last executing test programs: 2.805927256s ago: executing program 3 (id=522): r0 = socket(0xf, 0x3, 0x104) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, 0x0, 0x16}}, {{&(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_tos_u8={{0x11}}], 0x42}}], 0x2, 0x4040004) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x3, {0x0, 0x6, 0x3, 0x7, 0x2}}) 2.627507375s ago: executing program 3 (id=524): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x0, 0x0, 0x20000000, 0xfffffffc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x101, 0x5, 0xd8, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003480)={{r1}, &(0x7f0000003400), &(0x7f0000003440)='%pS \x00'}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000140)=""/158}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000b40)=0x402, 0x4) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) (async) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x500, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0xf7, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x40, 0x6, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRES64=r5, @ANYRES64=r4, @ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r5, 0x2}, 0x90) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x800}, [@RTA_ENCAP={0x10, 0x1e, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc}}]}, 0x2c}}, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r7, 0x8930, &(0x7f0000000080)="3ef2b744f871f304bd39afb83a") (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900), 0x4) 1.943879891s ago: executing program 1 (id=532): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/21]) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000003e00)) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e23, 0xc4, @mcast1, 0x5}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@noop, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x6, 0xc, "7cae9b98530d363ad53e"}, {0x0, 0xb, "63f313354a8b6d23e1"}, {0x7, 0x6, "cf1a45ac"}, {0x0, 0x5, "ea3261"}, {0x0, 0xc, "c40375aec0fc1b8bb0dc"}, {0x2, 0x2}, {0x0, 0x9, "6afe0ac74d79e5"}]}, @end, @end, @generic={0x94, 0x9, '\'\'fY}=1'}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x180, 0x0, 0x84, r5, r6}, {0x1, 0x2, 0x6, 0xff, 0x3, 0x6, 0x7f, 0x100000000}, {0x100, 0x3, 0x5, 0x7}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xef}, 0x2, @in=@broadcast, 0x0, 0x2, 0x3, 0x81, 0x8000, 0x6, 0x3}}, 0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r8, 0x0, 0x6, 0x0, &(0x7f0000695ffc)) r9 = socket$isdn_base(0x22, 0x3, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000001500)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) sendmsg$netlink(r2, &(0x7f0000001700)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000000880)=[{&(0x7f0000000340)={0x2c8, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="6af3d831e81d8ecff76aeead1946740f4c83ba12e3b0e9482ab9f0782300df79d10da72d7c68751f81118b668df654a042931498d9b981a8fe5c07f310b65716e28b985d6cf5ae459bb6b232fa32b050333d799f59e48e362f3531f08ced926bb296", @nested={0x43, 0x13b, 0x0, 0x1, [@generic="cca8e23b2e978f1cdeaafe45fc3b263710108032c3e6d95dd44cd600da8873067153a7ad7efa0aa5392b4be9c06832a0bf32ddf799512ad022cd9432204746"]}, @generic="d3", @typed={0x93, 0x92, 0x0, 0x0, @binary="0508a32938e367e239b567cc183025a43899f11c8b264352d44c1cc59d07529b8c8d918d3b37a7f4d51532fe5dab77f6b38ccf581a79782000285ad677e4ec66c3c5d32c6dd71b1b183f3d3a7489d88f8ec5e27de8917167c34a0b4f817b4e0f3241a6ae0bb0a1f0d8f7e34012c08c6ecd9bb59885c37f698a718f59e71c4dd2445e2460beb8cf1b71adcac07cefcb"}, @nested={0x17b, 0x67, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast2}, @generic="a0df03fa1199dc06dbb29369cdfd3bef37eb6cf77bb9c51c8602fab62c79e8ebb7440b2fd6156fc4344b4e0d76d4302f3f25ee915195b4eb76f2dcc38055fc106d5176df64aff6", @typed={0x8, 0xac, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0xb, 0x112, 0x0, 0x0, @str=':].$-/\x00'}, @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@remote}, @generic="a2d2fc42393627ed0db1e7ec2a100c8e19a45185d22919f827f5cc8632c72d3b796fc940f49cdcf5367d5d512d4dc7086b28095c9e16676a875adbc5fcea167c13d76c4ac3210de7d732084c0052eef0a18b98641c1e2d5be837ed0fa2a3a36c8548d640f8cda437420eb98b09747efdda06666b7bbe10122744e6079dd1d489d0790c4ef034a0befabaeb498cbae0496ecb95e53670919e752ade471b24f533c88ec4c6069755c1b95430370836eba34841954bac3f4251f3e23ae59ffebf90d756e93a64f068a4bb08153693001bf90be753a57eede95eb91689ced05fbfe68c011e70a48a438c6802390d980e0670c0d91520bca5bbe8"]}]}, 0x2c8}, {&(0x7f0000000700)={0x108, 0x28, 0x300, 0x70bd2a, 0x0, "", [@typed={0x8, 0x66, 0x0, 0x0, @pid}, @generic="64e6aed2cbcfcf905517f030e6f9e0810271dce1cf05467ecb27aa8eb0247c5cbf3e6bb7e4baf32a2bff4869cb5989d64b679bb127881aba2170b7477e24bc832838662fd2ad1080a771f6f9fce0d67c011fe17d91c8ef81bec52f43dc954ca436541a5f75a67cd59adf75d4c35f229d3f97e8233070b3caf63f9edbc0047d5f6fc5b64196ede9ab28afad491b49998297aa71deb30e5a8b2459d5f66504e5cbec4cab4ecdefc37ada4aa162ef24b9d6e65b8800def8f7aeb58bcdbd423797f7ba869dc785f1e2904a8a7d1ac3dd3b71ffa8c305b866106ade39880bbe384664fda584d8e729ec", @typed={0x8, 0x105, 0x0, 0x0, @u32=0x4}]}, 0x108}, {&(0x7f0000000c00)={0x3b4, 0x2c, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x223, 0x68, 0x0, 0x1, [@typed={0x7, 0x70, 0x0, 0x0, @str='%:\x00'}, @typed={0xcf, 0x53, 0x0, 0x0, @binary="20b01086a7a27e74b99e2c4d682d020bc8e38eddf99e44c1044bfe855ebef8e4fc4f495d84c21a5a59a9231181173c6c5d7eaedde6dfc7c3b300ad35a3b306508c59eab706e2417e2d89c635b0be83e5ce30f864b3b922c71924a0e8032630eec5359e712cf7a7caefd55ed73b3ddfee8ce97e6623d65b433992856bcb91f8917c6e218cfda6f1b376ff25bc808c341d46aa37c18292b30566267d064b5402470959f2a5c4d986cb4e0f9d4e380975408ce4f4c21af1e3f7fb348187af4053c0b114124044898eb09caf23"}, @typed={0x8, 0xe3, 0x0, 0x0, @uid}, @generic="49088a422b8f95046ece4e410c80ba056e8f1ca1e5a29a43f2b38c9466272bec8778649d8edec1b59af6ca10a8f243f0a10312fc3bf9d1db5939a5ce29853da1864e6f613f8dfd2b7a1b710712733ed6b568617c39fcf66087aaad2650aa214c8a4b15d155db8f", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x80000000}, @generic="9d95", @generic="80b7f8de47f364a070d43c17930cb2f29bb3866a61845ddbf79abb65d6d11c53efc269454665602ad867f631d56feb73c2232207f2d2e66eccaefd9fe8bd2778290710a1947e4b7abb3f8bb119fceaf986d7640406be3f637de007b1d11bdc0fb01e4cb760c99d0d02ccc5489369a93ec381c0136a077f501dec7f624cad7fc6c128d7feab234ccd2596c6a3cc47ad0e1b12b981b1522b301d0ea953397851827839fe95fa696cbb841b4a4d6f12cfaa8bdb33b44f90875d3013df40de3cb6dd2f938e2a1e393bbe1310"]}, @typed={0x8e, 0x48, 0x0, 0x0, @binary="b91c04250e6ada1e18cdbe0499c2d780c6059579b31c4f9620fc407bcd21fdeec2190566fe1a2c9eec5915842cd1099f6eba4d9c1b847dc265b44828a47826baca2de53aa48eca2e081004193f6b3da3bb4dbc130b74d05a404ec230fe6b426c569580f70b20aaf7a8f153ff5785a09193c7213fd1c04da818cd463f06aa4221862e6010f13827d97464"}, @nested={0x4, 0x2b}, @generic="c643ffb643c56e50ea3673e0c76b4a2c8a11042353a5df53f8d3c9093230f151e72654f1e4d6401a7fb7835c9f9d75736d1d141509ddd5c12791d539ea12a83baef64935b7f971100dcb79bcb5efa82394b1ff57ef8d17e1f8264e1dd4d33d6353134d7078e1bd461d925a1cd83560714dbfc544bf8b9441af507cb95bc071912d29ffabb38c0dde50ab2d58d5963645decaef31b3ba0979fb562570c7b24e2afbfa8edc10419c0c7cc40bbf902e6399ac8a9af9a0e34d9c21c7c6256898afc766bbe7c507d80728dccaabeaab953d8b6db9a2d2914632f5a7003b289e402b6ab2325693315d47fe9b4105a1"]}, 0x3b4}, {&(0x7f0000000fc0)={0x510, 0x19, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="9fabf5e7183559c3ac5a95e7ba3d309b56c001c23c6307", @generic="daabc6af3ccca265dfa3fed22a14058ee860a65cb5d7ebfe1cc6dbf8b1d1d7b021f04adc4548b0c30f7d4b631b4fd04c3acf1ff72773b19e7fb93c3a96a8ba4e251c80f7893179aa141345286a5438a5139d8a888ca26ace6e98f803e6c327897b4f562ade4cb24549f9229fdd88db86610c2526bea30fdecf7291f7bf562ae9b39ae6ec8ae90e0b2691cb1b03d70398d252b33b17de3744b7fdc5f1b8773fe094e36d32719ee682ec5a818b247773eba72a27635f885b7cbcd8f8454d2245ec943e236dfc7351a011e1ce78cc7c5da7b9ea1ebab2ca61e54343d8", @generic="12dbeb65f8053e1dec95fe373afce023ea167f35b6e08a7c83f64076de235503bb554ce9e711c3d12ce98722020d2454743aa920eacd5a7fee289340b3ef0b51ee7af337e3133fcb96ac18b6fd18df20d9194bdbca37a389486606d5eb9c4e52c2b114a6194c813978d5f125988f336a71c380560dd2deb0856b8feb5460a721d89444b113fdf5a9b67fd84b6e", @nested={0xc3, 0x1e, 0x0, 0x1, [@typed={0x6, 0x79, 0x0, 0x0, @str='-\x00'}, @generic="66ce5c8a72efe5a448be87d84a409e377e83074f113895321f7108b22488d7a37c03429206a008f3f93b5454fe5f9b9e9235796860dccfa5cbc13d616d4129788d2f77e17140a347b6b4478d4e68f6022db0527ddaf590871d37e84db8673c655a8526917488c25337438414bf6cfa05b19cd63f63d8aacfd4c21472424e441f568787a8d4cb563fe4f48c1451c3f627bf1be56a00a865591630bf5a8e7375954cc655", @typed={0x8, 0x4, 0x0, 0x0, @fd}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x74a}]}, @generic="8a036342daef38e11a7515c1ea97fe0e190a0532b659e9a5b2f8c5f35c056f381844eb318e39abed7416b70f3f663300ba5e3c731b14baccda18f651deab8a6b06b2cd8281110f520e1d4eca664a6502785cf71cc421770689fb0ac1f411bc3e8c7ab7f2c6daca546e67b9f5a409a94edc29fe02f8a8542de1bd04b91b8ee7b8fa7c6ccde3a7ebf9031b7539b2c63095", @nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @pid}]}, @generic="23c5f75c65366f0e09f6661a0d0b5683feead5584dacd3ac33419da9790a9dafd56bf464dde5c1774a8ebf333e47e4f83eefbf972d6d6425e12c74ac2208f883ca5765b2c9523ac9899792e305ebeb8354f57174f569096726c01ad3660a9bfd404145853920330c4579ba970c3b96d2d13f52a3b7932e43dc7e02db5a875062da4829169ed77df063bccbf3af3be8e636d9e7fc4b2dab7b0f7bf54449c6a17c7619b57fc839f86ef667b66cdb9f281194f2e1d46f1c881a4e97db22f1d5807d2b0a5f8d766b992b378e36e88dd6590316df959a10ee26624402d888d6e7caec820a89d9fa6f22d8453c23cfdf779fe7b494", @nested={0x34, 0xd0, 0x0, 0x1, [@typed={0xa, 0x148, 0x0, 0x0, @str='*.\xbe*.\x00'}, @typed={0x11, 0x130, 0x0, 0x0, @str='sched_switch\x00'}, @typed={0x8, 0x1e, 0x0, 0x0, @pid}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@remote}]}, @generic="d247b1025b1731ab7262a293289a1245c442fe11b941192d5682f31714c740fa101bf8f368b3c35704a552fe51380432e79b3cc2bd986073ff5112750a7ae67434ed3649e18916b66683dfe978864e91ed56ffb3d65fbfdb62670d17c498d33f2b254f515c1fd4641c6d99611aecb307b9a88742c996078c8fbd923e6048d5a80c474b4803c3a6cdaae1c16900a0c2bca9e355122b97f4369553cd6f8c5257663e9d66b32a59da8260dbc551bbc7014539f9e08702ed86a218d1b50fd4a0a4f69787c43de25d00e162dab3b7750110dad9eb920d94da977ba1a0580073ef3729e7b6a8c030f0fe6c14bf1fb330", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x6}]}, 0x510}, {&(0x7f0000000840)={0x2c, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1c, 0x6d, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x129, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}]}]}, 0x2c}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r3, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r8]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r9, r10, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x140, 0x10}, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r13, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.594067945s ago: executing program 1 (id=535): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x68010020, 0x0, 0x0) 1.428779813s ago: executing program 3 (id=537): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000080), 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a008313000000000000000000000000001a000008000a"], 0x20}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x800, 0x8008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000100000000000000bb4ad7a03eaa362a921b24b47913c8d54ef2c2448d720764c20d53138bc95e2cd4efc7369e3161374b79838afa94830cf30718b1bc0b289a86186a4befb2562e38f7f5068ad8b5b15b250ee97174553cd77a189af7c31354f4fc20e920f86fa53d759bdd1232a7e5fc5b4949c8232b827358d8a9e96a1427a9d93aab2d83e5894855e96c9b9ae479f4d84f946d2cc8420d5b431ba9cc7296b1"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000143b00000008000000000000000000000000000000000b0df8a51567613200000000000000000000000000000000000000000000000000000000000000010000000000000000001000000000000000000100003b64aff1"], 0xb8}}, 0x0) 1.367000768s ago: executing program 1 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"c9694cd8106365d064d13e75cb5b9dce", 0x0, 0x0, {0x7f, 0x5}, {0x83e, 0xeb82}, 0x5, [0x1, 0x2, 0x6, 0x8000000000000000, 0x7, 0x4, 0x8000000000000000, 0x2, 0x81, 0x1, 0x1f, 0x10000, 0x63, 0x6, 0x80000000, 0x6]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000001640)}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000240)={'erspan0\x00'}) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000340)) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d0000000000", 0xce, 0x1, 0x0, 0x0) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/99, 0x63}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)=""/18, 0x12}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x7, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001380)=""/209, 0xd1}, {0x0}], 0x3, &(0x7f0000001480)=""/37, 0x25}}], 0x2, 0x40010163, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001e80)={r7, "6afbaeb308877313225ff8c934a34a5e"}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000880)={0xb, 0x5e3844bd5ef35053, {0x5, @struct={0x2, 0x3}, r7, 0x7, 0x0, 0xffff, 0x8000, 0x5, 0xa8, @struct={0x20, 0x32}, 0x6, 0x5, [0x4, 0x7, 0x0, 0x5, 