last executing test programs: 3.91986384s ago: executing program 0 (id=123): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000006fc0)=0xbd7, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000540)={r4, 0x19, "ebe9db810b4ca6c9f6ccd451d6fbf9adc18a84f54a996ad0b1"}, &(0x7f00000005c0)=0x21) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="d49fb7b34e7ea5f808000a00", @ANYRES32=r7, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_proto_private(r9, 0x89e2, &(0x7f0000000000)) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r10 = socket(0x2c, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400c14950b5d18f0000df1400000000ff0000000000000063d9c68d7822cb29065e4303e811a173a48bee34eda64ef619eab5e6058cb2e99073927c35e0c4159514e92905433c9e19748be8b803184eae613131c482119a5d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r11, &(0x7f0000000140), &(0x7f0000000080)=@udp=r10}, 0x20) socket$netlink(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf25020000000c00050001010000000000000800010000000000080001000000000008000100000000000c00030001000000010000000c0002000500000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004094) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@private0}}}, &(0x7f0000000280)=0xe8) r12 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x3b9, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffffffffff64, 0x2, "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"}]}}]}, 0x3b4}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) 3.905636722s ago: executing program 2 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000891212000000640095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) 3.724439851s ago: executing program 2 (id=128): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030006000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.122407066s ago: executing program 4 (id=133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x9, 0x20, 0x9}, 0x2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 2.836124246s ago: executing program 0 (id=135): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) unshare(0x22020400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfb, {0x2, 0x80, 0x10, 0x9, 0xff, 0x1, 0x35, 0x4, 0x800}, ["", ""]}, 0x1c}}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100037040200"/20, @ANYRESOCT=r0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028008001cb00b0000000a001400aaaaaaaaaabb0000"], 0x48}, 0x1, 0x0, 0x0, 0x404c094}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000003d5100fcc19ce76795b5391ab60000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8927, 0x0) r11 = socket(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r9, 0x4, 0x0, 0x6, 0x9, 0x9, @remote, @mcast1, 0x20, 0x8, 0x3, 0x9}}) 2.744007416s ago: executing program 4 (id=136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000000008000100030000000500020000000000050002000800"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.554823443s ago: executing program 4 (id=139): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e0003000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 2.309624259s ago: executing program 0 (id=140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000000008000100030000000500020000000000050002000800"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x1000000) 2.260914862s ago: executing program 0 (id=141): unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) socket$kcm(0x2, 0xf, 0x2) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 1.277826216s ago: executing program 1 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000080)=""/19, 0x13, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000a00000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.193865357s ago: executing program 3 (id=151): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1000000}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="1f", 0x1}], 0x1}}], 0x1, 0x0) 1.101012079s ago: executing program 3 (id=152): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x400, 0x0, 0xd, 0x3, 0xd, 0x6, 0x9, {0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x1a, 0x6, 0x2, 0xfffffff8, 0x7}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x8}, &(0x7f0000000180)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x364, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1fdd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1ce3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x2, 0x9, 0x1, 0xb, 0x4, 0xb, 0x3, 0x12, 0x1, 0x4, 0x24, 0x30, 0x18, 0x6c, 0x6c, 0x9, 0xc, 0x6, 0xb, 0x36, 0x48, 0x2, 0xc, 0x6, 0x6c, 0x0, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x60, 0x12, 0xb, 0x13, 0x9, 0x4, 0x48, 0x9, 0x6, 0x9, 0x14a372d8adc236f9, 0x18, 0x4, 0x6b, 0x36, 0x3, 0x9, 0x4, 0x5, 0x1b, 0x48, 0x9, 0x1, 0x5]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5a47, 0x2, 0xa, 0x7, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1d, 0x48, 0xb, 0x4, 0x5, 0x24, 0x12, 0xc, 0x5, 0x16, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0xea3, 0x9, 0x0, 0x8, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x36, 0x6, 0x12, 0x12, 0x18, 0x18, 0x0, 0xb, 0xc, 0x12, 0x24, 0x48, 0x39]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2cdd, 0x2, 0x0, 0x8ce, 0x0, 0x3, 0x2]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x17a8, 0x4, 0x9241, 0x0, 0x2, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x6}, {0x7, 0x7}, {0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6ac0, 0xa, 0x4, 0x5, 0xf, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x7, 0x1}, {0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0xa}, {0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa56b, 0x2, 0xb, 0x800, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1, 0x4, 0x6, 0x24, 0xc, 0x36, 0x5, 0x0, 0x16, 0x24, 0x42, 0x30, 0x3, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89c7, 0x80, 0xfbd8, 0x5c8e, 0xfffc, 0x10, 0x7f, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x49b}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7ff}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0xdc, 0x70, [@NL80211_MESH_SETUP_IE={0xd8, 0x3, "33ea85184920e6a2e2c34a83f02140b31bc9864334765e8c594aa0081099c427b21fe7ae77ac5bab0a01faa2b4ba09c19564a72e9bae588a0607ce6dccfc5565c4704445a08a9e133cfdcb2f79a2fc0d35b916de62e5e3b56b74fc68c7472d074a48a5eb9ffaef3725d473dd38dd43eee2a6b1136e1157a9ebe72a68a03f4b8f333152e47b0a233a8f649c6055df7e016252c0b2c1de9383778ae4767d47581017c3b41fd730616e7d07439aa805a3fdb087a07738a6c95c3adadcecfe94da56cb41cba653518d92d0c477432b68454eabea3dd2"}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x20008891}, 0x8040010) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.036469959s ago: executing program 2 (id=153): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000020000007f"], 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}], 0x40}, 0x24004800) 1.001884596s ago: executing program 1 (id=154): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 909.635314ms ago: executing program 3 (id=155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0xa, 'hash\x00', 0x2, 0x0, 'streebog512-generic\x00'}, 0x58) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100), 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000000008000100030000000500020000000000050002000800"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 908.805109ms ago: executing