last executing test programs: 3.137861659s ago: executing program 1 (id=519): socket(0x27, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in=@remote, 0xfffffffe, 0x4, 0x2}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xf5) 3.102733112s ago: executing program 1 (id=522): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x27, 0x5, 0x2) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x4a}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x7}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x18, &(0x7f0000000000)=""/24, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r4, @ANYRES16=r0, @ANYBLOB="00000000000000000000000000000000000200000000000000000000bf2b92cfc991562d305e6e4cb3d55d905dc77e69ad3d964ef4153b1f7d59ed353c8aa07b39d0ebf5de3d4314121f76fb86960d0abd1914d6ce3ced8bca0037022eb3c8cb05a241f029241bdd32baa26da24db763450618aa1756dde0b0462dcd1a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r7}, 0x38) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000000000000000000000500"}}}]}, 0x48}}, 0x0) r11 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r11, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r12, &(0x7f0000847fff)='X', 0x1, 0x1, &(0x7f000005ffe4)={0xa, 0x0, 0x8, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r12, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r12, 0x1) 2.702732482s ago: executing program 2 (id=529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x6a}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@private0}}]}, 0x154}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xff7f}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @null, @bpq0, 0x3, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @tclass={{0x14}}], 0x40}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "7acc"}, @NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 2.527217631s ago: executing program 2 (id=532): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x82402, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0xc4030a4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x6e) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x406, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000011c4700"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800c0001006d"], 0x44}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) 2.383297862s ago: executing program 4 (id=534): socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf250300000008000800640101020800080000000000080006007f00000104000500060001004e200000140007002001000000000000000000000000000006000a004e20000006000a004e220000050003003b000000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r7, 0x1, 0x0, 0x25dfdbfd, {0x23}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0xa, 0x43) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) close(r4) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4000, @loopback}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000000)=0x94, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.251818451s ago: executing program 2 (id=536): r0 = socket$kcm(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x32, 0x0, 0xee00}, {0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0xa8, 0x24, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xffff, 0x9}, {0x4, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x84, 0xc0, 0x3, 0x49, 0x1, 0xa, 0xd, 0x3}}, {0xa, 0x2, [0x2, 0x7f, 0x0]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x4}]}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffe, 0x8, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c050) 1.977227971s ago: executing program 1 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x40000, {0x0, 0x0, 0x1300}}, 0xffffff42}}, 0x0) 1.862184929s ago: executing program 1 (id=538): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x98}}], 0x1, 0x0) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000740)={r3, 0x7fff, 0x3, 0x2, 0x26, 0x6, 0x87, 0x9, {r3, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x6, 0x4, 0x4, 0x10001}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0)={r4}, &(0x7f0000000240)=0xfe29) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'team_slave_1\x00', @ifru_names='vlan0\x00'}}) r5 = socket(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x38) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000000c0)={0x7a, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000140)={0x7, 'dvmrp0\x00', {0x2b}, 0xa}) 1.635595951s ago: executing program 1 (id=539): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0xffffffffffffffff, {0x0, 0x0, 0x2}, 0xfd}, 0x18) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r3, 0x1, {0x1, 0xf0}, 0xff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.634588637s ago: executing program 0 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffec3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @dev, @netrom, 0x1, @default}, &(0x7f00000002c0)=0x1c, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000300)={0x6, 'veth1_to_hsr\x00', {0xb}, 0x1167}) recvfrom$unix(r1, &(0x7f0000000000)=""/108, 0x6c, 0x10060, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}}, 0x0) 1.419940473s ago: executing program 1 (id=541): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000000000)={0x0}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r2], 0x48) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) close(r1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r2], 0x48) (async) 1.371104442s ago: executing program 0 (id=542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x6a}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@private0}}]}, 0x154}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xff7f}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @null, @bpq0, 0x3, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @tclass={{0x14}}], 0x40}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "7acc"}, @NFTA_MATCH_REV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 1.361370594s ago: executing program 4 (id=544): socket(0x27, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in=@remote, 0xfffffffe, 0x4, 0x2}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x700) 1.223830188s ago: executing program 3 (id=545): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 1.203421832s ago: executing program 4 (id=546): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, 0x0, 0x0) bind$llc(r3, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000001c0)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000020000200200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 1.159115548s ago: executing program 3 (id=547): unshare(0x22020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r7], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r8, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x28}}, 0x0) 985.517228ms ago: executing program 3 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 874.713581ms ago: executing program 0 (id=549): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x803, 0x0) epoll_create1(0x0) socket(0x1, 0x80804, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030009100000000000fb000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x4, 0x6, 0x21080, r2, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0xb, @void, @value, @void, @value}, 0x50) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 613.158444ms ago: executing program 4 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000005c0)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xee, {0x2, 0x0, @broadcast}, 'macsec0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200eef7ffffffb7030000feffffffb704000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 521.254087ms ago: executing program 4 (id=551): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2000005, 0x10012, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x84, 0x24, 0xfffffffffffffffe, &(0x7f0000000000)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x5b2, 0x8, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x64, 0x0, 0x7f, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x86, 0x4, "d390"}, @generic={0x82, 0xb, "fc40f3f24e42c17f98"}, @timestamp={0x44, 0x8, 0xec, 0x0, 0x0, [0x6]}, @generic={0x44, 0x6, "c28c954d"}, @end, @end, @ssrr={0x89, 0x1f, 0xbb, [@dev={0xac, 0x14, 0x14, 0x2f}, @empty, @rand_addr=0x64010100, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0x44, 0xaf, 0x3, 0x9, [{@private=0xa010100, 0x401}, {@remote, 0x80}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xe}, {@rand_addr=0x64010102, 0xd}, {@multicast2, 0x1}, {@local, 0x100}, {@private=0xa010100, 0xc}, {@multicast1, 0x400}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0xc, 0x8001, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x64, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xb, 0xe4, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}, @timestamp={0x44, 0x24, 0x9e, 0x0, 0xb, [0x36, 0x3, 0xf134c54, 0x3, 0xfffffffe, 0x8, 0x1, 0x3ec8bc26]}, @noop, @end, @timestamp_addr={0x44, 0x1c, 0xc0, 0x1, 0x2, [{@loopback}, {@rand_addr=0x64010101, 0x10}, {@remote, 0x9}]}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@mpls_delroute={0x50, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0xc9, 0xff, 0x0, 0xfe, 0x5}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x4, 0x9, r4}}, @RTA_DST={0x8, 0x1, {0xffc01, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8, 0xce, 0x5, 0x9}, {0x3, 0xd, 0x40, 0xf}, {0xa, 0xfb, 0x5, 0x5}, {0x0, 0x8, 0x5, 0x6}, {0x5, 0xff, 0xf6, 0xffffff00}, {0x400, 0x3, 0x7, 0x3}]}, 0x10) 520.4241ms ago: executing program 0 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) close(0x3) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "77746a310400", "07f217bd2e511e465bbbd5de32b495b2fd044677d4d58834066baf840000be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) (async) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) (async) r4 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x2000a212}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$nl_generic(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xcc, 0x36, 0x8, 0x70bd2a, 0x25dfdbfb, {0x9}, [@generic="8c8727b70778e2afe48ec759a18bf35609c7fa74362189b59adc90f0b1f1eca9095ca45cb2ad878fe1acdb1f07bc8978a7f15eab34afa43a2d23f638ddd3e0dfeb6ad3df92dea2e7f92d1bb12ba9443400723ab3a768a71d326b59b6a01d98edf413ac805dfbfad280b8b4162faddc5a7547914ba4a655eb2d8241dc3c411561663f4ce1b1d676a1177e51a04bb60e277bf9bd3552c6c776a9629979106f2080240b6ebc1f16a0ce7cce636e6591c752b89db34116"]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="15a5d4", 0x3}], 0x1) close(0x3) 519.540081ms ago: executing program 3 (id=553): getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000380), &(0x7f0000000680)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000240)=0x8000000000000000, 0x58) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280)=0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xb6, &(0x7f0000000000), &(0x7f00000003c0)=0x4) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000640), 0x4) bind$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000002d80)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="b101000d00000000000000007d2514daf0dc3ac70c5987a50f62f10226141ae9c26966b80e3db9a5e77844f15e857f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xf, 0x7ff, 0x6}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x17, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYRES16=r7], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r5], 0x7c}}, 