0x4, 0x5]}, {0x0, @usage=0x5, 0x0, 0xffffffffffffffff, 0x100000001, 0x2, 0x134, 0x80000000000000, 0x80, @usage, 0x0, 0xff, [0x80000000, 0x6, 0x5, 0x9, 0x3, 0x1]}, {0x3, @usage=0x1ff, 0x0, 0x400, 0x20, 0x4, 0x7f, 0x6, 0x20, @usage=0x2, 0x1a0d, 0x4939afa6, [0x8, 0x3, 0x4, 0x1, 0x8, 0x124b05a9]}, {0xffffffff, 0x9, 0x100}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000001c0)={r7, 0x4, 0x1, [0x7, 0xfffffffffffff919, 0x3, 0x8001, 0x1e6], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x9, 0x4, 0xffff, 0x8000000000000000, 0x0, 0x3, 0x8000000000000001, 0x11c0, 0xff, 0x1, 0x8, 0xf52, 0x1484, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x0, 0x3ff80, 0x2, 0x2c, 0x100000000, 0x20000000, 0x0, 0xf1, 0x7, 0x63, 0x0, 0x7c4a, 0x8, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x4, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x400000000000, 0x40, 0x9, 0x5d46, 0x9, 0x9, 0x1, 0x100000001, 0x5, 0x9, 0x0, 0x7, 0x1, 0xffff, 0x6, 0x9, 0x3f, 0x0, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x0, 0xb7, 0x6, 0x0, 0x7, 0x3, 0x4, 0x2, 0x1, 0xffffffff, 0x48b9, 0x1, 0xfff, 0x7, 0x3f, 0x1b0, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x8, 0x1, 0x3296, 0x3, 0x1ff, 0x9fb1, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001c40)={{}, r2, 0x4, @unused=[0x4, 0x2, 0x6, 0x3f], @devid=r7}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{}, {@val={r7}, @actul_num={@val=0x2b, 0x8, 0x4d}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687307121400028008080100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB], 0x40}}, 0x0) 1.310826043s ago: executing program 4 (id=540): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x1c4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x1, 0x2, [0x91c, 0xcc1, 0xac9, 0xe24]}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0xf}}], 0x18}}], 0x1, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) 1.238224706s ago: executing program 2 (id=541): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) shutdown(r3, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000000020701040000000000000000050000000c00024000000000c9dc340007800800014000000000080001400000ffff0800014000000004080002400000001f08000140000000000800014000000100000014aabd3295fa5b3534c21342ed8d887f879eaf2354a1b3d63c705820f3cef40a57cbd41c523fb7886e25a11cdf3a"], 0x54}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044830}, 0x44004) connect$netlink(r5, &(0x7f0000000040)=@unspec, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x5, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010", 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09020000000000000000020000000900010073797a30300004802c000180090001007866726d000000001c0002800800014000000000050003009be603001a4c652500000006140000001100010000000000000000000000000a"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090000000000050020000100", @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.090943684s ago: executing program 0 (id=543): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x3000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80040}) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000100)="8ee20e0f8230277b00"/22, 0x0, 0x4}, 0x20) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) recvmsg$kcm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/64, 0x40}], 0x1}, 0x0) sendmmsg$unix(r9, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)="a1", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000009340)={&(0x7f0000009140), 0xc, &(0x7f0000009300)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x20048001) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xa275bf6c84f597c4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000030500000000249d020000000000", @ANYRES32, @ANYBLOB="1544010041800400240012800b0001006d616373656300001400028005000d0002000000050007000100000008006149f1fdf462788966374ba104c5cfc52b1dbdade30028c5560e8e03c3e3f071f225461e598a14e0fce5956d6d41b2f708f5df7de6d2c3487b1c36be0600000000000000b2f8d2b76a6622d7d12adb432dff4b45fe828ef2026d63c7477096e3e9de892254ce6dfd5f07ead16ea593", @ANYRES16=0x0, @ANYBLOB="080091a1", @ANYBLOB="89fa11bd3a95ae84f45af4d6fdc1abe9dcac7bbd0ee13fbb6f41a9a97c53797605dca26a7258ee881ab34c5157ccfb16366dd9a47cc2a421b34783a5ad537ad742df2df82c0396ca95f26cd5a0f545181ac03c94412e68aff6cee6d442c194a3537000", @ANYBLOB="c91e8578e0e13c0907e3971bba0a77"], 0x54}, 0x1, 0x0, 0x0, 0x81c4}, 0x4050) 1.062280966s ago: executing program 1 (id=544): r0 = socket(0x10, 0x80002, 0x0) unshare(0x20000400) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003440)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@struct={0x4, 0x3, 0x0, 0x4, 0x1, 0x0, [{0x7, 0x5, 0x9}, {0x6, 0x2, 0x47e}, {0xb, 0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x9}}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x9, 0x4}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x5f, 0x61, 0x5f, 0x40]}}, &(0x7f0000000180)=""/65, 0x8d, 0x41, 0x0, 0x7f}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@struct={0x4, 0x3, 0x0, 0x4, 0x1, 0x0, [{0x7, 0x5, 0x9}, {0x6, 0x2, 0x47e}, {0xb, 0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x9}}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x9, 0x4}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x5f, 0x61, 0x5f, 0x40]}}, &(0x7f0000000180)=""/65, 0x8d, 0x41, 0x0, 0x7f}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x88, '\x00', r1, r3, 0x5, 0x3, 0x2}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x88, '\x00', r1, r3, 0x5, 0x3, 0x2}, 0x48) unshare(0x2a020880) 948.971104ms ago: executing program 2 (id=545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x3000000, 0x90, [0x20000240], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='/^\x00'/144]}, 0x108) 947.722454ms ago: executing program 4 (id=546): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/21]) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000003e00)) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e23, 0xc4, @mcast1, 0x5}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@noop, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x6, 0xc, "7cae9b98530d363ad53e"}, {0x0, 0xb, "63f313354a8b6d23e1"}, {0x7, 0x6, "cf1a45ac"}, {0x0, 0x5, "ea3261"}, {0x0, 0xc, "c40375aec0fc1b8bb0dc"}, {0x2, 0x2}, {0x0, 0x9, "6afe0ac74d79e5"}]}, @end, @end, @generic={0x94, 0x9, '\'\'fY}=1'}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x180, 0x0, 0x84, r5, r6}, {0x1, 0x2, 0x6, 0xff, 0x3, 0x6, 0x7f, 0x100000000}, {0x100, 0x3, 0x5, 0x7}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xef}, 0x2, @in=@broadcast, 0x0, 0x2, 0x3, 0x81, 0x8000, 0x6, 0x3}}, 0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r8, 0x0, 0x6, 0x0, &(0x7f0000695ffc)) r9 = socket$isdn_base(0x22, 0x3, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000001500)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) sendmsg$netlink(r2, &(0x7f0000001700)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000000880)=[{&(0x7f0000000340)={0x2c8, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="6af3d831e81d8ecff76aeead1946740f4c83ba12e3b0e9482ab9f0782300df79d10da72d7c68751f81118b668df654a042931498d9b981a8fe5c07f310b65716e28b985d6cf5ae459bb6b232fa32b050333d799f59e48e362f3531f08ced926bb296", @nested={0x43, 0x13b, 0x0, 0x1, [@generic="cca8e23b2e978f1cdeaafe45fc3b263710108032c3e6d95dd44cd600da8873067153a7ad7efa0aa5392b4be9c06832a0bf32ddf799512ad022cd9432204746"]}, @generic="d3", @typed={0x93, 0x92, 0x0, 0x0, @binary="0508a32938e367e239b567cc183025a43899f11c8b264352d44c1cc59d07529b8c8d918d3b37a7f4d51532fe5dab77f6b38ccf581a79782000285ad677e4ec66c3c5d32c6dd71b1b183f3d3a7489d88f8ec5e27de8917167c34a0b4f817b4e0f3241a6ae0bb0a1f0d8f7e34012c08c6ecd9bb59885c37f698a718f59e71c4dd2445e2460beb8cf1b71adcac07cefcb"}, @nested={0x17b, 0x67, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast2}, @generic="a0df03fa1199dc06dbb29369cdfd3bef37eb6cf77bb9c51c8602fab62c79e8ebb7440b2fd6156fc4344b4e0d76d4302f3f25ee915195b4eb76f2dcc38055fc106d5176df64aff6", @typed={0x8, 0xac, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0xb, 0x112, 0x0, 0x0, @str=':].$-/\x00'}, @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@remote}, @generic="a2d2fc42393627ed0db1e7ec2a100c8e19a45185d22919f827f5cc8632c72d3b796fc940f49cdcf5367d5d512d4dc7086b28095c9e16676a875adbc5fcea167c13d76c4ac3210de7d732084c0052eef0a18b98641c1e2d5be837ed0fa2a3a36c8548d640f8cda437420eb98b09747efdda06666b7bbe10122744e6079dd1d489d0790c4ef034a0befabaeb498cbae0496ecb95e53670919e752ade471b24f533c88ec4c6069755c1b95430370836eba34841954bac3f4251f3e23ae59ffebf90d756e93a64f068a4bb08153693001bf90be753a57eede95eb91689ced05fbfe68c011e70a48a438c6802390d980e0670c0d91520bca5bbe8"]}]}, 0x2c8}, {&(0x7f0000000700)={0x108, 0x28, 0x300, 0x70bd2a, 0x0, "", [@typed={0x8, 0x66, 0x0, 0x0, @pid}, @generic="64e6aed2cbcfcf905517f030e6f9e0810271dce1cf05467ecb27aa8eb0247c5cbf3e6bb7e4baf32a2bff4869cb5989d64b679bb127881aba2170b7477e24bc832838662fd2ad1080a771f6f9fce0d67c011fe17d91c8ef81bec52f43dc954ca436541a5f75a67cd59adf75d4c35f229d3f97e8233070b3caf63f9edbc0047d5f6fc5b64196ede9ab28afad491b49998297aa71deb30e5a8b2459d5f66504e5cbec4cab4ecdefc37ada4aa162ef24b9d6e65b8800def8f7aeb58bcdbd423797f7ba869dc785f1e2904a8a7d1ac3dd3b71ffa8c305b866106ade39880bbe384664fda584d8e729ec", @typed={0x8, 0x105, 0x0, 0x0, @u32=0x4}]}, 0x108}, {&(0x7f0000000c00)={0x3b4, 0x2c, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x223, 0x68, 0x0, 0x1, [@typed={0x7, 0x70, 0x0, 0x0, @str='%:\x00'}, @typed={0xcf, 0x53, 0x0, 0x0, @binary="20b01086a7a27e74b99e2c4d682d020bc8e38eddf99e44c1044bfe855ebef8e4fc4f495d84c21a5a59a9231181173c6c5d7eaedde6dfc7c3b300ad35a3b306508c59eab706e2417e2d89c635b0be83e5ce30f864b3b922c71924a0e8032630eec5359e712cf7a7caefd55ed73b3ddfee8ce97e6623d65b433992856bcb91f8917c6e218cfda6f1b376ff25bc808c341d46aa37c18292b30566267d064b5402470959f2a5c4d986cb4e0f9d4e380975408ce4f4c21af1e3f7fb348187af4053c0b114124044898eb09caf23"}, @typed={0x8, 0xe3, 0x0, 0x0, @uid}, @generic="49088a422b8f95046ece4e410c80ba056e8f1ca1e5a29a43f2b38c9466272bec8778649d8edec1b59af6ca10a8f243f0a10312fc3bf9d1db5939a5ce29853da1864e6f613f8dfd2b7a1b710712733ed6b568617c39fcf66087aaad2650aa214c8a4b15d155db8f", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x80000000}, @generic="9d95", @generic="80b7f8de47f364a070d43c17930cb2f29bb3866a61845ddbf79abb65d6d11c53efc269454665602ad867f631d56feb73c2232207f2d2e66eccaefd9fe8bd2778290710a1947e4b7abb3f8bb119fceaf986d7640406be3f637de007b1d11bdc0fb01e4cb760c99d0d02ccc5489369a93ec381c0136a077f501dec7f624cad7fc6c128d7feab234ccd2596c6a3cc47ad0e1b12b981b1522b301d0ea953397851827839fe95fa696cbb841b4a4d6f12cfaa8bdb33b44f90875d3013df40de3cb6dd2f938e2a1e393bbe1310"]}, @typed={0x8e, 0x48, 0x0, 0x0, @binary="b91c04250e6ada1e18cdbe0499c2d780c6059579b31c4f9620fc407bcd21fdeec2190566fe1a2c9eec5915842cd1099f6eba4d9c1b847dc265b44828a47826baca2de53aa48eca2e081004193f6b3da3bb4dbc130b74d05a404ec230fe6b426c569580f70b20aaf7a8f153ff5785a09193c7213fd1c04da818cd463f06aa4221862e6010f13827d97464"}, @nested={0x4, 0x2b}, @generic="c643ffb643c56e50ea3673e0c76b4a2c8a11042353a5df53f8d3c9093230f151e72654f1e4d6401a7fb7835c9f9d75736d1d141509ddd5c12791d539ea12a83baef64935b7f971100dcb79bcb5efa82394b1ff57ef8d17e1f8264e1dd4d33d6353134d7078e1bd461d925a1cd83560714dbfc544bf8b9441af507cb95bc071912d29ffabb38c0dde50ab2d58d5963645decaef31b3ba0979fb562570c7b24e2afbfa8edc10419c0c7cc40bbf902e6399ac8a9af9a0e34d9c21c7c6256898afc766bbe7c507d80728dccaabeaab953d8b6db9a2d2914632f5a7003b289e402b6ab2325693315d47fe9b4105a1"]}, 0x3b4}, {&(0x7f0000000fc0)={0x510, 0x19, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="9fabf5e7183559c3ac5a95e7ba3d309b56c001c23c6307", @generic="daabc6af3ccca265dfa3fed22a14058ee860a65cb5d7ebfe1cc6dbf8b1d1d7b021f04adc4548b0c30f7d4b631b4fd04c3acf1ff72773b19e7fb93c3a96a8ba4e251c80f7893179aa141345286a5438a5139d8a888ca26ace6e98f803e6c327897b4f562ade4cb24549f9229fdd88db86610c2526bea30fdecf7291f7bf562ae9b39ae6ec8ae90e0b2691cb1b03d70398d252b33b17de3744b7fdc5f1b8773fe094e36d32719ee682ec5a818b247773eba72a27635f885b7cbcd8f8454d2245ec943e236dfc7351a011e1ce78cc7c5da7b9ea1ebab2ca61e54343d8", @generic="12dbeb65f8053e1dec95fe373afce023ea167f35b6e08a7c83f64076de235503bb554ce9e711c3d12ce98722020d2454743aa920eacd5a7fee289340b3ef0b51ee7af337e3133fcb96ac18b6fd18df20d9194bdbca37a389486606d5eb9c4e52c2b114a6194c813978d5f125988f336a71c380560dd2deb0856b8feb5460a721d89444b113fdf5a9b67fd84b6e", @nested={0xc3, 0x1e, 0x0, 0x1, [@typed={0x6, 0x79, 0x0, 0x0, @str='-\x00'}, @generic="66ce5c8a72efe5a448be87d84a409e377e83074f113895321f7108b22488d7a37c03429206a008f3f93b5454fe5f9b9e9235796860dccfa5cbc13d616d4129788d2f77e17140a347b6b4478d4e68f6022db0527ddaf590871d37e84db8673c655a8526917488c25337438414bf6cfa05b19cd63f63d8aacfd4c21472424e441f568787a8d4cb563fe4f48c1451c3f627bf1be56a00a865591630bf5a8e7375954cc655", @typed={0x8, 0x4, 0x0, 0x0, @fd}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x74a}]}, @generic="8a036342daef38e11a7515c1ea97fe0e190a0532b659e9a5b2f8c5f35c056f381844eb318e39abed7416b70f3f663300ba5e3c731b14baccda18f651deab8a6b06b2cd8281110f520e1d4eca664a6502785cf71cc421770689fb0ac1f411bc3e8c7ab7f2c6daca546e67b9f5a409a94edc29fe02f8a8542de1bd04b91b8ee7b8fa7c6ccde3a7ebf9031b7539b2c63095", @nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @pid}]}, @generic="23c5f75c65366f0e09f6661a0d0b5683feead5584dacd3ac33419da9790a9dafd56bf464dde5c1774a8ebf333e47e4f83eefbf972d6d6425e12c74ac2208f883ca5765b2c9523ac9899792e305ebeb8354f57174f569096726c01ad3660a9bfd404145853920330c4579ba970c3b96d2d13f52a3b7932e43dc7e02db5a875062da4829169ed77df063bccbf3af3be8e636d9e7fc4b2dab7b0f7bf54449c6a17c7619b57fc839f86ef667b66cdb9f281194f2e1d46f1c881a4e97db22f1d5807d2b0a5f8d766b992b378e36e88dd6590316df959a10ee26624402d888d6e7caec820a89d9fa6f22d8453c23cfdf779fe7b494", @nested={0x34, 0xd0, 0x0, 0x1, [@typed={0xa, 0x148, 0x0, 0x0, @str='*.