.767673][ T8175] xt_TCPMSS: Only works on TCP SYN packets [ 136.777375][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 136.850248][ T8181] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 136.965559][ T8188] netlink: 'syz.0.623': attribute type 39 has an invalid length. [ 137.135311][ T8194] vlan2: entered promiscuous mode [ 137.149762][ T8194] gretap0: entered promiscuous mode [ 137.157318][ T8194] vlan2: entered allmulticast mode [ 137.160653][ T8205] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 137.177611][ T8194] gretap0: entered allmulticast mode [ 137.247325][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 137.279090][ T8209] syz.2.627: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.302084][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: syz.2.627 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 137.302109][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 137.302121][ T8209] Call Trace: [ 137.302127][ T8209] [ 137.302135][ T8209] dump_stack_lvl+0x189/0x250 [ 137.302167][ T8209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.302192][ T8209] ? __pfx__printk+0x10/0x10 [ 137.302208][ T8209] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 137.302236][ T8209] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 137.302263][ T8209] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 137.302290][ T8209] warn_alloc+0x214/0x310 [ 137.302317][ T8209] ? __pfx_warn_alloc+0x10/0x10 [ 137.302337][ T8209] ? kasan_save_track+0x4f/0x80 [ 137.302355][ T8209] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 137.302373][ T8209] ? xskq_create+0x56/0x170 [ 137.302392][ T8209] ? __x64_sys_setsockopt+0x18b/0x220 [ 137.302409][ T8209] ? do_syscall_64+0xf6/0x210 [ 137.302429][ T8209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.302458][ T8209] __vmalloc_node_range_noprof+0x125/0x12c0 [ 137.302509][ T8209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.302534][ T8209] ? __kasan_kmalloc+0x93/0xb0 [ 137.302558][ T8209] vmalloc_user_noprof+0x74/0x80 [ 137.302580][ T8209] ? xskq_create+0xbf/0x170 [ 137.302598][ T8209] xskq_create+0xbf/0x170 [ 137.302620][ T8209] xsk_init_queue+0xb0/0x110 [ 137.302640][ T8209] xsk_setsockopt+0x43f/0x710 [ 137.302659][ T8209] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.302685][ T8209] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 137.302702][ T8209] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.302720][ T8209] do_sock_setsockopt+0x257/0x3e0 [ 137.302737][ T8209] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 137.302749][ T8209] ? __fget_files+0x2a/0x420 [ 137.302769][ T8209] ? __fget_files+0x3a0/0x420 [ 137.302784][ T8209] ? __fget_files+0x2a/0x420 [ 137.302806][ T8209] __x64_sys_setsockopt+0x18b/0x220 [ 137.302846][ T8209] do_syscall_64+0xf6/0x210 [ 137.302865][ T8209] ? clear_bhb_loop+0x45/0xa0 [ 137.302883][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.302897][ T8209] RIP: 0033:0x7f7f8178e969 [ 137.302913][ T8209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.302927][ T8209] RSP: 002b:00007f7f82543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.302945][ T8209] RAX: ffffffffffffffda RBX: 00007f7f819b5fa0 RCX: 00007f7f8178e969 [ 137.302957][ T8209] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 137.302966][ T8209] RBP: 00007f7f81810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 137.302974][ T8209] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.302983][ T8209] R13: 0000000000000000 R14: 00007f7f819b5fa0 R15: 00007fff9b2c7f48 [ 137.303008][ T8209] [ 137.304124][ T8209] Mem-Info: [ 137.600688][ T8205] wg1: entered promiscuous mode [ 137.608708][ T8205] wg1: entered allmulticast mode [ 137.623342][ T8209] active_anon:5623 inactive_anon:0 isolated_anon:0 [ 137.623342][ T8209] active_file:1683 inactive_file:38337 isolated_file:0 [ 137.623342][ T8209] unevictable:768 dirty:102 writeback:0 [ 137.623342][ T8209] slab_reclaimable:9703 slab_unreclaimable:102329 [ 137.623342][ T8209] mapped:30141 shmem:1444 pagetables:922 [ 137.623342][ T8209] sec_pagetables:0 bounce:0 [ 137.623342][ T8209] kernel_misc_reclaimable:0 [ 137.623342][ T8209] free:1347654 free_pcp:673 free_cma:0 [ 137.674408][ T8209] Node 0 active_anon:20892kB inactive_anon:0kB active_file:6732kB inactive_file:153276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120308kB