last executing test programs: 1.972872196s ago: executing program 2 (id=730): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r1, 0x29, 0x43, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ppoll(&(0x7f0000000100)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002e7352c9f5fb4f3d2445900d77258ed69fc68469e40c6e276c2390908ff758f64457cbd197560d495569b3cd1d62642423db2f2019ee2c06d6d2c180f4b0ef146d49323e0fcabf70dd9f2414c90f553bc53049742e3b89dc69abef8aa9a7f4d9a57cc3b4e6dcd786f7f7935be2b9b43dd73caf781fc8edd679ce465cdb268ebcc301b98819232bd3cc05650b821a32e53a724babd397d8209d523f101572f8cf3a27", @ANYRES16, @ANYBLOB="010000000000000000000a000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) socketpair(0x21, 0x1, 0xf4d, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @empty, 0xafb8}, @in={0x2, 0x4e24, @loopback}], 0x2c) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00\a'], 0xd) 1.803855398s ago: executing program 0 (id=734): unshare(0x8040480) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x2, 0x85ff, r0, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 1.745299686s ago: executing program 2 (id=735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9047880010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r4 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) 1.637008041s ago: executing program 0 (id=738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100600}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x1000c004) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xfffffffffffffdf3) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0xc050) syz_genetlink_get_family_id$mptcp(0x0, r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x8, 0x131, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x4}]]}]}, 0x1c}}, 0x0) sendmmsg$sock(r9, 0x0, 0x0, 0x0) 1.409163753s ago: executing program 2 (id=741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="18020000faffffff00f5000000000000850600002c00e2ff0e000000000000001c9cd4c3fbfde745bd86c9adb60fe4e17c"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="a33eb75493c30b31cf22f3609a549428d62eb18b9282ef282ea8dc7f287ad3d3b4a8f3bf5e8e0b4ec043d8c4d85de6b5ae97bc9416ae35e0602882aaa3382e185879daca5d477f26644f7e1c8e9ca1cc84c04a69040b81b1c1e8a5caff49cf158b80a86bfdca183643c72bbf57783b87f2962efb88d0bd20096808abca455d528fbf09ff6488cfc251feeee2433b527e37425ad4fa13c9be1b4c2f3aeb8da1753cdd755cf4c0bd3fbe33577603cc36a77ec20409a1cb606a3b81212d82db1cb605b13eb15fd0c8d3c1d549eced34a75107", 0xd1}, {&(0x7f0000000540)="7b270a189f8ade43bce6db4c0ff113733b001ea1c57da6512ccb97ebdbe0f4379ab8976fab636473d4a2b8fd076030bbb9a1dfe6a0daba65a540cf26f2bccc75bc686079e2b5722a3ca1a29947c759ee0f6c877aa4a48f38744a23669607e8b3bab609667d8edf86da1dd72d59dbe3cfd898db6758bc386b57ef339ac1207bbde65f36713ef445da7b8821be1f294255e5e6eca6ab93f4c5ed78d4b925b2ab1a18297a050342c9d4f33721d016677071e2c29677a6732a03", 0xb8}, {&(0x7f0000000600)="5b27717a6aa109490ce47ad1a6721b3602ee71a3dcf415dc343d568c4bb70c9b14773825ae238d2e0d93bc00564a0a81a1558f8e15819bf26e0687a5d0fa42c0fa47851a29d269c874347432cc86db2e71a49c551a71aabb803597d9bbe5f3f46e5be4667ed1a6e4317b6a366399b8e78b1a78971c0dc3ce246ae34dbd98604baf6aa325447cc1809443eba3fd16f18eef84846c74a5474ef15254a0146dc067573aa70b92124fd6c43f59f3dfa7ef369ae8ae", 0xb3}, {&(0x7f00000006c0)="f1a595da72cad25db263a6db2a358345680520b68fed1145b7c0d6d979750f80f19006933254df2e0fb0f7ecd1b4d5d7d50f1a4f87131d3fc14b896118720aa924773a49db07a232d9edcf68d3fc862017a3f6a0291dce3cee1b0bd4023bd7b12030ae5b6297604213e8bbc239daa7e776c79d1ce3208c94872126941fa423783cc371d5bf7b58cf86917437848b16e63ebbfbd60f336f16589550b951847f", 0x9f}, {&(0x7f0000000780)="197322577507d85a66b4fe70502e3b68d6cd65d1c5498769314bd1405b3e8fe5a265d2e03930cf60664e1f", 0x2b}, {&(0x7f00000007c0)="6e2e0aa58b10cf99b5165160a95584144595416a8cd79031be43960d9e3ce89baf5fee7b31985cfa480d76484d1a469230f19b41e5ab1faa3fdb127bdce543de366151f93fe69f7516af6a070ce5ee24254ea6fa70f4935214ddb392a5ee3177e16b72bb065d9181d1a9f8bf46bfc3415f50b3bedfbf87686328e2904acb2dc1b28bf5c92962e1c0090746ab4ba2d41ffb7efbb3d89575bd6f89dc2b50bf2137e8916ea2a13c12e963d107e4058ec08ed31d723011a90e04694047d9403abd4cf241c7b49e936f8ff056a8dca7f66dd97db6626e0112f371c9b3bcc134bb2688fbae0f9445c9c991", 0xe8}], 0x6, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xb26}, @assoc={0x18, 0x117, 0x4, 0x8001}], 0x48, 0x8000}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000009c0)="b5f6dc3502d4dadd35914b5c0b1259af5ed67bd228eddcbac9b69c595d6c5f2fe73263b8ae925730958555ec7e4feeb6685bafccecec77626c06774944d891cbf58a12f9f207ac5bcb3547fc7effc0c51a0e2c5062b0a4ba91919d6e0b84e0046238ff1a9479c6d2bec75b1aca51e828", 0x70}], 0x1, &(0x7f0000000a80)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x1}], 0x2, 0x840) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc420029fc", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0x208e24b) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb010018000000000020b8b60000000c00000004dfffff01000000000000130200000000006100abd2f125c39d2a3f876360689fdbce92be4b677279c35984e6a74669bc23139cb4bce466370a68451a8cbfd44f91bfb35fe2a6b2963a107e4f7696ff030b3689d97c68997e9b2a955bf1bcad05710b71eab95dbdf21c34047523ffca32c4c1e728c9577235ffce148eae761b8ec80df204048c12db4950efd10ce5dae5cfd670a9dcbb99c32d5401e6bf736004e8ba2abf0ee1f7fba5b0b31741c58f09150b3d4c7e1e3556eb8a7b65830bad9f1e1020a84a87184aec998b9f5408000011000000477a355477"], 0x0, 0x28, 0x0, 0x8}, 0x20) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x10, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) (async) sendto$inet(r3, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1010, r2, 0xe035b000) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x40, 0x45, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@generic={0x89, 0x4, "77fa"}, @timestamp_prespec={0x44, 0x24, 0x57, 0x3, 0xc, [{@multicast2, 0x6}, {@empty, 0x9}, {@empty, 0x3}, {@empty, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r8, @ANYBLOB="000226bd7000fbdbdf25030000000500050002000000050003000700000005000300fb000000050002000c0000000500050007000000050700000000000000000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468310000000000000000000000080003000200000005000300000000000500020008000000180001801400020070696d72656731000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1.40892707s ago: executing program 0 (id=742): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x1500}, 0x0) 1.319886097s ago: executing program 0 (id=744): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000043c0)={0x0, 0x25, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210400000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110200110000180011"], 0x40}}, 0x0) 1.145214057s ago: executing program 2 (id=745): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r1, 0x29, 0x43, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002e7352c9f5fb4f3d2445900d77258ed69fc68469e40c6e276c2390908ff758f64457cbd197560d495569b3cd1d62642423db2f2019ee2c06d6d2c180f4b0ef146d49323e0fcabf70dd9f2414c90f553bc53049742e3b89dc69abef8aa9a7f4d9a57cc3b4e6dcd786f7f7935be2b9b43dd73caf781fc8edd679ce465cdb268ebcc301b98819232bd3cc05650b821a32e53a724babd397d8209d523f101572f8cf3a27", @ANYRES16, @ANYBLOB="010000000000000000000a000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) socketpair(0x21, 0x1, 0xf4d, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @empty, 0xafb8}, @in={0x2, 0x4e24, @loopback}], 0x2c) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00\a'], 0xd) 1.131791207s ago: executing program 0 (id=747): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000300)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010800507000000000000000000000002", @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 989.278579ms ago: executing program 2 (id=750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0xfffffff0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 922.876032ms ago: executing program 0 (id=751): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000000245c6e80030924d900850000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x8000, 0x0) 904.093875ms ago: executing program 4 (id=753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) poll(&(0x7f0000000040), 0x55, 0x7000000) 836.971584ms ago: executing program 2 (id=754): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180072013200000000000000000000000000007950007cbf8e7a0ebd7ac3e80000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f7700050000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000000000704000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r1}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xfffffffffffffc61, 0x30, 0x10, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40095}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@private}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 796.498557ms ago: executing program 3 (id=755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x40004}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x78}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 783.500601ms ago: executing program 4 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) socketpair(0x2e, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x200, @remote, 0x8}, @in6={0xa, 0x4e24, 0x31c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb782}, @in={0x2, 0x4e23, @multicast2}], 0x48) socket$inet_dccp(0x2, 0x6, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0xe, 0x6, 0x9, 0x24, @remote, @local, 0x1, 0x80, 0x404, 0x9}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x7, 0x1, {{0x19, 0x4, 0x1, 0x2e, 0x64, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x2, [{@empty, 0xfffffffc}]}, @timestamp_prespec={0x44, 0xc, 0x64, 0x3, 0x3, [{@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0x0, [{@loopback, 0x3}, {@rand_addr=0x64010100, 0xdca}, {@empty, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0x8f, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x7e1c8db3}]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8}, @ETHTOOL_A_COALESCE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', r6, 0x4, 0x6a, 0x66, 0x1125, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x700, 0x9, 0x3f3}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6gre0\x00', r11, 0x2f, 0x32, 0x60, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x8, 0x0, 0x2, 0x9}}) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r10, &(0x7f0000000900)="9122e0e04628f16186f0f3699eaa11a2fe897421db1e07b3164e3f06409d84006e7adf6fbf76866be381d398a4ac1f2f092bcf730d0154a59b8ab4a0f679f38bbdd7a82638089d4aa0f9b32e0fc6452433fc2f5aaca119fdb1e9f86498fc61cf62cdc78b23f8b9fafb086bb4246208ef2e1ac2f1ffb756844917", &(0x7f0000000980)=@udp=r13, 0x2}, 0x20) (async) recvfrom$unix(r2, &(0x7f0000000a00)=""/4096, 0x1000, 0x1, &(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001e40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001b40)={0x290, r14, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x3, 0x79}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x3d, 0xc5, "72d25e88cd4c400c787b674c6386aa8239643c87dee8fbeb78bea01c9150aa665a67547cf789ed8e343aa87878458f5adc4cb174e62a36aa2f"}, @NL80211_ATTR_VENDOR_DATA={0x7f, 0xc5, "016cfb1dd1cb18104863a16c2371ee503a2730165114f0794a0dafd2ad073f6887eaf58d0ef1ac7a566db7836494397d0516c5c3c6a9a8efb18ffe44d8e99a41acb7755602ee88d9be4c434c3e2b9a305fa9efc8eeb3a0f588f818344c90b59a3583c1f30ebd80de61d6312da50b8cba88443bc90e00a87eeb0c7a"}, @NL80211_ATTR_VENDOR_DATA={0x87, 0xc5, "3b760d984d4a9783631fc6087e7d7eb3b3016e2c145ced432514862c5e6273488c12be50518e23674cb0cace36efbdbf7403d2659bf43d598c2d7adeec3e82781f59ea86d8428936fd236613277d16e880ed648169ad9368fed9025740cc245594dc62c5fb00c419f32bd5ef5c989148eb5ad5cf5c67496415a01e294b11e93c7a0c55"}, @NL80211_ATTR_VENDOR_DATA={0x103, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040881) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e80)='freezer.parent_freezing\x00', 0x0, 0x0) (async) r16 = syz_genetlink_get_family_id$team(&(0x7f0000001f00), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001fc0)={'ip6tnl0\x00', &(0x7f0000001f40)={'ip6gre0\x00', r9, 0x2f, 0x2, 0x76, 0x2, 0x40, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x8, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000026c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002680)={&(0x7f0000002000)={0x674, r16, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xef, 0x6, 0x7f, 0x1eb5}, {0x4, 0x9, 0x1e, 0x7}, {0xe, 0xfc, 0x9, 0xc}, {0x8, 0x56, 0x36, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x37e}}}]}}, {{0x8, 0x1, r11}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x9, 0x4a, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}]}}]}, 0x674}, 0x1, 0x0, 0x0, 0x20000010}, 0x4048010) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002740)={0x0, 0x3, 0x10}, 0xc) 709.306359ms ago: executing program 3 (id=757): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000043c0)={0x0, 0x25, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210400000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110200110000180011"], 0x40}}, 0x0) 654.907884ms ago: executing program 3 (id=758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e5000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x27, 0x0, 0x0, 0x0, 0xfffffffffffffecc, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="140004006e69637666300000000000000000000008000500010000009e9db5d0714e373deff259ddeef5607bb599733880bc4d2410e2ca8435634067cb40e00d20ad1ba81ef1e20c8d5e7aa2b375b66b95ca8c96376087aae144b80cf1650bf61183c58f1035e72f295e78fcae37630cdc3288f816e1ae6ab616b34de8e10b236c4be8c2b396d4a0890fa57bc9298d7d868fd6818858de31804380a7b7ff92789da2b3c74bbe2d69d2103426e43a9bcb0dba6dcc9d352beb13f6f95ee8b81a8cdf24ceccf138536c2d60ac7569c2"], 