last executing test programs: 19.297429174s ago: executing program 4 (id=193): unshare(0x8040600) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) unshare(0x20000000) 19.023723636s ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x200000000, 0x40000000007, 0x20000a0e0, 0x140000000000004, 0x6, 0x20000000b, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in6=@private0, 0x3502, 0x4, 0x8, 0x0, 0x9075}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 18.790761276s ago: executing program 4 (id=198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x94, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0xffe0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x64, 0x2, [@TCA_CGROUP_ACT={0x60, 0x1, [@m_csum={0x5c, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x2d, 0x6, "e74670b59cabc7fa65697fe66a1ce059a1d20f485ae35387641d50a8c5c10c4c6cedb532531e5f7e63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0) write$cgroup_type(r5, &(0x7f00000001c0), 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000e89c000000000000", @ANYRES32=0x1, @ANYBLOB="0300800000000000000000000000000000040000bd1596b5534b24e76a17bd30f44870d93a66f2d60f9b2ad296b4231031eb4df975f1e888638ee001d71687563a8c5eccb1c89b1774f9582b26ffd24715e68b6e24c0bffb7e0221bbe51ef75bd2b8c7e345c1c412ea13ba6bb41786edc777eb9f82d0cea640b2ad357ccca33acba0d53aaebaf92543c66b39e463bde1105efc25823a11bf6945fe0ddfe8762774458ef06f2f09859aa5d5aa", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000000000000200"/28], 0x50) bind$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000780)=ANY=[], 0x11) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x35, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x9, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000030103000000000000000000020000083c001980080002000004000008000200420a00000800010001040000080001008800000008000200010200000800010010010000080001000000000006001240"], 0x58}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000c40)=@delpolicy={0x148, 0x14, 0x0, 0x70bd27, 0x25dfdbfc, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e23, 0x9, 0x4e21, 0x3, 0x2, 0x0, 0x20, 0x6c}, 0x6e6bb3, 0x1}, [@policy={0xac, 0x7, {{@in=@local, @in=@local, 0x4e24, 0x9, 0x4e21, 0x86b5, 0xf, 0x80, 0x20, 0x33}, {0x4ef1487e, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x1}, {0x9, 0x80000000, 0x9, 0xd3}, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1}}, @policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0xf, 0xd}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2d, 0x8000}}, @extra_flags={0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x20040100}, 0x44845) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17.64583727s ago: executing program 4 (id=206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000940)={@val={0x0, 0x16}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x8000000000000008}}}}}}}, 0x3e) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0) 16.979895789s ago: executing program 4 (id=209): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000001000000000000000000000000ffffffff00000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000006c000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006c7a6a6800"/240], 0x138}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) 3.207500865s ago: executing program 0 (id=310): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xc, 0x1}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x2}]}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x2e]}}, 0x0, 0x4f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2022) syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @dstopts={0x6c}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff0a, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x4000084) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r8, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 2.864563084s ago: executing program 4 (id=209): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000001000000000000000000000000ffffffff00000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000006c000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006c7a6a6800"/240], 0x138}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) 1.985241527s ago: executing program 3 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a400000000009000200737d7a31000000000900010073797a30000000000800054000000025140011800a0001006c696d6974000000040001"], 0x98}, 0x1, 0x0, 0x0, 0x810}, 