dirty:408kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11832kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.744924][ T8209] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.860332][ T8209] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.898175][ T8209] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 137.908833][ T8209] Node 0 DMA32 free:1462196kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:20568kB inactive_anon:0kB active_file:6732kB inactive_file:153176kB unevictable:1536kB writepending:420kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:2488kB local_pcp:1736kB free_cma:0kB [ 137.963159][ T8209] lowmem_reserve[]: 0 0 0 0 0 [ 137.969547][ T8209] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.053467][ T8209] lowmem_reserve[]: 0 0 0 0 0 [ 138.058491][ T8209] Node 1 Normal free:3914184kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 138.172877][ T8209] lowmem_reserve[]: 0 0 0 0 0 [ 138.183078][ T8209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.259557][ T8209] Node 0 DMA32: 1*4kB (U) 173*8kB (UME) 179*16kB (UME) 308*32kB (UME) 215*64kB (UME) 101*128kB (UME) 41*256kB (UME) 11*512kB (UM) 12*1024kB (UM) 2*2048kB (M) 339*4096kB (UM) = 1461852kB [ 138.294630][ T8209] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.353324][ T8209] Node 1 Normal: 74*4kB (UE) 44*8kB (UME) 40*16kB (UME) 190*32kB (UME) 96*64kB (UME) 28*128kB (UME) 19*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 946*4096kB (M) = 3914184kB [ 138.394717][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.423660][ T8209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.453377][ T8209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.493455][ T8209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.505186][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 138.533534][ T8209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.569887][ T8209] 42289 total pagecache pages [ 138.583437][ T8209] 0 pages in swap cache [ 138.587663][ T8209] Free swap = 124996kB [ 138.616825][ T8209] Total swap = 124996kB [ 138.621051][ T8209] 2097051 pages RAM [ 138.662406][ T8209] 0 pages HighMem/MovableOnly [ 138.682688][ T8209] 424362 pages reserved [ 138.698667][ T8209] 0 pages cma reserved [ 139.106825][ T8271] netlink: 76 bytes leftover after parsing attributes in process `syz.0.637'. [ 139.295023][ T8280] FAULT_INJECTION: forcing a failure. [ 139.295023][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 139.307980][ T8280] CPU: 0 UID: 0 PID: 8280 Comm: syz.4.640 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 139.308002][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 139.308012][ T8280] Call Trace: [ 139.308026][ T8280] [ 139.308033][ T8280] dump_stack_lvl+0x189/0x250 [ 139.308057][ T8280] ? unwind_get_return_address+0x4d/0x90 [ 139.308078][ T8280] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 139.308097][ T8280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.308118][ T8280] ? __pfx__printk+0x10/0x10 [ 139.308141][ T8280] ? stack_trace_save+0x9c/0xe0 [ 139.308162][ T8280] should_fail_ex+0x414/0x560 [ 139.308192][ T8280] should_failslab+0xa8/0x100 [ 139.308214][ T8280] kmem_cache_alloc_noprof+0x73/0x3c0 [ 139.308233][ T8280] ? skb_clone+0x212/0x3a0 [ 139.308259][ T8280] skb_clone+0x212/0x3a0 [ 139.308275][ T8280] ? ieee80211_store_ack_skb+0x5a/0x1a0 [ 139.308298][ T8280] ieee80211_store_ack_skb+0x67/0x1a0 [ 139.308315][ T8280] ? ieee80211_build_hdr+0x213e/0x2770 [ 139.308334][ T8280] ieee80211_build_hdr+0x1890/0x2770 [ 139.308370][ T8280] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 139.308390][ T8280] ? sta_info_get_bss+0x54/0x320 [ 139.308407][ T8280] ? sta_info_get_bss+0x54/0x320 [ 139.308427][ T8280] ? sta_info_get_bss+0x307/0x320 [ 139.308449][ T8280] ? ieee80211_tx_skb_fixup+0x32e/0x520 [ 139.308468][ T8280] __ieee80211_subif_start_xmit+0xc63/0x14c0 [ 139.308492][ T8280] ? __ieee80211_subif_start_xmit+0x2bf/0x14c0 [ 139.308516][ T8280] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 139.308535][ T8280] ? ieee80211_tx_control_port+0x765/0xcc0 [ 139.308553][ T8280] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 139.308569][ T8280] ieee80211_tx_control_port+0xabd/0xcc0 [ 139.308598][ T8280] nl80211_tx_control_port+0x610/0x980 [ 139.308626][ T8280] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 139.308647][ T8280] ? nl80211_pre_doit+0x4f1/0x930 [ 139.308670][ T8280] genl_family_rcv_msg_doit+0x212/0x300 [ 139.308698][ T8280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.308729][ T8280] ? bpf_lsm_capable+0x9/0x20 [ 139.308749][ T8280] ? security_capable+0x7e/0x2e0 [ 139.308772][ T8280] genl_rcv_msg+0x60e/0x790 [ 139.308797][ T8280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.308814][ T8280] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 139.308829][ T8280] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 139.308845][ T8280] ? __pfx_nl80211_post_doit+0x10/0x10 [ 139.308864][ T8280] ? ref_tracker_free+0x63a/0x7d0 [ 139.308885][ T8280] ? __copy_skb_header+0xa7/0x550 [ 139.308916][ T8280] netlink_rcv_skb+0x219/0x490 [ 139.308940][ T8280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.308961][ T8280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.309005][ T8280] ? down_read+0x1ad/0x2e0 [ 139.309029][ T8280] genl_rcv+0x28/0x40 [ 139.309045][ T8280] netlink_unicast+0x758/0x8d0 [ 139.309079][ T8280] netlink_sendmsg+0x805/0xb30 [ 139.309107][ T8280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.309125][ T8280] ? aa_sock_msg_perm+0x94/0x160 [ 139.309143][ T8280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.309159][ T8280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.309175][ T8280] __sock_sendmsg+0x219/0x270 [ 139.309205][ T8280] ____sys_sendmsg+0x505/0x830 [ 139.309226][ T8280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.309253][ T8280] ? import_iovec+0x74/0xa0 [ 139.309276][ T8280] ___sys_sendmsg+0x21f/0x2a0 [ 139.309296][ T8280] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.309357][ T8280] ? __fget_files+0x2a/0x420 [ 139.309376][ T8280] ? __fget_files+0x3a0/0x420 [ 139.309405][ T8280] __x64_sys_sendmsg+0x19b/0x260 [ 139.309426][ T8280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.309458][ T8280] ? do_syscall_64+0xba/0x210 [ 139.309484][ T8280] do_syscall_64+0xf6/0x210 [ 139.309505][ T8280] ? clear_bhb_loop+0x45/0xa0 [ 139.309525][ T8280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.309541][ T8280] RIP: 0033:0x7fbe4e98e969 [ 139.309556][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.309569][ T8280] RSP: 002b:00007fbe4f89f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.309586][ T8280] RAX: ffffffffffffffda RBX: 00007fbe4ebb5fa0 RCX: 00007fbe4e98e969 [ 139.309597][ T8280] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 139.309607][ T8280] RBP: 00007fbe4f89f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.309617][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.309626][ T8280] R13: 0000000000000000 R14: 00007fbe4ebb5fa0 R15: 00007ffc5409ea38 [ 139.309654][ T8280] [ 139.967986][ T8292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.972673][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 139.977286][ T8292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.977337][ T8292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.977363][ T8292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.977460][ T8292] geneve2: entered promiscuous mode [ 140.326653][ T8278] tipc: Enabling of bearer rejected, already enabled [ 140.446317][ T8310] bond_slave_1: entered promiscuous mode [ 140.626160][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 140.812507][ T8324] FAULT_INJECTION: forcing a failure. [ 140.812507][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 140.825395][ T8324] CPU: 1 UID: 0 PID: 8324 Comm: syz.0.655 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 140.825408][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.825414][ T8324] Call Trace: [ 140.825419][ T8324] [ 140.825424][ T8324] dump_stack_lvl+0x189/0x250 [ 140.825444][ T8324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.825457][ T8324] ? __pfx__printk+0x10/0x10 [ 140.825464][ T8324] ? stack_trace_save+0x9c/0xe0 [ 140.825476][ T8324] ? stack_depot_save_flags+0x40/0x910 [ 140.825494][ T8324] should_fail_ex+0x414/0x560 [ 140.825510][ T8324] should_failslab+0xa8/0x100 [ 140.825523][ T8324] kmem_cache_alloc_noprof+0x73/0x3c0 [ 140.825535][ T8324] ? radix_tree_node_alloc+0x7e/0x3a0 [ 140.825545][ T8324] ? ____sys_sendmsg+0x505/0x830 [ 140.825559][ T8324] radix_tree_node_alloc+0x7e/0x3a0 [ 140.825573][ T8324] idr_get_free+0x2b3/0xa70 [ 140.825591][ T8324] idr_alloc_u32+0x159/0x2d0 [ 140.825606][ T8324] ? __pfx_idr_alloc_u32+0x10/0x10 [ 140.825619][ T8324] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 140.825629][ T8324] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 140.825641][ T8324] idr_alloc+0x6e/0xd0 [ 140.825653][ T8324] ieee80211_store_ack_skb+0xa8/0x1a0 [ 140.825668][ T8324] ieee80211_build_hdr+0x1890/0x2770 [ 140.825688][ T8324] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 140.825703][ T8324] ? sta_info_get_bss+0x54/0x320 [ 140.825720][ T8324] ? sta_info_get_bss+0x54/0x320 [ 140.825739][ T8324] ? sta_info_get_bss+0x307/0x320 [ 140.825762][ T8324] ? ieee80211_tx_skb_fixup+0x32e/0x520 [ 140.825781][ T8324] __ieee80211_subif_start_xmit+0xc63/0x14c0 [ 140.825800][ T8324] ? __ieee80211_subif_start_xmit+0x2bf/0x14c0 [ 140.825821][ T8324] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 140.825833][ T8324] ? ieee80211_tx_control_port+0x765/0xcc0 [ 140.825844][ T8324] ? ieee80211_tx_control_port+0xa82/0xcc0 [ 140.825854][ T8324] ieee80211_tx_control_port+0xabd/0xcc0 [ 140.825871][ T8324] nl80211_tx_control_port+0x610/0x980 [ 140.825889][ T8324] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 140.825901][ T8324] ? nl80211_pre_doit+0x4f1/0x930 [ 140.825915][ T8324] genl_family_rcv_msg_doit+0x212/0x300 [ 140.825931][ T8324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.825949][ T8324] ? bpf_lsm_capable+0x9/0x20 [ 140.825960][ T8324] ? security_capable+0x7e/0x2e0 [ 140.825973][ T8324] genl_rcv_msg+0x60e/0x790 [ 140.825988][ T8324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.825997][ T8324] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.826005][ T8324] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 140.826014][ T8324] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.826024][ T8324] ? ref_tracker_free+0x63a/0x7d0 [ 140.826032][ T8324] ? __copy_skb_header+0xa7/0x550 [ 140.826048][ T8324] netlink_rcv_skb+0x219/0x490 [ 140.826062][ T8324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.826073][ T8324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.826099][ T8324] ? down_read+0x1ad/0x2e0 [ 140.826112][ T8324] genl_rcv+0x28/0x40 [ 140.826122][ T8324] netlink_unicast+0x758/0x8d0 [ 140.826140][ T8324] netlink_sendmsg+0x805/0xb30 [ 140.826155][ T8324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.826165][ T8324] ? aa_sock_msg_perm+0x94/0x160 [ 140.826175][ T8324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.826185][ T8324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.826201][ T8324] __sock_sendmsg+0x219/0x270 [ 140.826225][ T8324] ____sys_sendmsg+0x505/0x830 [ 140.826248][ T8324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.826273][ T8324] ? import_iovec+0x74/0xa0 [ 140.826287][ T8324] ___sys_sendmsg+0x21f/0x2a0 [ 140.826298][ T8324] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.826329][ T8324] ? __fget_files+0x2a/0x420 [ 140.826340][ T8324] ? __fget_files+0x3a0/0x420 [ 140.826356][ T8324] __x64_sys_sendmsg+0x19b/0x260 [ 140.826368][ T8324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.826387][ T8324] ? do_syscall_64+0xba/0x210 [ 140.826401][ T8324] do_syscall_64+0xf6/0x210 [ 140.826412][ T8324] ? clear_bhb_loop+0x45/0xa0 [ 140.826424][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.826433][ T8324] RIP: 0033:0x7fe07278e969 [ 140.826443][ T8324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.826451][ T8324] RSP: 002b:00007fe073689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.826461][ T8324] RAX: ffffffffffffffda RBX: 00007fe0729b5fa0 RCX: 00007fe07278e969 [ 140.826467][ T8324] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 140.826473][ T8324] RBP: 00007fe073689090 R08: 0000000000000000 R09: 0000000000000000 [ 140.826478][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.826483][ T8324] R13: 0000000000000000 R14: 00007fe0729b5fa0 R15: 00007ffe0753ddf8 [ 140.826498][ T8324] [ 141.544656][ T8334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 141.733778][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.753238][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 141.796867][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.817641][ T8351] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 142.028888][ T8341] tipc: Enabling of bearer rejected, already enabled [ 142.146398][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 142.176583][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 