0x40801) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) recvmmsg(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001d80)=""/45, 0x2d}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010071756575650000000c00028008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a762cf1341a7b7572cde6e251947a7318dba86bbb91da82ac86462d700b4110269b60402b8a58f915e25907c69f9ca0f8dcdfdbb04f90416840bc56b16ce7957287681865c9dbf8b29e22106a3a17af342549117abab0e8ac647b781314bad8b5159c4bf3a7"], 0x74}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000048000000060a010400000000000000000100000008000b4000000000200004801c8001800a00010072656469720000000c000280080001402b3d356e0900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x4) 467.610148ms ago: executing program 2 (id=554): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f000c00000005000005000000000000000700000000e9bc29db66e48d3a1cb21e00"/48], 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) pipe(&(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e23, @empty}}, 0x81000000, 0x2, 0x9, 0x3, 0x8, 0x6, 0x5f}, &(0x7f00000000c0)=0x9c) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x20, 0x7, 0x401, 0x9a, {{0x4d, 0x4, 0x0, 0x1f, 0x134, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x54, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x39, 0x3, 0x9, [{@multicast1}, {@local, 0x6}, {@private=0xa010101, 0x99}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@multicast1, 0x9}, {@multicast2, 0xfffffffa}]}, @cipso={0x86, 0x89, 0x0, [{0x4, 0xe, "ecbb40642553846ec1b01a1c"}, {0x2, 0x9, "30f81f77f32412"}, {0x5, 0xf, "a35f4377fc6b60a62069a368ef"}, {0x5, 0xf, "4f18da2610e79326417573e469"}, {0x0, 0x7, "c1a1315791"}, {0x0, 0x11, "f551d9306950de9dcc0162fa37b7eb"}, {0x2, 0xd, "811fcd4c4a7f266ae1bca6"}, {0x1, 0x11, "eacdfbf35e9437f674b296e3ab13e7"}, {0x5, 0x9, "8b7b255a845531"}, {0x1, 0xf, "de899e51ff0abfeab7ada3e375"}]}, @timestamp_addr={0x44, 0x1c, 0xaa, 0x1, 0x4, [{@broadcast, 0x10001}, {@private=0xa010100, 0xfff}, {@local, 0x5}]}, @noop, @rr={0x7, 0x1f, 0xe8, [@loopback, @rand_addr=0x64010102, @loopback, @remote, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0xa, [{@loopback}]}]}}}}}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4018, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x83, &(0x7f0000000240)=""/131, 0x40f00, 0x11, '\x00', r7, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x200, 0xfffffff4}, 0x10, 0x5, r8, 0x6, 0x0, &(0x7f00000003c0)=[{0x3, 0x5, 0x7, 0xa}, {0x4, 0x2, 0xe, 0xb}, {0x0, 0x1, 0x10}, {0x1, 0x3, 0x3, 0x5}, {0x2, 0x2, 0xf, 0x2}, {0x1, 0x4, 0xa, 0x9}], 0x10, 0x8, @void, @value}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000000080)) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$nl_route_sched_retired(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltfilter={0x274, 0x2d, 0xc31, 0x7, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_POLICE={0x4}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp={{0x9}, {0x20c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0xd, 0x8000}, {0x5, 0x8, 0x9}, 0x75, 0x76, 0x9}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf, 0x300000, 0x5de89713}, {0x3ff, 0x4, 0x41}, 0xc, 0x4, 0x18}}, @TCA_RSVP_ACT={0x1c0, 0x6, [@m_ife={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xa5, 0x6, "981fccf982dac8330d7b5b6b87e04f8ccf383f4964be586be3e66bc0808a445babe10c4d20687abd83e119ec3ac15ba420a6809e9873855130a2dad17c23bfe58670b73b965808e277e2471ac75998663020d140c7b243d6f1ddeae44edfabc7f4b25348e801cca1e688fa2b4f37ed00a6f5f38f5ab5c6321460dd73250ad2876d08b649b5a2db12e62b651c6c5a90aab24db3fda0d868abb45154374e65a6e21d"}, {0xc, 0x7, {0x1, 0x1}}, {0x6f, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x0, 0x6, "cdc55659f10a248f9c543db8f85c7ea58150e4b9a4a8a6d54bc9514f6736a896e0c2042401bb1c49edcd"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2}}}}]}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x240000d2}, 0x24008040) 329.544011ms ago: executing program 3 (id=555): bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x44}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffe0a, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000680)={@empty, @broadcast, 0x0}, &(0x7f00000006c0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x1, 0x8, 0x67b, 0x73, {{0x30, 0x4, 0x3, 0x2, 0xc0, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x7, 0x7e, [@dev={0xac, 0x14, 0x14, 0x40}]}, @lsrr={0x83, 0x17, 0xe7, [@loopback, @local, @empty, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0xcd, 0x1, 0x5, [{@remote, 0x3}]}, @lsrr={0x83, 0xb, 0xd6, [@loopback, @private=0xa010102]}, @generic={0x83, 0x6, "88a2a94a"}, @timestamp_addr={0x44, 0x24, 0xff, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbc}, {@private=0xa010101, 0xfe}, {@remote, 0x7}, {@broadcast, 0x4}]}, @timestamp={0x44, 0x8, 0xdb, 0x0, 0x0, [0x3]}, @timestamp_prespec={0x44, 0x44, 0xba, 0x3, 0x5, [{@loopback, 0x6}, {@multicast1, 0x3}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x7}, {@rand_addr=0x64010102, 0x100}, {@broadcast, 0xee}, {@empty, 0x21ad}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}]}]}}}}}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14], 0x40}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x7, 0x7, {{0x31, 0x4, 0x1, 0x0, 0xc4, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x6, 0x0}, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @rr={0x7, 0x7, 0x1c, [@private=0xa010100]}, @rr={0x7, 0x2b, 0xc9, [@remote, @multicast2, @private=0xa010100, @rand_addr=0x64010101, @multicast1, @remote, @private=0xa010102, @private=0xa010100, @remote, @empty]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0xc, [{@local, 0x81}, {@remote, 0x6}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}]}, @rr={0x7, 0x13, 0xbe, [@multicast1, @multicast2, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0x5, [{@empty, 0x7}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1000}, {@broadcast, 0x3b}, {@remote, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r17 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r17, &(0x7f00000000c0), 0x10) (async) r18 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r18, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r17, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r19}, 0x10, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000270000006da6f3ef189d4e1c6e", @ANYRESHEX=r19, @ANYRESHEX], 0x48}}, 0x20000081) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000), 0xc, &(0x7f0000001040)={&(0x7f0000000a00)={0x63c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r2}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x6, 0x6}, {0xde, 0x1, 0x6, 0x4}, {0x0, 0x3, 0x3, 0x5f}, {0x9, 0x3, 0xb, 0x80000000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x66}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xee69}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r15}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x4}, 0x4011) (async) r21 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r21, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec000000210001000000000000000000e00000319a0000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000016401010000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff01000000000000000000000000000100000000000000000000000000000001000000000000000000000200"], 0xec}}, 0x0) 295.563017ms ago: executing program 0 (id=556): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x20040080) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r4}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x80, 0x1, 0xf801, 0x7, 0x2, 0x80, 0x4}}, {0x0, 0x2, [0x101, 0x4]}}, {{0x0, 0x1, {0x0, 0x7, 0x80, 0x4, 0x2, 0x2, 0x6}}, {0x0, 0x2, [0x3, 0xc, 0x2, 0x4, 0xfffc, 0x81, 0x200, 0x72, 0xff, 0xe]}}, {{0x0, 0x1, {0x7f, 0x1, 0x8000, 0x6, 0x0, 0x0, 0x4}}, {0x0, 0x2, [0x80, 0x1163, 0x0, 0x3, 0x77f5, 0x7f, 0x5]}}, {{0x0, 0x1, {0x2, 0x7, 0x6, 0x4, 0x1, 0x6, 0x2}}, {0x0, 0x2, [0x7, 0x5, 0x8c7b, 0x5, 0xb6, 0x8, 0x40, 0x200, 0x7939]}}, {{0x0, 0x1, {0x0, 0x0, 0x8001, 0x0, 0x1, 0x8, 0xda4bc1db}}, {0x0, 0x2, [0x0, 0x9, 0xfffe, 0x1, 0x5, 0xc, 0x5]}}, {{0x0, 0x1, {0x6, 0x0, 0x1ff, 0xffffff0f, 0x0, 0x9, 0xf5d7}}, {0x0, 0x2, [0xffff, 0x6, 0x6]}}]}]}, 0x17}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x312a}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x69e1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 139.724239ms ago: executing program 2 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x20040811}, 0x20080000) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0992f13bb7635c6dfeec2620b91334e700000006000000ff0f00000400000000000000ad52fcb9fb9a5af1af24e72f410b04b83eea31a857649a1ed34aca0d6a3bb71c30059d3f7335a6a0a96ce14ad28857c805732c0511102770d9e48ee5199cb4e5c6103027af23289209eed911799f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000034038ba4e7e8c44d00"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="467fd600000004000000080000000a00000016d0fc52f355b55e53f367e14dc2d11f4a5684e0ce79c8312db0260139d7c7aab73a0c31d1ae1c13528fa88aec99107f6f3e3800"/79, @ANYRES16=r3, @ANYBLOB="0600"/20, @ANYRES8=r0, @ANYRES32=r2, @ANYRESDEC=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000700)={{r1}, 0x0, 0x4, @unused=[0xff8, 0x9], @subvolid=0xadca}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)=0x28) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r11}, 0x10) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) 122.485661ms ago: executing program 0 (id=558): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000002c0)=0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) listen(0xffffffffffffffff, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 110.019714ms ago: executing program 4 (id=559): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000017000000100100005a8c00002400000000000000"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) 31.799413ms ago: executing program 3 (id=560): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xf, &(0x7f0000000680)=@ringbuf, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f000007000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x4, 0x4, 0xbd, 0x1, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000580), 0x20000000}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r6, &(0x7f0000000240), 0x0}, 0x20) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @broadcast}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3f"], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000d, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) 0s ago: executing program 2 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts. [ 55.373879][ T5829] cgroup: Unknown subsys name 'net' [ 55.480342][ T5829] cgroup: Unknown subsys name 'cpuset' [ 