\xbe*.\x00'}, @typed={0x11, 0x130, 0x0, 0x0, @str='sched_switch\x00'}, @typed={0x8, 0x1e, 0x0, 0x0, @pid}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@remote}]}, @generic="d247b1025b1731ab7262a293289a1245c442fe11b941192d5682f31714c740fa101bf8f368b3c35704a552fe51380432e79b3cc2bd986073ff5112750a7ae67434ed3649e18916b66683dfe978864e91ed56ffb3d65fbfdb62670d17c498d33f2b254f515c1fd4641c6d99611aecb307b9a88742c996078c8fbd923e6048d5a80c474b4803c3a6cdaae1c16900a0c2bca9e355122b97f4369553cd6f8c5257663e9d66b32a59da8260dbc551bbc7014539f9e08702ed86a218d1b50fd4a0a4f69787c43de25d00e162dab3b7750110dad9eb920d94da977ba1a0580073ef3729e7b6a8c030f0fe6c14bf1fb330", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x6}]}, 0x510}, {&(0x7f0000000840)={0x2c, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1c, 0x6d, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x129, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}]}]}, 0x2c}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r3, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r8]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r9, r10, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x140, 0x10}, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r13, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 947.373109ms ago: executing program 1 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'geneve1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_deladdr={0x4c, 0x15, 0x300, 0x70bd26, 0x25dfdbff, {0x2, 0x78, 0xde, 0x0, r5}, [@IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) (async) sendto$packet(r4, &(0x7f00000000c0)="3f030e02f00712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x4, 0x0, 0x6, @multicast}, 0x14) 880.345867ms ago: executing program 0 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="a7000000000000000000000000000000711236000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 808.953749ms ago: executing program 2 (id=549): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 740.84889ms ago: executing program 1 (id=550): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}}, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b"], 0xe4}}, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) close(r7) 726.299003ms ago: executing program 0 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 706.62201ms ago: executing program 2 (id=552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0xfffd, {@in6_addr=@empty, 0x800}}}]}, 0x38}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x38, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x6}, {0x8}, {0x8}]}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3c}}}}}}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e22, @empty}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x10, &(0x7f00000000c0), &(0x7f00000003c0)=0x8) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 680.784745ms ago: executing program 4 (id=553): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000df0000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00014000000000000004000c000240000000080000ff3f0800044000000001"], 0xc0}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x5) unshare(0x20000400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x6, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='ext4_writepages_result\x00', r6}, 0x10) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f00000007c0)) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0, 0x40}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x84000a00}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e5eb4e0f101adc047c538b11ed543174c63e0383bd1821360bc98c5b40d789157f00e491b9c0d98399e9da6553a95cfa91f18535ecac2fa020c9aca6ed01b1ac82350e90528c59ec88ea7dbb6d4ea009b3a902cf31084f43e58649e174fb4d52cef818dc77afcca8c6d7cd398b357057e4d77928fe73398b90c740a68b39c697853278a358bfffcbda6ee45cdaf4f8ef3d1fb8cd1e0a3af29ec014ae719baa34", @ANYRES16=r8, @ANYBLOB="00042bbd7000fcdbdf250d0000000c000600030000000300000008000300", @ANYRES32=r10, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40008044}, 0x40880d2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r11}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) close(r13) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 567.73175ms ago: executing program 0 (id=554): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5}, 0x9c) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f00000001c0)=""/149, 0x95) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x160, 0xa, 0x148, 0x160, 0x10, 0x298, 0x2a8, 0x2a8, 0x298, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'wg1\x00'}, 0x0, 0x120, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00', {0x0, 0x0, 0x9, 0x0, 0xffffffff, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'netpci0\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x390) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x891b, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) write$binfmt_script(r5, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000280), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffc, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800051000000000000006808500000050000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='ext4_es_find_extent_range_exit\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x43400) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000010000000050000000000e6ff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000025f87df99dc48af4"], 0x38}}, 0x0) 476.921763ms ago: executing program 4 (id=555): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000008000140000007000500020000000000080006400000000408000440000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x4, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x88a8, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}}, 0x0) 438.146365ms ago: executing program 3 (id=556): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x640, 0x0) 323.353713ms ago: executing program 4 (id=557): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xd4, 0x0, &(0x7f00000000c0)) 257.019841ms ago: executing program 3 (id=558): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x0, 0x4, @local, 0x2000000}, 0x1c) 204.809889ms ago: executing program 0 (id=559): socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x74}]}, 0x10) 160.322249ms ago: executing program 2 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000001140)={&(0x7f0000000f00)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) 81.012375ms ago: executing program 3 (id=561): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(r2, &(0x7f0000000000)=""/3, 0x3, 0x7000000, 0x0, 0x0) 80.349637ms ago: executing program 4 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xb, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x43, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000000c0)=0x14) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x101c1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="1f000000000007010000000000000000077c00000c0001800800"], 0x20}}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', 0x0}) pipe(&(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000280)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac14141218009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x94, 0x32, 0x0, 0x1000, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x94}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000b00)) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 36.958875ms ago: executing program 0 (id=563): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/21]) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000003e00)) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e23, 0xc4, @mcast1, 0x5}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@noop, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x6, 0xc, "7cae9b98530d363ad53e"}, {0x0, 0xb, "63f313354a8b6d23e1"}, {0x7, 0x6, "cf1a45ac"}, {0x0, 0x5, "ea3261"}, {0x0, 0xc, "c40375aec0fc1b8bb0dc"}, {0x2, 0x2}, {0x0, 0x9, "6afe0ac74d79e5"}]}, @end, @end, @generic={0x94, 0x9, '\'\'fY}=1'}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x180, 0x0, 0x84, r5, r6}, {0x1, 0x2, 0x6, 0xff, 0x3, 0x6, 0x7f, 0x100000000}, {0x100, 0x3, 0x5, 0x7}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xef}, 0x2, @in=@broadcast, 0x0, 0x2, 0x3, 0x81, 0x8000, 0x6, 0x3}}, 0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r8, 0x0, 0x6, 0x0, &(0x7f0000695ffc)) r9 = socket$isdn_base(0x22, 0x3, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000001500)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) sendmsg$netlink(r2, &(0x7f0000001700)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000000880)=[{&(0x7f0000000340)={0x2c8, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="6af3d831e81d8ecff76aeead1946740f4c83ba12e3b0e9482ab9f0782300df79d10da72d7c68751f81118b668df654a042931498d9b981a8fe5c07f310b65716e28b985d6cf5ae459bb6b232fa32b050333d799f59e48e362f3531f08ced926bb296", @nested={0x43, 0x13b, 0x0, 0x1, [@generic="cca8e23b2e978f1cdeaafe45fc3b263710108032c3e6d95dd44cd600da8873067153a7ad7efa0aa5392b4be9c06832a0bf32ddf799512ad022cd9432204746"]}, @generic="d3", @typed={0x93, 0x92, 0x0, 0x0, @binary="0508a32938e367e239b567cc183025a43899f11c8b264352d44c1cc59d07529b8c8d918d3b37a7f4d51532fe5dab77f6b38ccf581a79782000285ad677e4ec66c3c5d32c6dd71b1b183f3d3a7489d88f8ec5e27de8917167c34a0b4f817b4e0f3241a6ae0bb0a1f0d8f7e34012c08c6ecd9bb59885c37f698a718f59e71c4dd2445e2460beb8cf1b71adcac07cefcb"}, @nested={0x17b, 0x67, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast2}, @generic="a0df03fa1199dc06dbb29369cdfd3bef37eb6cf77bb9c51c8602fab62c79e8ebb7440b2fd6156fc4344b4e0d76d4302f3f25ee915195b4eb76f2dcc38055fc106d5176df64aff6", @typed={0x8, 0xac, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0xb, 0x112, 0x0, 0x0, @str=':].$-/\x00'}, @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@remote}, @generic="a2d2fc42393627ed0db1e7ec2a100c8e19a45185d22919f827f5cc8632c72d3b796fc940f49cdcf5367d5d512d4dc7086b28095c9e16676a875adbc5fcea167c13d76c4ac3210de7d732084c0052eef0a18b98641c1e2d5be837ed0fa2a3a36c8548d640f8cda437420eb98b09747efdda06666b7bbe10122744e6079dd1d489d0790c4ef034a0befabaeb498cbae0496ecb95e53670919e752ade471b24f533c88ec4c6069755c1b95430370836eba34841954bac3f4251f3e23ae59ffebf90d756e93a64f068a4bb08153693001bf90be753a57eede95eb91689ced05fbfe68c011e70a48a438c6802390d980e0670c0d91520bca5bbe8"]}]}, 0x2c8}, {&(0x7f0000000700)={0x108, 0x28, 0x300, 0x70bd2a, 0x0, "", [@typed={0x8, 0x66, 0x0, 0x0, @pid}, @generic="64e6aed2cbcfcf905517f030e6f9e0810271dce1cf05467ecb27aa8eb0247c5cbf3e6bb7e4baf32a2bff4869cb5989d64b679bb127881aba2170b7477e24bc832838662fd2ad1080a771f6f9fce0d67c011fe17d91c8ef81bec52f43dc954ca436541a5f75a67cd59adf75d4c35f229d3f97e8233070b3caf63f9edbc0047d5f6fc5b64196ede9ab28afad491b49998297aa71deb30e5a8b2459d5f66504e5cbec4cab4ecdefc37ada4aa162ef24b9d6e65b8800def8f7aeb58bcdbd423797f7ba869dc785f1e2904a8a7d1ac3dd3b71ffa8c305b866106ade39880bbe384664fda584d8e729ec", @typed={0x8, 0x105, 0x0, 0x0, @u32=0x4}]}, 0x108}, {&(0x7f0000000c00)={0x3b4, 0x2c, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x223, 0x68, 0x0, 0x1, [@typed={0x7, 0x70, 0x0, 0x0, @str='%:\x00'}, @typed={0xcf, 0x53, 0x0, 0x0, @binary="20b01086a7a27e74b99e2c4d682d020bc8e38eddf99e44c1044bfe855ebef8e4fc4f495d84c21a5a59a9231181173c6c5d7eaedde6dfc7c3b300ad35a3b306508c59eab706e2417e2d89c635b0be83e5ce30f864b3b922c71924a0e8032630eec5359e712cf7a7caefd55ed73b3ddfee8ce97e6623d65b433992856bcb91f8917c6e218cfda6f1b376ff25bc808c341d46aa37c18292b30566267d064b5402470959f2a5c4d986cb4e0f9d4e380975408ce4f4c21af1e3f7fb348187af4053c0b114124044898eb09caf23"}, @typed={0x8, 0xe3, 0x0, 0x0, @uid}, @generic="49088a422b8f95046ece4e410c80ba056e8f1ca1e5a29a43f2b38c9466272bec8778649d8edec1b59af6ca10a8f243f0a10312fc3bf9d1db5939a5ce29853da1864e6f613f8dfd2b7a1b710712733ed6b568617c39fcf66087aaad2650aa214c8a4b15d155db8f", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x80000000}, @generic="9d95", @generic="80b7f8de47f364a070d43c17930cb2f29bb3866a61845ddbf79abb65d6d11c53efc269454665602ad867f631d56feb73c2232207f2d2e66eccaefd9fe8bd2778290710a1947e4b7abb3f8bb119fceaf986d7640406be3f637de007b1d11bdc0fb01e4cb760c99d0d02ccc5489369a93ec381c0136a077f501dec7f624cad7fc6c128d7feab234ccd2596c6a3cc47ad0e1b12b981b1522b301d0ea953397851827839fe95fa696cbb841b4a4d6f12cfaa8bdb33b44f90875d3013df40de3cb6dd2f938e2a1e393bbe1310"]}, @typed={0x8e, 0x48, 0x0, 