142.263228][ T8367] netlink: 72 bytes leftover after parsing attributes in process `syz.2.669'. [ 142.425708][ T8373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.670'. [ 142.570822][ T8380] hsr0: entered promiscuous mode [ 142.607662][ T8380] macsec1: entered promiscuous mode [ 142.626715][ T8380] macsec1: entered allmulticast mode [ 142.632246][ T8380] hsr0: entered allmulticast mode [ 142.639657][ T8380] hsr_slave_0: entered allmulticast mode [ 142.648951][ T8380] hsr_slave_1: entered allmulticast mode [ 142.660033][ T8380] hsr0: left allmulticast mode [ 142.670259][ T8380] hsr_slave_0: left allmulticast mode [ 142.698683][ T8380] hsr_slave_1: left allmulticast mode [ 143.018257][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.025543][ T8390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.741066][ T8403] __nla_validate_parse: 3 callbacks suppressed [ 143.741085][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 143.873871][ T8404] netlink: 'syz.1.679': attribute type 3 has an invalid length. [ 143.881578][ T8404] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 143.953340][ T8404] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.679'. [ 144.264024][ T8400] tipc: Enabling of bearer rejected, already enabled [ 144.427043][ T8415] netlink: 80 bytes leftover after parsing attributes in process `syz.1.687'. [ 144.507416][ T8417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.684'. [ 144.590348][ T8419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.728534][ T8419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.831472][ T8419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.922944][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 144.948877][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 145.001627][ T8419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.297916][ T8419] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.322114][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 145.361327][ T8443] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 145.389075][ T8443] netlink: 'syz.1.696': attribute type 2 has an invalid length. [ 145.389331][ T8419] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.405589][ T8443] netlink: 80 bytes leftover after parsing attributes in process `syz.1.696'. [ 145.450226][ T8446] netlink: 'syz.3.697': attribute type 13 has an invalid length. [ 145.464894][ T8447] netlink: 'syz.3.697': attribute type 13 has an invalid length. [ 145.477589][ T8419] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.077153][ T8447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.141463][ T8447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.261730][ T8447] hsr0: left promiscuous mode [ 146.382173][ T8447] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.391924][ T8447] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.401549][ T8447] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.411206][ T8447] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.457764][ T8447] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.467160][ T8447] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.476237][ T8447] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.485796][ T8447] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.510524][ T8419] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.522560][ T8462] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 146.547561][ T8458] tipc: Enabling of bearer rejected, already enabled [ 146.596398][ T8469] bridge_slave_0: left allmulticast mode [ 146.602110][ T8469] bridge_slave_0: left promiscuous mode [ 146.647684][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.710099][ T8475] netlink: 76 bytes leftover after parsing attributes in process `syz.3.704'. [ 146.819515][ T8476] xt_CT: No such helper "syz1" [ 146.957726][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 146.988804][ T8469] bridge_slave_1: left allmulticast mode [ 146.995898][ T8469] bridge_slave_1: left promiscuous mode [ 147.001683][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.027208][ T8469] bond0: (slave bond_slave_0): Releasing backup interface [ 147.057077][ T8469] bond0: (slave bond_slave_1): Releasing backup interface [ 147.071601][ T8469] team0: Port device team_slave_0 removed [ 147.088854][ T8469] team0: Port device team_slave_1 removed [ 147.095963][ T8469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.107410][ T8469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.117560][ T8469] bond1: (slave vcan2): Releasing backup interface [ 147.137195][ T8477] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.276040][ T8477] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.350585][ T8477] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.453107][ T8477] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.392069][ T8538] xt_bpf: check failed: parse error [ 148.688722][ T8544] tipc: Enabling of bearer rejected, already enabled [ 148.944099][ T8477] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.977166][ T8477] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.016309][ T8477] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.045709][ T8477] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.161750][ T8556] __nla_validate_parse: 5 callbacks suppressed [ 149.161768][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 149.434825][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 149.690642][ T7882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.833174][ T7882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.918140][ T8578] tipc: Enabling of bearer rejected, already enabled [ 149.943798][ T7882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.055304][ T7882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.138288][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 150.168225][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 150.509448][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 150.537001][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 150.655077][ T7882] bridge_slave_1: left promiscuous mode [ 150.690409][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.777347][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.787289][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.796686][ T7882] bridge_slave_0: left allmulticast mode [ 150.805237][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.816680][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.823823][ T7882] bridge_slave_0: left promiscuous mode [ 150.824074][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.844269][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.976267][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 152.004700][ T7882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.017978][ T7882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.033169][ T7882] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 152.042629][ T7882] bond0 (unregistering): Released all slaves [ 152.057893][ T7882] bond1 (unregistering): Released all slaves [ 152.171912][ T7882] team0: Port device bond2 removed [ 152.178480][ T7882] bond2 (unregistering): Released all slaves [ 152.344757][ T8632] gretap0: left promiscuous mode [ 152.508228][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.516261][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.556711][ T8632] bond0: left promiscuous mode [ 152.561536][ T8632] bond_slave_0: left promiscuous mode [ 152.583935][ T8632] bond_slave_1: left promiscuous mode [ 152.590228][ T8632] team0: left allmulticast mode [ 152.600353][ T8632] team_slave_0: left allmulticast mode [ 152.606363][ T8632] team_slave_1: left allmulticast mode [ 152.859055][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.889097][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.944752][ T5836] Bluetooth: hci2: command tx timeout [ 153.138330][ T8632] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.161617][ T8632] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.170206][ T8632] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.178621][ T8632] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.260957][ T8624] tipc: Enabling of bearer rejected, already enabled [ 153.347497][ T7882] : left promiscuous mode [ 153.538172][ T8655] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.546119][ T7882] tipc: Disabling bearer [ 153.554023][ T7882] tipc: Left network mode [ 153.723228][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 153.765384][ T7882] IPVS: stopping backup sync thread 6255 ... [ 153.877917][ T8675] x_tables: duplicate underflow at hook 2 [ 153.927530][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 153.927615][ T8675] warning: `syz.0.757' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.022208][ T8667] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 154.087092][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 154.108583][ T8675] bridge_slave_0: left allmulticast mode [ 154.122833][ T8675] bridge_slave_0: left promiscuous mode [ 154.129175][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.141116][ T8675] bridge_slave_1: left allmulticast mode [ 154.146975][ T8675] bridge_slave_1: left promiscuous mode [ 154.152926][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.163982][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 154.176057][ T8675] bond0: (slave bond_slave_0): Releasing backup interface [ 154.187820][ T8675] bond0: (slave bond_slave_1): Releasing backup interface [ 154.207916][ T8675] team0: Port device team_slave_0 removed [ 154.219246][ T8675] team0: Port device team_slave_1 removed [ 154.231336][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.243066][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.268225][ T8667] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.594287][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 154.606796][ T8708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 154.667189][ T8707] dvmrp0: entered allmulticast mode [ 154.791417][ T7882] ------------[ cut here ]------------ [ 154.797263][ T7882] Have pending ack frames! [ 154.842595][ T7882] WARNING: CPU: 1 PID: 7882 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x4d/0x60 [ 154.852994][ T7882] Modules linked in: [ 154.857228][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: kworker/u8:8 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 154.870042][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.880464][ T7882] Workqueue: netns cleanup_net [ 154.885397][ T7882] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 154.891597][ T7882] Code: 00 00 e8 b6 db 72 fe 31 c0 5b c3 cc cc cc cc cc e8 68 e0 fa f6 c6 05 34 49 a4 04 01 90 48 c7 c7 a0 f1 8b 8c e8 54 3f bf f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 154.911529][ T7882] RSP: 0018:ffffc90004f676b0 EFLAGS: 00010246 [ 154.917723][ T7882] RAX: 0ae54498a2d26d00 RBX: ffff888022761500 RCX: ffff888023e65a00 [ 154.925758][ T7882] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 154.933926][ T7882] RBP: ffffc90004f677b8 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 154.942546][ T7882] R10: dffffc0000000000 R11: ffffed10171247d3 R12: ffffc90004f67720 [ 154.951154][ T7882] R13: ffff88805f487730 R14: ffff88805f132fa8 R15: 0000000000000001 [ 154.959563][ T7882] FS: 0000000000000000(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 154.969009][ T7882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.976012][ T7882] CR2: 0000001b2fe1dff8 CR3: 00000000320b4000 CR4: 00000000003526f0 [ 154.984500][ T7882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.992527][ T7882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.001006][ T7882] Call Trace: [ 155.004606][ T7882] [ 155.007562][ T7882] idr_for_each+0x1b2/0x290 [ 155.012095][ T7882] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 155.018610][ T7882] ? __pfx_idr_for_each+0x10/0x10 [ 155.023927][ T5836] Bluetooth: hci2: command 0x041b tx timeout [ 155.030140][ T7882] ? kobject_put+0x270/0x480 [ 155.034787][ T7882] ? kfree+0x193/0x440 [ 155.038883][ T7882] ieee80211_free_hw+0xc6/0x480 [ 155.043788][ T7882] mac80211_hwsim_del_radio+0x2de/0x460 [ 155.049368][ T7882] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 155.055547][ T7882] hwsim_exit_net+0x584/0x640 [ 155.060260][ T7882] ? __pfx_hwsim_exit_net+0x10/0x10 [ 155.065560][ T7882] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 155.071401][ T7882] ops_undo_list+0x497/0x990 [ 155.076051][ T7882] ? __pfx_ops_undo_list+0x10/0x10 [ 155.081222][ T7882] cleanup_net+0x4c5/0x8a0 [ 155.085856][ T7882] ? __pfx_cleanup_net+0x10/0x10 [ 155.090853][ T7882] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.096118][ T7882] ? process_scheduled_works+0x9ec/0x17a0 [ 155.101873][ T7882] ? process_scheduled_works+0x9ec/0x17a0 [ 155.107720][ T7882] process_scheduled_works+0xadb/0x17a0 [ 155.113428][ T7882] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.119572][ T7882] worker_thread+0x8a0/0xda0 [ 155.124296][ T7882] kthread+0x70e/0x8a0 [ 155.128422][ T7882] ? __pfx_worker_thread+0x10/0x10 [ 