55.488536][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.810847][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.281967][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.290480][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.298328][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.306528][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.314468][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.321818][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.438428][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.446772][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.454763][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.468092][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.477958][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.485322][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.512283][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.520841][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.528464][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.547818][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.556477][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.565135][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.574842][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.585075][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.639799][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.655756][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.667799][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.675199][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.682463][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.692243][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.699743][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.707347][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.718134][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.733413][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.781186][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 60.936301][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.943661][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.951213][ T5844] bridge_slave_0: entered allmulticast mode [ 60.958160][ T5844] bridge_slave_0: entered promiscuous mode [ 60.966089][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 60.976379][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.983580][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.990919][ T5844] bridge_slave_1: entered allmulticast mode [ 60.998788][ T5844] bridge_slave_1: entered promiscuous mode [ 61.070547][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.081836][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.126426][ T5844] team0: Port device team_slave_0 added [ 61.144667][ T5844] team0: Port device team_slave_1 added [ 61.193767][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.201062][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.208990][ T5839] bridge_slave_0: entered allmulticast mode [ 61.215593][ T5839] bridge_slave_0: entered promiscuous mode [ 61.245687][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.253091][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.260552][ T5839] bridge_slave_1: entered allmulticast mode [ 61.267124][ T5839] bridge_slave_1: entered promiscuous mode [ 61.296729][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.303883][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.331369][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.347179][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.354404][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.380487][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.435813][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.447684][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.502640][ T5839] team0: Port device team_slave_0 added [ 61.513213][ T5839] team0: Port device team_slave_1 added [ 61.533636][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 61.563245][ T5844] hsr_slave_0: entered promiscuous mode [ 61.570442][ T5844] hsr_slave_1: entered promiscuous mode [ 61.580396][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 61.615771][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.624023][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.650818][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.663018][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.670086][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.696031][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.728612][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 61.886148][ T5839] hsr_slave_0: entered promiscuous mode [ 61.898257][ T5839] hsr_slave_1: entered promiscuous mode [ 61.904253][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.912460][ T5839] Cannot create hsr debugfs directory [ 61.946066][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.953388][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.960789][ T5848] bridge_slave_0: entered allmulticast mode [ 61.967336][ T5848] bridge_slave_0: entered promiscuous mode [ 61.984539][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.991688][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.999133][ T5851] bridge_slave_0: entered allmulticast mode [ 62.005649][ T5851] bridge_slave_0: entered promiscuous mode [ 62.012778][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.020088][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.027316][ T5848] bridge_slave_1: entered allmulticast mode [ 62.034299][ T5848] bridge_slave_1: entered promiscuous mode [ 62.063842][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.071435][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.079187][ T5851] bridge_slave_1: entered allmulticast mode [ 62.085790][ T5851] bridge_slave_1: entered promiscuous mode [ 62.131861][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.142801][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.150086][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.157236][ T5846] bridge_slave_0: entered allmulticast mode [ 62.164052][ T5846] bridge_slave_0: entered promiscuous mode [ 62.191768][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.202929][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.212460][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.219990][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.227156][ T5846] bridge_slave_1: entered allmulticast mode [ 62.234084][ T5846] bridge_slave_1: entered promiscuous mode [ 62.260101][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.314215][ T5851] team0: Port device team_slave_0 added [ 62.329248][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.353597][ T5851] team0: Port device team_slave_1 added [ 62.368697][ T5842] Bluetooth: hci0: command tx timeout [ 62.377124][ T5848] team0: Port device team_slave_0 added [ 62.387222][ T5848] team0: Port device team_slave_1 added [ 62.394397][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.436625][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.443697][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.469722][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.498783][ T5846] team0: Port device team_slave_0 added [ 62.511090][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.518401][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.545874][ T5842] Bluetooth: hci1: command tx timeout [ 62.546336][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.576091][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.583291][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.609825][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.622482][ T5846] team0: Port device team_slave_1 added [ 62.654233][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.661467][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.689201][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.707440][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.714553][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.741231][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.769305][ T5842] Bluetooth: hci2: command tx timeout [ 62.772304][ T54] Bluetooth: hci3: command tx timeout [ 62.775891][ T5154] Bluetooth: hci4: command tx timeout [ 62.793741][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.802628][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.829742][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.857403][ T5851] hsr_slave_0: entered promiscuous mode [ 62.863853][ T5851] hsr_slave_1: entered promiscuous mode [ 62.870466][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.878175][ T5851] Cannot create hsr debugfs directory [ 62.920169][ T5848] hsr_slave_0: entered promiscuous mode [ 62.926297][ T5848] hsr_slave_1: entered promiscuous mode [ 62.935107][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.942832][ T5848] Cannot create hsr debugfs directory [ 62.971878][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.982889][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.018912][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.033284][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.083685][ T5846] hsr_slave_0: entered promiscuous mode [ 63.090145][ T5846] hsr_slave_1: entered promiscuous mode [ 63.096158][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.104433][ T5846] Cannot create hsr debugfs directory [ 63.148986][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.175523][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.204596][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.216679][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.361385][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.398389][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.430470][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.447434][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.461886][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.491546][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.502034][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.513513][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.573730][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.586526][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.596866][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.622108][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.631316][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.706184][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.726648][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.745978][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.773495][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.780821][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.813594][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.820691][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.833230][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.840329][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.856828][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.864015][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.882695][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.963604][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.977275][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.994826][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.002024][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.030681][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.037878][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.064215][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.096710][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.103869][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.122922][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.130088][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.166651][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.242366][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.300897][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.339334][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.346471][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.366280][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.373479][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.423275][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.458809][ T5154] Bluetooth: hci0: command tx timeout [ 64.486525][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.497022][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.512413][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.608959][ T5154] Bluetooth: hci1: command tx timeout [ 64.625983][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.676315][ T5844] veth0_vlan: entered promiscuous mode [ 64.704165][ T5844] veth1_vlan: entered promiscuous mode [ 64.764805][ T5851] veth0_vlan: entered promiscuous mode [ 64.792523][ T5844] veth0_macvtap: entered promiscuous mode [ 64.804573][ T5851] veth1_vlan: entered promiscuous mode [ 64.843137][ T5844] veth1_macvtap: entered promiscuous mode [ 64.849568][ T5154] Bluetooth: hci3: command tx timeout [ 64.859901][ T5154] Bluetooth: hci4: command tx timeout [ 64.861737][ T54] Bluetooth: hci2: command tx timeout [ 64.917141][ T5851] veth0_macvtap: entered promiscuous mode [ 64.932426][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.946756][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.966992][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.980911][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.991014][ T5851] veth1_macvtap: entered promiscuous mode [ 65.012617][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.028187][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.036917][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.046330][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.072425][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.085404][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.098670][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.125539][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.136940][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.149903][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.182268][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.191849][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.202575][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.211656][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.235677][ T5848] veth0_vlan: entered promiscuous mode [ 65.283634][ T5846] veth0_vlan: entered promiscuous mode [ 65.296533][ T5839] veth0_vlan: entered promiscuous mode [ 65.321734][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.333256][ T5848] veth1_vlan: entered promiscuous mode [ 65.338878][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.365631][ T5846] veth1_vlan: entered promiscuous mode [ 65.413327][ T5839] veth1_vlan: entered promiscuous mode [ 65.431458][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.442657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.445775][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.463208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.513498][ T5839] veth0_macvtap: entered promiscuous mode [ 65.529697][ T5848] veth0_macvtap: entered promiscuous mode [ 65.539960][ T5846] veth0_macvtap: entered promiscuous mode [ 65.551126][ T5839] veth1_macvtap: entered promiscuous mode [ 65.556921][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.566738][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.570461][ T5848] veth1_macvtap: entered promiscuous mode [ 65.590190][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.608100][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.618676][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.629385][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.642310][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.665453][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.665968][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.682375][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.703164][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.714358][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.724776][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.735330][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.746264][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.755486][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.766094][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.776159][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.786724][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.797849][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.806308][ T5846] veth1_macvtap: entered promiscuous mode [ 65.839161][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.887792][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.907590][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.938211][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.948321][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.950266][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.958842][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.965160][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.984705][ T5923] Bluetooth: MGMT ver 1.23 [ 66.008043][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.024921][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034027][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.043474][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.076282][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.092696][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102022][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111112][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.130872][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.146758][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.159219][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.170798][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.180901][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.191853][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.202062][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.214599][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.225946][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.264269][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.283026][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.290322][ T5927] Zero length message leads to an empty skb [ 66.299887][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.310835][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.329211][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.340503][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.350974][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.361538][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.373132][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.374165][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.402372][ T5927] xt_TCPMSS: Only works on TCP SYN packets [ 66.424785][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.435150][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.444787][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.454036][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538508][ T54] Bluetooth: hci0: command tx timeout [ 66.557630][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.565495][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.603863][ T5931] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.644091][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.652545][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.687720][ T54] Bluetooth: hci1: command tx timeout [ 66.790993][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.827021][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.907721][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.927943][ T54] Bluetooth: hci2: command tx timeout [ 66.934499][ T54] Bluetooth: hci4: command tx timeout [ 66.938505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.941795][ T5154] Bluetooth: hci3: command tx timeout [ 66.958090][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.963819][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.986746][ T5937] raw_sendmsg: syz.4.5 forgot to set AF_INET. Fix it! [ 67.121377][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.160232][ T5944] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 67.177878][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.392615][ T5951] lo: entered allmulticast mode [ 67.448437][ T5951] lo: left allmulticast mode [ 67.616945][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'. [ 67.629169][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.141815][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 68.212927][ T5977] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.15'. [ 68.282531][ T5977] warning: `syz.4.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.609239][ T5154] Bluetooth: hci0: command tx timeout [ 68.683884][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 68.732461][ T5995] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 68.768872][ T5154] Bluetooth: hci1: command tx timeout [ 68.820311][ T6006] sctp: [Deprecated]: syz.3.27 (pid 6006) Use of int in max_burst socket option. [ 68.820311][ T6006] Use struct sctp_assoc_value instead [ 69.019673][ T5154] Bluetooth: hci3: command tx timeout [ 69.025148][ T5154] Bluetooth: hci4: command tx timeout [ 69.030689][ T5154] Bluetooth: hci2: command tx timeout [ 69.069426][ T6020] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 69.082124][ T6018] netlink: 248 bytes leftover after parsing attributes in process `syz.3.29'. [ 69.327303][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 69.525899][ T6039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 70.270919][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 70.375395][ T6075] dvmrp5: entered allmulticast mode [ 70.414209][ T6077] dvmrp5: left allmulticast mode [ 70.618686][ T6080] IPv6: syztnl0: Disabled Multicast RS [ 71.028299][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 71.061261][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 71.583880][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590697][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.784404][ T6127] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 72.092109][ T6130] Cannot find set identified by id 0 to match [ 72.505107][ T6139] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 72.812666][ T6145] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 72.848873][ T6149] __nla_validate_parse: 1 callbacks suppressed [ 72.848892][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 73.201626][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 73.505962][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.76'. [ 73.597000][ T6163] pim6reg: entered allmulticast mode [ 73.636387][ T6163] pim6reg: left allmulticast mode [ 73.710550][ T6165] sctp: [Deprecated]: syz.3.77 (pid 6165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.710550][ T6165] Use struct sctp_sack_info instead [ 73.804529][ T5948] IPVS: starting estimator thread 0... [ 73.805669][ T6168] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 73.830162][ T6168] netlink: 216 bytes leftover after parsing attributes in process `syz.1.78'. [ 73.866367][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 73.917663][ T6169] IPVS: using max 20 ests per chain, 48000 per kthread [ 74.377807][ T6185] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 74.403497][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 