program 1 (id=156): socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 840.870515ms ago: executing program 4 (id=157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000002004004e200008b0"], 0x0) 774.833224ms ago: executing program 2 (id=158): clock_gettime(0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109c00, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44c}}, 0x0) 691.038811ms ago: executing program 1 (id=159): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 632.404689ms ago: executing program 4 (id=160): socket(0x10, 0x803, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 509.621849ms ago: executing program 2 (id=161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000000008000100030000000500020000000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 508.575441ms ago: executing program 3 (id=162): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) bind$packet(r3, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000c30000001001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 430.293328ms ago: executing program 1 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000080)=""/19, 0x13, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000020000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 353.717039ms ago: executing program 0 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000400)=0x1, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000f40)=[{&(0x7f0000000400)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000340)="7cbf2f00ea57", 0x6}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e21, 0x0, @mcast1, 0x5}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="409050468333e205789a9e91382b", 0xe}, {&(0x7f00000002c0)="ac93b2903eba051a466853afc8d15b5ef50a8d817c230801ad43aef8d972bfb4281fbfc17267a4fd1a4dc3b7c1b97bbdf9e0aca8e4681058ac0e8bc31693b135eacb6eb4687829a8796910aa9c6944d40149dc80ce719bb2ea945164fb97824baa2a9236eb76af828555dc9228796fb57f747923d8735c4c0e8f209720eb019c829cc84d5aeeefa3cad3d40bc809cd4562acc82e30c5f8d5", 0x98}, {&(0x7f0000000700)="89655cb1e67508ef44d4f707f3121ce2b1a8d27ed2cea66937188ccc33ad625b297fe582582586932a6aa7fb9632f011713b79fee773eb3aa8ca3d2d4735691497fe7e43c3ed7c3c525cfe1619e983c7de5b77251243bb1a64bbdb5ac425af50c64170eb8d632fbefb14f171bd6aba932e44be6c836bc660a9881a77bf50d49d019e9ef1ecbbdb8eb8c6421f9bd7048494815a6ff3994bfe29a54eea3a79a2c59a2601171d47d699568774064777ae43a1ae83e6bd1f4c53cd4a5dd3d57f22e6c80309cce9bac7b10dde8eeb268cdd2e245dc824a867e6f1ad0a82f2412199b4d79ccccbc9c824d9c1fe26a630f7c93c9fcc", 0xf2}, {&(0x7f0000000840)="430f16a364912cc10f66b30fa004734a99ba120f28adc84e112fe050f986a9c81646f928a470d2c78b9b2c8287881e668f34ce19b108ae82557e85f4d3e6b36457a57563c4f6ae65626dd119a9ff8afa69e66c38021cfe9bdbe91242967a4340116dc440315aa25716cfe4d4d6c63bcfdc91201f75e9111dc2440dba659b3a7e5df5e09e2c7b1f4e3176270c8bad8e9d7c4410e126f14b829652265adc26e6eff1cba931424576f631a9b9c9b89d60a25edceef1694bb3e0500066a7d421dfab09a0d5d6fe3bb209f5c042f5691c9251d1dc92884f78193dd3d1ae995f67c1f447492d31e78f986a3a", 0xe9}, {&(0x7f0000001ac0)="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", 0x311}], 0x5, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES16], 0xffffffffffffffa3}, 0xff00) 253.021887ms ago: executing program 3 (id=165): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x400, 0x0, 0xd, 0x3, 0xd, 0x6, 0x9, {0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x1a, 0x6, 0x2, 0xfffffff8, 0x7}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x8}, &(0x7f0000000180)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x364, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1fdd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1ce3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x2, 0x9, 0x1, 0xb, 0x4, 0xb, 0x3, 0x12, 0x1, 0x4, 0x24, 0x30, 0x18, 0x6c, 0x6c, 0x9, 0xc, 0x6, 0xb, 0x36, 0x48, 0x2, 0xc, 0x6, 0x6c, 0x0, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x60, 0x12, 0xb, 0x13, 0x9, 0x4, 0x48, 0x9, 0x6, 0x9, 0x14a372d8adc236f9, 0x18, 0x4, 0x6b, 0x36, 0x3, 0x9, 0x4, 0x5, 0x1b, 0x48, 0x9, 0x1, 0x5]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5a47, 0x2, 0xa, 0x7, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1d, 0x48, 0xb, 0x4, 0x5, 0x24, 0x12, 0xc, 0x5, 0x16, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0xea3, 0x9, 0x0, 0x8, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x36, 0x6, 0x12, 0x12, 0x18, 0x18, 0x0, 0xb, 0xc, 0x12, 0x24, 0x48, 0x39]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2cdd, 0x2, 0x0, 0x8ce, 0x0, 0x3, 0x2]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x17a8, 0x4, 0x9241, 0x0, 0x2, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x6}, {0x7, 0x7}, {0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6ac0, 0xa, 0x4, 0x5, 0xf, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x7, 0x1}, {0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0xa}, {0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa56b, 0x2, 0xb, 0x800, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x1, 0x4, 0x6, 0x24, 0xc, 0x36, 0x5, 0x0, 0x16, 0x24, 0x42, 0x30, 0x3, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89c7, 0x80, 0xfbd8, 0x5c8e, 0xfffc, 0x10, 0x7f, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x49b}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7ff}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0xdc, 0x70, [@NL80211_MESH_SETUP_IE={0xd8, 0x3, "33ea85184920e6a2e2c34a83f02140b31bc9864334765e8c594aa0081099c427b21fe7ae77ac5bab0a01faa2b4ba09c19564a72e9bae588a0607ce6dccfc5565c4704445a08a9e133cfdcb2f79a2fc0d35b916de62e5e3b56b74fc68c7472d074a48a5eb9ffaef3725d473dd38dd43eee2a6b1136e1157a9ebe72a68a03f4b8f333152e47b0a233a8f649c6055df7e016252c0b2c1de9383778ae4767d47581017c3b41fd730616e7d07439aa805a3fdb087a07738a6c95c3adadcecfe94da56cb41cba653518d92d0c477432b68454eabea3dd2"}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x20008891}, 0x8040010) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 221.86676ms ago: executing program 1 (id=166): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa00}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 192.263647ms ago: executing program 2 (id=167): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000e0003000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 143.272011ms ago: executing program 3 (id=168): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000011000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00q'], 0x44}}, 0x0) 65.491189ms ago: executing program 4 (id=169): socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 0s ago: executing program 0 (id=170): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @local}, 0x1, 0x0, 0x1}}, 0x2e) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="441000010400000200000000000066d5e5", @ANYRES32=0x0, @ANYBLOB="03800000000000002400128009000100697069700000000014000280060011004e2000000600100003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7fff, 0x71c, 0x7586, 0x100, 0x9, 0x0, r6}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x111, 0x4b4, 0x178, 0x700, 0x2c0, 0x278, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'syzkaller1\x00', 'pim6reg1\x00', 0x31, 0x3, 0x8576, 0xffffffff, 0x6, 