155.133596][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.138213][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.142855][ T7882] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.148192][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.153467][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.158085][ T7882] ret_from_fork+0x4b/0x80 [ 155.162536][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.167383][ T7882] ret_from_fork_asm+0x1a/0x30 [ 155.172188][ T7882] [ 155.175327][ T7882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.182633][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: kworker/u8:8 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 155.194800][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.204877][ T7882] Workqueue: netns cleanup_net [ 155.209666][ T7882] Call Trace: [ 155.212959][ T7882] [ 155.215888][ T7882] dump_stack_lvl+0x99/0x250 [ 155.220504][ T7882] ? __asan_memcpy+0x40/0x70 [ 155.225103][ T7882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.230307][ T7882] ? __pfx__printk+0x10/0x10 [ 155.234903][ T7882] panic+0x2db/0x790 [ 155.238803][ T7882] ? __pfx_panic+0x10/0x10 [ 155.243311][ T7882] ? ret_from_fork_asm+0x1a/0x30 [ 155.248252][ T7882] __warn+0x31b/0x4b0 [ 155.252234][ T7882] ? ieee80211_free_ack_frame+0x4d/0x60 [ 155.257802][ T7882] ? ieee80211_free_ack_frame+0x4d/0x60 [ 155.263360][ T7882] report_bug+0x2be/0x4f0 [ 155.267693][ T7882] ? ieee80211_free_ack_frame+0x4d/0x60 [ 155.273285][ T7882] ? ieee80211_free_ack_frame+0x4d/0x60 [ 155.278826][ T7882] ? ieee80211_free_ack_frame+0x4f/0x60 [ 155.284449][ T7882] handle_bug+0x84/0x160 [ 155.288692][ T7882] exc_invalid_op+0x1a/0x50 [ 155.293188][ T7882] asm_exc_invalid_op+0x1a/0x20 [ 155.298027][ T7882] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 155.304173][ T7882] Code: 00 00 e8 b6 db 72 fe 31 c0 5b c3 cc cc cc cc cc e8 68 e0 fa f6 c6 05 34 49 a4 04 01 90 48 c7 c7 a0 f1 8b 8c e8 54 3f bf f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 155.323869][ T7882] RSP: 0018:ffffc90004f676b0 EFLAGS: 00010246 [ 155.330102][ T7882] RAX: 0ae54498a2d26d00 RBX: ffff888022761500 RCX: ffff888023e65a00 [ 155.338064][ T7882] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 155.346024][ T7882] RBP: ffffc90004f677b8 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 155.353984][ T7882] R10: dffffc0000000000 R11: ffffed10171247d3 R12: ffffc90004f67720 [ 155.361945][ T7882] R13: ffff88805f487730 R14: ffff88805f132fa8 R15: 0000000000000001 [ 155.369919][ T7882] idr_for_each+0x1b2/0x290 [ 155.374421][ T7882] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 155.380485][ T7882] ? __pfx_idr_for_each+0x10/0x10 [ 155.385506][ T7882] ? kobject_put+0x270/0x480 [ 155.390090][ T7882] ? kfree+0x193/0x440 [ 155.394158][ T7882] ieee80211_free_hw+0xc6/0x480 [ 155.399004][ T7882] mac80211_hwsim_del_radio+0x2de/0x460 [ 155.404555][ T7882] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 155.410625][ T7882] hwsim_exit_net+0x584/0x640 [ 155.415302][ T7882] ? __pfx_hwsim_exit_net+0x10/0x10 [ 155.420503][ T7882] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 155.426337][ T7882] ops_undo_list+0x497/0x990 [ 155.430926][ T7882] ? __pfx_ops_undo_list+0x10/0x10 [ 155.436033][ T7882] cleanup_net+0x4c5/0x8a0 [ 155.440451][ T7882] ? __pfx_cleanup_net+0x10/0x10 [ 155.445388][ T7882] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.450574][ T7882] ? process_scheduled_works+0x9ec/0x17a0 [ 155.456375][ T7882] ? process_scheduled_works+0x9ec/0x17a0 [ 155.462091][ T7882] process_scheduled_works+0xadb/0x17a0 [ 155.467652][ T7882] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.473666][ T7882] worker_thread+0x8a0/0xda0 [ 155.478297][ T7882] kthread+0x70e/0x8a0 [ 155.482365][ T7882] ? __pfx_worker_thread+0x10/0x10 [ 155.487465][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.492050][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.496626][ T7882] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.501812][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.507001][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.512188][ T7882] ret_from_fork+0x4b/0x80 [ 155.516605][ T7882] ? __pfx_kthread+0x10/0x10 [ 155.521185][ T7882] ret_from_fork_asm+0x1a/0x30 [ 155.525952][ T7882] [ 155.529325][ T7882] Kernel Offset: disabled [ 155.533715][ T7882] Rebooting in 86400 seconds..