0x38}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001807"], 0x114}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r7, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x80000000, 0x9, 0x2000, 0x1, 0x5, '\x00', 0x0, r7, 0x4, 0x5, 0x1, 0x5}, 0x48) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xffff, @empty, 0x7f}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, &(0x7f00000005c0)) r8 = socket$netlink(0x10, 0x3, 0xf) getsockname(r8, &(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0xfffffffffffffe86) socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000140001e5005527400000160011008d0349b549acf7"], 0x24}}, 0x0) 631.00051ms ago: executing program 4 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 533.380075ms ago: executing program 1 (id=760): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000012c0)='<', 0x1}], 0x1, 0x0, 0x0, 0xa000000}}], 0x1, 0x0) 515.014326ms ago: executing program 1 (id=761): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r4}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c6000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000390500000000000000c32200000000000095000000d3031a00"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfa, &(0x7f0000000140)=""/250}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r8, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0xb0, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f0000000840), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2, 0x101, 0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x100, 0x3b2, 0x8, 0x2, r7, 0x4, '\x00', r9, r7, 0x0, 0x2, 0x5}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', r4, 0x80, 0x40, 0xfffffffa, 0x101, {{0x14, 0x4, 0x0, 0x3b, 0x50, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x9c, [@loopback, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @private=0xa010101, @broadcast]}, @generic={0x86, 0x3, "a9"}, @generic={0x44, 0x4, "bade"}, @timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0xc, [{@remote, 0x1}, {@multicast1, 0x58a2}, {@multicast2, 0x2}]}]}}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0xf5ff}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 461.240418ms ago: executing program 3 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1d4}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000d00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 383.882771ms ago: executing program 4 (id=763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200001e9, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in=@empty, 0x4e24, 0x0, 0x4e24, 0xffff, 0x2, 0x80, 0x0, 0x5e, r3, 0xee00}, {0xffffffffffffaae3, 0x76605ab5, 0xfffffffffffeffff, 0x7, 0x31eb, 0x1f, 0xe2}, {0x4, 0x10001, 0x7fff, 0x1}, 0x100, 0x6e6bba, 0x2, 0x1, 0x2, 0x2}, {{@in=@multicast1, 0x4d2, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x1, 0x8, 0x2, 0x9, 0x5}}, 0xe8) sendmmsg$sock(r2, &(0x7f0000001100)=[{{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @remote, 'vlan0\x00'}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)="c04dfb31daf3ddd03019f34d4026608f4cebe6568490e3089a03187a22ab77e99bbb85a481320dab6de306a76823857f57756c98e53ffe9de0457ac80798fb61a7e671f86e9847238a00d57062f08fb427db", 0x52}, {&(0x7f0000000840)="4cf377ba78ecb2f9dfc0414d7b26e24838aa10c7aea0bef573bacf090b1a4bce0ba6318683f3a51982ef61794fc4ec0b1d8819fe67bb0d68493fa23719c7368720970272da76a646793cbdf18253a6d5feef3073e2406dd69c2f32895f1e93495c13476174fef0015b01723b08", 0x6d}, {&(0x7f00000008c0)="62af8afa6bb4a5f9c7c5c6a19868415518d16c649b46383d39e051cdbf9bb468ea4018944151882a74c66e1f3c0cda91ef51d7b383e5cb8c10a24704efecbc88c6dd840bcd487f4626c13bf91b6646a6d8f031949d7c013caee8311daa56cbf046015119514da7021013a2a80094d37ed40b67795aec9cd815199a461f40d8f4052bebbffeeb3da66919b4dcd734bda13521799bbb78e22cdda5aa676d544901e1fdd9e684733fa72fd13eb7e83fa0d628ffc5e186ece261129b1dce0401112b6e4a6297bbb2d9da41d32dd36e711bfb7cd90acfc84776647687e5cf9bbdc9347297f3496fb8cf29", 0xe8}], 0x3, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x724e}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{&(0x7f0000000a40)=@in6={0xa, 0x4e24, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="70b9cf0d17fd5c83420dbeb7805f1778a7572881e4014417c2515106e80cfd4babe779e9cf7a79fe48246c449c102d0f864d5aaaa30c1bd8b4e39216e721828c5e813243b4d67286c877e6dd9f41b5ad659840e9e37262680afd92871fa6823d697e63cbaced75f3c1d9f5114cae97297f95c72e81c286861d7866c0e435bcd901d8090fb17e0552938f09b8098c6cf1964dc4d9dae4e997dcfeff96ea1f186cf93c8dc0d3e4d46ca8e72e5405e691f3923a9ce651290b2aa81183ba71d6a37a134466dfb3429f630ba538aa67f42aafc12be82b1527e9526c3621b2aee9c436505f29", 0xe3}, {&(0x7f0000000bc0)="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", 0xff}], 0x2}}, {{&(0x7f0000000d00)=@caif=@rfm={0x25, 0x49, "007322c46fd7d3d3792d10ac7dbbaf80"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d80)="14eab7d04d0a1e82b9abe42dbe6ca6c945e9227badb3a0c47fbb0124c9c5a349", 0x20}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000dc0)="feae8e04336efe514701379cabcbe538788ba71a56d323d4e69c052d64a60694a3eb307b2213655fb755a15b1f6f3ef4a42db651bf691b8bc086bb9c1031e7cac1394af68743d637af6f45dc5b6f5407127cea745e50a656c58c9bf591daf6fa606066a2062cac3b2a89f52795f383ee4a0da7de8958415feb549d7c6724c6f0e037d6417e6a1e8118bba1996fca41de139db1504828182503097db19943942a1ea8143f9704202a4582eeb944cffd4dc899af69ab8ea347e66b2d8f5aa252a5dbe34bd0f1", 0xc5}, {&(0x7f0000000ec0)="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", 0xfd}, {&(0x7f0000000fc0)="ecc043ee1b3d3337729500a6aec7184cf0aa33f072e9b2f81d66567262ebec3d03113f6ce3b87330aad5c6b951c69a0ccddcbfb8156099ec48bbedc6bcf225026623eff5f497ebde1fa3fc0ad913c7d2e89fd00a39b4ffbc8be714c13c492f74e72793d79c5ea15cd9444c0b3890ebf7ce303f10a72343faf9558d03d2df0e92f293f97ae12e18eb765ba8d6485b127e4ada332c8348f186b7e4c874", 0x9c}], 0x5}}], 0x3, 0x4004004) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) r9 = socket(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000480), &(0x7f0000000700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x0, 0x6, {{0xe, 0x4, 0x1, 0x2, 0x38, 0x67, 0x0, 0x3c, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, {[@end, @cipso={0x86, 0x22, 0x3, [{0x0, 0xe, "8108b78889ce64f1a82dcca1"}, {0x3, 0x3, ' '}, {0x5, 0xb, "16cfcaa07c26d93efb"}]}, @end]}}}}}) sendmsg$nl_route(r9, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@delnexthop={0x38, 0x69, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) setsockopt$packet_int(r9, 0x107, 0x12, &(0x7f0000000280), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000bb0000000000040000000000000000000086dd"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xf9}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x40}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000000018000000000000000000000000000300001802c00018014000300fe8000000000000000000000000000aa14000400fc00"/68], 0x44}}, 0x0) 383.423648ms ago: executing program 3 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 281.335883ms ago: executing program 1 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x7, 0x6, 0x401, 0xec0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 281.022911ms ago: executing program 4 (id=766): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r0, 0x1, 0x0, 0xf00, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x5}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x50}}, 0x0) 250.205995ms ago: executing program 3 (id=767): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c002300000000000000000005002a0000000000f01adf49236129e3117347518dd0309ae323300962fea0f41b19603c132102a915192fa1dc324b20539544aca887e6f83841d967abadcd4a548e8e6e2a06fa60cfd782df1a3088ff4673da5f92b9a262b65d1e015f100601c456ceabe810cf88958deccad2bda1dbf9955db4548b85dc22f9f828172971d4214fc49d99876b7d7e1c5c7538e343996f0c3629030b28b4250885714117878b6a8bdac00ec3db401fd49f1785857d89bb358305c3686528e964c138161d9e8ed1f4a540396d8a"], 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0x1, 0x500000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0xa, 0x60000) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @multicast1, @empty}, 0xc) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0x6c, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000900)=""/131, &(0x7f00000008c0)="30a0e767daa8d6c50934fbfe6e75c383880d2abc897b541fcd2baa744609decf472f36a2023c80a298a5a49676ab79", &(0x7f00000009c0)="90dfe2f9b4cd5ada764e3b20b8edfb69146f00020000000000007d638126ab1bf2c9060b7b58e98a649958fe46aa233e5585968ce1b2e7f44e620ff65426eb4c08570905002642f6f00fe15f2c0ddaf159bfc7d551bea85b7dd08847ba5574a509732f10cb81be9cd47b959c7600ee9d1c00003726499a6ace0422a2a8db4c212f952aee8b8ae981c036f738b93fef9e8810fa97c707f6ccfca94a63d7b0a53b2e0f00dedd868b66ec055f9d880a4705c36ea8c03a265f000000000000000000000000000000000000000000000000c503000000000000009762c26b3d6b1412f8651e0e9e182fc4e4d75edd43d4553707a760cc945b3fe881ed8da5dbec373c29073947e8db8257aff1ecf9340cefc01138e47591e37c58d706ffb9625809f571b7d9349944", 0x0, r5}, 0x38) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) sendmsg$alg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="63612fd063a40c374ed191064ef86a64a33fd917f04e73534505a943c7921f514e8bae109cd607cfd4a177823ca9ae3cdff21b9ef895bb352c807552ae9a1b6660c6b13883b76d0070e9478ad4b291ceba91fb5be7602be358b1e5ed470e7be277171717dd29b2b21a0741bb9a3d843ccaa5cc52eded3545450aa4971423f694c31013ad66121c3b59dcc42bd58a249e44d7f88c997cc689ee78f659257c950e", 0xa0}, {&(0x7f0000000300)="1142c4151962e7fe5559e579f2eae6d60905cf6f818e5f70024050a4c3358cee1a9fd7e91f358462d00c4bf214c3510c2bec5c0071027b631bdc47cb7fe5a74f073c910bf906f4e39ea2730c4076117b05d5f9c2e22a02a6ca72430b87d7c095a67c2ed4f11309e835b5396ced82d80db0c9c545f6fa7e0166e6181e1c364f963b8e9adc2abd961d21f825323339d50362b30afc9d4330611154bc669df1363c5398ee273cd7030f586f3aaedb9e1244b89fbe66738b5db442ee8ef3d0b4af9b6d622c7d96c66d395da778c82c71b847053844b864c3165cb14490b9240bc0", 0xdf}, {&(0x7f0000000100)="85", 0x1}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x8, 0x10001, 0x9, 0x2443}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='kyber_throttled\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000700)=ANY=[@ANYBLOB="1804000020756c250000000000209ba736cfe2b6c0767ddc6b20207b1af8ff00000000bfa10000000000f8ffffffb702000008000000b70300000000000085000000b10000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="180032c90000000000000000000000009500000000000000", @ANYRESOCT=r6, @ANYBLOB="7000d3b992179f557567a0c97dc0c45e0a0e45f0a7b53104db92e7f18e76c6356b0d6a90b070d56c769863f527624a653084d7a52e0fd455bdeada2c37953d9992dd938e445d3f963c8dc6f5de1c05ff1a25b16cb392696c56ca646dadde9400fb32ee645ca0cf76f0f777e18915c8b5701835484e9de6975e742b0ad711b4b63047732760da4f003585e549d87f4573a1d2647776de1e07914a5c91d19b3378fc02a015f9d25ec61762aa13ee0dd78c62fa67d4b50926e53cf2eeaf94efe99685aa2845ba3d6551220debccf5", @ANYRES16=r8], &(0x7f0000000200)='GPL\x00', 0xc}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x23, 0x3, 0x1000, &(0x7f0000000780)) 239.765243ms ago: executing program 1 (id=768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x7}]}}}]}, 0x3c}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000006d00)=[{{&(0x7f0000003480)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000003a40)=[{&(0x7f00000034c0)="0778e549b6df0bdef21d7d9473", 0xd}], 0x1}}], 0x1, 0x0) socket(0x11, 0xa, 0xcb82) 1.925618ms ago: executing program 4 (id=769): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="03011400ff05430064880800ad0001140000ff842600ac14141fe001e502808a8972bd0b72e410820c521b061fe4fdfe4b449430ebb52997e36e039b1e598825f80100a3c06376c330760bfe6f6297c63215d73193db4e453bf9f153a167d50261a67a"], 0xdd12}], 0x1}, 0x0) 1.621062ms ago: executing program 1 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x3c, r1, 0x15, 0xfffffffc, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=771): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5501, &(0x7f00000000c0)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002a00090000000000000000000400002c45001180"], 0x5c}, 0x1, 0x3000000}, 0x0) r2 = socket(0x0, 0x0, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYRESHEX=r5, @ANYBLOB="f7f30f9575b707e56c219f1402011b5c3ab5235ce9eb59956f87e84c7512c4671d7e2cd7664a17e21d2d996d08dc86", @ANYRESOCT=r1], 0xa0}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r8, 0x0, 0x0) bind$tipc(r8, 0x0, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000000)=""/4, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 59.058495][ T5079] cgroup: Unknown subsys name 'net' [ 59.171619][ T5079] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.797533][ T5079] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.009873][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.018517][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.019229][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.033621][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.034170][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.042992][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.055834][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.059639][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.073574][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.082661][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.087140][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.091168][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.098091][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.104656][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.111800][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.118033][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.125073][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.136496][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.159405][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.171825][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.179611][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.188329][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.198852][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.203998][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.214559][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.219534][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.222128][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.239039][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.247530][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.255297][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.690027][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 63.808071][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 63.866792][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 63.928601][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 63.968721][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.977065][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984779][ T5094] bridge_slave_0: entered allmulticast mode [ 63.991894][ T5094] bridge_slave_0: entered promiscuous mode [ 64.040726][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.051002][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.059530][ T5094] bridge_slave_1: entered allmulticast mode [ 64.070512][ T5094] bridge_slave_1: entered promiscuous mode [ 64.115887][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.123104][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.130226][ T5089] bridge_slave_0: entered allmulticast mode [ 64.137658][ T5089] bridge_slave_0: entered promiscuous mode [ 64.174854][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 64.190237][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.197509][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.205174][ T5089] bridge_slave_1: entered allmulticast mode [ 64.212058][ T5089] bridge_slave_1: entered promiscuous mode [ 64.231719][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.243729][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.317030][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.324687][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.331876][ T5088] bridge_slave_0: entered allmulticast mode [ 64.339461][ T5088] bridge_slave_0: entered promiscuous mode [ 64.348827][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.360926][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.383652][ T5094] team0: Port device team_slave_0 added [ 64.410200][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.420878][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.428423][ T5088] bridge_slave_1: entered allmulticast mode [ 64.435788][ T5088] bridge_slave_1: entered promiscuous mode [ 64.456456][ T5094] team0: Port device team_slave_1 added [ 64.522104][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.529251][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.555269][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.567655][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.577088][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.586199][ T5103] bridge_slave_0: entered allmulticast mode [ 64.593360][ T5103] bridge_slave_0: entered promiscuous mode [ 64.618754][ T5089] team0: Port device team_slave_0 added [ 64.627695][ T5089] team0: Port device team_slave_1 added [ 64.634369][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.641310][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.667969][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.679228][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.686616][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.693809][ T5103] bridge_slave_1: entered allmulticast mode [ 64.700602][ T5103] bridge_slave_1: entered promiscuous mode [ 64.713747][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.768118][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.789617][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.796622][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.823585][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.884421][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.891371][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.924458][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.937927][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.950161][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.959734][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.967245][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.974763][ T5105] bridge_slave_0: entered allmulticast mode [ 64.981607][ T5105] bridge_slave_0: entered promiscuous mode [ 64.989670][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.996874][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.004290][ T5105] bridge_slave_1: entered allmulticast mode [ 65.011426][ T5105] bridge_slave_1: entered promiscuous mode [ 65.032656][ T5088] team0: Port device team_slave_0 added [ 65.078831][ T5088] team0: Port device team_slave_1 added [ 65.135754][ T5103] team0: Port device team_slave_0 added [ 65.156803][ T5094] hsr_slave_0: entered promiscuous mode [ 65.167461][ T5094] hsr_slave_1: entered promiscuous mode [ 65.175303][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.182246][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.208392][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.223022][ T5096] Bluetooth: hci1: command tx timeout [ 65.228822][ T4491] Bluetooth: hci2: command tx timeout [ 65.234449][ T53] Bluetooth: hci0: command tx timeout [ 65.243319][ T5103] team0: Port device team_slave_1 added [ 65.252167][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.264243][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.274015][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.280954][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.307357][ T53] Bluetooth: hci4: command tx timeout [ 65.307477][ T4491] Bluetooth: hci3: command tx timeout [ 65.313361][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.339437][ T5089] hsr_slave_0: entered promiscuous mode [ 65.346071][ T5089] hsr_slave_1: entered promiscuous mode [ 65.352211][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.360303][ T5089] Cannot create hsr debugfs directory [ 65.443466][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.450428][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.477598][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.491866][ T5105] team0: Port device team_slave_0 added [ 65.500633][ T5105] team0: Port device team_slave_1 added [ 65.533145][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.540093][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.566248][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.639732][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.647289][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.673411][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.705304][ T5088] hsr_slave_0: entered promiscuous mode [ 65.714228][ T5088] hsr_slave_1: entered promiscuous mode [ 65.720501][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.728288][ T5088] Cannot create hsr debugfs directory [ 65.746600][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.753730][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.779835][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.953049][ T5103] hsr_slave_0: entered promiscuous mode [ 65.959762][ T5103] hsr_slave_1: entered promiscuous mode [ 65.967245][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.975070][ T5103] Cannot create hsr debugfs directory [ 66.041522][ T5105] hsr_slave_0: entered promiscuous mode [ 66.048269][ T5105] hsr_slave_1: entered promiscuous mode [ 66.054792][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.062542][ T5105] Cannot create hsr debugfs directory [ 66.257199][ T5089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.270121][ T5089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.297746][ T5089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.308586][ T5089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.409329][ T5094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.422170][ T5094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.448713][ T5094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.459361][ T5094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.520338][ T5088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.531327][ T5088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.542166][ T5088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.560814][ T5088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.636279][ T5105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.648896][ T5105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.661370][ T5105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.694439][ T5105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.793286][ T5103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.803291][ T5103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.826624][ T5103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.840486][ T5103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.886558][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.943661][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.970716][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.028879][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.048107][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.055593][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.066814][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.073984][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.106007][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.118802][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.126074][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.162971][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.170067][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.199473][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.225499][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.274267][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.281466][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.291931][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.299044][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.310154][ T4491] Bluetooth: hci2: command tx timeout [ 67.317374][ T5096] Bluetooth: hci1: command tx timeout [ 67.323336][ T53] Bluetooth: hci0: command tx timeout [ 67.323948][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.367286][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.374508][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.383575][ T4491] Bluetooth: hci3: command tx timeout [ 67.389009][ T4491] Bluetooth: hci4: command tx timeout [ 67.429060][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.436235][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.489436][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.568082][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.640235][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.699721][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.706991][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.745093][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.752351][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.851782][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.880773][ T5103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.087063][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.116908][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.127817][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.259020][ T5088] veth0_vlan: entered promiscuous mode [ 68.305648][ T5094] veth0_vlan: entered promiscuous mode [ 68.323837][ T5088] veth1_vlan: entered promiscuous mode [ 68.340707][ T5094] veth1_vlan: entered promiscuous mode [ 68.365370][ T5105] veth0_vlan: entered promiscuous mode [ 68.401388][ T5105] veth1_vlan: entered promiscuous mode [ 68.418468][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.447371][ T5088] veth0_macvtap: entered promiscuous mode [ 68.459926][ T5094] veth0_macvtap: entered promiscuous mode [ 68.477145][ T5088] veth1_macvtap: entered promiscuous mode [ 68.508973][ T5094] veth1_macvtap: entered promiscuous mode [ 68.525994][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.567368][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.579804][ T5105] veth0_macvtap: entered promiscuous mode [ 68.607039][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.616348][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.625445][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636300][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.647217][ T5089] veth0_vlan: entered promiscuous mode [ 68.665502][ T5089] veth1_vlan: entered promiscuous mode [ 68.678825][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.689677][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.701576][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.716403][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.727024][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.738586][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.754964][ T5103] veth0_vlan: entered promiscuous mode [ 68.766645][ T5105] veth1_macvtap: entered promiscuous mode [ 68.795156][ T5094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.804553][ T5094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.813613][ T5094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.823357][ T5094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.868209][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.879208][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.890440][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.902022][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.917566][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.928545][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.939118][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.949004][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.959728][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.971962][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.981444][ T5103] veth1_vlan: entered promiscuous mode [ 69.018885][ T5105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.028744][ T5105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042035][ T5105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051421][ T5105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.071850][ T5089] veth0_macvtap: entered promiscuous mode [ 69.098166][ T5089] veth1_macvtap: entered promiscuous mode [ 69.135618][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.146948][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.157216][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.168192][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.178091][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.188539][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.200846][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.220402][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.231374][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.242129][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.257017][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.266916][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.277441][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.288579][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.315679][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.327142][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.340248][ T5089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.349534][ T5089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.359765][ T5089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.368864][ T5089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.383687][ T4491] Bluetooth: hci2: command tx timeout [ 69.389195][ T4491] Bluetooth: hci1: command tx timeout [ 69.390722][ T5096] Bluetooth: hci0: command tx timeout [ 69.400314][ T5103] veth0_macvtap: entered promiscuous mode [ 69.443793][ T5103] veth1_macvtap: entered promiscuous mode [ 69.457645][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.462953][ T5096] Bluetooth: hci3: command tx timeout [ 69.469947][ T53] Bluetooth: hci4: command tx timeout [ 69.481967][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.537573][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.546999][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.576833][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.587719][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.597793][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.608557][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.618601][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.629815][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.640690][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.656053][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.667187][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.695179][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.703913][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.712118][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.724434][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.734853][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.745820][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.756319][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.766944][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.776809][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.788318][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.800535][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.820685][ T5103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.830383][ T5103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.839617][ T5103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.848423][ T5103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.901844][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.915836][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.947211][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.966695][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.040535][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.065125][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.091899][ T5173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.217051][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.238798][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.266877][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.290920][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.447512][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.478559][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.545151][ T5188] ɶƣ0GCTw: entered promiscuous mode [ 70.558700][ T5187] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9'. [ 70.744890][ T5194] xt_l2tp: missing protocol rule (udp|l2tpip) [ 70.847925][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.937915][ T5209] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13'. [ 71.252958][ T5223] sctp: [Deprecated]: syz.4.17 (pid 5223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.252958][ T5223] Use struct sctp_sack_info instead [ 71.387853][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.395176][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.463252][ T53] Bluetooth: hci1: command tx timeout [ 71.463776][ T5096] Bluetooth: hci0: command tx timeout [ 71.468939][ T4491] Bluetooth: hci2: command tx timeout [ 71.544001][ T4491] Bluetooth: hci4: command tx timeout [ 71.549642][ T53] Bluetooth: hci3: command tx timeout [ 71.707403][ T5243] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 71.720714][ T5243] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 71.740945][ T5243] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.23'. [ 71.888189][ T5248] team0: Port device veth0_to_hsr added [ 71.935561][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 71.990574][ T5240] macvlan2: entered promiscuous mode [ 72.033973][ T5240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.166615][ T5263] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.33'. [ 72.243073][ T5259] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 72.331963][ T5271] netlink: 54 bytes leftover after parsing attributes in process `syz.2.35'. [ 72.367516][ T5266] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 72.876136][ T5266] syz.1.32 (5266) used greatest stack depth: 18128 bytes left [ 72.995822][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.43'. [ 73.105850][ T5308] FAULT_INJECTION: forcing a failure. [ 73.105850][ T5308] name failslab, interval 1, probability 0, space 0, times 1 [ 73.171302][ T5308] CPU: 0 PID: 5308 Comm: syz.3.46 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 73.181336][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.191413][ T5308] Call Trace: [ 73.194712][ T5308] [ 73.197656][ T5308] dump_stack_lvl+0x241/0x360 [ 73.202363][ T5308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.207587][ T5308] ? __pfx__printk+0x10/0x10 [ 73.212210][ T5308] should_fail_ex+0x3b0/0x4e0 [ 73.216921][ T5308] ? __alloc_skb+0x1c3/0x440 [ 73.221541][ T5308] should_failslab+0x9/0x20 [ 73.226067][ T5308] kmem_cache_alloc_node_noprof+0x71/0x320 [ 73.231900][ T5308] __alloc_skb+0x1c3/0x440 [ 73.236356][ T5308] ? __pfx___alloc_skb+0x10/0x10 [ 73.241335][ T5308] ? netlink_ack_tlv_len+0x6e/0x200 [ 73.246558][ T5308] netlink_ack+0x13f/0xa30 [ 73.250993][ T5308] ? __pfx_lock_acquire+0x10/0x10 [ 73.256048][ T5308] ? __pfx_smc_pnet_del+0x10/0x10 [ 73.261105][ T5308] netlink_rcv_skb+0x262/0x430 [ 73.265995][ T5308] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.271051][ T5308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.276373][ T5308] ? __netlink_deliver_tap+0x77e/0x7c0 [ 73.281871][ T5308] genl_rcv+0x28/0x40 [ 73.285879][ T5308] netlink_unicast+0x7f0/0x990 [ 73.290672][ T5308] ? __pfx_netlink_unicast+0x10/0x10 [ 73.295973][ T5308] ? __virt_addr_valid+0x183/0x520 [ 73.301114][ T5308] ? __check_object_size+0x49c/0x900 [ 73.306416][ T5308] ? bpf_lsm_netlink_send+0x9/0x10 [ 73.311568][ T5308] netlink_sendmsg+0x8e4/0xcb0 [ 73.316372][ T5308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.321685][ T5308] ? __import_iovec+0x536/0x820 [ 73.326569][ T5308] ? aa_sock_msg_perm+0x91/0x160 [ 73.331538][ T5308] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.336845][ T5308] ? security_socket_sendmsg+0x87/0xb0 [ 73.342330][ T5308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.347638][ T5308] __sock_sendmsg+0x221/0x270 [ 73.352343][ T5308] ____sys_sendmsg+0x525/0x7d0 [ 73.357150][ T5308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.362538][ T5308] __sys_sendmsg+0x2b0/0x3a0 [ 73.367166][ T5308] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.372307][ T5308] ? vfs_write+0x7c4/0xc90 [ 73.376791][ T5308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.383141][ T5308] ? do_syscall_64+0x100/0x230 [ 73.387928][ T5308] ? do_syscall_64+0xb6/0x230 [ 73.392631][ T5308] do_syscall_64+0xf3/0x230 [ 73.397153][ T5308] ? clear_bhb_loop+0x35/0x90 [ 73.401855][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.407769][ T5308] RIP: 0033:0x7f6a38b75bd9 [ 73.412211][ T5308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.431834][ T5308] RSP: 002b:00007f6a398df048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.440277][ T5308] RAX: ffffffffffffffda RBX: 00007f6a38d03f60 RCX: 00007f6a38b75bd9 [ 73.448279][ T5308] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 73.456283][ T5308] RBP: 00007f6a398df0a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.464273][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.472261][ T5308] R13: 000000000000000b R14: 00007f6a38d03f60 R15: 00007ffc8f25ce58 [ 73.480270][ T5308] [ 73.798331][ T5339] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 73.831970][ T5344] netlink: 'syz.0.56': attribute type 10 has an invalid length. [ 73.892725][ T5344] bridge0: port 3(team0) entered blocking state [ 73.921158][ T5344] bridge0: port 3(team0) entered disabled state [ 73.935950][ T5344] team0: entered allmulticast mode [ 73.941174][ T5344] team_slave_0: entered allmulticast mode [ 73.952855][ T5344] team_slave_1: entered allmulticast mode [ 73.961509][ T5344] team0: entered promiscuous mode [ 73.966742][ T5344] team_slave_0: entered promiscuous mode [ 73.974028][ T5344] team_slave_1: entered promiscuous mode [ 73.981783][ T5344] bridge0: port 3(team0) entered blocking state [ 73.988351][ T5344] bridge0: port 3(team0) entered forwarding state [ 74.074685][ T5356] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.59'. [ 74.200680][ T5361] Zero length message leads to an empty skb [ 74.340938][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 75.152755][ T5391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.438192][ T5405] netlink: 'syz.4.77': attribute type 8 has an invalid length. [ 75.634832][ T5413] netlink: 'syz.4.81': attribute type 3 has an invalid length. [ 75.705141][ T5420] __nla_validate_parse: 5 callbacks suppressed [ 75.705159][ T5420] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.83'. [ 75.744274][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 76.243524][ T5444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.91'. [ 76.273591][ T5444] warning: `syz.0.