0x9, {0x40}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00', {}, {0xe3b7d5bccbf95351}}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa56, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000180)=0xc7, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000180)=0xc7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000040000000900000000d1efd5d66937277841000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000040000000900000000d1efd5d66937277841000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r11, @ANYBLOB="00000000fd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) close(r11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r12, &(0x7f0000000900)}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 82.565998][ T5814] cgroup: Unknown subsys name 'net' [ 82.720912][ T5814] cgroup: Unknown subsys name 'cpuset' [ 82.729957][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.457685][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.543107][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.559713][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.568457][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.597261][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.606087][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.606997][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.615170][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.629898][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.638685][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.647382][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.649169][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.661832][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.669797][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.681882][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.690608][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.698213][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.702787][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.707405][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.719904][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.729380][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.737934][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.755487][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.765217][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.776209][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.790508][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.274059][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.475442][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.614439][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.624028][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.634643][ T5824] bridge_slave_0: entered allmulticast mode [ 89.643320][ T5824] bridge_slave_0: entered promiscuous mode [ 89.653642][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.661014][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.670595][ T5824] bridge_slave_1: entered allmulticast mode [ 89.679156][ T5824] bridge_slave_1: entered promiscuous mode [ 89.791414][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.808421][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.830512][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.839839][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.916283][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.000822][ T5824] team0: Port device team_slave_0 added [ 90.009730][ T5824] team0: Port device team_slave_1 added [ 90.055787][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.063241][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.071096][ T5825] bridge_slave_0: entered allmulticast mode [ 90.079048][ T5825] bridge_slave_0: entered promiscuous mode [ 90.138694][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.145976][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.153375][ T5825] bridge_slave_1: entered allmulticast mode [ 90.161227][ T5825] bridge_slave_1: entered promiscuous mode [ 90.170067][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.178434][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.205747][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.269494][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.276594][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.302972][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.341275][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.348784][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.356243][ T5834] bridge_slave_0: entered allmulticast mode [ 90.363739][ T5834] bridge_slave_0: entered promiscuous mode [ 90.372395][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.380309][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.387806][ T5836] bridge_slave_0: entered allmulticast mode [ 90.395077][ T5836] bridge_slave_0: entered promiscuous mode [ 90.419454][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.432181][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.450012][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.457794][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.465195][ T5834] bridge_slave_1: entered allmulticast mode [ 90.472961][ T5834] bridge_slave_1: entered promiscuous mode [ 90.493208][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.505201][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.512515][ T5836] bridge_slave_1: entered allmulticast mode [ 90.520130][ T5836] bridge_slave_1: entered promiscuous mode [ 90.615044][ T5825] team0: Port device team_slave_0 added [ 90.638874][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.651484][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.691299][ T5825] team0: Port device team_slave_1 added [ 90.712661][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.720744][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.728712][ T5839] bridge_slave_0: entered allmulticast mode [ 90.735998][ T5839] bridge_slave_0: entered promiscuous mode [ 90.760532][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.773738][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.790123][ T5824] hsr_slave_0: entered promiscuous mode [ 90.797287][ T5824] hsr_slave_1: entered promiscuous mode [ 90.817352][ T5837] Bluetooth: hci0: command tx timeout [ 90.818089][ T5828] Bluetooth: hci3: command tx timeout [ 90.823115][ T5837] Bluetooth: hci2: command tx timeout [ 90.829036][ T5828] Bluetooth: hci1: command tx timeout [ 90.842236][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.849822][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.857915][ T5839] bridge_slave_1: entered allmulticast mode [ 90.865364][ T5839] bridge_slave_1: entered promiscuous mode [ 90.896726][ T5828] Bluetooth: hci4: command tx timeout [ 90.911211][ T5834] team0: Port device team_slave_0 added [ 90.933091][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.940225][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.966379][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.997655][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.009801][ T5834] team0: Port device team_slave_1 added [ 91.043633][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.050682][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.076814][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.090346][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.132577][ T5836] team0: Port device team_slave_0 added [ 91.142058][ T5836] team0: Port device team_slave_1 added [ 91.233317][ T5839] team0: Port device team_slave_0 added [ 91.241253][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.249496][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.275994][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.288676][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.295658][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.321674][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.351782][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.358852][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.385135][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.413934][ T5839] team0: Port device team_slave_1 added [ 91.461065][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.468307][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.494331][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.525250][ T5825] hsr_slave_0: entered promiscuous mode [ 91.531781][ T5825] hsr_slave_1: entered promiscuous mode [ 91.542521][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.550514][ T5825] Cannot create hsr debugfs directory [ 91.635582][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.642918][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.669119][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.733662][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.740795][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.767238][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.790460][ T5834] hsr_slave_0: entered promiscuous mode [ 91.797702][ T5834] hsr_slave_1: entered promiscuous mode [ 91.803860][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.811694][ T5834] Cannot create hsr debugfs directory [ 91.870273][ T9] cfg80211: failed to load regulatory.db [ 91.883821][ T5836] hsr_slave_0: entered promiscuous mode [ 91.892524][ T5836] hsr_slave_1: entered promiscuous mode [ 91.898889][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.907180][ T5836] Cannot create hsr debugfs directory [ 92.029223][ T5839] hsr_slave_0: entered promiscuous mode [ 92.035634][ T5839] hsr_slave_1: entered promiscuous mode [ 92.042766][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.051802][ T5839] Cannot create hsr debugfs directory [ 92.306023][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.362818][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.418972][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.433982][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.552096][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.573128][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.589010][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.613684][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.686657][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.699156][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.713006][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.742779][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.822365][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.857809][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.870485][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.897062][ T5828] Bluetooth: hci2: command tx timeout [ 92.902546][ T5828] Bluetooth: hci1: command tx timeout [ 92.907997][ T55] Bluetooth: hci3: command tx timeout [ 92.908041][ T55] Bluetooth: hci0: command tx timeout [ 92.919290][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.976429][ T5828] Bluetooth: hci4: command tx timeout [ 92.988037][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.045067][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.069655][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.080736][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.094365][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.117916][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.152020][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.163859][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.171273][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.184035][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.191241][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.230910][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.297375][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.304535][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.357784][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.364973][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.452629][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.502219][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.553076][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.572740][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.579941][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.633259][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.640447][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.713093][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.761965][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.769226][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.784279][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.791545][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.902775][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.927990][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.948383][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.018561][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.025852][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.114069][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.121328][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.152939][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.330088][ T5824] veth0_vlan: entered promiscuous mode [ 94.364557][ T5824] veth1_vlan: entered promiscuous mode [ 94.514845][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.568615][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.588888][ T5824] veth0_macvtap: entered promiscuous mode [ 94.620757][ T5824] veth1_macvtap: entered promiscuous mode [ 94.710151][ T5836] veth0_vlan: entered promiscuous mode [ 94.731342][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.755082][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.789965][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.812110][ T5836] veth1_vlan: entered promiscuous mode [ 94.822520][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.833357][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.842358][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.851244][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.890883][ T5834] veth0_vlan: entered promiscuous mode [ 94.928060][ T5834] veth1_vlan: entered promiscuous mode [ 94.979241][ T5837] Bluetooth: hci3: command tx timeout [ 94.979258][ T55] Bluetooth: hci2: command tx timeout [ 94.979295][ T55] Bluetooth: hci1: command tx timeout [ 94.985117][ T5828] Bluetooth: hci0: command tx timeout [ 95.007551][ T5825] veth0_vlan: entered promiscuous mode [ 95.058120][ T5828] Bluetooth: hci4: command tx timeout [ 95.064174][ T5825] veth1_vlan: entered promiscuous mode [ 95.071666][ T5839] veth0_vlan: entered promiscuous mode [ 95.111747][ T5839] veth1_vlan: entered promiscuous mode [ 95.120203][ T5836] veth0_macvtap: entered promiscuous