74.840284][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 75.180540][ T6203] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 75.207707][ T6203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.215279][ T6203] IPv6: NLM_F_CREATE should be set when creating new route [ 75.390238][ T6211] IPv6: addrconf: prefix option has invalid lifetime [ 75.487372][ T6204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.86'. [ 75.525566][ T969] IPVS: starting estimator thread 0... [ 75.546847][ T6219] tipc: Started in network mode [ 75.557426][ T6219] tipc: Node identity ac14140f, cluster identity 4711 [ 75.580671][ T6219] tipc: New replicast peer: 255.255.255.255 [ 75.601085][ T6219] tipc: Enabled bearer , priority 10 [ 75.617787][ T6221] IPVS: using max 20 ests per chain, 48000 per kthread [ 75.802399][ T6229] can: request_module (can-proto-5) failed. [ 75.809637][ T6237] xt_l2tp: v2 doesn't support IP mode [ 75.926294][ T6241] netlink: 144 bytes leftover after parsing attributes in process `syz.2.100'. [ 76.183305][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.195193][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.206779][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.225763][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.233396][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.255188][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.265502][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.276008][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.285725][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.302212][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.337059][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.401645][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.417305][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.436247][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.445368][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.465135][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.481252][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.490990][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.502029][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.512026][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.524104][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.536903][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.580745][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.629740][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.672843][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.680574][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.693638][ T8] cfg80211: failed to load regulatory.db [ 76.704366][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.711802][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.719840][ T5891] tipc: Node number set to 2886997007 [ 76.732110][ T6248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.102'. [ 76.753430][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.778038][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.795236][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.819320][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.846647][ T6253] syzkaller0: refused to change device tx_queue_len [ 76.887039][ T6276] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 76.910110][ T6276] netlink: 'syz.1.102': attribute type 2 has an invalid length. [ 77.025312][ T6278] tipc: Enabled bearer , priority 0 [ 77.036495][ T6278] €Â: renamed from syzkaller0 [ 77.053534][ T6278] tipc: Disabling bearer [ 77.865965][ T6305] __nla_validate_parse: 3 callbacks suppressed [ 77.865983][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 78.318752][ T6322] x_tables: unsorted underflow at hook 3 [ 78.455124][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 78.956510][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.055634][ T6348] syz.3.132 (6348) used greatest stack depth: 18616 bytes left [ 79.143114][ T6359] xt_l2tp: v2 doesn't support IP mode [ 79.719959][ T6374] netlink: 72 bytes leftover after parsing attributes in process `syz.4.139'. [ 79.858743][ T6379] trusted_key: syz.0.138 sent an empty control message without MSG_MORE. [ 79.913780][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 79.922819][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 79.950733][ T6382] ip6gretap0: entered promiscuous mode [ 80.050449][ T6382] batadv_slave_1: entered promiscuous mode [ 80.156899][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.168825][ T6393] netlink: 148 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.432358][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 80.646023][ T6413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.153'. [ 80.821215][ T6420] xt_l2tp: v2 doesn't support IP mode [ 80.827381][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.155'. [ 80.916869][ T6421] Bluetooth: MGMT ver 1.23 [ 81.206772][ T6436] xt_bpf: check failed: parse error [ 81.956563][ T6478] : renamed from bond0 (while UP) [ 82.233602][ T6491] netlink: 'syz.0.178': attribute type 7 has an invalid length. [ 82.723479][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.784706][ T6529] netlink: 'syz.1.185': attribute type 11 has an invalid length. [ 82.928021][ T54] Bluetooth: hci2: command tx timeout [ 82.931683][ T6533] __nla_validate_parse: 5 callbacks suppressed [ 82.931699][ T6533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.188'. [ 83.272694][ T6544] netlink: 'syz.3.190': attribute type 2 has an invalid length. [ 83.300976][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 83.579375][ T6552] ipvlan2: entered promiscuous mode [ 83.601445][ T6552] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 83.616970][ T6552] team0: Device ipvlan2 is already an upper device of the team interface [ 83.708112][ T6566] netlink: 'syz.1.194': attribute type 39 has an invalid length. [ 83.989295][ T6572] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 84.133397][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.171790][ T6572] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.194642][ T6582] tipc: MTU too low for tipc bearer [ 84.488421][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 84.610138][ T6608] netlink: 'syz.4.204': attribute type 11 has an invalid length. [ 84.906049][ T6629] netlink: 'syz.0.210': attribute type 12 has an invalid length. [ 84.936165][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 84.981102][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 84.991522][ T6638] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 85.047264][ T6638] bond0: (slave team0): Releasing backup interface [ 85.115511][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.214'. [ 85.137072][ T6638] bridge0: port 3(team0) entered blocking state [ 85.156649][ T6646] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.178074][ T6638] bridge0: port 3(team0) entered disabled state [ 85.194739][ T6638] team0: entered allmulticast mode [ 85.233858][ T6638] team_slave_0: entered allmulticast mode [ 85.257680][ T6638] team_slave_1: entered allmulticast mode [ 85.269921][ T6638] team0: entered promiscuous mode [ 85.276141][ T6652] Bluetooth: MGMT ver 1.23 [ 85.291497][ T6638] team_slave_0: entered promiscuous mode [ 85.317918][ T6638] team_slave_1: entered promiscuous mode [ 85.706836][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 85.729238][ T6676] tc_dump_action: action bad kind [ 85.744895][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 85.769465][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.222'. [ 85.811845][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.222'. [ 86.225146][ T6704] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 86.424056][ T6714] netlink: 'syz.2.231': attribute type 15 has an invalid length. [ 86.666914][ T6726] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 86.697054][ T6726] netlink: 'syz.4.235': attribute type 2 has an invalid length. [ 87.065379][ T6755] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 87.111370][ T6756] team0: Device ipvlan2 is already an upper device of the team interface [ 87.382761][ T6767] bond0: entered promiscuous mode [ 87.395510][ T6767] bond_slave_0: entered promiscuous mode [ 87.403110][ T6767] bond_slave_1: entered promiscuous mode [ 87.443809][ T6767] bond0: left promiscuous mode [ 87.453994][ T6767] bond_slave_0: left promiscuous mode [ 87.460346][ T6767] bond_slave_1: left promiscuous mode [ 87.526850][ T6772] FAULT_INJECTION: forcing a failure. [ 87.526850][ T6772] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.572396][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.2.250 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 87.583046][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 87.593137][ T6772] Call Trace: [ 87.596445][ T6772] [ 87.599402][ T6772] dump_stack_lvl+0x241/0x360 [ 87.604130][ T6772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.609355][ T6772] ? __pfx__printk+0x10/0x10 [ 87.613972][ T6772] ? __pfx_lock_release+0x10/0x10 [ 87.619036][ T6772] should_fail_ex+0x3b0/0x4e0 [ 87.623745][ T6772] _copy_from_user+0x2f/0xc0 [ 87.628373][ T6772] copy_msghdr_from_user+0xae/0x680 [ 87.633615][ T6772] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 87.639462][ T6772] __sys_sendmsg+0x22d/0x380 [ 87.644086][ T6772] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.649233][ T6772] ? __pfx_vfs_write+0x10/0x10 [ 87.654017][ T6772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.660350][ T6772] ? do_syscall_64+0x100/0x230 [ 87.665125][ T6772] ? do_syscall_64+0xb6/0x230 [ 87.669809][ T6772] do_syscall_64+0xf3/0x230 [ 87.674319][ T6772] ? clear_bhb_loop+0x35/0x90 [ 87.679001][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.684891][ T6772] RIP: 0033:0x7fc17e57e819 [ 87.689317][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.708919][ T6772] RSP: 002b:00007fc17f342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.717330][ T6772] RAX: ffffffffffffffda RBX: 00007fc17e735fa0 RCX: 00007fc17e57e819 [ 87.725306][ T6772] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000003 [ 87.733275][ T6772] RBP: 00007fc17f342090 R08: 0000000000000000 R09: 0000000000000000 [ 87.741243][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.749210][ T6772] R13: 0000000000000000 R14: 00007fc17e735fa0 R15: 00007ffffed7e878 [ 87.757189][ T6772] [ 87.962929][ T6783] __nla_validate_parse: 9 callbacks suppressed [ 87.962946][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 87.985113][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.255'. [ 88.006406][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 88.128656][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 88.346311][ T6795] netlink: 'syz.4.260': attribute type 29 has an invalid length. [ 88.385847][ T6796] ipvlan2: entered promiscuous mode [ 88.396792][ T6796] team0: Device ipvlan2 is already an upper device of the team interface [ 88.451064][ T6795] netlink: 'syz.4.260': attribute type 29 has an invalid length. [ 88.590244][ T6801] pim6reg1: entered allmulticast mode [ 88.664253][ T6807] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.263'. [ 88.670311][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 89.025543][ T6816] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 89.026405][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 89.082435][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 89.146802][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.166808][ T6816] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 89.189296][ T6822] bond0: entered promiscuous mode [ 89.202875][ T6816] netlink: 560 bytes leftover after parsing attributes in process `syz.0.265'. [ 89.222248][ T6822] bond_slave_0: entered promiscuous mode [ 89.242326][ T6822] bond_slave_1: entered promiscuous mode [ 89.277617][ T6816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.265'. [ 89.277755][ T6822] batadv0: entered promiscuous mode [ 89.296918][ T6824] xfrm0: entered allmulticast mode [ 89.349799][ T6816] syz.0.265 (6816) used greatest stack depth: 18544 bytes left [ 89.505385][ T6836] ipvlan2: entered promiscuous mode [ 89.514933][ T6836] team0: Device ipvlan2 is already an upper device of the team interface [ 89.536832][ T6838] sctp: [Deprecated]: syz.3.273 (pid 6838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.536832][ T6838] Use struct sctp_sack_info instead [ 89.543757][ T6842] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 90.171216][ T6867] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 90.271406][ T6867] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 90.319660][ T6876] ipvlan2: entered promiscuous mode [ 90.326002][ T6876] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 90.333891][ T6876] team0: Device ipvlan2 is already an upper device of the team interface [ 90.876886][ T6901] team0: Device is already in use. [ 91.316863][ T6924] hsr0: entered promiscuous mode [ 91.346558][ T6924] hsr_slave_0: left promiscuous mode [ 91.385356][ T6924] hsr_slave_1: left promiscuous mode [ 91.399601][ T6934] FAULT_INJECTION: forcing a failure. [ 91.399601][ T6934] name failslab, interval 1, probability 0, space 0, times 1 [ 91.470159][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.3.297 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 91.471466][ T6924] hsr0 (unregistering): left promiscuous mode [ 91.480785][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.480803][ T6934] Call Trace: [ 91.480811][ T6934] [ 91.480821][ T6934] dump_stack_lvl+0x241/0x360 [ 91.480853][ T6934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.480873][ T6934] ? __pfx__printk+0x10/0x10 [ 91.480894][ T6934] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 91.480918][ T6934] ? __pfx___might_resched+0x10/0x10 [ 91.480946][ T6934] should_fail_ex+0x3b0/0x4e0 [ 91.480968][ T6934] should_failslab+0xac/0x100 [ 91.480988][ T6934] ? __alloc_skb+0x1c3/0x440 [ 91.481011][ T6934] kmem_cache_alloc_node_noprof+0x71/0x320 [ 91.481038][ T6934] __alloc_skb+0x1c3/0x440 [ 91.481065][ T6934] ? __pfx___alloc_skb+0x10/0x10 [ 91.481089][ T6934] ? netlink_autobind+0xd6/0x2f0 [ 91.481113][ T6934] ? netlink_autobind+0x2b0/0x2f0 [ 91.481142][ T6934] netlink_sendmsg+0x638/0xcb0 [ 91.481177][ T6934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.481205][ T6934] ? aa_sock_msg_perm+0x91/0x160 [ 91.481233][ T6934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.481256][ T6934] __sock_sendmsg+0x221/0x270 [ 91.481280][ T6934] ____sys_sendmsg+0x52a/0x7e0 [ 91.481312][ T6934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.603075][ T6934] __sys_sendmsg+0x292/0x380 [ 91.607686][ T6934] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.612824][ T6934] ? __pfx_vfs_write+0x10/0x10 [ 91.617607][ T6934] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.623940][ T6934] ? do_syscall_64+0x100/0x230 [ 91.628717][ T6934] ? do_syscall_64+0xb6/0x230 [ 91.633391][ T6934] do_syscall_64+0xf3/0x230 [ 91.637893][ T6934] ? clear_bhb_loop+0x35/0x90 [ 91.642574][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.648464][ T6934] RIP: 0033:0x7f692457e819 [ 91.652877][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.672479][ T6934] RSP: 002b:00007f69252ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.680892][ T6934] RAX: ffffffffffffffda RBX: 00007f6924735fa0 RCX: 00007f692457e819 [ 91.688861][ T6934] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 91.696856][ T6934] RBP: 00007f69252ce090 R08: 0000000000000000 R09: 0000000000000000 [ 91.704819][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.712810][ T6934] R13: 0000000000000000 R14: 00007f6924735fa0 R15: 00007ffec6891a08 [ 91.720794][ T6934] [ 91.826677][ T6941] netlink: 'syz.0.299': attribute type 3 has an invalid length. [ 91.865087][ T6941] GUP no longer grows the stack in syz.0.299 (6941): 20006000-2000a000 (20005000) [ 91.905498][ T6941] CPU: 1 UID: 0 PID: 6941 Comm: syz.0.299 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 91.916150][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.926238][ T6941] Call Trace: [ 91.929542][ T6941] [ 91.932496][ T6941] dump_stack_lvl+0x241/0x360 [ 91.937212][ T6941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.942443][ T6941] ? __pfx__printk+0x10/0x10 [ 91.947064][ T6941] ? find_vma+0xf9/0x170 [ 91.951347][ T6941] ? vma_is_secretmem+0xd/0x50 [ 91.956142][ T6941] ? check_vma_flags+0x52b/0x5a0 [ 91.961114][ T6941] __get_user_pages+0x4385/0x49e0 [ 91.966215][ T6941] ? __pfx___get_user_pages+0x10/0x10 [ 91.971662][ T6941] __gup_longterm_locked+0x49a/0x17f0 [ 91.977081][ T6941] ? __pfx___might_resched+0x10/0x10 [ 91.978840][ T6949] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 91.982391][ T6941] ? __pfx___gup_longterm_locked+0x10/0x10 [ 91.995975][ T6941] ? down_read+0x82b/0xa40 [ 92.000433][ T6941] ? is_valid_gup_args+0x124/0x200 [ 92.005588][ T6941] pin_user_pages+0x137/0x1f0 [ 92.010296][ T6941] ? __pfx_pin_user_pages+0x10/0x10 [ 92.015520][ T6941] ? __kmalloc_node_noprof+0x247/0x440 [ 92.021024][ T6941] xdp_umem_create+0x978/0xf30 [ 92.025842][ T6941] xsk_setsockopt+0x732/0x950 [ 92.030561][ T6941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.035805][ T6941] ? __pfx_lock_acquire+0x10/0x10 [ 92.040776][ T6949] bridge0: port 3(macvlan1) entered blocking state [ 92.040844][ T6941] ? __fget_files+0x29/0x470 [ 92.051947][ T6941] ? aa_sock_opt_perm+0x79/0x120 [ 92.056929][ T6941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.062163][ T6941] do_sock_setsockopt+0x3af/0x720 [ 92.063270][ T6949] bridge0: port 3(macvlan1) entered disabled state [ 92.067205][ T6941] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 92.067238][ T6941] ? __fget_files+0x29/0x470 [ 92.083854][ T6941] ? __fget_files+0x3f3/0x470 [ 92.088538][ T6941] ? __fget_files+0x29/0x470 [ 92.093137][ T6941] __sys_setsockopt+0x1a2/0x250 [ 92.097996][ T6941] __x64_sys_setsockopt+0xb5/0xd0 [ 92.103022][ T6941] do_syscall_64+0xf3/0x230 [ 92.107530][ T6941] ? clear_bhb_loop+0x35/0x90 [ 92.112215][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.118109][ T6941] RIP: 0033:0x7f352a97e819 [ 92.122520][ T6941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.142132][ T6941] RSP: 002b:00007f35287f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.150551][ T6941] RAX: ffffffffffffffda RBX: 00007f352ab35fa0 RCX: 00007f352a97e819 [ 92.158519][ T6941] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 92.166485][ T6941] RBP: 00007f352a9f175e R08: 0000000000000020 R09: 0000000000000000 [ 92.174452][ T6941] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 92.182420][ T6941] R13: 0000000000000000 R14: 00007f352ab35fa0 R15: 00007ffcf82e3078 [ 92.190401][ T6941] [ 92.198294][ T6949] macvlan1: entered allmulticast mode [ 92.202563][ T5154] Bluetooth: hci0: command 0x0c20 tx timeout [ 92.225537][ T6949] veth1_vlan: entered allmulticast mode [ 92.247848][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.267389][ T6949] macvlan1: entered promiscuous mode [ 92.273674][ T6949] bridge0: port 3(macvlan1) entered blocking state [ 92.280384][ T6949] bridge0: port 3(macvlan1) entered forwarding state [ 92.457910][ T6964] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 92.590464][ T6977] ipvlan2: entered promiscuous mode [ 93.114328][ T7002] bridge0: port 3(vlan2) entered blocking state [ 93.148656][ T7002] bridge0: port 3(vlan2) entered disabled state [ 93.155227][ T7002] vlan2: entered allmulticast mode [ 93.160937][ T7002] bridge0: entered allmulticast mode [ 93.211394][ T7002] vlan2: left allmulticast mode [ 93.240926][ T7002] bridge0: left allmulticast mode [ 93.317771][ T7009] __nla_validate_parse: 9 callbacks suppressed [ 93.317894][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'. [ 93.353665][ T7003] bridge0: port 3(vlan2) entered blocking state [ 93.374982][ T7003] bridge0: port 3(vlan2) entered disabled state [ 93.381668][ T7003] vlan2: entered allmulticast mode [ 93.387172][ T7003] bridge0: entered allmulticast mode [ 93.401119][ T7003] vlan2: left allmulticast mode [ 93.406197][ T7003] bridge0: left allmulticast mode [ 93.445190][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'. [ 93.680991][ T7027] team0: Device ipvlan2 is already an upper device of the team interface [ 94.004295][ T7039] FAULT_INJECTION: forcing a failure. [ 94.004295][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 94.042951][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.4.319 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 94.053601][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 94.063685][ T7039] Call Trace: [ 94.066990][ T7039] [ 94.069946][ T7039] dump_stack_lvl+0x241/0x360 [ 94.074657][ T7039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.079889][ T7039] ? __pfx__printk+0x10/0x10 [ 94.084508][ T7039] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 94.090517][ T7039] ? __pfx___might_resched+0x10/0x10 [ 94.095837][ T7039] should_fail_ex+0x3b0/0x4e0 [ 94.100545][ T7039] should_failslab+0xac/0x100 [ 94.105246][ T7039] ? __alloc_skb+0x1c3/0x440 [ 94.109857][ T7039] kmem_cache_alloc_node_noprof+0x71/0x320 [ 94.115695][ T7039] __alloc_skb+0x1c3/0x440 [ 94.120148][ T7039] ? __pfx___alloc_skb+0x10/0x10 [ 94.125110][ T7039] ? netlink_autobind+0xd6/0x2f0 [ 94.130049][ T7039] ? netlink_autobind+0x2b0/0x2f0 [ 94.135077][ T7039] netlink_sendmsg+0x638/0xcb0 [ 94.139853][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.145142][ T7039] ? aa_sock_msg_perm+0x91/0x160 [ 94.150083][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.155367][ T7039] __sock_sendmsg+0x221/0x270 [ 94.160047][ T7039] ____sys_sendmsg+0x52a/0x7e0 [ 94.164818][ T7039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.170112][ T7039] __sys_sendmsg+0x292/0x380 [ 94.174709][ T7039] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.179839][ T7039] ? __pfx_vfs_write+0x10/0x10 [ 94.184616][ T7039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.190945][ T7039] ? do_syscall_64+0x100/0x230 [ 94.195713][ T7039] ? do_syscall_64+0xb6/0x230 [ 94.200396][ T7039] do_syscall_64+0xf3/0x230 [ 94.204907][ T7039] ? clear_bhb_loop+0x35/0x90 [ 94.209587][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.215480][ T7039] RIP: 0033:0x7f702af7e819 [ 94.219902][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.239503][ T7039] RSP: 002b:00007f702bd8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.247928][ T7039] RAX: ffffffffffffffda RBX: 00007f702b135fa0 RCX: 00007f702af7e819 [ 94.255913][ T7039] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 94.263878][ T7039] RBP: 00007f702bd8c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.271865][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.279852][ T7039] R13: 0000000000000000 R14: 00007f702b135fa0 R15: 00007ffe463a98f8 [ 94.287849][ T7039] [ 94.298082][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 94.659382][ T7060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.326'. [ 94.779660][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 