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.468793][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 76.507175][ T5455] netlink: 84 bytes leftover after parsing attributes in process `syz.0.91'. [ 76.621410][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 77.210170][ T5489] Cannot find add_set index 0 as target [ 77.352908][ T5493] netlink: 'syz.4.109': attribute type 9 has an invalid length. [ 77.384305][ T5493] netlink: 'syz.4.109': attribute type 7 has an invalid length. [ 77.409979][ T5493] netlink: 'syz.4.109': attribute type 8 has an invalid length. [ 77.999839][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 78.077662][ T5514] xt_bpf: check failed: parse error [ 78.141961][ T5521] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 78.199376][ T5521] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 78.237776][ T5526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 78.352898][ T5534] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 78.572558][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 78.791010][ T5557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'. [ 79.032648][ T5566] block nbd0: not configured, cannot reconfigure [ 79.058733][ T5571] netlink: 'syz.1.137': attribute type 3 has an invalid length. [ 79.301292][ T5587] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 79.328394][ T5583] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 79.405304][ T5590] netlink: 'syz.2.141': attribute type 4 has an invalid length. [ 79.632436][ T5601] netlink: 'syz.0.148': attribute type 7 has an invalid length. [ 79.913528][ T5619] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 80.261562][ T5635] ipvlan2: entered allmulticast mode [ 80.302534][ T5635] veth0_vlan: entered allmulticast mode [ 81.128535][ T5675] __nla_validate_parse: 8 callbacks suppressed [ 81.128552][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 81.233918][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 81.367515][ T5691] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.184'. [ 81.546350][ T5699] netlink: 25 bytes leftover after parsing attributes in process `syz.4.190'. [ 81.592323][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 81.637341][ T785] cfg80211: failed to load regulatory.db [ 81.950795][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 82.050486][ T5716] netlink: 3440 bytes leftover after parsing attributes in process `syz.4.196'. [ 82.100550][ T5716] netlink: 5888 bytes leftover after parsing attributes in process `syz.4.196'. [ 82.218651][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 82.561319][ T5735] Bluetooth: MGMT ver 1.22 [ 82.921054][ T5763] validate_nla: 4 callbacks suppressed [ 82.921073][ T5763] netlink: 'syz.2.208': attribute type 11 has an invalid length. [ 82.989680][ T5763] netlink: 'syz.2.208': attribute type 5 has an invalid length. [ 83.203470][ T5780] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.217'. [ 83.462775][ T5785] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 83.603251][ T5788] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 84.001663][ T5806] netlink: 'syz.2.222': attribute type 11 has an invalid length. [ 84.842519][ T5848] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 84.906661][ T5848] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 85.131242][ T5862] tap0: tun_chr_ioctl cmd 2147767506 [ 85.303501][ T5870] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 85.391005][ T5876] ieee802154 phy0 wpan0: encryption failed: -90 [ 85.443387][ T5876] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.909218][ T5901] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 85.963527][ T5901] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 86.167433][ T5915] hsr0: entered promiscuous mode [ 86.254335][ T5921] xt_SECMARK: invalid mode: 0 [ 86.298469][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.350406][ T5924] __nla_validate_parse: 14 callbacks suppressed [ 86.350423][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'. [ 86.366031][ T5925] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.270'. [ 86.479977][ T5929] netlink: 116 bytes leftover after parsing attributes in process `syz.2.272'. [ 86.530419][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 86.603753][ T5932] xt_connbytes: Forcing CT accounting to be enabled [ 86.650969][ T5932] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.708323][ T5932] xt_bpf: check failed: parse error [ 86.729259][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 86.877148][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.019210][ T5958] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 87.045585][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.284'. [ 87.095418][ T5964] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.285'. [ 87.281294][ T5969] hsr0: entered promiscuous mode [ 87.402246][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.615780][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 87.880246][ T6002] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.298'. [ 87.931612][ T6008] netlink: 56 bytes leftover after parsing attributes in process `syz.0.299'. [ 87.990294][ T6008] bridge0: port 4(gretap0) entered blocking state [ 88.019564][ T6008] bridge0: port 4(gretap0) entered disabled state [ 88.036338][ T6008] gretap0: entered allmulticast mode [ 88.080298][ T6008] gretap0: entered promiscuous mode [ 88.099597][ T6008] bridge0: port 4(gretap0) entered blocking state [ 88.106687][ T6008] bridge0: port 4(gretap0) entered forwarding state [ 88.407169][ T6030] validate_nla: 2 callbacks suppressed [ 88.407189][ T6030] netlink: 'syz.0.306': attribute type 4 has an invalid length. [ 88.518219][ T6030] netlink: 'syz.0.306': attribute type 4 has an invalid length. [ 89.501027][ T6094] raw_sendmsg: syz.3.327 forgot to set AF_INET. Fix it! [ 89.570847][ T6094] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 90.020979][ T6109] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 90.109145][ T6115] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 90.442903][ T6141] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 90.737155][ T6156] netlink: 'syz.0.350': attribute type 8 has an invalid length. [ 91.487600][ T6187] __nla_validate_parse: 17 callbacks suppressed [ 91.487619][ T6187] netlink: 180 bytes leftover after parsing attributes in process `syz.2.360'. [ 91.504001][ T6187] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 91.516005][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 91.530948][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 91.595620][ T4491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.604338][ T4491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.612113][ T4491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.621213][ T4491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.629385][ T4491] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.639009][ T4491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.795118][ T6189] netlink: 'syz.4.361': attribute type 4 has an invalid length. [ 91.901566][ T6194] netlink: 'syz.4.361': attribute type 4 has an invalid length. [ 92.351844][ T6225] vlan2: entered promiscuous mode [ 92.422131][ T6225] bond0: entered promiscuous mode [ 92.447117][ T6225] bond_slave_0: entered promiscuous mode [ 92.472709][ T6225] bond_slave_1: entered promiscuous mode [ 92.538112][ T6225] bond0: left promiscuous mode [ 92.563370][ T6225] bond_slave_0: left promiscuous mode [ 92.589839][ T6225] bond_slave_1: left promiscuous mode [ 92.681476][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.374'. [ 92.752650][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.030014][ T6239] netlink: 180 bytes leftover after parsing attributes in process `syz.0.376'. [ 93.039412][ T6239] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 93.059886][ T6242] Illegal XDP return value 4294967274 on prog (id 78) dev N/A, expect packet loss! [ 93.061641][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.180694][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 93.213765][ T6247] dvmrp0: entered allmulticast mode [ 93.238374][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.348233][ T6251] netlink: 17 bytes leftover after parsing attributes in process `syz.4.381'. [ 93.398201][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.465360][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 93.702546][ T53] Bluetooth: hci5: command tx timeout [ 93.720751][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 94.056374][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.092511][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.125808][ T6192] bridge_slave_0: entered allmulticast mode [ 94.164009][ T6192] bridge_slave_0: entered promiscuous mode [ 94.219978][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.246130][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.280789][ T6192] bridge_slave_1: entered allmulticast mode [ 94.324717][ T6192] bridge_slave_1: entered promiscuous mode [ 94.353262][ T62] bridge_slave_1: left allmulticast mode [ 94.364872][ T62] bridge_slave_1: left promiscuous mode [ 94.385499][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.441307][ T62] bridge_slave_0: left allmulticast mode [ 94.485791][ T62] bridge_slave_0: left promiscuous mode [ 94.491583][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.076542][ T6292] Bluetooth: MGMT ver 1.22 [ 95.082118][ T6292] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 95.142280][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.165622][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.184662][ T62] bond0 (unregistering): Released all slaves [ 95.310261][ T62] ɶƣ0GCTw: left promiscuous mode [ 95.421688][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.503342][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.648582][ T6308] validate_nla: 3 callbacks suppressed [ 95.648601][ T6308] netlink: 'syz.3.398': attribute type 9 has an invalid length. [ 95.722374][ T6308] netlink: 'syz.3.398': attribute type 7 has an invalid length. [ 95.730074][ T6308] netlink: 'syz.3.398': attribute type 8 has an invalid length. [ 95.744230][ T6312] netlink: 10 bytes leftover after parsing attributes in process `syz.3.398'. [ 95.792649][ T53] Bluetooth: hci5: command tx timeout [ 95.836943][ T6192] team0: Port device team_slave_0 added [ 95.927552][ T6192] team0: Port device team_slave_1 added [ 96.143648][ T6331] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.406'. [ 96.435353][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.477442][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.551255][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.606557][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.627965][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.687850][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.782254][ T6353] ip6tnl0: entered promiscuous mode [ 96.800122][ T6352] ip6tnl0: left promiscuous mode [ 96.945420][ T62] hsr_slave_0: left promiscuous mode [ 96.993557][ T6362] __nla_validate_parse: 2 callbacks suppressed [ 96.993575][ T6362] netlink: 6 bytes leftover after parsing attributes in process `syz.4.413'. [ 97.011037][ T62] hsr_slave_1: left promiscuous mode [ 97.058683][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.080176][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.111318][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.123025][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.224871][ T62] veth1_macvtap: left promiscuous mode [ 97.230926][ T62] veth0_macvtap: left promiscuous mode [ 97.272590][ T62] veth1_vlan: left promiscuous mode [ 97.290357][ T62] veth0_vlan: left promiscuous mode [ 97.319734][ T6382] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.418'. [ 97.350580][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 97.745071][ T62] team0 (unregistering): Port device veth0_to_hsr removed [ 97.832148][ T62] team0 (unregistering): Port device team_slave_1 removed [ 97.863051][ T53] Bluetooth: hci5: command tx timeout [ 97.879862][ T62] team0 (unregistering): Port device team_slave_0 removed [ 98.185646][ T6192] hsr_slave_0: entered promiscuous mode [ 98.192035][ T6192] hsr_slave_1: entered promiscuous mode [ 98.201403][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.212768][ T6192] Cannot create hsr debugfs directory [ 98.300979][ T6385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.326574][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 98.505396][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.424'. [ 98.638395][ T6404] netlink: 116 bytes leftover after parsing attributes in process `syz.3.424'. [ 98.677040][ T6404] bridge_slave_1: left allmulticast mode [ 98.709719][ T6404] bridge_slave_1: left promiscuous mode [ 98.739561][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.840203][ T6427] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.430'. [ 98.864701][ T6430] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 98.874436][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 98.925226][ T6430] netlink: 9180 bytes leftover after parsing attributes in process `syz.2.429'. [ 99.024940][ T6404] bridge_slave_0: left allmulticast mode [ 99.044392][ T6404] bridge_slave_0: left promiscuous mode [ 99.050353][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.227244][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 99.953516][ T53] Bluetooth: hci5: command tx timeout [ 100.124964][ T6487] FAULT_INJECTION: forcing a failure. [ 100.124964][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.147189][ T6487] CPU: 1 PID: 6487 Comm: syz.4.445 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 100.157201][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.167262][ T6487] Call Trace: [ 100.170554][ T6487] [ 100.173476][ T6487] dump_stack_lvl+0x241/0x360 [ 100.178153][ T6487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.183361][ T6487] ? __pfx__printk+0x10/0x10 [ 100.187943][ T6487] ? __pfx_lock_release+0x10/0x10 [ 100.192976][ T6487] should_fail_ex+0x3b0/0x4e0 [ 100.197692][ T6487] _copy_to_user+0x2f/0xb0 [ 100.202140][ T6487] bpf_test_finish+0x30f/0x8b0 [ 100.206931][ T6487] ? __pfx_bpf_test_finish+0x10/0x10 [ 100.212238][ T6487] ? _copy_from_user+0xa6/0xe0 [ 100.217025][ T6487] ? bpf_test_init+0x15a/0x180 [ 100.221821][ T6487] bpf_prog_test_run_xdp+0x905/0x11b0 [ 100.227221][ T6487] ? __pfx_lock_release+0x10/0x10 [ 100.232279][ T6487] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.238111][ T6487] ? __fget_files+0x29/0x470 [ 100.242740][ T6487] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.248576][ T6487] bpf_prog_test_run+0x33a/0x3b0 [ 100.253551][ T6487] __sys_bpf+0x48d/0x810 [ 100.257846][ T6487] ? __pfx___sys_bpf+0x10/0x10 [ 100.262656][ T6487] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.268677][ T6487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.275035][ T6487] ? do_syscall_64+0x100/0x230 [ 100.279828][ T6487] __x64_sys_bpf+0x7c/0x90 [ 100.284275][ T6487] do_syscall_64+0xf3/0x230 [ 100.288812][ T6487] ? clear_bhb_loop+0x35/0x90 [ 100.293524][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.299447][ T6487] RIP: 0033:0x7f324f775bd9 [ 100.303881][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.323511][ T6487] RSP: 002b:00007f32504a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.331973][ T6487] RAX: ffffffffffffffda RBX: 00007f324f903f60 RCX: 00007f324f775bd9 [ 100.339978][ T6487] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 100.347974][ T6487] RBP: 00007f32504a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.355968][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.363962][ T6487] R13: 000000000000000b R14: 00007f324f903f60 R15: 00007ffdd8e834d8 [ 100.371981][ T6487] [ 100.407892][ T6497] syz.0.448[6497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.408043][ T6497] syz.0.448[6497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.569189][ T6192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.624089][ T6192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.646210][ T6192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.670000][ T6192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.074151][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.242475][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.288967][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.296146][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.322160][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.329331][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.344780][ T4491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.360062][ T4491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.368424][ T4491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.379548][ T4491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.387444][ T4491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.395709][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.525802][ T2785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.575954][ T6550] netlink: 'syz.3.468': attribute type 15 has an invalid length. [ 101.588457][ T6550] netlink: 'syz.3.468': attribute type 18 has an invalid length. [ 101.634010][ T6550] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.643269][ T6550] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.651974][ T6550] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.660740][ T6550] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.671012][ T6550] vxlan0: entered promiscuous mode [ 101.711009][ T2785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.821460][ T2785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.902081][ T6563] bond0: entered promiscuous mode [ 101.911095][ T6563] bond_slave_0: entered promiscuous mode [ 101.922000][ T6563] bond_slave_1: entered promiscuous mode [ 101.976083][ T6192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.086635][ T2785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.169398][ T6576] __nla_validate_parse: 13 callbacks suppressed [ 102.169420][ T6576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.480'. [ 102.378066][ T6584] vlan0: entered promiscuous mode [ 102.381448][ T6589] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 102.384113][ T6586] IPVS: stopping backup sync thread 6589 ... [ 102.477785][ T6584] vlan0 (unregistering): left promiscuous mode [ 102.589705][ T6598] netlink: 2 bytes leftover after parsing attributes in process `syz.3.485'. [ 102.634293][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.672765][ T2785] gretap0: left allmulticast mode [ 102.684524][ T2785] gretap0: left promiscuous mode [ 102.699123][ T2785] bridge0: port 4(gretap0) entered disabled state [ 102.717780][ T2785] team0: left allmulticast mode [ 102.730410][ T2785] team_slave_0: left allmulticast mode [ 102.738249][ T2785] team_slave_1: left allmulticast mode [ 102.747894][ T2785] team0: left promiscuous mode [ 102.754472][ T2785] team_slave_0: left promiscuous mode [ 102.761260][ T2785] team_slave_1: left promiscuous mode [ 102.776471][ T2785] bridge0: port 3(team0) entered disabled state [ 102.792054][ T2785] bridge_slave_1: left allmulticast mode [ 102.808232][ T2785] bridge_slave_1: left promiscuous mode [ 102.818692][ T2785] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.847423][ T2785] bridge_slave_0: left allmulticast mode [ 102.859895][ T2785] bridge_slave_0: left promiscuous mode [ 102.866414][ T2785] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.103149][ T6612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.490'. [ 103.310476][ T2785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.332238][ T2785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.360117][ T2785] bond0 (unregistering): Released all slaves [ 103.411296][ T6537] chnl_net:caif_netlink_parms(): no params data found [ 103.462749][ T4491] Bluetooth: hci2: command tx timeout [ 103.756271][ T6631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.497'. [ 103.863395][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.870645][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.899577][ T6537] bridge_slave_0: entered allmulticast mode [ 103.911890][ T6537] bridge_slave_0: entered promiscuous mode [ 103.935730][ T6640] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.956551][ T6640] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 103.973535][ T2785] hsr_slave_0: left promiscuous mode [ 103.989220][ T2785] hsr_slave_1: left promiscuous mode [ 103.999524][ T2785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.032122][ T2785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.049143][ T2785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.062683][ T2785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.063650][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.4.498'. [ 104.090468][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.502'. [ 104.107079][ T2785] veth1_macvtap: left promiscuous mode [ 104.112823][ T2785] veth0_macvtap: left promiscuous mode [ 104.118807][ T2785] veth1_vlan: left promiscuous mode [ 104.124442][ T2785] veth0_vlan: left promiscuous mode [ 104.486847][ T2785] team0 (unregistering): Port device team_slave_1 removed [ 104.519802][ T2785] team0 (unregistering): Port device team_slave_0 removed [ 104.807653][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.815056][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.823870][ T6537] bridge_slave_1: entered allmulticast mode [ 104.832459][ T6537] bridge_slave_1: entered promiscuous mode [ 104.879455][ T6192] veth0_vlan: entered promiscuous mode [ 104.956723][ T6653] netlink: 2 bytes leftover after parsing attributes in process `syz.4.503'. [ 104.995286][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.038779][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.083737][ T6192] veth1_vlan: entered promiscuous mode [ 105.116828][ T6659] vlan0: entered promiscuous mode [ 105.157007][ T6663] netlink: 7 bytes leftover after parsing attributes in process `syz.3.507'. [ 105.227910][ T6659] vlan0 (unregistering): left promiscuous mode [ 105.248585][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 105.278237][ T6537] team0: Port device team_slave_0 added [ 105.298818][ T6537] team0: Port device team_slave_1 added [ 105.327103][ T6666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.370251][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.377608][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.431056][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.475453][ T6192] veth0_macvtap: entered promiscuous mode [ 105.499634][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.507764][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.538718][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.550161][ T4491] Bluetooth: hci2: command tx timeout [ 105.584557][ T6192] veth1_macvtap: entered promiscuous mode [ 105.702172][ T6679] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.718183][ T6679] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 105.740765][ T6677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.513'. [ 105.793171][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.807893][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.822089][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.840584][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.850751][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.862609][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.875120][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.888060][ T6537] hsr_slave_0: entered promiscuous mode [ 105.896828][ T6537] hsr_slave_1: entered promiscuous mode [ 105.954329][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.980850][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.992992][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.006029][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.033626][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.049266][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.068674][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.089921][ T6192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.107710][ T6192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.117910][ T6192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.126903][ T6192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.284212][ T6704] netlink: 'syz.4.524': attribute type 2 has an invalid length. [ 106.435139][ T2785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.458300][ T2785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.515986][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.528998][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.804845][ T6537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.827541][ T6537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.840964][ T6537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.861560][ T6537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.005997][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.028108][ T6736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.041760][ T6736] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.049906][ T6537] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.066123][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.073460][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.109500][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.116781][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.219577][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.286513][ T6537] veth0_vlan: entered promiscuous mode [ 107.305641][ T6537] veth1_vlan: entered promiscuous mode [ 107.351559][ T6537] veth0_macvtap: entered promiscuous mode [ 107.368908][ T6537] veth1_macvtap: entered promiscuous mode [ 107.392824][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.403531][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.414010][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.425015][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.437106][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.448305][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.459817][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.471495][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.484352][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.508010][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.523464][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.533455][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.547096][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.557866][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.569807][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.591620][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.602825][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.614502][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.623248][ T4491] Bluetooth: hci2: command tx timeout [ 107.636349][ T6537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.647308][ T6537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.658386][ T6537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.667273][ T6537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.829747][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.839880][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.895656][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.924063][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.032562][ T6766] netlink: 'syz.3.546': attribute type 2 has an invalid length. [ 108.056140][ T6766] __nla_validate_parse: 4 callbacks suppressed [ 108.056157][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 108.220627][ T6778] netlink: 'syz.1.549': attribute type 3 has an invalid length. [ 108.253444][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 108.453229][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 108.605046][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 108.717150][ T6811] netlink: 'syz.0.563': attribute type 11 has an invalid length. [ 108.961710][ T6822] veth0_to_bridge: entered promiscuous mode [ 108.994638][ T6821] veth0_to_bridge: left promiscuous mode [ 109.385821][ T6854] netlink: 'syz.1.578': attribute type 2 has an invalid length. [ 109.411681][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 109.487761][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 109.702519][ T4491] Bluetooth: hci2: command tx timeout [ 109.895821][ T6879] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.584'. [ 109.924682][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 110.288153][ T6893] netlink: 'syz.1.588': attribute type 10 has an invalid length. [ 110.296923][ T6891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 110.434634][ T6902] sctp: failed to load transform for md5: -2 [ 110.676370][ T6928] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.596'. [ 110.781947][ T6936] ipvlan2: entered promiscuous mode [ 110.787655][ T6936] ipvlan2: entered allmulticast mode [ 110.793343][ T6936] team0: entered allmulticast mode [ 110.798615][ T6936] team_slave_0: entered allmulticast mode [ 110.805121][ T6936] team_slave_1: entered allmulticast mode [ 110.823588][ T6936] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.927159][ T6942] netlink: 'syz.1.602': attribute type 7 has an invalid length. [ 110.961396][ T25] IPVS: starting estimator thread 0... [ 111.073860][ T6949] IPVS: using max 18 ests per chain, 43200 per kthread [ 111.266481][ T6965] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 111.290518][ T6964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 111.335781][ T6972] syzkaller0: entered allmulticast mode [ 112.093257][ T7024] team1: Failed to send options change via netlink (err -105) [ 112.103512][ T7024] team1: Mode changed to "activebackup" [ 119.828955][ T7041] Cannot find add_set index 0 as target [ 119.966058][ T7060] __nla_validate_parse: 13 callbacks suppressed [ 119.966076][ T7060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.638'. [ 120.003864][ T7057] can: request_module (can-proto-0) failed. [ 120.167894][ T7070] bridge0: entered promiscuous mode [ 120.179281][ T7070] vlan2: entered promiscuous mode [ 120.214120][ T7070] bridge0: left promiscuous mode [ 120.577021][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 120.643779][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.652'. [ 120.934712][ T7114] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 120.965777][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 120.967898][ T7114] hsr0: entered promiscuous mode [ 121.041589][ T7114] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.082431][ T7114] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 121.115452][ T7114] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.152954][ T7114] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 121.352450][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.663'. [ 121.355209][ T7134] netlink: 'syz.4.665': attribute type 5 has an invalid length. [ 121.591082][ T7147] xt_hashlimit: max too large, truncated to 1048576 [ 121.685510][ T7144] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 121.713577][ T7144] batman_adv: batadv0: Adding interface: team0 [ 121.719857][ T7144] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.725891][ T7151] netlink: 104 bytes leftover after parsing attributes in process `syz.3.672'. [ 121.782115][ T7144] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 121.863419][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 122.304801][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 122.315616][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 122.472263][ T7169] pim6reg1: entered promiscuous mode [ 122.477962][ T7169] pim6reg1: entered allmulticast mode [ 122.917407][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 122.922206][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888025797000: rx timeout, send abort [ 122.939272][ T7185] ipvlan2: entered promiscuous mode [ 122.962365][ T7185] ipvlan2: entered allmulticast mode [ 122.982367][ T7185] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 123.435380][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888025797000: abort rx timeout. Force session deactivation [ 123.821447][ T7078] syz.1.644: vmalloc error: size 536875008, failed to allocated page array size 1048584, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 123.872363][ T7078] CPU: 1 PID: 7078 Comm: syz.1.644 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 123.882404][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.892486][ T7078] Call Trace: [ 123.895787][ T7078] [ 123.898752][ T7078] dump_stack_lvl+0x241/0x360 [ 123.903487][ T7078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.908716][ T7078] ? __pfx__printk+0x10/0x10 [ 123.913321][ T7078] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 123.919753][ T7078] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 123.926286][ T7078] warn_alloc+0x278/0x410 [ 123.930666][ T7078] ? __pfx_warn_alloc+0x10/0x10 [ 123.935545][ T7078] ? hash_ipport_create+0x801/0x1670 [ 123.940875][ T7078] ? __get_vm_area_node+0x23d/0x270 [ 123.946113][ T7078] __vmalloc_node_range_noprof+0x69f/0x1460 [ 123.952069][ T7078] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.958431][ T7078] ? rcu_is_watching+0x15/0xb0 [ 123.963241][ T7078] ? trace_kmalloc+0x1f/0xd0 [ 123.967852][ T7078] ? __kmalloc_node_noprof+0x247/0x440 [ 123.973325][ T7078] ? kvmalloc_node_noprof+0x72/0x190 [ 123.978612][ T7078] kvmalloc_node_noprof+0x142/0x190 [ 123.983838][ T7078] ? hash_ipport_create+0x801/0x1670 [ 123.989141][ T7078] hash_ipport_create+0x801/0x1670 [ 123.994265][ T7078] ? __pfx_lock_acquire+0x10/0x10 [ 123.999305][ T7078] ? __pfx_hash_ipport_create+0x10/0x10 [ 124.004867][ T7078] ? __nla_parse+0x40/0x60 [ 124.009295][ T7078] ? __pfx_hash_ipport_create+0x10/0x10 [ 124.014857][ T7078] ip_set_create+0xa5c/0x1900 [ 124.019545][ T7078] ? ip_set_create+0x45e/0x1900 [ 124.024407][ T7078] ? trace_raw_output_contention_end+0x1a/0xd0 [ 124.030578][ T7078] ? __pfx_ip_set_create+0x10/0x10 [ 124.035749][ T7078] ? trace_contention_end+0x3c/0x120 [ 124.041088][ T7078] ? nfnetlink_rcv_msg+0x225/0x1180 [ 124.046304][ T7078] nfnetlink_rcv_msg+0xbec/0x1180 [ 124.051346][ T7078] ? kernel_text_address+0xa7/0xe0 [ 124.056476][ T7078] ? nfnetlink_rcv_msg+0x225/0x1180 [ 124.061716][ T7078] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 124.067215][ T7078] ? netlink_deliver_tap+0x19d/0x1b0 [ 124.072515][ T7078] ? netlink_unicast+0x7be/0x990 [ 124.077460][ T7078] ? netlink_sendmsg+0x8e4/0xcb0 [ 124.082419][ T7078] ? __sock_sendmsg+0x221/0x270 [ 124.087297][ T7078] ? ____sys_sendmsg+0x525/0x7d0 [ 124.092248][ T7078] ? __sys_sendmsg+0x2b0/0x3a0 [ 124.097040][ T7078] ? do_syscall_64+0xf3/0x230 [ 124.101723][ T7078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.107812][ T7078] netlink_rcv_skb+0x1e3/0x430 [ 124.112596][ T7078] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 124.118069][ T7078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.123375][ T7078] ? apparmor_capable+0x138/0x1b0 [ 124.128415][ T7078] ? bpf_lsm_capable+0x9/0x10 [ 124.133118][ T7078] ? security_capable+0x90/0xb0 [ 124.138010][ T7078] nfnetlink_rcv+0x297/0x2a90 [ 124.142709][ T7078] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 124.148439][ T7078] ? __dev_queue_xmit+0x2da/0x3e90 [ 124.153583][ T7078] ? __dev_queue_xmit+0x1763/0x3e90 [ 124.158816][ T7078] ? kasan_save_track+0x51/0x80 [ 124.163682][ T7078] ? do_syscall_64+0xf3/0x230 [ 124.168438][ T7078] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 124.173572][ T7078] ? __dev_queue_xmit+0x2da/0x3e90 [ 124.178699][ T7078] ? __pfx___dev_queue_xmit+0x10/0x10 [ 124.184096][ T7078] ? ref_tracker_free+0x643/0x7e0 [ 124.189121][ T7078] ? __asan_memcpy+0x40/0x70 [ 124.193715][ T7078] ? __pfx_ref_tracker_free+0x10/0x10 [ 124.199096][ T7078] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.204315][ T7078] ? skb_clone+0x240/0x390 [ 124.208738][ T7078] ? __pfx_lock_release+0x10/0x10 [ 124.213759][ T7078] ? __netlink_deliver_tap+0x77e/0x7c0 [ 124.219245][ T7078] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.224470][ T7078] netlink_unicast+0x7f0/0x990 [ 124.229252][ T7078] ? __pfx_netlink_unicast+0x10/0x10 [ 124.234541][ T7078] ? __virt_addr_valid+0x183/0x520 [ 124.239662][ T7078] ? __check_object_size+0x49c/0x900 [ 124.244946][ T7078] ? bpf_lsm_netlink_send+0x9/0x10 [ 124.250064][ T7078] netlink_sendmsg+0x8e4/0xcb0 [ 124.254839][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.260131][ T7078] ? __import_iovec+0x536/0x820 [ 124.264998][ T7078] ? aa_sock_msg_perm+0x91/0x160 [ 124.269968][ T7078] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 124.275258][ T7078] ? security_socket_sendmsg+0x87/0xb0 [ 124.280734][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.286030][ T7078] __sock_sendmsg+0x221/0x270 [ 124.290727][ T7078] ____sys_sendmsg+0x525/0x7d0 [ 124.295512][ T7078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.300827][ T7078] __sys_sendmsg+0x2b0/0x3a0 [ 124.305435][ T7078] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.310616][ T7078] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.316960][ T7078] ? do_syscall_64+0x100/0x230 [ 124.321730][ T7078] ? do_syscall_64+0xb6/0x230 [ 124.326421][ T7078] do_syscall_64+0xf3/0x230 [ 124.330933][ T7078] ? clear_bhb_loop+0x35/0x90 [ 124.335638][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.341548][ T7078] RIP: 0033:0x7fb3e9375bd9 [ 124.345997][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.365636][ T7078] RSP: 002b:00007fb3ea1a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.374057][ T7078] RAX: ffffffffffffffda RBX: 00007fb3e9503f60 RCX: 00007fb3e9375bd9 [ 124.382033][ T7078] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 124.390018][ T7078] RBP: 00007fb3e93e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 124.397999][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.405976][ T7078] R13: 000000000000000b R14: 00007fb3e9503f60 R15: 00007ffc27a83f38 [ 124.413967][ T7078] [ 124.439949][ T7078] Mem-Info: [ 124.460702][ T7078] active_anon:3120 inactive_anon:0 isolated_anon:0 [ 124.460702][ T7078] active_file:1517 inactive_file:38153 isolated_file:0 [ 124.460702][ T7078] unevictable:768 dirty:349 writeback:0 [ 124.460702][ T7078] slab_reclaimable:9143 slab_unreclaimable:98595 [ 124.460702][ T7078] mapped:13200 shmem:1286 pagetables:672 [ 124.460702][ T7078] sec_pagetables:0 bounce:0 [ 124.460702][ T7078] kernel_misc_reclaimable:0 [ 124.460702][ T7078] free:1391462 free_pcp:1696 free_cma:0 [ 124.550180][ T7078] Node 0 active_anon:12280kB inactive_anon:0kB active_file:6068kB inactive_file:152532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52800kB dirty:1396kB writeback:0kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9696kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no [ 124.618915][ T7078] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 124.652019][ T7078] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.679774][ T7078] lowmem_reserve[]: 0 2571 2571 0 0 [ 124.685409][ T7078] Node 0 DMA32 free:1604588kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:12432kB inactive_anon:0kB active_file:6068kB inactive_file:152228kB unevictable:1536kB writepending:1396kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:1712kB local_pcp:940kB free_cma:0kB [ 124.766739][ T7078] lowmem_reserve[]: 0 0 0 0 0 [ 124.771525][ T7078] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 124.812681][ T7078] lowmem_reserve[]: 0 0 0 0 0 [ 124.824417][ T7078] Node 1 Normal free:3952396kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.884746][ T7078] lowmem_reserve[]: 0 0 0 0 0 [ 124.922830][ T7078] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.962381][ T7078] Node 0 DMA32: 82*4kB (ME) 76*8kB (UME) 105*16kB (UME) 136*32kB (UME) 31*64kB (UME) 13*128kB (UME) 8*256kB (UME) 33*512kB (UM) 28*1024kB (UM) 18*2048kB (UME) 369*4096kB (UM) = 1606520kB [ 125.002403][ T7078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 125.016940][ T7078] Node 1 Normal: 1*4kB (M) 1*8kB (M) 6*16kB (UM) 9*32kB (UM) 6*64kB (U) 4*128kB (U) 4*256kB (UM) 3*512kB (UM) 2*1024kB (U) 3*2048kB (U) 962*4096kB (UM) = 3952396kB [ 125.052371][ T7078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.089806][ T7078] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.103969][ T7078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.114000][ T7078] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.136457][ T7078] 40941 total pagecache pages [ 125.156930][ T7078] 0 pages in swap cache [ 125.165890][ T7078] Free swap = 124996kB [ 125.179864][ T7078] Total swap = 124996kB [ 125.189842][ T7078] 2097051 pages RAM [ 125.222322][ T7078] 0 pages HighMem/MovableOnly [ 125.227178][ T7078] 400875 pages reserved [ 125.231350][ T7078] 0 pages cma reserved [ 126.101634][ T7309] sit0: entered promiscuous mode [ 126.124406][ T7309] sit0: entered allmulticast mode [ 126.150760][ T7312] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 126.536989][ T7339] dccp_invalid_packet: P.Data Offset(172) too large [ 126.675317][ T7348] __nla_validate_parse: 1 callbacks suppressed [ 126.675336][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.744'. [ 126.776494][ T7349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.739'. [ 126.925608][ T7359] ip6tnl1: entered promiscuous mode [ 126.936453][ T7359] ip6tnl1: entered allmulticast mode [ 127.079623][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 127.200246][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 127.307069][ T7385] bridge0: entered promiscuous mode [ 127.320950][ T7385] vlan0: entered promiscuous mode [ 127.331644][ T7383] netlink: 188 bytes leftover after parsing attributes in process `syz.3.758'. [ 127.342641][ T7385] bridge0: left promiscuous mode [ 127.363845][ T7383] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 127.383730][ T7383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 127.627276][ T7403] IPVS: Error connecting to the multicast addr [ 