mode [ 95.134034][ T5834] veth0_macvtap: entered promiscuous mode [ 95.163526][ T5836] veth1_macvtap: entered promiscuous mode [ 95.173225][ T5834] veth1_macvtap: entered promiscuous mode [ 95.184469][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.195816][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.272022][ T5839] veth0_macvtap: entered promiscuous mode [ 95.309292][ T5839] veth1_macvtap: entered promiscuous mode [ 95.319526][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.330703][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.342790][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.352955][ T5825] veth0_macvtap: entered promiscuous mode [ 95.360146][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.370163][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.381197][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.390743][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.400923][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.411500][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.423349][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.441369][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.452014][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.465741][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.480169][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490188][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499804][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.509982][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.529233][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.541376][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.551517][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.562307][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.573681][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.586830][ T5825] veth1_macvtap: entered promiscuous mode [ 95.633304][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.641464][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.659522][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.668756][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.677797][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.690783][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.701962][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.712310][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.724374][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.734510][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.745029][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.756706][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.843431][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.876247][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.888299][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.902098][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.912774][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.936712][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.949083][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.000299][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.009987][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020316][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.029873][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.041408][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.052307][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.062665][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.073225][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.083130][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.094090][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.105205][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.116444][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.129299][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.141462][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.155910][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.169298][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.192734][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.203448][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.218377][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.229550][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.240874][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.252883][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.322111][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.339397][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.341960][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.357085][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.366275][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.375210][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.479536][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.504745][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.569350][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.585914][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.673668][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.682073][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.705589][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.744228][ T5924] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.940887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.986304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.058636][ T5828] Bluetooth: hci1: command tx timeout [ 97.064374][ T55] Bluetooth: hci0: command tx timeout [ 97.064394][ T5832] Bluetooth: hci3: command tx timeout [ 97.070141][ T55] Bluetooth: hci2: command tx timeout [ 97.113058][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.132236][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.140454][ T55] Bluetooth: hci4: command tx timeout [ 97.140612][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.169997][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.279776][ T5939] macvlan2: entered allmulticast mode [ 97.332280][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.348559][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.531539][ T5941] Zero length message leads to an empty skb [ 97.889344][ T5949] netlink: 'syz.2.15': attribute type 309 has an invalid length. [ 97.924678][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 98.004331][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 98.053325][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 98.073663][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 98.125199][ T5952] netlink: 'syz.4.17': attribute type 18 has an invalid length. [ 98.365237][ T5959] netlink: 9 bytes leftover after parsing attributes in process `syz.1.20'. [ 98.391210][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.403812][ T5959] 0·: renamed from hsr_slave_1 (while UP) [ 98.422038][ T5959] 0·: entered allmulticast mode [ 98.434919][ T5959] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 98.519750][ T5960] bond_slave_0: entered promiscuous mode [ 98.525708][ T5960] bond_slave_1: entered promiscuous mode [ 98.562171][ T5960] vlan2: entered promiscuous mode [ 98.598625][ T5960] bond0: entered promiscuous mode [ 98.872474][ T5969] macvlan2: entered allmulticast mode [ 98.921200][ T5972] netlink: 168 bytes leftover after parsing attributes in process `syz.3.25'. [ 