0x0, @binary="b91c04250e6ada1e18cdbe0499c2d780c6059579b31c4f9620fc407bcd21fdeec2190566fe1a2c9eec5915842cd1099f6eba4d9c1b847dc265b44828a47826baca2de53aa48eca2e081004193f6b3da3bb4dbc130b74d05a404ec230fe6b426c569580f70b20aaf7a8f153ff5785a09193c7213fd1c04da818cd463f06aa4221862e6010f13827d97464"}, @nested={0x4, 0x2b}, @generic="c643ffb643c56e50ea3673e0c76b4a2c8a11042353a5df53f8d3c9093230f151e72654f1e4d6401a7fb7835c9f9d75736d1d141509ddd5c12791d539ea12a83baef64935b7f971100dcb79bcb5efa82394b1ff57ef8d17e1f8264e1dd4d33d6353134d7078e1bd461d925a1cd83560714dbfc544bf8b9441af507cb95bc071912d29ffabb38c0dde50ab2d58d5963645decaef31b3ba0979fb562570c7b24e2afbfa8edc10419c0c7cc40bbf902e6399ac8a9af9a0e34d9c21c7c6256898afc766bbe7c507d80728dccaabeaab953d8b6db9a2d2914632f5a7003b289e402b6ab2325693315d47fe9b4105a1"]}, 0x3b4}, {&(0x7f0000000fc0)={0x510, 0x19, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="9fabf5e7183559c3ac5a95e7ba3d309b56c001c23c6307", @generic="daabc6af3ccca265dfa3fed22a14058ee860a65cb5d7ebfe1cc6dbf8b1d1d7b021f04adc4548b0c30f7d4b631b4fd04c3acf1ff72773b19e7fb93c3a96a8ba4e251c80f7893179aa141345286a5438a5139d8a888ca26ace6e98f803e6c327897b4f562ade4cb24549f9229fdd88db86610c2526bea30fdecf7291f7bf562ae9b39ae6ec8ae90e0b2691cb1b03d70398d252b33b17de3744b7fdc5f1b8773fe094e36d32719ee682ec5a818b247773eba72a27635f885b7cbcd8f8454d2245ec943e236dfc7351a011e1ce78cc7c5da7b9ea1ebab2ca61e54343d8", @generic="12dbeb65f8053e1dec95fe373afce023ea167f35b6e08a7c83f64076de235503bb554ce9e711c3d12ce98722020d2454743aa920eacd5a7fee289340b3ef0b51ee7af337e3133fcb96ac18b6fd18df20d9194bdbca37a389486606d5eb9c4e52c2b114a6194c813978d5f125988f336a71c380560dd2deb0856b8feb5460a721d89444b113fdf5a9b67fd84b6e", @nested={0xc3, 0x1e, 0x0, 0x1, [@typed={0x6, 0x79, 0x0, 0x0, @str='-\x00'}, @generic="66ce5c8a72efe5a448be87d84a409e377e83074f113895321f7108b22488d7a37c03429206a008f3f93b5454fe5f9b9e9235796860dccfa5cbc13d616d4129788d2f77e17140a347b6b4478d4e68f6022db0527ddaf590871d37e84db8673c655a8526917488c25337438414bf6cfa05b19cd63f63d8aacfd4c21472424e441f568787a8d4cb563fe4f48c1451c3f627bf1be56a00a865591630bf5a8e7375954cc655", @typed={0x8, 0x4, 0x0, 0x0, @fd}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x74a}]}, @generic="8a036342daef38e11a7515c1ea97fe0e190a0532b659e9a5b2f8c5f35c056f381844eb318e39abed7416b70f3f663300ba5e3c731b14baccda18f651deab8a6b06b2cd8281110f520e1d4eca664a6502785cf71cc421770689fb0ac1f411bc3e8c7ab7f2c6daca546e67b9f5a409a94edc29fe02f8a8542de1bd04b91b8ee7b8fa7c6ccde3a7ebf9031b7539b2c63095", @nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @pid}]}, @generic="23c5f75c65366f0e09f6661a0d0b5683feead5584dacd3ac33419da9790a9dafd56bf464dde5c1774a8ebf333e47e4f83eefbf972d6d6425e12c74ac2208f883ca5765b2c9523ac9899792e305ebeb8354f57174f569096726c01ad3660a9bfd404145853920330c4579ba970c3b96d2d13f52a3b7932e43dc7e02db5a875062da4829169ed77df063bccbf3af3be8e636d9e7fc4b2dab7b0f7bf54449c6a17c7619b57fc839f86ef667b66cdb9f281194f2e1d46f1c881a4e97db22f1d5807d2b0a5f8d766b992b378e36e88dd6590316df959a10ee26624402d888d6e7caec820a89d9fa6f22d8453c23cfdf779fe7b494", @nested={0x34, 0xd0, 0x0, 0x1, [@typed={0xa, 0x148, 0x0, 0x0, @str='*.\xbe*.\x00'}, @typed={0x11, 0x130, 0x0, 0x0, @str='sched_switch\x00'}, @typed={0x8, 0x1e, 0x0, 0x0, @pid}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@remote}]}, @generic="d247b1025b1731ab7262a293289a1245c442fe11b941192d5682f31714c740fa101bf8f368b3c35704a552fe51380432e79b3cc2bd986073ff5112750a7ae67434ed3649e18916b66683dfe978864e91ed56ffb3d65fbfdb62670d17c498d33f2b254f515c1fd4641c6d99611aecb307b9a88742c996078c8fbd923e6048d5a80c474b4803c3a6cdaae1c16900a0c2bca9e355122b97f4369553cd6f8c5257663e9d66b32a59da8260dbc551bbc7014539f9e08702ed86a218d1b50fd4a0a4f69787c43de25d00e162dab3b7750110dad9eb920d94da977ba1a0580073ef3729e7b6a8c030f0fe6c14bf1fb330", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x6}]}, 0x510}, {&(0x7f0000000840)={0x2c, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1c, 0x6d, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x129, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}]}]}, 0x2c}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r3, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r8]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r9, r10, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x140, 0x10}, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r13, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 55.114155][ T5075] cgroup: Unknown subsys name 'net' [ 55.223605][ T5075] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.601485][ T5075] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.248124][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.258463][ T4488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.266772][ T4488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.285376][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.297212][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.304666][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.317660][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.323719][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.324940][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.333163][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.340732][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.347898][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.354720][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.368790][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.369645][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.376252][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.383646][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.390477][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.397915][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.404121][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.411772][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.418357][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.426709][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.433707][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.439742][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.445666][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.462729][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.470708][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.478314][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.487051][ T4488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.005086][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 58.021108][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 58.195392][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 58.208763][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 58.309117][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 58.321004][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.329218][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.336930][ T5087] bridge_slave_0: entered allmulticast mode [ 58.343739][ T5087] bridge_slave_0: entered promiscuous mode [ 58.370175][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.377545][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.384813][ T5084] bridge_slave_0: entered allmulticast mode [ 58.391784][ T5084] bridge_slave_0: entered promiscuous mode [ 58.404373][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.411741][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.419557][ T5087] bridge_slave_1: entered allmulticast mode [ 58.426716][ T5087] bridge_slave_1: entered promiscuous mode [ 58.468998][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.476348][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.483541][ T5084] bridge_slave_1: entered allmulticast mode [ 58.490590][ T5084] bridge_slave_1: entered promiscuous mode [ 58.537571][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.544689][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.552242][ T5099] bridge_slave_0: entered allmulticast mode [ 58.559091][ T5099] bridge_slave_0: entered promiscuous mode [ 58.568285][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.575413][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.582691][ T5099] bridge_slave_1: entered allmulticast mode [ 58.589946][ T5099] bridge_slave_1: entered promiscuous mode [ 58.625650][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.664322][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.678489][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.698662][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.724622][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.754997][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.774565][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.784033][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.791816][ T5094] bridge_slave_0: entered allmulticast mode [ 58.799388][ T5094] bridge_slave_0: entered promiscuous mode [ 58.824561][ T5087] team0: Port device team_slave_0 added [ 58.853344][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.862454][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.870025][ T5094] bridge_slave_1: entered allmulticast mode [ 58.878000][ T5094] bridge_slave_1: entered promiscuous mode [ 58.915604][ T5084] team0: Port device team_slave_0 added [ 58.923576][ T5084] team0: Port device team_slave_1 added [ 58.931389][ T5087] team0: Port device team_slave_1 added [ 58.951759][ T5099] team0: Port device team_slave_0 added [ 58.974415][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.983509][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.991229][ T5090] bridge_slave_0: entered allmulticast mode [ 58.998814][ T5090] bridge_slave_0: entered promiscuous mode [ 59.007197][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.014328][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.022110][ T5090] bridge_slave_1: entered allmulticast mode [ 59.029633][ T5090] bridge_slave_1: entered promiscuous mode [ 59.060845][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.067921][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.094563][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.108964][ T5099] team0: Port device team_slave_1 added [ 59.117561][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.129687][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.159343][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.166480][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.192653][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.242885][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.252888][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.260487][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.287028][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.301239][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.308446][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.334615][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.379283][ T5094] team0: Port device team_slave_0 added [ 59.388351][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.428008][ T5090] team0: Port device team_slave_0 added [ 59.434719][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.442008][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.468140][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.481820][ T5094] team0: Port device team_slave_1 added [ 59.525212][ T5090] team0: Port device team_slave_1 added [ 59.536708][ T5092] Bluetooth: hci0: command tx timeout [ 59.536805][ T5095] Bluetooth: hci4: command tx timeout [ 59.542462][ T5092] Bluetooth: hci1: command tx timeout [ 59.548129][ T4488] Bluetooth: hci3: command tx timeout [ 59.563463][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.570533][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.596556][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.612591][ T4488] Bluetooth: hci2: command tx timeout [ 59.632102][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.639181][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.665348][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.692764][ T5087] hsr_slave_0: entered promiscuous mode [ 59.699016][ T5087] hsr_slave_1: entered promiscuous mode [ 59.751056][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.761290][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.787544][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.818740][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.825767][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.852383][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.868188][ T5099] hsr_slave_0: entered promiscuous mode [ 59.874742][ T5099] hsr_slave_1: entered promiscuous mode [ 59.881286][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.889113][ T5099] Cannot create hsr debugfs directory [ 59.899232][ T5084] hsr_slave_0: entered promiscuous mode [ 59.906709][ T5084] hsr_slave_1: entered promiscuous mode [ 59.912838][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.920489][ T5084] Cannot create hsr debugfs directory [ 