94.890403][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'. [ 94.927014][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.005765][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 95.036106][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.102265][ T7074] bridge_slave_0 (unregistering): left allmulticast mode [ 95.114404][ T7074] bridge_slave_0 (unregistering): left promiscuous mode [ 95.121918][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.204292][ T7080] sctp: [Deprecated]: syz.2.332 (pid 7080) Use of int in maxseg socket option. [ 95.204292][ T7080] Use struct sctp_assoc_value instead [ 95.454417][ T7092] netlink: 'syz.2.336': attribute type 10 has an invalid length. [ 95.465684][ T7092] bond0: (slave bond_slave_0): Releasing backup interface [ 96.038489][ T7115] rdma_op ffff88805ea8d9f0 conn xmit_rdma 0000000000000000 [ 96.077834][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 96.183292][ T7126] xt_l2tp: v2 doesn't support IP mode [ 96.302477][ T7130] netlink: 332 bytes leftover after parsing attributes in process `syz.2.347'. [ 96.325279][ T7130] netlink: 'syz.2.347': attribute type 3 has an invalid length. [ 96.381068][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.348'. [ 96.486086][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 96.990892][ T7158] netlink: 'syz.2.357': attribute type 13 has an invalid length. [ 97.016083][ T7158] veth0_macvtap: left promiscuous mode [ 97.054650][ T7158] macvtap0: entered allmulticast mode [ 97.074226][ T7158] macvtap0: refused to change device tx_queue_len [ 97.111688][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.119999][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.220679][ T7170] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 97.488220][ T7187] netlink: 'syz.3.366': attribute type 4 has an invalid length. [ 97.533692][ T7187] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 98.128963][ T7226] FAULT_INJECTION: forcing a failure. [ 98.128963][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 98.168509][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.2.376 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 98.179155][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.189238][ T7226] Call Trace: [ 98.192538][ T7226] [ 98.195492][ T7226] dump_stack_lvl+0x241/0x360 [ 98.200204][ T7226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.205432][ T7226] ? __pfx__printk+0x10/0x10 [ 98.210044][ T7226] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 98.216036][ T7226] ? __pfx___might_resched+0x10/0x10 [ 98.221329][ T7226] should_fail_ex+0x3b0/0x4e0 [ 98.226007][ T7226] should_failslab+0xac/0x100 [ 98.230684][ T7226] ? __alloc_skb+0x1c3/0x440 [ 98.235274][ T7226] kmem_cache_alloc_node_noprof+0x71/0x320 [ 98.241084][ T7226] __alloc_skb+0x1c3/0x440 [ 98.245522][ T7226] ? __pfx___alloc_skb+0x10/0x10 [ 98.250461][ T7226] ? netlink_ack_tlv_len+0x6e/0x200 [ 98.255660][ T7226] netlink_ack+0x13f/0xa30 [ 98.260074][ T7226] ? __up_read+0x2c2/0x6b0 [ 98.264495][ T7226] ? bpf_lsm_capable+0x9/0x10 [ 98.269175][ T7226] rdma_nl_rcv+0x3f6/0x9e0 [ 98.273603][ T7226] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 98.278557][ T7226] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.283754][ T7226] netlink_unicast+0x7f6/0x990 [ 98.288522][ T7226] ? __pfx_netlink_unicast+0x10/0x10 [ 98.293803][ T7226] ? __virt_addr_valid+0x183/0x530 [ 98.298911][ T7226] ? __check_object_size+0x48e/0x900 [ 98.304198][ T7226] netlink_sendmsg+0x8e4/0xcb0 [ 98.308974][ T7226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.314266][ T7226] ? aa_sock_msg_perm+0x91/0x160 [ 98.319207][ T7226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.324489][ T7226] __sock_sendmsg+0x221/0x270 [ 98.329166][ T7226] ____sys_sendmsg+0x52a/0x7e0 [ 98.333936][ T7226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.339230][ T7226] __sys_sendmsg+0x292/0x380 [ 98.343819][ T7226] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.348938][ T7226] ? __pfx_vfs_write+0x10/0x10 [ 98.353711][ T7226] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.360037][ T7226] ? do_syscall_64+0x100/0x230 [ 98.364803][ T7226] ? do_syscall_64+0xb6/0x230 [ 98.369477][ T7226] do_syscall_64+0xf3/0x230 [ 98.373982][ T7226] ? clear_bhb_loop+0x35/0x90 [ 98.378660][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.384548][ T7226] RIP: 0033:0x7fc17e57e819 [ 98.388959][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.408567][ T7226] RSP: 002b:00007fc17f342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.416985][ T7226] RAX: ffffffffffffffda RBX: 00007fc17e735fa0 RCX: 00007fc17e57e819 [ 98.424977][ T7226] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 98.432945][ T7226] RBP: 00007fc17f342090 R08: 0000000000000000 R09: 0000000000000000 [ 98.440912][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.448891][ T7226] R13: 0000000000000000 R14: 00007fc17e735fa0 R15: 00007ffffed7e878 [ 98.456887][ T7226] [ 98.469663][ T7223] syzkaller0: entered promiscuous mode [ 98.475369][ T7223] syzkaller0: entered allmulticast mode [ 98.573804][ T7219] __nla_validate_parse: 6 callbacks suppressed [ 98.573833][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'. [ 98.641742][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 98.653308][ T7243] FAULT_INJECTION: forcing a failure. [ 98.653308][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.684519][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.1.379 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 98.695161][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.705246][ T7243] Call Trace: [ 98.708552][ T7243] [ 98.711501][ T7243] dump_stack_lvl+0x241/0x360 [ 98.716202][ T7243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.721408][ T7243] ? __pfx__printk+0x10/0x10 [ 98.726001][ T7243] ? snprintf+0xda/0x120 [ 98.730253][ T7243] should_fail_ex+0x3b0/0x4e0 [ 98.734933][ T7243] _copy_to_user+0x31/0xb0 [ 98.739348][ T7243] simple_read_from_buffer+0xca/0x150 [ 98.744726][ T7243] proc_fail_nth_read+0x1e9/0x250 [ 98.749749][ T7243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.755300][ T7243] ? rw_verify_area+0x55e/0x6f0 [ 98.760149][ T7243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.765694][ T7243] vfs_read+0x1fc/0xb70 [ 98.769844][ T7243] ? fdget_pos+0x24e/0x320 [ 98.774257][ T7243] ? __pfx_vfs_read+0x10/0x10 [ 98.778939][ T7243] ? __fget_files+0x3f3/0x470 [ 98.783621][ T7243] ? fdget_pos+0x24e/0x320 [ 98.788042][ T7243] ksys_read+0x183/0x2b0 [ 98.792286][ T7243] ? __pfx_ksys_read+0x10/0x10 [ 98.797049][ T7243] ? do_syscall_64+0x100/0x230 [ 98.801811][ T7243] ? do_syscall_64+0xb6/0x230 [ 98.806487][ T7243] do_syscall_64+0xf3/0x230 [ 98.810990][ T7243] ? clear_bhb_loop+0x35/0x90 [ 98.815673][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.821565][ T7243] RIP: 0033:0x7fe35797d25c [ 98.825975][ T7243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 98.845581][ T7243] RSP: 002b:00007fe358705030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.853994][ T7243] RAX: ffffffffffffffda RBX: 00007fe357b36080 RCX: 00007fe35797d25c [ 98.861965][ T7243] RDX: 000000000000000f RSI: 00007fe3587050a0 RDI: 0000000000000006 [ 98.869929][ T7243] RBP: 00007fe358705090 R08: 0000000000000000 R09: 0000000000000000 [ 98.877893][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.885858][ T7243] R13: 0000000000000001 R14: 00007fe357b36080 R15: 00007ffc9e8ef238 [ 98.893836][ T7243] [ 99.122807][ T7253] netlink: 'syz.1.382': attribute type 25 has an invalid length. [ 100.536394][ T7270] Cannot find map_set index 0 as target [ 100.848342][ T7289] xt_l2tp: v2 doesn't support IP mode [ 101.109310][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 101.129146][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 101.141359][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 101.349515][ T7313] veth1_macvtap: left promiscuous mode [ 101.355301][ T7313] macsec0: entered promiscuous mode [ 101.374287][ T7313] veth1_macvtap: entered promiscuous mode [ 101.380932][ T7313] macsec0: left promiscuous mode [ 101.392386][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 101.426593][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 101.436129][ T7313] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 101.444347][ T7313] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 101.810678][ T7336] bridge1: entered promiscuous mode [ 101.822835][ T7336] bridge1: entered allmulticast mode [ 102.185089][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.414'. [ 102.360265][ T7369] tap0: tun_chr_ioctl cmd 1074025673 [ 102.382457][ T7371] FAULT_INJECTION: forcing a failure. [ 102.382457][ T7371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.403118][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.4.417 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 102.413761][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 102.423842][ T7371] Call Trace: [ 102.427135][ T7371] [ 102.430081][ T7371] dump_stack_lvl+0x241/0x360 [ 102.434792][ T7371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.440023][ T7371] ? __pfx__printk+0x10/0x10 [ 102.444651][ T7371] ? __pfx_lock_release+0x10/0x10 [ 102.449702][ T7371] ? __lock_acquire+0x1384/0x2050 [ 102.454771][ T7371] should_fail_ex+0x3b0/0x4e0 [ 102.459480][ T7371] _copy_from_user+0x2f/0xc0 [ 102.464104][ T7371] kstrtouint_from_user+0xc6/0x190 [ 102.469251][ T7371] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 102.474998][ T7371] ? __pfx_lock_acquire+0x10/0x10 [ 102.480064][ T7371] proc_fail_nth_write+0xaa/0x2d0 [ 102.485111][ T7371] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 102.491032][ T7371] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 102.496700][ T7371] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 102.502368][ T7371] vfs_write+0x2a3/0xd30 [ 102.506645][ T7371] ? fdget_pos+0x24e/0x320 [ 102.511088][ T7371] ? __pfx_vfs_write+0x10/0x10 [ 102.515884][ T7371] ? __fget_files+0x3f3/0x470 [ 102.520596][ T7371] ? fdget_pos+0x24e/0x320 [ 102.525053][ T7371] ksys_write+0x183/0x2b0 [ 102.529399][ T7371] ? __pfx_ksys_write+0x10/0x10 [ 102.534245][ T7371] ? do_syscall_64+0x100/0x230 [ 102.539025][ T7371] ? do_syscall_64+0xb6/0x230 [ 102.543705][ T7371] do_syscall_64+0xf3/0x230 [ 102.548201][ T7371] ? clear_bhb_loop+0x35/0x90 [ 102.552875][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.558762][ T7371] RIP: 0033:0x7f702af7d2ff [ 102.563171][ T7371] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 102.582775][ T7371] RSP: 002b:00007f702bd8c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.591212][ T7371] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f702af7d2ff [ 102.599184][ T7371] RDX: 0000000000000001 RSI: 00007f702bd8c0a0 RDI: 0000000000000004 [ 102.607153][ T7371] RBP: 00007f702bd8c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.615137][ T7371] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 102.623117][ T7371] R13: 0000000000000000 R14: 00007f702b135fa0 R15: 00007ffe463a98f8 [ 102.631114][ T7371] [ 102.793705][ T7383] team0: Device is already in use. [ 103.123018][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 103.241152][ T7413] netlink: 'syz.3.435': attribute type 8 has an invalid length. [ 103.492059][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 103.709217][ T7442] __nla_validate_parse: 6 callbacks suppressed [ 103.709235][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 103.810324][ T7447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.067883][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 