99.127855][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.336421][ T5876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.456849][ T5878] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.673672][ T5994] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 99.890346][ T6003] netlink: 168 bytes leftover after parsing attributes in process `syz.1.37'. [ 99.977950][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.074497][ T6005] netlink: 204 bytes leftover after parsing attributes in process `syz.0.38'. [ 100.236568][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.336887][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.388900][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.486686][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.699674][ T6022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 101.060340][ T5876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.097715][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'. [ 101.114295][ T6035] batman_adv: batadv0: Adding interface: dummy0 [ 101.144075][ T6035] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.195921][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 101.216408][ T6039] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 101.237194][ T6035] batman_adv: batadv0: Interface activated: dummy0 [ 101.853990][ T6049] team_slave_0: entered promiscuous mode [ 101.859936][ T6049] team_slave_1: entered promiscuous mode [ 101.906998][ T6049] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.931528][ T6049] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 101.965356][ T6056] vxcan0: entered promiscuous mode [ 102.061727][ T6062] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 102.337130][ T6072] batman_adv: batadv0: Adding interface: dummy0 [ 102.343459][ T6072] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.408292][ T6072] batman_adv: batadv0: Interface activated: dummy0 [ 102.852530][ T6084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.011606][ T6084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.128311][ T6101] __nla_validate_parse: 2 callbacks suppressed [ 103.128334][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 103.201233][ T6084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.363114][ T6084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.421495][ T6107] veth0_to_bridge: entered promiscuous mode [ 103.612672][ T6114] netlink: 212 bytes leftover after parsing attributes in process `syz.1.78'. [ 103.772550][ T6084] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.833891][ T6120] bond_slave_0: entered promiscuous mode [ 103.839730][ T6120] bond_slave_1: entered promiscuous mode [ 103.849433][ T6120] vlan2: entered promiscuous mode [ 103.857091][ T6120] bond0: entered promiscuous mode [ 103.927714][ T6084] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.005503][ T6084] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.108606][ T6084] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.352927][ T6142] netlink: zone id is out of range [ 104.369838][ T6142] netlink: zone id is out of range [ 104.408382][ T6142] netlink: zone id is out of range [ 104.465173][ T6142] netlink: zone id is out of range [ 104.482128][ T6142] netlink: zone id is out of range [ 104.514509][ T6142] netlink: zone id is out of range [ 104.536006][ T6142] netlink: zone id is out of range [ 104.724312][ T6152] netlink: 212 bytes leftover after parsing attributes in process `syz.2.91'. [ 104.741418][ T6142] netlink: set zone limit has 4 unknown bytes [ 104.756611][ T6154] Illegal XDP return value 200425472 on prog (id 34) dev N/A, expect packet loss! [ 104.779973][ T6147] x_tables: duplicate underflow at hook 2 [ 104.934841][ T6159] veth0_to_bridge: entered promiscuous mode [ 104.962468][ T6159] macsec1: entered promiscuous mode [ 104.986306][ T6159] macsec1: entered allmulticast mode [ 105.003771][ T6159] veth0_to_bridge: entered allmulticast mode [ 105.016587][ T6159] veth0_to_bridge: left allmulticast mode [ 105.022840][ T6159] veth0_to_bridge: left promiscuous mode [ 105.105484][ T6161] veth1_to_team: entered promiscuous mode [ 105.681669][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 105.732341][ T6177] netlink: 212 bytes leftover after parsing attributes in process `syz.0.103'. [ 105.820654][ T6193] FAULT_INJECTION: forcing a failure. [ 105.820654][ T6193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.874111][ T6193] CPU: 1 UID: 0 PID: 6193 Comm: syz.3.107 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 105.874142][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.874159][ T6193] Call Trace: [ 105.874170][ T6193] [ 105.874181][ T6193] dump_stack_lvl+0x189/0x250 [ 105.874222][ T6193] ? __lock_acquire+0xaac/0xd20 [ 105.874252][ T6193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.874281][ T6193] ? __pfx__printk+0x10/0x10 [ 105.874301][ T6193] ? __might_fault+0xb0/0x130 [ 105.874338][ T6193] should_fail_ex+0x414/0x560 [ 105.874375][ T6193] _copy_from_user+0x2d/0xb0 [ 105.874403][ T6193] generic_map_update_batch+0x51b/0x7f0 [ 105.874436][ T6193] ? __pfx_generic_map_update_batch+0x10/0x10 [ 105.874454][ T6193] ? __fget_files+0x2a/0x420 [ 105.874486][ T6193] ? __pfx_generic_map_update_batch+0x10/0x10 [ 105.874504][ T6193] bpf_map_do_batch+0x369/0x5f0 [ 105.874537][ T6193] __sys_bpf+0x384/0x860 [ 105.874563][ T6193] ? __pfx___sys_bpf+0x10/0x10 [ 105.874601][ T6193] ? ksys_write+0x1f0/0x250 [ 105.874633][ T6193] __x64_sys_bpf+0x7c/0x90 [ 105.874655][ T6193] do_syscall_64+0xf6/0x210 [ 105.874685][ T6193] ? clear_bhb_loop+0x45/0xa0 [ 105.874710][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.874729][ T6193] RIP: 0033:0x7f751418e969 [ 105.874761][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.874776][ T6193] RSP: 002b:00007f7511fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.874796][ T6193] RAX: ffffffffffffffda RBX: 00007f75143b6080 RCX: 00007f751418e969 [ 105.874810][ T6193] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 105.874821][ T6193] RBP: 00007f7511fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 105.874832][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.874843][ T6193] R13: 0000000000000001 R14: 00007f75143b6080 R15: 00007ffe79fddd58 [ 105.874873][ T6193] [ 106.250064][ T6201] FAULT_INJECTION: forcing a failure. [ 106.250064][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.258758][ T6198] netlink: 168 bytes leftover after parsing attributes in process `syz.2.112'. [ 106.295833][ T975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.303764][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.0.110 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 106.303790][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.303802][ T6201] Call Trace: [ 106.303810][ T6201] [ 106.303818][ T6201] dump_stack_lvl+0x189/0x250 [ 106.303850][ T6201] ? __lock_acquire+0xaac/0xd20 [ 106.303890][ T6201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.303918][ T6201] ? __pfx__printk+0x10/0x10 [ 106.303938][ T6201] ? __might_fault+0xb0/0x130 [ 106.303974][ T6201] should_fail_ex+0x414/0x560 [ 106.304011][ T6201] _copy_from_user+0x2d/0xb0 [ 106.304039][ T6201] smc_setsockopt+0x3b8/0xab0 [ 106.304075][ T6201] ? __pfx_smc_setsockopt+0x10/0x10 [ 106.304106][ T6201] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.304128][ T6201] ? __pfx_smc_setsockopt+0x10/0x10 [ 106.304157][ T6201] do_sock_setsockopt+0x257/0x3e0 [ 106.304185][ T6201] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.304207][ T6201] ? __fget_files+0x2a/0x420 [ 106.304236][ T6201] ? __fget_files+0x3a0/0x420 [ 106.304260][ T6201] ? __fget_files+0x2a/0x420 [ 106.304293][ T6201] __x64_sys_setsockopt+0x18b/0x220 [ 106.304324][ T6201] do_syscall_64+0xf6/0x210 [ 106.304355][ T6201] ? clear_bhb_loop+0x45/0xa0 [ 106.304379][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.304398][ T6201] RIP: 0033:0x7f75fe38e969 [ 106.304414][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.304435][ T6201] RSP: 002b:00007f75ff1b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.304456][ T6201] RAX: ffffffffffffffda RBX: 00007f75fe5b5fa0 RCX: 00007f75fe38e969 [ 106.304470][ T6201] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 106.304481][ T6201] RBP: 00007f75ff1b0090 R08: 0000000000000006 R09: 0000000000000000 [ 106.304492][ T6201] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 106.304504][ T6201] R13: 0000000000000000 R14: 00007f75fe5b5fa0 R15: 00007ffd52c9bc78 [ 106.304534][ T6201] [ 106.609576][ T6208] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 106.689683][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 106.765230][ T6202] batman_adv: batadv0: Adding interface: dummy0 [ 106.778250][ T6202] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.807117][ T6202] batman_adv: batadv0: Interface activated: dummy0 [ 106.857022][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.973563][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.983202][ T6230] netlink: 204 bytes leftover after parsing attributes in process `syz.1.117'. [ 107.069885][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.136597][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.196561][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.265383][ T6235] vlan2: entered promiscuous mode [ 107.316485][ T6237] netlink: 204 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.502577][ T6247] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 107.531862][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.123'. [ 107.569996][ T6253] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 107.638706][ T6247] batadv0: entered promiscuous mode [ 107.664701][ T6247] batadv0: entered allmulticast mode [ 107.705311][ T6247] bridge0: port 3(batadv0) entered blocking state [ 107.718171][ T6247] bridge0: port 3(batadv0) entered disabled state [ 107.730553][ T6247] bridge0: port 3(batadv0) entered blocking state [ 107.738008][ T6247] bridge0: port 3(batadv0) entered forwarding state [ 107.778574][ T1165] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 107.788490][ T1165] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 107.838203][ T6249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.883309][ T6253] bridge0: port 3(batadv0) entered disabled state [ 107.890123][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.898809][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.923618][ T6253] bridge0: port 3(batadv0) entered blocking state [ 107.930382][ T6253] bridge0: port 3(batadv0) entered forwarding state [ 107.938259][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.945754][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.953390][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.960735][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.973952][ T6253] bridge0: entered promiscuous mode [ 107.995551][ T6253] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.043980][ T6243] dummy0: entered allmulticast mode [ 108.142619][ T6243] batman_adv: batadv0: Adding interface: dummy0 [ 108.152908][ T6243] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.178998][ T6243] batman_adv: batadv0: Interface activated: dummy0 [ 108.186652][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.245611][ T6263] batadv0: mtu less than device minimum [ 108.253091][ T6263] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.291489][ T6247] netlink: 900 bytes leftover after parsing attributes in process `syz.0.123'. [ 108.341331][ T6249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.465134][ T63] tipc: Subscription rejected, illegal request [ 108.491120][ T6249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.545085][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'. [ 108.573909][ T6289] netlink: 204 bytes leftover after parsing attributes in process `syz.4.136'. [ 108.612418][ T6249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.749005][ T6295] veth0_to_bridge: entered promiscuous mode [ 108.760391][ T6295] macsec1: entered promiscuous mode [ 108.765945][ T6295] macsec1: entered allmulticast mode [ 108.771781][ T6295] veth0_to_bridge: entered allmulticast mode [ 108.781649][ T6295] veth0_to_bridge: left allmulticast mode [ 108.798554][ T6295] veth0_to_bridge: left promiscuous mode [ 108.858776][ T6296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.897088][ T6299] netlink: 204 bytes leftover after parsing attributes in process `syz.0.140'. [ 108.998820][ T6296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.260010][ T6311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.144'. [ 109.272160][ T6296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.321146][ T6305] team_slave_0: entered promiscuous mode [ 109.326898][ T6305] team_slave_1: entered promiscuous mode [ 109.350823][ T6305] vlan2: entered promiscuous mode [ 109.361570][ T6305] team0: entered promiscuous mode [ 109.449092][ T6296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.488661][ T6249] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.595708][ T6249] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.681415][ T5877] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 109.730458][ T6319] net_ratelimit: 18 callbacks suppressed [ 109.730478][ T6319] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 109.773191][ T5877] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 109.821123][ T6249] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.900171][ T6296] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.950800][ T6249] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.963704][ T6322] netlink: 204 bytes leftover after parsing attributes in process `syz.3.149'. [ 110.040413][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 110.049577][ T6328] vcan0: tx drop: invalid da for name 0x0000000001000000 [ 110.073332][ T6296] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.217944][ T6296] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.266072][ T6296] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.344244][ T6336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.156'. [ 110.545865][ T6346] netlink: 204 bytes leftover after parsing attributes in process `syz.3.155'. [ 110.778887][ T6351] bond_slave_0: entered promiscuous mode [ 110.784667][ T6351] bond_slave_1: entered promiscuous mode [ 110.811642][ T6351] vlan2: entered promiscuous mode [ 110.840162][ T6351] bond0: entered promiscuous mode [ 110.899042][ T6354] netlink: 168 bytes leftover after parsing attributes in process `syz.2.161'. [ 111.139785][ T6365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.225977][ T6369] gretap0: entered promiscuous mode [ 111.234874][ T6369] macsec1: entered allmulticast