59.961296][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.968509][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.994880][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.112338][ T5094] hsr_slave_0: entered promiscuous mode [ 60.120087][ T5094] hsr_slave_1: entered promiscuous mode [ 60.127816][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.135368][ T5094] Cannot create hsr debugfs directory [ 60.215556][ T5090] hsr_slave_0: entered promiscuous mode [ 60.222267][ T5090] hsr_slave_1: entered promiscuous mode [ 60.231632][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.239308][ T5090] Cannot create hsr debugfs directory [ 60.510336][ T5084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.531697][ T5084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.567629][ T5084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.578301][ T5084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.666303][ T5087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.677401][ T5087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.688821][ T5087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.699440][ T5087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.794952][ T5094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.809063][ T5094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.822212][ T5094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.832579][ T5094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.911026][ T5099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.941753][ T5099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.951868][ T5099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.964048][ T5099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.047608][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.093077][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.108500][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.134455][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.149950][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.219941][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.242505][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.292997][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.300582][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.337834][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.344965][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.374271][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.385128][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.433884][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.441186][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.453458][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.460559][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.494489][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.535590][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.557915][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.564994][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.606346][ T4488] Bluetooth: hci1: command tx timeout [ 61.611789][ T4488] Bluetooth: hci0: command tx timeout [ 61.616240][ T5095] Bluetooth: hci3: command tx timeout [ 61.617538][ T5101] Bluetooth: hci4: command tx timeout [ 61.633867][ T5087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.659317][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.677603][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.691142][ T4488] Bluetooth: hci2: command tx timeout [ 61.702516][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.721041][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.728207][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.788315][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.795468][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.829952][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.837153][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.907393][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.972804][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.979986][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.012504][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.019671][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.045023][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.120581][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.317674][ T5084] veth0_vlan: entered promiscuous mode [ 62.343346][ T5084] veth1_vlan: entered promiscuous mode [ 62.399117][ T5087] veth0_vlan: entered promiscuous mode [ 62.462550][ T5087] veth1_vlan: entered promiscuous mode [ 62.494191][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.524511][ T5084] veth0_macvtap: entered promiscuous mode [ 62.554028][ T5084] veth1_macvtap: entered promiscuous mode [ 62.583339][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.592122][ T5087] veth0_macvtap: entered promiscuous mode [ 62.619204][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.634715][ T5087] veth1_macvtap: entered promiscuous mode [ 62.651738][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.705869][ T5084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.714861][ T5084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.727559][ T5084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.737571][ T5084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.752059][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.848864][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.866318][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.880004][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.894113][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.904997][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.922843][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.933498][ T5094] veth0_vlan: entered promiscuous mode [ 62.958666][ T5087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969916][ T5087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.979188][ T5087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.988148][ T5087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.033207][ T5090] veth0_vlan: entered promiscuous mode [ 63.051736][ T5094] veth1_vlan: entered promiscuous mode [ 63.080851][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.087897][ T5090] veth1_vlan: entered promiscuous mode [ 63.105070][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.163082][ T5094] veth0_macvtap: entered promiscuous mode [ 63.175141][ T5094] veth1_macvtap: entered promiscuous mode [ 63.224881][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.233378][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.296451][ T5099] veth0_vlan: entered promiscuous mode [ 63.311645][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.322458][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.332655][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.343146][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.354611][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.403526][ T5090] veth0_macvtap: entered promiscuous mode [ 63.425169][ T5099] veth1_vlan: entered promiscuous mode [ 63.441857][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.462760][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.473376][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.489756][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.502881][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.513308][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.530522][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.546898][ T5090] veth1_macvtap: entered promiscuous mode [ 63.583484][ T5094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.602688][ T5094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614224][ T5094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.623641][ T5094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.652853][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.664765][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.686442][ T4488] Bluetooth: hci0: command tx timeout [ 63.691888][ T4488] Bluetooth: hci4: command tx timeout [ 63.697725][ T5101] Bluetooth: hci3: command tx timeout [ 63.697770][ T5092] Bluetooth: hci1: command tx timeout [ 63.759274][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.770158][ T5092] Bluetooth: hci2: command tx timeout [ 63.790327][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.803864][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.817014][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.826944][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.837407][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.850644][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.917370][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.942401][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.966892][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.004665][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.020169][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.032581][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.045738][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.081796][ T5099] veth0_macvtap: entered promiscuous mode [ 64.114910][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.128939][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.138875][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.149214][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178606][ T5099] veth1_macvtap: entered promiscuous mode [ 64.221006][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.245298][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.320167][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.334664][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.348600][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.359203][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.369134][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.380499][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.390432][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.401247][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.401862][ T5181] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 64.417679][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.451244][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.468538][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.484942][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.506321][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.516369][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.529838][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.541564][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.552303][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.563347][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.574238][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.587696][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.616664][ T5099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.625611][ T5099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637123][ T5099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.646523][ T5099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.756535][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.788129][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.856475][ T5192] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.913298][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.961840][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.074456][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.136359][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.236115][ T5206] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.269604][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.292844][ T5206] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 65.305693][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.586465][ T5213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15'. [ 65.710033][ T29] audit: type=1804 audit(1719764019.540:2): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.18" name="/root/syzkaller.L59fyQ/3/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 65.714743][ T5222] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 65.776310][ T5092] Bluetooth: hci1: command tx timeout [ 65.782052][ T5095] Bluetooth: hci4: command tx timeout [ 65.782448][ T5224] xt_TCPMSS: Only works on TCP SYN packets [ 65.787600][ T5092] Bluetooth: hci3: command tx timeout [ 65.787639][ T5092] Bluetooth: hci0: command tx timeout [ 65.797796][ T29] audit: type=1804 audit(1719764019.590:3): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.18" name="/root/syzkaller.L59fyQ/3/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 65.851243][ T4488] Bluetooth: hci2: command tx timeout [ 65.936815][ T29] audit: type=1804 audit(1719764019.590:4): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.18" name="/root/syzkaller.L59fyQ/3/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 66.141457][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 66.393316][ T5255] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 