104.327754][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'. [ 104.350135][ T7485] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 104.694741][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 105.101657][ T7518] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 105.120536][ T7518] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.458482][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.476'. [ 105.552035][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 105.811277][ T7552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.483'. [ 105.822499][ T7552] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 105.880771][ T7552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.104146][ T7563] netlink: 116 bytes leftover after parsing attributes in process `syz.2.485'. [ 106.358759][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 106.368145][ T7577] netlink: 'syz.1.489': attribute type 3 has an invalid length. [ 106.381003][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 106.391497][ T7579] netlink: 'syz.1.489': attribute type 3 has an invalid length. [ 106.555185][ T7587] erspan0: entered promiscuous mode [ 106.577167][ T7587] batadv_slave_1: entered promiscuous mode [ 106.584183][ T7587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.593653][ T7587] Cannot create hsr debugfs directory [ 106.619924][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.637009][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.647566][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.658456][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.673322][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.703225][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.743252][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.757950][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.066558][ T7593] syzkaller0: refused to change device tx_queue_len [ 107.166529][ T7612] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 107.201332][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.208539][ T7612] bridge0: port 2(bridge_slave_1) entered listening state [ 107.215909][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.223069][ T7612] bridge0: port 1(bridge_slave_0) entered listening state [ 107.244548][ T7612] : (slave bridge0): Enslaving as an active interface with an up link [ 107.972503][ T7672] netlink: 'syz.2.510': attribute type 10 has an invalid length. [ 107.983969][ T7674] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 107.985364][ T7672] x_tables: duplicate underflow at hook 2 [ 107.998777][ T7674] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 108.427077][ T5892] IPVS: starting estimator thread 0... [ 108.557645][ T7700] IPVS: using max 20 ests per chain, 48000 per kthread [ 108.797627][ T7713] __nla_validate_parse: 15 callbacks suppressed [ 108.797646][ T7713] netlink: 560 bytes leftover after parsing attributes in process `syz.2.525'. [ 108.814471][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.525'. [ 109.136656][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 109.174783][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 110.020854][ T7782] syz.0.540 uses old SIOCAX25GETINFO [ 110.505658][ T7807] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 110.545763][ T7807] batman_adv: batadv0: Adding interface: ip6gretap1 [ 110.557427][ T7807] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.583690][ T7807] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 110.593453][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 110.633143][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.647872][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.666264][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.687916][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.732392][ T7814] batman_adv: batadv0: Removing interface: ip6gretap1 [ 111.325872][ T7854] veth0_virt_wifi: entered promiscuous mode [ 111.355064][ T7854] veth0_virt_wifi: left promiscuous mode [ 111.554928][ T7870] [ 111.557299][ T7870] ====================================================== [ 111.564338][ T7870] WARNING: possible circular locking dependency detected [ 111.571373][ T7870] 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 Not tainted [ 111.578497][ T7870] ------------------------------------------------------ [ 111.585536][ T7870] syz.3.560/7870 is trying to acquire lock: [ 111.591436][ T7870] ffff88813fffc298 (&zone->lock){-.-.}-{2:2}, at: get_page_from_freelist+0xb3d/0x3790 [ 111.601015][ T7870] [ 111.601015][ T7870] but task is already holding lock: [ 111.608377][ T7870] ffff88805fe87200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 111.617275][ T7870] [ 111.617275][ T7870] which lock already depends on the new lock. [ 111.617275][ T7870] [ 111.627677][ T7870] [ 111.627677][ T7870] the existing dependency chain (in reverse order) is: [ 111.636687][ T7870] [ 111.636687][ T7870] -> #1 (&trie->lock){..-.}-{2:2}: [ 111.643994][ T7870] lock_acquire+0x1ed/0x550 [ 111.649029][ T7870] _raw_spin_lock_irqsave+0xd5/0x120 [ 111.654833][ T7870] trie_delete_elem+0x96/0x6a0 [ 111.660115][ T7870] bpf_prog_67a7f92a6a5e5f13+0x3e/0x47 [ 111.666082][ T7870] bpf_trace_run2+0x2ec/0x540 [ 111.671273][ T7870] trace_contention_begin+0x117/0x140 [ 111.677164][ T7870] __pv_queued_spin_lock_slowpath+0x114/0xdb0 [ 111.683744][ T7870] queued_spin_lock_slowpath+0x42/0x50 [ 111.689727][ T7870] do_raw_spin_lock+0x272/0x370 [ 111.695095][ T7870] _raw_spin_lock_irqsave+0xe1/0x120 [ 111.700894][ T7870] __rmqueue_pcplist+0x4a2/0x2a80 [ 111.706431][ T7870] get_page_from_freelist+0x886/0x3790 [ 111.712404][ T7870] __alloc_pages_noprof+0x292/0x710 [ 111.718112][ T7870] alloc_pages_mpol_noprof+0x3e8/0x680 [ 111.724086][ T7870] __vmalloc_node_range_noprof+0xa2b/0x13f0 [ 111.730494][ T7870] dup_task_struct+0x444/0x8c0 [ 111.735774][ T7870] copy_process+0x5d1/0x3d50 [ 111.740879][ T7870] kernel_clone+0x226/0x8f0 [ 111.745897][ T7870] __se_sys_clone3+0x2d8/0x360 [ 111.751180][ T7870] do_syscall_64+0xf3/0x230 [ 111.756198][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.762693][ T7870] [ 111.762693][ T7870] -> #0 (&zone->lock){-.-.}-{2:2}: [ 111.769997][ T7870] validate_chain+0x18ef/0x5920 [ 111.775358][ T7870] __lock_acquire+0x1384/0x2050 [ 111.780726][ T7870] lock_acquire+0x1ed/0x550 [ 111.785744][ T7870] _raw_spin_lock_irqsave+0xd5/0x120 [ 111.791544][ T7870] get_page_from_freelist+0xb3d/0x3790 [ 111.797521][ T7870] __alloc_pages_noprof+0x292/0x710 [ 111.803319][ T7870] ___kmalloc_large_node+0x8b/0x1d0 [ 111.809031][ T7870] __kmalloc_large_node_noprof+0x1a/0x80 [ 111.815177][ T7870] __kmalloc_node_noprof+0x2d2/0x440 [ 111.820977][ T7870] bpf_map_kmalloc_node+0xd3/0x1c0 [ 111.826603][ T7870] trie_update_elem+0x1cd/0xc00 [ 111.831972][ T7870] bpf_map_update_value+0x4d3/0x540 [ 111.837680][ T7870] map_update_elem+0x51a/0x6f0 [ 111.842961][ T7870] __sys_bpf+0x76f/0x810 [ 111.847716][ T7870] __x64_sys_bpf+0x7c/0x90 [ 111.852651][ T7870] do_syscall_64+0xf3/0x230 [ 111.857682][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.864097][ T7870] [ 111.864097][ T7870] other info that might help us debug this: [ 111.864097][ T7870] [ 111.874314][ T7870] Possible unsafe locking scenario: [ 111.874314][ T7870] [ 111.881752][ T7870] CPU0 CPU1 [ 111.887105][ T7870] ---- ---- [ 111.892463][ T7870] lock(&trie->lock); [ 111.896537][ T7870] lock(&zone->lock); [ 111.903121][ T7870] lock(&trie->lock); [ 111.909704][ T7870] lock(&zone->lock); [ 111.913765][ T7870] [ 111.913765][ T7870] *** DEADLOCK *** [ 111.913765][ T7870] [ 111.921893][ T7870] 2 locks held by syz.3.560/7870: [ 111.926925][ T7870] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 111.936856][ T7870] #1: ffff88805fe87200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 111.946178][ T7870] [ 111.946178][ T7870] stack backtrace: [ 111.952056][ T7870] CPU: 1 UID: 0 PID: 7870 Comm: syz.3.560 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 111.962630][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 111.972684][ T7870] Call Trace: [ 111.975954][ T7870] [ 111.978882][ T7870] dump_stack_lvl+0x241/0x360 [ 111.983560][ T7870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.988753][ T7870] ? __pfx__printk+0x10/0x10 [ 111.993342][ T7870] print_circular_bug+0x13a/0x1b0 [ 111.998361][ T7870] check_noncircular+0x36a/0x4a0 [ 112.003294][ T7870] ? __pfx_check_noncircular+0x10/0x10 [ 112.008745][ T7870] ? lockdep_lock+0x123/0x2b0 [ 112.013429][ T7870] ? __lock_acquire+0x1384/0x2050 [ 112.018458][ T7870] validate_chain+0x18ef/0x5920 [ 112.023302][ T7870] ? mark_lock+0x9a/0x360 [ 112.027629][ T7870] ? __pfx_validate_chain+0x10/0x10 [ 112.032821][ T7870] ? __lock_acquire+0x1384/0x2050 [ 112.037850][ T7870] ? __pfx_validate_chain+0x10/0x10 [ 112.043042][ T7870] ? mark_lock+0x9a/0x360 [ 112.047360][ T7870] __lock_acquire+0x1384/0x2050 [ 112.052212][ T7870] lock_acquire+0x1ed/0x550 [ 112.056712][ T7870] ? get_page_from_freelist+0xb3d/0x3790 [ 112.062343][ T7870] ? __pfx_lock_acquire+0x10/0x10 [ 112.067363][ T7870] ? cgroup_rstat_updated+0x13b/0xc60 [ 112.072732][ T7870] _raw_spin_lock_irqsave+0xd5/0x120 [ 112.078013][ T7870] ? get_page_from_freelist+0xb3d/0x3790 [ 112.083635][ T7870] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 112.089526][ T7870] get_page_from_freelist+0xb3d/0x3790 [ 112.094979][ T7870] ? __pfx_lock_release+0x10/0x10 [ 112.100031][ T7870] ? register_lock_class+0x102/0x980 [ 112.105314][ T7870] ? count_memcg_event_mm+0x94/0x420 [ 112.110607][ T7870] __alloc_pages_noprof+0x292/0x710 [ 112.115797][ T7870] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 112.121512][ T7870] ? bpf_map_get_memcg+0x4e/0x5c0 [ 112.126530][ T7870] ? do_raw_spin_lock+0x14f/0x370 [ 112.131551][ T7870] ? __pfx_lock_release+0x10/0x10 [ 112.136570][ T7870] ___kmalloc_large_node+0x8b/0x1d0 [ 112.141778][ T7870] __kmalloc_large_node_noprof+0x1a/0x80 [ 112.147405][ T7870] __kmalloc_node_noprof+0x2d2/0x440 [ 112.152684][ T7870] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 112.157967][ T7870] bpf_map_kmalloc_node+0xd3/0x1c0 [ 112.163077][ T7870] trie_update_elem+0x1cd/0xc00 [ 112.167931][ T7870] bpf_map_update_value+0x4d3/0x540 [ 112.173120][ T7870] map_update_elem+0x51a/0x6f0 [ 112.177881][ T7870] __sys_bpf+0x76f/0x810 [ 112.182115][ T7870] ? __pfx___sys_bpf+0x10/0x10 [ 112.186877][ T7870] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.192855][ T7870] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.199181][ T7870] ? do_syscall_64+0x100/0x230 [ 112.203940][ T7870] __x64_sys_bpf+0x7c/0x90 [ 112.208437][ T7870] do_syscall_64+0xf3/0x230 [ 112.212936][ T7870] ? clear_bhb_loop+0x35/0x90 [ 112.217614][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.223503][ T7870] RIP: 0033:0x7f692457e819 [ 112.227910][ T7870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.247508][ T7870] RSP: 002b:00007f69252ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.255920][ T7870] RAX: ffffffffffffffda RBX: 00007f6924735fa0 RCX: 00007f692457e819 [ 112.263884][ T7870] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 112.271858][ T7870] RBP: 00007f69245f175e R08: 0000000000000000 R09: 0000000000000000 [ 112.279818][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.287782][ T7870] R13: 0000000000000000 R14: 00007f6924735fa0 R15: 00007ffec6891a08 [ 112.295751][ T7870] [ 112.336648][ T7870] netlink: 80 bytes leftover after parsing attributes in process `syz.3.560'.