0xc4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) accept$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000d000100000008000a00", @ANYRES32=r4, @ANYBLOB="6d19ee3bf143f059960000000000000000c587c5d097d5f845f60ab123803250b700000000ebe3e64fc16562f3a3ba52f6038a325cf8"], 0x44}}, 0x0) 1.86531687s ago: executing program 0 (id=323): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) 1.61616676s ago: executing program 0 (id=324): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001000000000000000a0b90a00630148000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x0) 1.60543536s ago: executing program 2 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r0}, 0x38) socket$alg(0x26, 0x5, 0x0) 1.604141298s ago: executing program 3 (id=326): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xde}]}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x5761, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r8, 0x6, 0x1}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) recvmmsg$unix(r1, &(0x7f0000007cc0)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000500)=""/228, 0xe4}], 0x2}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f00000006c0)=""/92, 0x5c}], 0x3, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/51, 0x33}, {&(0x7f0000000c80)=""/21, 0x15}, {&(0x7f0000000cc0)=""/18, 0x12}, {&(0x7f0000000e00)=""/138, 0x8a}, {&(0x7f0000000ec0)=""/39, 0x27}, {&(0x7f0000007e80)=""/264, 0x108}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000001080)=""/140, 0x8c}, {&(0x7f0000001140)=""/40, 0x28}], 0xa, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000001540)=""/230, 0xe6}, {&(0x7f00000013c0)=""/97, 0x61}, {&(0x7f0000003880)=""/50, 0x32}, {&(0x7f00000038c0)=""/94, 0x5e}, {&(0x7f0000003940)=""/110, 0x6e}, {&(0x7f00000039c0)=""/53, 0x35}, {&(0x7f0000003a00)=""/65, 0x41}, {&(0x7f0000003a80)=""/24, 0x18}, {&(0x7f0000003ac0)=""/4096, 0x1000}], 0x9, &(0x7f0000004b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/146, 0x92}, {&(0x7f0000005dc0)=""/190, 0xbe}, {&(0x7f0000005e80)=""/91, 0x5b}, {&(0x7f0000005f00)=""/189, 0xbd}, {&(0x7f0000005fc0)=""/18, 0x12}], 0x6, &(0x7f0000006080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000006180), 0x6e, &(0x7f0000007440)=[{&(0x7f0000006200)=""/135, 0x87}, {&(0x7f00000062c0)=""/86, 0x56}, {&(0x7f0000006340)=""/11, 0xb}, {&(0x7f0000006380)=""/107, 0x6b}, {&(0x7f0000006400)=""/14, 0xe}, {&(0x7f0000006440)=""/4096, 0x1000}], 0x6, &(0x7f00000074c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000075c0), 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007640)=""/91, 0x5b}, {&(0x7f00000076c0)=""/248, 0xf8}, {&(0x7f00000077c0)=""/62, 0x3e}, {&(0x7f0000007800)=""/142, 0x8e}, {&(0x7f00000078c0)=""/157, 0x9d}, {&(0x7f0000007980)=""/240, 0xf0}, {&(0x7f0000007a80)=""/255, 0xff}], 0x7, &(0x7f0000007c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x7, 0x60, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a832a3106307be8e70717456a968c2eaa0d344507f6253f15e6605cd39bed7d", 0x7d}, {&(0x7f0000000440)="7e6b37ea4b479588e00b40a612b1949176de42e518bee23a0349893fa005e05906ba9a605f484c46bed328d7d113e6cda116ccc574da811c66ac7e2b89429ceeae9b1a4847ca7656c3c8288bb67bdf7ebc05ce86bca9607026129fc765870f72a96834bdf9425d49f0530c40b76c2b27c118327372cbfd363a3c2781a48bd21055e21bd0521b4e97c0a4ad7b75d59c6d99be3106a60b9a8ad5058430f61b74c29dfa25b8a59db98040", 0xa9}, {&(0x7f0000000640)="0590ab7c5379d4fc3e9f9cd7dbeebfa58219a6820d9af837dbcbb2e713865c85f980a1ef4eecbf07c2a0f45d118c3f334e39e74064f379244309ac82016ccc31d15441ba1fc6e673239bfbf58a8ff42206e1ee7ae3a0e0", 0x57}, {&(0x7f0000000000)="195954405d070d1fff60070f92166d", 0xf}, {0x0}, {&(0x7f0000000740)="c04e293bc487f0354c0bd2c59599618245a0631403a449915eedf66610a7fb1bf602f21fd9f246c9d098c4662b5353bb6c7bab50a0632b6e0b1fffffffff6e22f805ee2e3d9a31ab35af5acfe1acca3db3014b80ad5a0b6129b3606a8b510ed47c2113ec2494d66d5da618d11670cb867d2ab52cf9410f74c803fa0233d8a5fdc090d36f1ab186881f705f6e89ce27152660ec6615126f00194e5e", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)="eb5ab84f63a3517d3618292b4ac1c3f98bad4e232370016d1a77cbc3bcfdfaf47084debfb2cfe2d2910b600a46da20e4d9d162b95c37a2f7362be4aee1b96ec27c6014366cb3e06feb6fdf3128008590136f1d2781f0c4bae67dfc2e5e90db8affd0f9dfdff5c7d4543ba46409faf1ed3e7e6ce5281d59906fa8390b05377edd602eac7f2355b9cb81cf7525e72e1c3ae911f3f79c15ea7ac5f66cb39aa01ff256619823723957b6d4307be4c0f0960afbb98e8255b65d88b4c3a7d1aa2ac1b67bdee8c264d87b0299cf15a4d793d16f1915b8ef2df3c576da4846193b", 0xdd}, {&(0x7f0000001640)="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", 