66.643928][ T5261] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 66.718785][ T5267] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 67.331446][ T5285] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 67.463998][ T5294] FAULT_INJECTION: forcing a failure. [ 67.463998][ T5294] name failslab, interval 1, probability 0, space 0, times 0 [ 67.507282][ T5295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 67.546880][ T5294] CPU: 0 PID: 5294 Comm: syz.4.40 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 67.556829][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.566999][ T5294] Call Trace: [ 67.570301][ T5294] [ 67.573247][ T5294] dump_stack_lvl+0x241/0x360 [ 67.577976][ T5294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.583201][ T5294] ? __pfx__printk+0x10/0x10 [ 67.587823][ T5294] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 67.593737][ T5294] should_fail_ex+0x3b0/0x4e0 [ 67.598448][ T5294] ? once_disable_jump+0x52/0x1a0 [ 67.603494][ T5294] should_failslab+0x9/0x20 [ 67.608024][ T5294] kmalloc_trace_noprof+0x6c/0x2c0 [ 67.613251][ T5294] once_disable_jump+0x52/0x1a0 [ 67.618122][ T5294] __rds_conn_create+0x1ec3/0x1ed0 [ 67.623263][ T5294] ? __asan_memset+0x23/0x50 [ 67.627880][ T5294] ? __asan_memset+0x23/0x50 [ 67.632497][ T5294] ? __pfx___rds_conn_create+0x10/0x10 [ 67.637999][ T5294] rds_conn_create_outgoing+0x43/0x60 [ 67.643404][ T5294] rds_sendmsg+0x1251/0x2270 [ 67.648024][ T5294] ? __pfx___might_resched+0x10/0x10 [ 67.653436][ T5294] ? __pfx_rds_sendmsg+0x10/0x10 [ 67.658395][ T5294] ? aa_sk_perm+0x967/0xab0 [ 67.662930][ T5294] ? __pfx_aa_sk_perm+0x10/0x10 [ 67.667794][ T5294] ? iovec_from_user+0x61/0x240 [ 67.672672][ T5294] ? __import_iovec+0x361/0x820 [ 67.677542][ T5294] ? aa_sock_msg_perm+0x91/0x160 [ 67.682505][ T5294] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 67.687806][ T5294] ? security_socket_sendmsg+0x87/0xb0 [ 67.693288][ T5294] ? __pfx_rds_sendmsg+0x10/0x10 [ 67.698251][ T5294] __sock_sendmsg+0x221/0x270 [ 67.702963][ T5294] ____sys_sendmsg+0x525/0x7d0 [ 67.707765][ T5294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.713097][ T5294] __sys_sendmsg+0x2b0/0x3a0 [ 67.717731][ T5294] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.722875][ T5294] ? vfs_write+0x7c4/0xc90 [ 67.727364][ T5294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.733718][ T5294] ? do_syscall_64+0x100/0x230 [ 67.738513][ T5294] ? do_syscall_64+0xb6/0x230 [ 67.743308][ T5294] do_syscall_64+0xf3/0x230 [ 67.747844][ T5294] ? clear_bhb_loop+0x35/0x90 [ 67.752552][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.758481][ T5294] RIP: 0033:0x7f6df2775b99 [ 67.762927][ T5294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.782562][ T5294] RSP: 002b:00007f6df3569048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.791018][ T5294] RAX: ffffffffffffffda RBX: 00007f6df2903fa0 RCX: 00007f6df2775b99 [ 67.799114][ T5294] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 67.807111][ T5294] RBP: 00007f6df35690a0 R08: 0000000000000000 R09: 0000000000000000 [ 67.815153][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.823148][ T5294] R13: 000000000000000b R14: 00007f6df2903fa0 R15: 00007ffd1188f428 [ 67.831165][ T5294] [ 68.503154][ T5330] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 68.514448][ T5331] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 68.558670][ T5331] netlink: 277 bytes leftover after parsing attributes in process `syz.2.52'. [ 68.736830][ T5343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 68.803369][ T5344] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 68.880305][ T5348] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.907135][ T5348] Zero length message leads to an empty skb [ 69.028470][ T5330] syz.0.49 (5330) used greatest stack depth: 18256 bytes left [ 69.232139][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 69.482529][ T5385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.019048][ T5415] netlink: 92 bytes leftover after parsing attributes in process `syz.1.78'. [ 70.034959][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 70.051192][ T5418] netlink: 92 bytes leftover after parsing attributes in process `syz.1.78'. [ 70.062355][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.194953][ T5423] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 70.207226][ T5424] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 71.441384][ T5459] __nla_validate_parse: 1 callbacks suppressed [ 71.441403][ T5459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.93'. [ 71.506689][ T5459] netlink: 'syz.0.93': attribute type 29 has an invalid length. [ 71.772760][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.783712][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.188899][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.227830][ T5492] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 72.275734][ T5495] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 72.635446][ T5506] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 72.662498][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 72.960938][ T5515] dvmrp0: entered allmulticast mode [ 73.128358][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 74.152145][ T5572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.224481][ T45] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 74.247423][ T5572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.272001][ T45] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 74.296376][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 74.304213][ T1037] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 74.346803][ T81] wlan1: authentication with 08:02:11:00:00:00 timed out [ 74.412520][ T5583] netlink: 3 bytes leftover after parsing attributes in process `syz.2.126'. [ 74.436163][ T5583] 0ªX¹¦À: renamed from caif0 [ 74.464212][ T5583] 0ªX¹¦À: entered allmulticast mode [ 74.473288][ T5583] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.490993][ T5585] team0: entered promiscuous mode [ 74.500217][ T5585] team_slave_0: entered promiscuous mode [ 74.508156][ T5585] team_slave_1: entered promiscuous mode [ 74.535024][ T5585] team0: left promiscuous mode [ 74.561329][ T5585] team_slave_0: left promiscuous mode [ 74.582406][ T5585] team_slave_1: left promiscuous mode [ 74.751828][ T5602] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 74.778841][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 75.003016][ T5620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.136'. [ 75.530499][ T29] audit: type=1804 audit(1719764029.370:5): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.143" name="/root/syzkaller.h4dMGi/31/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 75.619763][ T5665] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 75.793945][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 75.878860][ T5676] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 75.894972][ T5673] @ÿ: renamed from veth0_vlan (while UP) [ 76.125200][ T5685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 76.236785][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 76.303542][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.310753][ T5693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.528316][ T5708] netlink: 175108 bytes leftover after parsing attributes in process `syz.0.160'. [ 76.560154][ T5708] openvswitch: netlink: ufid size 40 bytes exceeds the range (1, 16) [ 76.585582][ T5708] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 76.639668][ T5708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 76.725554][ T5720] netlink: 312 bytes leftover after parsing attributes in process `syz.4.165'. [ 76.812826][ T5725] team0: entered promiscuous mode [ 76.818249][ T5725] team_slave_0: entered promiscuous mode [ 76.824198][ T5725] team_slave_1: entered promiscuous mode [ 76.854815][ T5724] team0: left promiscuous mode [ 76.861047][ T5724] team_slave_0: left promiscuous mode [ 76.872073][ T5724] team_slave_1: left promiscuous mode [ 76.904227][ T928] cfg80211: failed to load regulatory.db [ 77.109479][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.172'. [ 77.442571][ T5744] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.756177][ T5756] syzkaller0: mtu less than device minimum [ 77.819239][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 77.871255][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 77.897823][ T5756] syzkaller0: entered allmulticast mode [ 78.099001][ T5772] netlink: 120 bytes leftover after parsing attributes in process `syz.3.187'. [ 78.182399][ T5772] netlink: 9 bytes leftover after parsing attributes in process `syz.3.187'. [ 78.213175][ T5772] 0ª: renamed from bond_slave_0 (while UP) [ 78.239301][ T5772] 0ª: entered allmulticast mode [ 78.518216][ T5789] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.193'. [ 78.635461][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 79.006410][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.095997][ T5808] netlink: 'syz.4.200': attribute type 9 has an invalid length. [ 79.104806][ T5808] netlink: 'syz.4.200': attribute type 7 has an invalid length. [ 79.119614][ T5808] netlink: 'syz.4.200': attribute type 8 has an invalid length. [ 79.146176][ T5810] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.665035][ T5824] syzkaller1: entered promiscuous mode [ 79.686855][ T5824] syzkaller1: entered allmulticast mode [ 79.796280][ T5829] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 79.959487][ T5836] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 80.685104][ T5874] x_tables: duplicate underflow at hook 3 [ 81.499678][ T5913] netlink: 'syz.0.237': attribute type 5 has an invalid length. [ 81.546866][ T5919] __nla_validate_parse: 16 callbacks suppressed [ 81.546882][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 81.565673][ T5913] bridge0: entered promiscuous mode [ 81.583396][ T5912] bridge0: left promiscuous mode [ 81.592396][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 81.602057][ T5920] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (129) [ 82.269475][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.410524][ T5964] syz.4.253[5964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.412995][ T5964] syz.4.253[5964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.858880][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 82.970758][ T5994] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 83.002759][ T6000] Bluetooth: MGMT ver 1.22 [ 83.009366][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'. [ 83.166458][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 83.178138][ T6008] FAULT_INJECTION: forcing a failure. [ 83.178138][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 83.191242][ T6006] netem: change failed [ 83.200808][ T6008] CPU: 1 PID: 6008 Comm: syz.3.264 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 83.210817][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.220893][ T6008] Call Trace: [ 83.224187][ T6008] [ 83.227130][ T6008] dump_stack_lvl+0x241/0x360 [ 83.231836][ T6008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.237060][ T6008] ? __pfx__printk+0x10/0x10 [ 83.241684][ T6008] should_fail_ex+0x3b0/0x4e0 [ 83.246374][ T6008] ? security_file_alloc+0x28/0x130 [ 83.251571][ T6008] should_failslab+0x9/0x20 [ 83.256077][ T6008] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 83.261459][ T6008] security_file_alloc+0x28/0x130 [ 83.266496][ T6008] init_file+0x99/0x200 [ 83.270654][ T6008] alloc_empty_file+0xb8/0x1d0 [ 83.275413][ T6008] alloc_file_pseudo+0x1da/0x290 [ 83.280371][ T6008] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 83.285834][ T6008] ? do_raw_spin_unlock+0x13c/0x8b0 [ 83.291054][ T6008] sock_alloc_file+0xb8/0x290 [ 83.295750][ T6008] do_accept+0x3b8/0x6c0 [ 83.300009][ T6008] ? __pfx_do_accept+0x10/0x10 [ 83.304785][ T6008] __sys_accept4+0x11e/0x1c0 [ 83.309405][ T6008] ? __pfx___sys_accept4+0x10/0x10 [ 83.314529][ T6008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.320861][ T6008] ? do_syscall_64+0x100/0x230 [ 83.325631][ T6008] __x64_sys_accept4+0x9a/0xb0 [ 83.330391][ T6008] do_syscall_64+0xf3/0x230 [ 83.334889][ T6008] ? clear_bhb_loop+0x35/0x90 [ 83.339560][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.345447][ T6008] RIP: 0033:0x7f0dc1375b99 [ 83.349853][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.369450][ T6008] RSP: 002b:00007f0dc207a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 83.377856][ T6008] RAX: ffffffffffffffda RBX: 00007f0dc1503fa0 RCX: 00007f0dc1375b99 [ 83.385815][ T6008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 83.393772][ T6008] RBP: 00007f0dc207a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.401734][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.409697][ T6008] R13: 000000000000000b R14: 00007f0dc1503fa0 R15: 00007ffe98d5fcb8 [ 83.417677][ T6008] [ 83.612865][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 83.646487][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 83.966500][ T6040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.276'. [ 84.111200][ T6046] netlink: 'syz.4.278': attribute type 3 has an invalid length. [ 84.126472][ T6046] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.278'. [ 84.177391][ T6050] netlink: 'syz.1.280': attribute type 21 has an invalid length. [ 84.201849][ T6050] netlink: 128 bytes leftover after parsing attributes in process `syz.1.280'. [ 84.251506][ T6054] FAULT_INJECTION: forcing a failure. [ 84.251506][ T6054] name failslab, interval 1, probability 0, space 0, times 0 [ 84.258033][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 84.284804][ T6054] CPU: 1 PID: 6054 Comm: syz.3.279 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 84.294825][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.304907][ T6054] Call Trace: [ 84.308207][ T6054] [ 84.311308][ T6054] dump_stack_lvl+0x241/0x360 [ 84.316028][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.321256][ T6054] ? __pfx__printk+0x10/0x10 [ 84.325876][ T6054] ? __pfx___might_resched+0x10/0x10 [ 84.331181][ T6054] ? stack_depot_init+0x36/0x140 [ 84.336133][ T6054] should_fail_ex+0x3b0/0x4e0 [ 84.340825][ T6054] ? __hw_addr_add_ex+0x1a8/0x610 [ 84.345842][ T6054] should_failslab+0x9/0x20 [ 84.350339][ T6054] kmalloc_trace_noprof+0x6c/0x2c0 [ 84.355450][ T6054] __hw_addr_add_ex+0x1a8/0x610 [ 84.360293][ T6054] dev_addr_init+0x143/0x230 [ 84.364875][ T6054] ? __pfx_dev_addr_init+0x10/0x10 [ 84.369972][ T6054] ? rcu_is_watching+0x15/0xb0 [ 84.374728][ T6054] ? read_word_at_a_time+0xe/0x20 [ 84.379750][ T6054] alloc_netdev_mqs+0x2a7/0xf80 [ 84.384592][ T6054] ? __pfx_macvlan_setup+0x10/0x10 [ 84.389702][ T6054] rtnl_create_link+0x2f9/0xc20 [ 84.394569][ T6054] rtnl_newlink+0x1421/0x20a0 [ 84.399248][ T6054] ? rtnl_newlink+0xae1/0x20a0 [ 84.404041][ T6054] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.409077][ T6054] ? do_raw_spin_unlock+0x13c/0x8b0 [ 84.414295][ T6054] ? __mutex_lock+0x9a5/0xd70 [ 84.418975][ T6054] ? __mutex_lock+0x527/0xd70 [ 84.423664][ T6054] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.428685][ T6054] rtnetlink_rcv_msg+0x89b/0x1180 [ 84.433730][ T6054] ? rtnetlink_rcv_msg+0x208/0x1180 [ 84.438928][ T6054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.444385][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.450365][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.456693][ T6054] ? __local_bh_enable_ip+0x168/0x200 [ 84.462058][ T6054] ? lockdep_hardirqs_on+0x99/0x150 [ 84.467251][ T6054] ? __local_bh_enable_ip+0x168/0x200 [ 84.472617][ T6054] ? dev_hard_start_xmit+0x773/0x7e0 [ 84.477896][ T6054] ? __dev_queue_xmit+0x2d2/0x3d30 [ 84.482999][ T6054] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 84.488716][ T6054] ? __dev_queue_xmit+0x2d2/0x3d30 [ 84.493830][ T6054] ? __dev_queue_xmit+0x16c9/0x3d30 [ 84.499139][ T6054] ? __dev_queue_xmit+0x2d2/0x3d30 [ 84.504273][ T6054] ? ref_tracker_free+0x643/0x7e0 [ 84.509315][ T6054] netlink_rcv_skb+0x1e3/0x430 [ 84.514094][ T6054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.519568][ T6054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.524887][ T6054] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.530094][ T6054] netlink_unicast+0x7ea/0x980 [ 84.534870][ T6054] ? __pfx_netlink_unicast+0x10/0x10 [ 84.540152][ T6054] ? __virt_addr_valid+0x183/0x520 [ 84.545279][ T6054] ? __check_object_size+0x49c/0x900 [ 84.550566][ T6054] ? bpf_lsm_netlink_send+0x9/0x10 [ 84.555678][ T6054] netlink_sendmsg+0x8db/0xcb0 [ 84.560451][ T6054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.565739][ T6054] ? __import_iovec+0x536/0x820 [ 84.570582][ T6054] ? aa_sock_msg_perm+0x91/0x160 [ 84.575517][ T6054] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 84.580791][ T6054] ? security_socket_sendmsg+0x87/0xb0 [ 84.586352][ T6054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.591653][ T6054] __sock_sendmsg+0x221/0x270 [ 84.596357][ T6054] ____sys_sendmsg+0x525/0x7d0 [ 84.601131][ T6054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.606429][ T6054] __sys_sendmsg+0x2b0/0x3a0 [ 84.611024][ T6054] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.616130][ T6054] ? vfs_write+0x7c4/0xc90 [ 84.620578][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.626904][ T6054] ? do_syscall_64+0x100/0x230 [ 84.631683][ T6054] ? do_syscall_64+0xb6/0x230 [ 84.636380][ T6054] do_syscall_64+0xf3/0x230 [ 84.640889][ T6054] ? clear_bhb_loop+0x35/0x90 [ 84.645573][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.651471][ T6054] RIP: 0033:0x7f0dc1375b99 [ 84.655881][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.675483][ T6054] RSP: 002b:00007f0dc207a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.683889][ T6054] RAX: ffffffffffffffda RBX: 00007f0dc1503fa0 RCX: 00007f0dc1375b99 [ 84.691854][ T6054] RDX: 0000000000002004 RSI: 0000000020000240 RDI: 0000000000000005 [ 84.699814][ T6054] RBP: 00007f0dc207a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.707774][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.715728][ T6054] R13: 000000000000000b R14: 00007f0dc1503fa0 R15: 00007ffe98d5fcb8 [ 84.723719][ T6054] [ 84.906101][ T6062] xt_NFQUEUE: number of total queues is 0 [ 85.568066][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.117707][ T6139] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 86.131045][ T6139] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 86.143289][ T6139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.163738][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.329306][ T6150] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 86.539125][ T6159] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 87.319359][ T6197] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 87.355905][ T6197] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 87.548819][ T6205] Cannot find set identified by id 0 to match [ 87.863206][ T6218] tipc: Enabling of bearer rejected, failed to enable media [ 88.828547][ T6278] warning: `syz.1.335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.013283][ T6289] __nla_validate_parse: 12 callbacks suppressed [ 89.013302][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 89.097854][ T6289] netlink: 'syz.3.334': attribute type 13 has an invalid length. [ 89.107649][ T6289] netlink: 'syz.3.334': attribute type 14 has an invalid length. [ 89.132379][ T6289] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.141932][ T6289] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.150831][ T6289] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.159737][ T6289] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.184924][ T6289] vxlan0: entered promiscuous mode [ 89.242807][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 89.463303][ T6308] netlink: 'syz.4.341': attribute type 4 has an invalid length. [ 89.576960][ T6312] netlink: 'syz.4.341': attribute type 4 has an invalid length. [ 89.630466][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 89.659990][ T6316] netlink: 'syz.1.343': attribute type 3 has an invalid length. [ 89.693722][ T6317] netlink: 'syz.1.343': attribute type 3 has an invalid length. [ 89.716858][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 89.748379][ T6317] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.343'. [ 89.869560][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 90.271944][ T6349] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 90.296774][ T6349] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.352'. [ 90.329506][ T6349] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 90.386882][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 90.715355][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 90.735136][ T6372] netlink: 'syz.4.358': attribute type 11 has an invalid length. [ 90.746257][ T6374] vlan2: entered promiscuous mode [ 90.751337][ T6374] gretap0: entered promiscuous mode [ 90.805091][ T6374] gretap0: left promiscuous mode [ 90.850918][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 90.894640][ T6377] netlink: 'syz.0.356': attribute type 13 has an invalid length. [ 90.929452][ T6377] netlink: 'syz.0.356': attribute type 14 has an invalid length. [ 90.978770][ T6377] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.987831][ T6377] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.996630][ T6377] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.005339][ T6377] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.016811][ T6377] vxlan0: entered promiscuous mode [ 91.053881][ T6376] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 91.084068][ T6376] macvlan2: entered allmulticast mode [ 91.096487][ T6376] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 91.565322][ T6405] vlan2: entered promiscuous mode [ 91.612356][ T6405] gretap0: entered promiscuous mode [ 91.631329][ T6405] gretap0: left promiscuous mode [ 92.412631][ T6445] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2920 [ 92.431997][ T6448] Bluetooth: MGMT ver 1.22 [ 94.611811][ T6538] __nla_validate_parse: 7 callbacks suppressed [ 94.611830][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 94.661758][ T6538] netlink: 'syz.4.408': attribute type 13 has an invalid length. [ 94.729088][ T6538] netlink: 'syz.4.408': attribute type 14 has an invalid length. [ 94.788366][ T6538] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.797668][ T6538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.810508][ T6538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.820888][ T6538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.879780][ T6538] vxlan0: entered promiscuous mode [ 94.992119][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 95.865368][ T6602] xt_cgroup: invalid path, errno=-2 [ 96.020963][ T6612] ip6erspan0: entered allmulticast mode [ 96.273194][ T6625] netlink: 203276 bytes leftover after parsing attributes in process `syz.4.426'. [ 96.317854][ T6631] Dead loop on virtual device ipvlan1, fix it urgently! [ 96.318433][ T6629] netlink: 203276 bytes leftover after parsing attributes in process `syz.4.426'. [ 96.389327][ T6625] openvswitch: netlink: Duplicate key (type 0). [ 96.406455][ T6629] openvswitch: netlink: Duplicate key (type 0). [ 96.760139][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.435'. [ 96.822956][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 96.898593][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.028549][ T6631] syz.1.431 (6631) used greatest stack depth: 8344 bytes left [ 97.322612][ T6674] netlink: 'syz.1.444': attribute type 21 has an invalid length. [ 97.364069][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 97.423923][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 97.545412][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.444'. [ 97.809914][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.920597][ T6711] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 98.007193][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 99.331646][ T6770] Dead loop on virtual device ipvlan1, fix it urgently! [ 99.364798][ T6774] netlink: 'syz.2.479': attribute type 9 has an invalid length. [ 99.412925][ T6774] netlink: 'syz.2.479': attribute type 7 has an invalid length. [ 99.434331][ T6774] netlink: 'syz.2.479': attribute type 8 has an invalid length. [ 99.565253][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.713919][ T6786] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.761307][ T6789] Illegal XDP return value 4294967282 on prog (id 182) dev N/A, expect packet loss! [ 100.151255][ T6807] __nla_validate_parse: 3 callbacks suppressed [ 100.151274][ T6807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 100.707576][ C1] vcan0: j1939_tp_rxtimer: 0xffff888011033c00: rx timeout, send abort [ 100.718149][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888011033c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.013353][ T6837] netlink: 52 bytes leftover after parsing attributes in process `syz.4.496'. [ 101.075043][ T6837] Êü: entered promiscuous mode [ 101.298386][ T6851] dvmrp0: entered allmulticast mode [ 101.345633][ T6850] dvmrp0: left allmulticast mode [ 101.462013][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.606480][ T6865] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 102.288024][ T6890] netlink: 216 bytes leftover after parsing attributes in process `syz.0.515'. [ 102.314949][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 102.365603][ T6894] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 102.378425][ T6894] netlink: 224 bytes leftover after parsing attributes in process `syz.4.516'. [ 103.091322][ T6934] netlink: 2 bytes leftover after parsing attributes in process `syz.2.525'. [ 103.103016][ T6934] IPVS: Unknown mcast interface: [ 103.210927][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.024802][ T6971] netlink: 368 bytes leftover after parsing attributes in process `syz.0.536'. [ 104.101539][ T6971] JR³xRË: entered promiscuous mode [ 104.307954][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 104.343595][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.541'. [ 