mode [ 111.242001][ T6369] gretap0: entered allmulticast mode [ 111.251308][ T6374] ------------[ cut here ]------------ [ 111.257226][ T6374] memcpy: detected field-spanning write (size 227) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 111.271679][ T6374] WARNING: CPU: 0 PID: 6374 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 111.281271][ T6374] Modules linked in: [ 111.285197][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.0.170 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 111.298416][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.309427][ T6374] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 111.315117][ T6374] Code: cc e8 90 51 b2 f7 c6 05 4e c7 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 bd ad 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 5e 51 b2 f7 44 89 e6 48 c7 c7 00 10 [ 111.335077][ T6374] RSP: 0018:ffffc9000f497920 EFLAGS: 00010246 [ 111.341239][ T6374] RAX: 8f69cacf85677900 RBX: ffff8880637ef450 RCX: ffff88805e380000 [ 111.349350][ T6374] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 111.359332][ T6374] RBP: 0000000000000004 R08: 0000000000000003 R09: 0000000000000004 [ 111.367404][ T6374] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 00000000000000e3 [ 111.375431][ T6374] R13: 1ffff92001e92f4e R14: ffffc9000f497a84 R15: 00000000000000e3 [ 111.383730][ T6374] FS: 00007f75ff1b06c0(0000) GS:ffff8881260c1000(0000) knlGS:0000000000000000 [ 111.393804][ T6374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.401311][ T6374] CR2: 00007f8772cc3d58 CR3: 00000000346e0000 CR4: 00000000003526f0 [ 111.409582][ T6374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.417826][ T6374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.425834][ T6374] Call Trace: [ 111.429199][ T6374] [ 111.432177][ T6374] ip6_route_info_create+0x5cc/0xa70 [ 111.437619][ T6374] ip6_route_add+0x29/0x2f0 [ 111.442176][ T6374] ? ipv6_route_ioctl+0x313/0x480 [ 111.447345][ T6374] ipv6_route_ioctl+0x35c/0x480 [ 111.452262][ T6374] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 111.457957][ T6374] inet6_ioctl+0x219/0x280 [ 111.462447][ T6374] ? __pfx_inet6_ioctl+0x10/0x10 [ 111.467544][ T6374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.473580][ T6374] sock_do_ioctl+0xd9/0x300 [ 111.478254][ T6374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 111.483426][ T6374] ? __lock_acquire+0xaac/0xd20 [ 111.488393][ T6374] sock_ioctl+0x576/0x790 [ 111.493821][ T6374] ? __pfx_sock_ioctl+0x10/0x10 [ 111.499535][ T6374] ? __fget_files+0x3a0/0x420 [ 111.504261][ T6374] ? __fget_files+0x2a/0x420 [ 111.508958][ T6374] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.513944][ T6374] ? __pfx_sock_ioctl+0x10/0x10 [ 111.518920][ T6374] __se_sys_ioctl+0xf9/0x170 [ 111.523540][ T6374] do_syscall_64+0xf6/0x210 [ 111.528123][ T6374] ? clear_bhb_loop+0x45/0xa0 [ 111.532837][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.538973][ T6374] RIP: 0033:0x7f75fe38e969 [ 111.543520][ T6374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.563258][ T6374] RSP: 002b:00007f75ff1b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.571792][ T6374] RAX: ffffffffffffffda RBX: 00007f75fe5b5fa0 RCX: 00007f75fe38e969 [ 111.579923][ T6374] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000008 [ 111.588043][ T6374] RBP: 00007f75fe410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 111.597182][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.606053][ T6374] R13: 0000000000000000 R14: 00007f75fe5b5fa0 R15: 00007ffd52c9bc78 [ 111.618826][ T6374] [ 111.621879][ T6374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.629189][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.0.170 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 111.641197][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.651266][ T6374] Call Trace: [ 111.654555][ T6374] [ 111.657514][ T6374] dump_stack_lvl+0x99/0x250 [ 111.662132][ T6374] ? __asan_memcpy+0x40/0x70 [ 111.666743][ T6374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.671970][ T6374] ? __pfx__printk+0x10/0x10 [ 111.676600][ T6374] panic+0x2db/0x790 [ 111.680554][ T6374] ? __pfx_panic+0x10/0x10 [ 111.685043][ T6374] ? show_trace_log_lvl+0x4fb/0x550 [ 111.690309][ T6374] __warn+0x31b/0x4b0 [ 111.694336][ T6374] ? ipv6_addr_prefix+0x124/0x1d0 [ 111.699386][ T6374] ? ipv6_addr_prefix+0x124/0x1d0 [ 111.704439][ T6374] report_bug+0x2be/0x4f0 [ 111.708802][ T6374] ? ipv6_addr_prefix+0x124/0x1d0 [ 111.713854][ T6374] ? ipv6_addr_prefix+0x124/0x1d0 [ 111.718908][ T6374] ? ipv6_addr_prefix+0x126/0x1d0 [ 111.723957][ T6374] handle_bug+0x84/0x160 [ 111.728239][ T6374] exc_invalid_op+0x1a/0x50 [ 111.732775][ T6374] asm_exc_invalid_op+0x1a/0x20 [ 111.737658][ T6374] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 111.743314][ T6374] Code: cc e8 90 51 b2 f7 c6 05 4e c7 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 bd ad 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 5e 51 b2 f7 44 89 e6 48 c7 c7 00 10 [ 111.762930][ T6374] RSP: 0018:ffffc9000f497920 EFLAGS: 00010246 [ 111.769012][ T6374] RAX: 8f69cacf85677900 RBX: ffff8880637ef450 RCX: ffff88805e380000 [ 111.777090][ T6374] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 111.785066][ T6374] RBP: 0000000000000004 R08: 0000000000000003 R09: 0000000000000004 [ 111.793045][ T6374] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 00000000000000e3 [ 111.801025][ T6374] R13: 1ffff92001e92f4e R14: ffffc9000f497a84 R15: 00000000000000e3 [ 111.809213][ T6374] ip6_route_info_create+0x5cc/0xa70 [ 111.814525][ T6374] ip6_route_add+0x29/0x2f0 [ 111.819037][ T6374] ? ipv6_route_ioctl+0x313/0x480 [ 111.824070][ T6374] ipv6_route_ioctl+0x35c/0x480 [ 111.828939][ T6374] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 111.834344][ T6374] inet6_ioctl+0x219/0x280 [ 111.838762][ T6374] ? __pfx_inet6_ioctl+0x10/0x10 [ 111.843710][ T6374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.849712][ T6374] sock_do_ioctl+0xd9/0x300 [ 111.854233][ T6374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 111.859355][ T6374] ? __lock_acquire+0xaac/0xd20 [ 111.864232][ T6374] sock_ioctl+0x576/0x790 [ 111.868577][ T6374] ? __pfx_sock_ioctl+0x10/0x10 [ 111.873447][ T6374] ? __fget_files+0x3a0/0x420 [ 111.878133][ T6374] ? __fget_files+0x2a/0x420 [ 111.882736][ T6374] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.887687][ T6374] ? __pfx_sock_ioctl+0x10/0x10 [ 111.892550][ T6374] __se_sys_ioctl+0xf9/0x170 [ 111.897147][ T6374] do_syscall_64+0xf6/0x210 [ 111.901674][ T6374] ? clear_bhb_loop+0x45/0xa0 [ 111.906370][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.912297][ T6374] RIP: 0033:0x7f75fe38e969 [ 111.916718][ T6374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.936325][ T6374] RSP: 002b:00007f75ff1b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.944745][ T6374] RAX: ffffffffffffffda RBX: 00007f75fe5b5fa0 RCX: 00007f75fe38e969 [ 111.952738][ T6374] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000008 [ 111.960732][ T6374] RBP: 00007f75fe410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 111.968716][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.976696][ T6374] R13: 0000000000000000 R14: 00007f75fe5b5fa0 R15: 00007ffd52c9bc78 [ 111.984694][ T6374] [ 111.987878][ T6374] Kernel Offset: disabled [ 111.992220][ T6374] Rebooting in 86400 seconds..