127.709541][ T7406] skb len=1639 headroom=168 headlen=1639 tailroom=1969 [ 127.709541][ T7406] mac=(192,-24) mac_len=24 net=(168,20) trans=188 [ 127.709541][ T7406] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 127.709541][ T7406] csum(0x886400eb start=235 offset=34916 ip_summed=3 complete_sw=0 valid=0 level=0) [ 127.709541][ T7406] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 127.709541][ T7406] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 127.709541][ T7406] encapsulation=1 inner(proto=0x0008, mac=192, net=192, trans=235) [ 127.759326][ T7406] dev name=veth0_to_team feat=0x000061164fdd19e9 [ 127.765780][ T7406] skb linear: 00000000: 45 02 06 67 0e d5 00 00 ff 84 21 04 ac 14 14 1f [ 127.774352][ T7406] skb linear: 00000010: e0 01 e5 02 00 00 08 00 bd 03 06 4f 10 82 0c 52 [ 127.782973][ T7406] skb linear: 00000020: 1b 06 73 fd fd fe 4b 44 94 30 eb b5 29 97 e3 6e [ 127.791529][ T7406] skb linear: 00000030: 03 9b 1e 59 88 25 f8 01 00 a3 c0 63 76 c3 30 76 [ 127.800117][ T7406] skb linear: 00000040: 0b fe 6f 62 97 c6 32 15 d7 31 93 db 4e 45 3b f9 [ 127.808679][ T7406] skb linear: 00000050: f1 53 a1 67 d5 02 61 a6 7a 00 00 00 29 5e 00 00 [ 127.817247][ T7406] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.825804][ T7406] skb linear: 00000070: 00 00 00 00 00 00 e9 00 00 00 00 00 00 00 00 00 [ 127.834368][ T7406] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.842956][ T7406] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.851495][ T7406] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.860081][ T7406] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.868644][ T7406] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.877209][ T7406] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.885764][ T7406] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.894347][ T7406] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.902914][ T7406] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.911437][ T7406] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.920008][ T7406] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.928585][ T7406] ------------[ cut here ]------------ [ 127.934105][ T7406] offset+2 (34985) > skb_headlen() (1639) [ 127.940643][ T7406] WARNING: CPU: 1 PID: 7406 at net/core/dev.c:3336 skb_checksum_help+0x68f/0x730 [ 127.949856][ T7406] Modules linked in: [ 127.953812][ T7406] CPU: 1 PID: 7406 Comm: syz.4.769 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 127.963872][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 127.973989][ T7406] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 127.979753][ T7406] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 c0 88 c5 8c 4c 89 f6 89 da e8 e2 fd ff f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 127.999431][ T7406] RSP: 0018:ffffc90003366b68 EFLAGS: 00010246 [ 128.005566][ T7406] RAX: d6ded7cda7944400 RBX: 0000000000000667 RCX: 0000000000040000 [ 128.013607][ T7406] RDX: ffffc90009e61000 RSI: 000000000003ffff RDI: 0000000000040000 [ 128.021604][ T7406] RBP: dffffc0000000000 R08: ffffffff81585752 R09: 1ffff9200066cd0c [ 128.029724][ T7406] R10: dffffc0000000000 R11: fffff5200066cd0d R12: 1ffff1100d3cff76 [ 128.037756][ T7406] R13: 00000000000088a7 R14: 00000000000088a9 R15: ffff888069e7fb40 [ 128.045788][ T7406] FS: 00007f32504a76c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 128.054789][ T7406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.061388][ T7406] CR2: 000000002000d000 CR3: 0000000063ee0000 CR4: 00000000003506f0 [ 128.069444][ T7406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.077491][ T7406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.085566][ T7406] Call Trace: [ 128.088875][ T7406] [ 128.091838][ T7406] ? __warn+0x163/0x4e0 [ 128.096084][ T7406] ? skb_checksum_help+0x68f/0x730 [ 128.101242][ T7406] ? report_bug+0x2b3/0x500 [ 128.105830][ T7406] ? skb_checksum_help+0x68f/0x730 [ 128.110990][ T7406] ? handle_bug+0x3e/0x70 [ 128.115431][ T7406] ? exc_invalid_op+0x1a/0x50 [ 128.120150][ T7406] ? asm_exc_invalid_op+0x1a/0x20 [ 128.125277][ T7406] ? __warn_printk+0x292/0x360 [ 128.130088][ T7406] ? skb_checksum_help+0x68f/0x730 [ 128.135308][ T7406] ? skb_checksum_help+0x68e/0x730 [ 128.140484][ T7406] ip_do_fragment+0x20d/0x1b30 [ 128.145326][ T7406] ? nf_hook+0x396/0x450 [ 128.145370][ T7406] ? nf_hook+0x9e/0x450 [ 128.145388][ T7406] ? __pfx_ip_finish_output2+0x10/0x10 [ 128.145413][ T7406] ? __pfx_nf_hook+0x10/0x10 [ 128.145435][ T7406] ? __pfx_ip_do_fragment+0x10/0x10 [ 128.145459][ T7406] ? xfrm_lookup_with_ifid+0x198e/0x1ed0 [ 128.145485][ T7406] ? ip_fast_csum+0x1f0/0x2b0 [ 128.145519][ T7406] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 128.145545][ T7406] ? __ip_finish_output+0x1fd/0x400 [ 128.145568][ T7406] ? ip_fragment+0x9a/0x220 [ 128.194399][ T7406] iptunnel_xmit+0x540/0x9b0 [ 128.199043][ T7406] ip_tunnel_xmit+0x2119/0x2950 [ 128.204011][ T7406] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 128.209241][ T7406] ? gre_build_header+0x341/0xb30 [ 128.214388][ T7406] ? __pfx_gre_build_header+0x10/0x10 [ 128.219805][ T7406] ? iptunnel_handle_offloads+0x2b2/0x650 [ 128.225622][ T7406] ipgre_xmit+0x958/0xd40 [ 128.230027][ T7406] ? __pfx_ipgre_xmit+0x10/0x10 [ 128.234964][ T7406] ? dev_queue_xmit_nit+0x2b/0xc10 [ 128.240124][ T7406] dev_hard_start_xmit+0x27a/0x7e0 [ 128.245348][ T7406] sch_direct_xmit+0x2b6/0x5f0 [ 128.250160][ T7406] ? __pfx_sch_direct_xmit+0x10/0x10 [ 128.255545][ T7406] __qdisc_run+0xbfd/0x2170 [ 128.260110][ T7406] __dev_queue_xmit+0x1119/0x3e90 [ 128.265262][ T7406] ? __dev_queue_xmit+0x2da/0x3e90 [ 128.270416][ T7406] ? _copy_from_iter+0x26b/0x1960 [ 128.275536][ T7406] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.280950][ T7406] ? __virt_addr_valid+0x183/0x520 [ 128.286143][ T7406] ? skb_set_owner_w+0x238/0x3e0 [ 128.291122][ T7406] ? skb_partial_csum_set+0x105/0x350 [ 128.296589][ T7406] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 128.300744][ T7419] tipc: Failed to remove unknown binding: 66,1,1/0:1019935092/1019935094 [ 128.302142][ T7406] ? packet_parse_headers+0x7bd/0xad0 [ 128.302200][ T7406] ? packet_xmit+0x68/0x330 [ 128.320803][ T7406] packet_sendmsg+0x4bc0/0x6710 [ 128.325768][ T7406] ? __pfx___might_resched+0x10/0x10 [ 128.331113][ T7406] ? aa_sk_perm+0x967/0xab0 [ 128.335718][ T7406] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.340970][ T7406] ? __pfx_lock_release+0x10/0x10 [ 128.346072][ T7406] ? __import_iovec+0x536/0x820 [ 128.350951][ T7406] ? aa_sock_msg_perm+0x91/0x160 [ 128.355982][ T7406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.360522][ T7419] tipc: Failed to remove unknown binding: 66,1,1/0:1019935092/1019935094 [ 128.361278][ T7406] ? security_socket_sendmsg+0x87/0xb0 [ 128.375297][ T7406] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.380538][ T7406] __sock_sendmsg+0x221/0x270 [ 128.385333][ T7406] ____sys_sendmsg+0x525/0x7d0 [ 128.390161][ T7406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.395574][ T7406] __sys_sendmsg+0x2b0/0x3a0 [ 128.400223][ T7406] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.405484][ T7406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.411839][ T7406] ? do_syscall_64+0x100/0x230 [ 128.416653][ T7406] ? do_syscall_64+0xb6/0x230 [ 128.421382][ T7406] do_syscall_64+0xf3/0x230 [ 128.425957][ T7406] ? clear_bhb_loop+0x35/0x90 [ 128.430685][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.436635][ T7406] RIP: 0033:0x7f324f775bd9 [ 128.441098][ T7406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.460768][ T7406] RSP: 002b:00007f32504a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.469272][ T7406] RAX: ffffffffffffffda RBX: 00007f324f903f60 RCX: 00007f324f775bd9 [ 128.477316][ T7406] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000004 [ 128.485356][ T7406] RBP: 00007f324f7e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 128.493399][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.501401][ T7406] R13: 000000000000000b R14: 00007f324f903f60 R15: 00007ffdd8e834d8 [ 128.509458][ T7406] [ 128.512534][ T7406] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.519817][ T7406] CPU: 1 PID: 7406 Comm: syz.4.769 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 128.529811][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 128.539869][ T7406] Call Trace: [ 128.543154][ T7406] [ 128.546106][ T7406] dump_stack_lvl+0x241/0x360 [ 128.550818][ T7406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.556046][ T7406] ? __pfx__printk+0x10/0x10 [ 128.560683][ T7406] ? vscnprintf+0x5d/0x90 [ 128.565044][ T7406] panic+0x349/0x860 [ 128.568969][ T7406] ? __warn+0x172/0x4e0 [ 128.573155][ T7406] ? __pfx_panic+0x10/0x10 [ 128.577607][ T7406] __warn+0x346/0x4e0 [ 128.581615][ T7406] ? skb_checksum_help+0x68f/0x730 [ 128.586765][ T7406] report_bug+0x2b3/0x500 [ 128.591122][ T7406] ? skb_checksum_help+0x68f/0x730 [ 128.596274][ T7406] handle_bug+0x3e/0x70 [ 128.600460][ T7406] exc_invalid_op+0x1a/0x50 [ 128.605003][ T7406] asm_exc_invalid_op+0x1a/0x20 [ 128.609891][ T7406] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 128.615650][ T7406] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 c0 88 c5 8c 4c 89 f6 89 da e8 e2 fd ff f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 128.635284][ T7406] RSP: 0018:ffffc90003366b68 EFLAGS: 00010246 [ 128.641383][ T7406] RAX: d6ded7cda7944400 RBX: 0000000000000667 RCX: 0000000000040000 [ 128.649355][ T7406] RDX: ffffc90009e61000 RSI: 000000000003ffff RDI: 0000000000040000 [ 128.657330][ T7406] RBP: dffffc0000000000 R08: ffffffff81585752 R09: 1ffff9200066cd0c [ 128.665304][ T7406] R10: dffffc0000000000 R11: fffff5200066cd0d R12: 1ffff1100d3cff76 [ 128.673281][ T7406] R13: 00000000000088a7 R14: 00000000000088a9 R15: ffff888069e7fb40 [ 128.681273][ T7406] ? __warn_printk+0x292/0x360 [ 128.686067][ T7406] ? skb_checksum_help+0x68e/0x730 [ 128.691196][ T7406] ip_do_fragment+0x20d/0x1b30 [ 128.695978][ T7406] ? nf_hook+0x396/0x450 [ 128.700237][ T7406] ? nf_hook+0x9e/0x450 [ 128.704397][ T7406] ? __pfx_ip_finish_output2+0x10/0x10 [ 128.709879][ T7406] ? __pfx_nf_hook+0x10/0x10 [ 128.714474][ T7406] ? __pfx_ip_do_fragment+0x10/0x10 [ 128.719718][ T7406] ? xfrm_lookup_with_ifid+0x198e/0x1ed0 [ 128.725358][ T7406] ? ip_fast_csum+0x1f0/0x2b0 [ 128.730132][ T7406] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 128.734993][ T7406] ? __ip_finish_output+0x1fd/0x400 [ 128.740209][ T7406] ? ip_fragment+0x9a/0x220 [ 128.744723][ T7406] iptunnel_xmit+0x540/0x9b0 [ 128.749343][ T7406] ip_tunnel_xmit+0x2119/0x2950 [ 128.754228][ T7406] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 128.759430][ T7406] ? gre_build_header+0x341/0xb30 [ 128.764485][ T7406] ? __pfx_gre_build_header+0x10/0x10 [ 128.769867][ T7406] ? iptunnel_handle_offloads+0x2b2/0x650 [ 128.775603][ T7406] ipgre_xmit+0x958/0xd40 [ 128.779954][ T7406] ? __pfx_ipgre_xmit+0x10/0x10 [ 128.784815][ T7406] ? dev_queue_xmit_nit+0x2b/0xc10 [ 128.789947][ T7406] dev_hard_start_xmit+0x27a/0x7e0 [ 128.795083][ T7406] sch_direct_xmit+0x2b6/0x5f0 [ 128.799877][ T7406] ? __pfx_sch_direct_xmit+0x10/0x10 [ 128.805187][ T7406] __qdisc_run+0xbfd/0x2170 [ 128.809718][ T7406] __dev_queue_xmit+0x1119/0x3e90 [ 128.814762][ T7406] ? __dev_queue_xmit+0x2da/0x3e90 [ 128.819877][ T7406] ? _copy_from_iter+0x26b/0x1960 [ 128.824920][ T7406] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.830299][ T7406] ? __virt_addr_valid+0x183/0x520 [ 128.835414][ T7406] ? skb_set_owner_w+0x238/0x3e0 [ 128.840370][ T7406] ? skb_partial_csum_set+0x105/0x350 [ 128.845761][ T7406] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 128.851309][ T7406] ? packet_parse_headers+0x7bd/0xad0 [ 128.856693][ T7406] ? packet_xmit+0x68/0x330 [ 128.861202][ T7406] packet_sendmsg+0x4bc0/0x6710 [ 128.866089][ T7406] ? __pfx___might_resched+0x10/0x10 [ 128.871388][ T7406] ? aa_sk_perm+0x967/0xab0 [ 128.875902][ T7406] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.881108][ T7406] ? __pfx_lock_release+0x10/0x10 [ 128.886129][ T7406] ? __import_iovec+0x536/0x820 [ 128.890975][ T7406] ? aa_sock_msg_perm+0x91/0x160 [ 128.895921][ T7406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.901213][ T7406] ? security_socket_sendmsg+0x87/0xb0 [ 128.906674][ T7406] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.911872][ T7406] __sock_sendmsg+0x221/0x270 [ 128.916560][ T7406] ____sys_sendmsg+0x525/0x7d0 [ 128.921353][ T7406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.926677][ T7406] __sys_sendmsg+0x2b0/0x3a0 [ 128.931282][ T7406] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.936461][ T7406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.942800][ T7406] ? do_syscall_64+0x100/0x230 [ 128.947587][ T7406] ? do_syscall_64+0xb6/0x230 [ 128.952278][ T7406] do_syscall_64+0xf3/0x230 [ 128.956809][ T7406] ? clear_bhb_loop+0x35/0x90 [ 128.961490][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.967387][ T7406] RIP: 0033:0x7f324f775bd9 [ 128.971826][ T7406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.991434][ T7406] RSP: 002b:00007f32504a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.999892][ T7406] RAX: ffffffffffffffda RBX: 00007f324f903f60 RCX: 00007f324f775bd9 [ 129.007874][ T7406] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000004 [ 129.015848][ T7406] RBP: 00007f324f7e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 129.023820][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.031809][ T7406] R13: 000000000000000b R14: 00007f324f903f60 R15: 00007ffdd8e834d8 [ 129.039794][ T7406] [ 129.043101][ T7406] Kernel Offset: disabled [ 129.047467][ T7406] Rebooting in 86400 seconds..