104.452614][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 104.747525][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.806160][ T5095] Bluetooth: hci4: command 0x0405 tx timeout [ 104.939561][ T7023] sctp: [Deprecated]: syz.2.552 (pid 7023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.939561][ T7023] Use struct sctp_sack_info instead [ 104.960825][ T7025] xt_hashlimit: max too large, truncated to 1048576 [ 105.065149][ T7029] pimreg: entered allmulticast mode [ 105.527513][ C0] ------------[ cut here ]------------ [ 105.533592][ C0] WARNING: CPU: 0 PID: 7043 at net/ipv4/route.c:1241 ip_rt_bug+0x2a/0x110 [ 105.542208][ C0] Modules linked in: [ 105.546171][ C0] CPU: 0 PID: 7043 Comm: syz.4.562 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 105.556234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.566350][ C0] RIP: 0010:ip_rt_bug+0x2a/0x110 [ 105.571325][ C0] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5b f3 b3 f7 66 90 e8 54 f3 b3 f7 48 89 df be 02 00 00 00 e8 57 b4 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 105.591060][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 105.597222][ C0] RAX: 8c2a6cdebbc3ab00 RBX: ffff88802a4ce280 RCX: ffffffff8172d9ea [ 105.605237][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1feb40 [ 105.613305][ C0] RBP: 0000000000000001 R08: ffffffff92fa8617 R09: 1ffffffff25f50c2 [ 105.621348][ C0] R10: dffffc0000000000 R11: fffffbfff25f50c3 R12: dffffc0000000000 [ 105.629422][ C0] R13: dffffc0000000000 R14: ffff888041de8000 R15: ffff8880173b8d00 [ 105.637479][ C0] FS: 00007f6df35696c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 105.646483][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.653102][ C0] CR2: 0000000020010000 CR3: 00000000114b6000 CR4: 00000000003506f0 [ 105.661167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.669206][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.677253][ C0] Call Trace: [ 105.680562][ C0] [ 105.683429][ C0] ? __warn+0x163/0x4e0 [ 105.687758][ C0] ? ip_rt_bug+0x2a/0x110 [ 105.692126][ C0] ? report_bug+0x2b3/0x500 [ 105.696719][ C0] ? ip_rt_bug+0x2a/0x110 [ 105.701082][ C0] ? handle_bug+0x3e/0x70 [ 105.705444][ C0] ? exc_invalid_op+0x1a/0x50 [ 105.710207][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 105.715269][ C0] ? mark_lock+0x9a/0x350 [ 105.719686][ C0] ? ip_rt_bug+0x2a/0x110 [ 105.724062][ C0] ip_push_pending_frames+0xbf/0x150 [ 105.729435][ C0] __icmp_send+0xf89/0x14e0 [ 105.733984][ C0] ? __icmp_send+0x59c/0x14e0 [ 105.738751][ C0] ? __pfx___icmp_send+0x10/0x10 [ 105.743758][ C0] ? mark_lock+0x9a/0x350 [ 105.748185][ C0] ? look_up_lock_class+0x77/0x160 [ 105.753352][ C0] ? mark_lock+0x9a/0x350 [ 105.757780][ C0] ipv4_link_failure+0x62f/0xa10 [ 105.762765][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 105.768318][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 105.773469][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 105.779021][ C0] arp_error_report+0x114/0x160 [ 105.783910][ C0] neigh_invalidate+0x244/0x470 [ 105.788865][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 105.794035][ C0] call_timer_fn+0x18e/0x650 [ 105.798776][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 105.804446][ C0] ? call_timer_fn+0xc0/0x650 [ 105.809282][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 105.814974][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 105.820189][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 105.825901][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 105.831565][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 105.837292][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.842530][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 105.847831][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 105.853511][ C0] __run_timer_base+0x66a/0x8e0 [ 105.858478][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 105.863899][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.870321][ C0] run_timer_softirq+0xb7/0x170 [ 105.875197][ C0] handle_softirqs+0x2c4/0x970 [ 105.880009][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 105.884802][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 105.890183][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 105.895431][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 105.900098][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 105.905319][ C0] irq_exit_rcu+0x9/0x30 [ 105.909621][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 105.915290][ C0] [ 105.918301][ C0] [ 105.921256][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.927333][ C0] RIP: 0010:lock_release+0x630/0x9f0 [ 105.932657][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 5d 49 89 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 105.952354][ C0] RSP: 0018:ffffc90004a8fa80 EFLAGS: 00000206 [ 105.958498][ C0] RAX: 0000000000000001 RBX: 1ffff92000951f62 RCX: ffffc90004a8fb03 [ 105.966556][ C0] RDX: 0000000000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1feb40 [ 105.974562][ C0] RBP: ffffc90004a8fba8 R08: ffffffff8fad506f R09: 1ffffffff1f5aa0d [ 105.982624][ C0] R10: dffffc0000000000 R11: fffffbfff1f5aa0e R12: 1ffff92000951f5c [ 105.990665][ C0] R13: 0000000000000246 R14: ffffc90004a8fb10 R15: dffffc0000000000 [ 105.998738][ C0] ? __pfx___might_resched+0x10/0x10 [ 106.004061][ C0] ? __might_fault+0xaa/0x120 [ 106.008817][ C0] ? __pfx_lock_release+0x10/0x10 [ 106.013868][ C0] ? __might_fault+0xc6/0x120 [ 106.018632][ C0] _copy_from_user+0x2a/0xe0 [ 106.023248][ C0] generic_map_update_batch+0x567/0x900 [ 106.028877][ C0] ? __pfx_generic_map_update_batch+0x10/0x10 [ 106.034987][ C0] ? __pfx_generic_map_update_batch+0x10/0x10 [ 106.041156][ C0] bpf_map_do_batch+0x3e0/0x690 [ 106.046082][ C0] __sys_bpf+0x377/0x810 [ 106.050393][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 106.055180][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.061303][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.067356][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.073721][ C0] ? do_syscall_64+0x100/0x230 [ 106.078591][ C0] __x64_sys_bpf+0x7c/0x90 [ 106.083071][ C0] do_syscall_64+0xf3/0x230 [ 106.087685][ C0] ? clear_bhb_loop+0x35/0x90 [ 106.092484][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.098471][ C0] RIP: 0033:0x7f6df2775b99 [ 106.102918][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.122623][ C0] RSP: 002b:00007f6df3569048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.131115][ C0] RAX: ffffffffffffffda RBX: 00007f6df2903fa0 RCX: 00007f6df2775b99 [ 106.131693][ T7044] base_sock_release(ffff88806501e600) sk=ffff8880404f2000 [ 106.139240][ C0] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 106.139323][ C0] RBP: 00007f6df27f677e R08: 0000000000000000 R09: 0000000000000000 [ 106.139337][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.139352][ C0] R13: 000000000000000b R14: 00007f6df2903fa0 R15: 00007ffd1188f428 [ 106.139385][ C0] [ 106.139396][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.139406][ C0] CPU: 0 PID: 7043 Comm: syz.4.562 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 106.139429][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 106.139440][ C0] Call Trace: [ 106.139448][ C0] [ 106.139456][ C0] dump_stack_lvl+0x241/0x360 [ 106.139485][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.139511][ C0] ? __pfx__printk+0x10/0x10 [ 106.139543][ C0] ? vscnprintf+0x5d/0x90 [ 106.139565][ C0] panic+0x349/0x860 [ 106.139591][ C0] ? __warn+0x172/0x4e0 [ 106.139616][ C0] ? __pfx_panic+0x10/0x10 [ 106.139658][ C0] __warn+0x346/0x4e0 [ 106.139682][ C0] ? ip_rt_bug+0x2a/0x110 [ 106.139706][ C0] report_bug+0x2b3/0x500 [ 106.139730][ C0] ? ip_rt_bug+0x2a/0x110 [ 106.139755][ C0] handle_bug+0x3e/0x70 [ 106.139773][ C0] exc_invalid_op+0x1a/0x50 [ 106.139791][ C0] asm_exc_invalid_op+0x1a/0x20 [ 106.139817][ C0] RIP: 0010:ip_rt_bug+0x2a/0x110 [ 106.139840][ C0] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5b f3 b3 f7 66 90 e8 54 f3 b3 f7 48 89 df be 02 00 00 00 e8 57 b4 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 106.139856][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 106.139874][ C0] RAX: 8c2a6cdebbc3ab00 RBX: ffff88802a4ce280 RCX: ffffffff8172d9ea [ 106.139889][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1feb40 [ 106.139903][ C0] RBP: 0000000000000001 R08: ffffffff92fa8617 R09: 1ffffffff25f50c2 [ 106.139917][ C0] R10: dffffc0000000000 R11: fffffbfff25f50c3 R12: dffffc0000000000 [ 106.139932][ C0] R13: dffffc0000000000 R14: ffff888041de8000 R15: ffff8880173b8d00 [ 106.139954][ C0] ? mark_lock+0x9a/0x350 [ 106.139986][ C0] ip_push_pending_frames+0xbf/0x150 [ 106.140010][ C0] __icmp_send+0xf89/0x14e0 [ 106.140046][ C0] ? __icmp_send+0x59c/0x14e0 [ 106.140069][ C0] ? __pfx___icmp_send+0x10/0x10 [ 106.140107][ C0] ? mark_lock+0x9a/0x350 [ 106.140126][ C0] ? look_up_lock_class+0x77/0x160 [ 106.140165][ C0] ? mark_lock+0x9a/0x350 [ 106.140207][ C0] ipv4_link_failure+0x62f/0xa10 [ 106.140238][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 106.140263][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 106.140296][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 106.140320][ C0] arp_error_report+0x114/0x160 [ 106.140342][ C0] neigh_invalidate+0x244/0x470 [ 106.140380][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 106.140417][ C0] call_timer_fn+0x18e/0x650 [ 106.140438][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 106.140465][ C0] ? call_timer_fn+0xc0/0x650 [ 106.140486][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 106.140514][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 106.140540][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 106.140569][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 106.140596][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 106.140622][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.140641][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 106.140664][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 106.140698][ C0] __run_timer_base+0x66a/0x8e0 [ 106.140731][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 106.140758][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.140786][ C0] run_timer_softirq+0xb7/0x170 [ 106.140808][ C0] handle_softirqs+0x2c4/0x970 [ 106.140833][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 106.140857][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 106.140880][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 106.140909][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 106.140928][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 106.140956][ C0] irq_exit_rcu+0x9/0x30 [ 106.140973][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 106.140997][ C0] [ 106.141004][ C0] [ 106.141012][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.141039][ C0] RIP: 0010:lock_release+0x630/0x9f0 [ 106.141059][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 5d 49 89 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 106.141074][ C0] RSP: 0018:ffffc90004a8fa80 EFLAGS: 00000206 [ 106.141090][ C0] RAX: 0000000000000001 RBX: 1ffff92000951f62 RCX: ffffc90004a8fb03 [ 106.141104][ C0] RDX: 0000000000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1feb40 [ 106.141118][ C0] RBP: ffffc90004a8fba8 R08: ffffffff8fad506f R09: 1ffffffff1f5aa0d [ 106.141132][ C0] R10: dffffc0000000000 R11: fffffbfff1f5aa0e R12: 1ffff92000951f5c [ 106.141151][ C0] R13: 0000000000000246 R14: ffffc90004a8fb10 R15: dffffc0000000000 [ 106.141185][ C0] ? __pfx___might_resched+0x10/0x10 [ 106.141209][ C0] ? __might_fault+0xaa/0x120 [ 106.141236][ C0] ? __pfx_lock_release+0x10/0x10 [ 106.141266][ C0] ? __might_fault+0xc6/0x120 [ 106.141295][ C0] _copy_from_user+0x2a/0xe0 [ 106.141318][ C0] generic_map_update_batch+0x567/0x900 [ 106.141358][ C0] ? __pfx_generic_map_update_batch+0x10/0x10 [ 106.141387][ C0] ? __pfx_generic_map_update_batch+0x10/0x10 [ 106.141413][ C0] bpf_map_do_batch+0x3e0/0x690 [ 106.141438][ C0] __sys_bpf+0x377/0x810 [ 106.141468][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 106.141493][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.141525][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.141549][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.141571][ C0] ? do_syscall_64+0x100/0x230 [ 106.141601][ C0] __x64_sys_bpf+0x7c/0x90 [ 106.141628][ C0] do_syscall_64+0xf3/0x230 [ 106.141654][ C0] ? clear_bhb_loop+0x35/0x90 [ 106.141674][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.141699][ C0] RIP: 0033:0x7f6df2775b99 [ 106.141716][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.141731][ C0] RSP: 002b:00007f6df3569048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.141750][ C0] RAX: ffffffffffffffda RBX: 00007f6df2903fa0 RCX: 00007f6df2775b99 [ 106.141764][ C0] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 106.141777][ C0] RBP: 00007f6df27f677e R08: 0000000000000000 R09: 0000000000000000 [ 106.141789][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.141801][ C0] R13: 000000000000000b R14: 00007f6df2903fa0 R15: 00007ffd1188f428 [ 106.141830][ C0] [ 106.146646][ C0] Kernel Offset: disabled