0x23e}, {&(0x7f0000001440)="f4dc08ee7fa5fd7d3baac1bee05a3f318506186dc280efebc122194f78cdbca80c5a99e66f1b7ab557bbd4b5eca07295eab7f6aaf5472df079febb2b3865a99a274526131c02d09005bfa777b08b1ebb51cd5d3ea3897d0a43d373192e4e10056e548457bd3d589d6d541ee4464c22a5ccef005cfa48b0578a5eab422aea8287f097a3a74b725a14751cc2e20dd1f80bfd2f2892abf723424717d5e44042a526a297fa93b68c1006c65cb13e141d6f12cbc80bb62895792ccd0903983359213769f2c3483226aab05f045317bcb388f31937786063f2bd10f0cd4c4a95e6601b26e2df44e87e0f89090929502df693e00e818e", 0xf3}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="30000000000000000000000007000000890d622b81b2bf68770eab6a9c9403a78907f2ffffffff07076fac14142401001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e0000001000000001400000000000000000000000100000008000000000000001c"], 0x88}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.491531373s ago: executing program 1 (id=327): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300209c0600080211000001080211000000ffffffffffffd9c40400800110000900080211000000000602020202020200000400cd005716887b524165569a143d3e4758b804f3c334cafcfce29ac6fd61a49ea647af145f86ebb55c7a0f0166d440c1cf70947a457812b6ac68ffda2ab619f4a1d79bbae2c1da4f2575d364a5230cb2274b16b57ccd4c24a9edd321a769fb0e3185f87fd560f97845f82809f20403604f6f550e445830b7ec7b4816d09e42e71c13489d8a0cf021e68e75325b3424"], 0x54}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}], 0x1}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x6, 0x92c, [0x0, 0x200000002e80, 0x200000003056, 0x20000000327a], 0x0, &(0x7f0000000000), &(0x7f0000002e80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0xb57aca3159d4f69f, 0x8863, 'bond_slave_1\x00', 'veth0_to_team\x00', 'macvlan0\x00', 'pimreg0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff], 0xfe, 0x176, 0x1a6, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x166}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0xc4, 0x10, 0x7f, {0x6a}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x65, 0x5, {0x6}}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x11, 0x1, 0x8848, 'veth1_to_bond\x00', 'veth0_to_team\x00', 'bridge_slave_0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], 0xd6, 0x106, 0x13e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x440, 0x6}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x4, 0x800, 0x2}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0x10}}}}, {0x9, 0x71, 0x0, 'nr0\x00', 'pim6reg1\x00', 'veth0_vlan\x00', 'macvlan1\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"d77d7f91b6596c9d64ea14fc6ed0d2bb8cb617790b5db19df7ed1def6f57"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x11, 0x1, 0x15, 'batadv_slave_1\x00', 'dummy0\x00', 'syzkaller1\x00', 'wg0\x00', @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xf6, 0xf6, 0x16e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xff000000], 0x4e23, 0x0, 0x2, 0x4e20, 0x10, 0x10}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x5, 0x8, 0x0, 0x0, "b9cf55aa5e8df61c64b6026830f73d6c6cc2a4b85c021c5dcd583e60e519b1cf771986a41167724e8f567d5063075537c4e14a73e434b1700b4b4f23b9be4628"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x11, 0x20, 0x5, 'batadv_slave_0\x00', 'xfrm0\x00', 'veth0\x00', 'bridge_slave_0\x00', @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x136, [], [@common=@log={'log\x00', 0x28, {{0x19, "2eb9c1e4b4f9b55d1808e9a132621dd53fb00fb6b587f093d3f7bbfc1e69", 0x8}}}], @common=@nflog={'nflog\x00', 0x50, {{0x10, 0x0, 0x6, 0x0, 0x0, "ec427b2dc92b0eefe997fa80840e1fd09fabff96cd4344c8ccd2111402a45e8226472d646e4dbeedc11513bb516dfd8848e5f0c9c2a8274e49268caa873f1c56"}}}}, {0x0, 0x30, 0xc, 'bond_slave_0\x00', 'sit0\x00', 'pimreg\x00', 'sit0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff], 0x1ce, 0x1fe, 0x22e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x7f, 0x100000, 0x80000000}}}, @comment={{'comment\x00', 0x0, 0x100}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}]}, 0x9a4) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sendmsg$alg(r8, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1.431449145s ago: executing program 0 (id=328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x888ae29f8c819413}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='.\x00', 0x0, 0x0, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xf8, 0xdd, &(0x7f0000000480)="53faba3d034b31121d82a6bb2646f56e981596b16a14c018143eb30c684c74d545a19bd4a8ff2ff83e8cc67ec734b92debd83dbefd76b4204852b038c7aeec81ed6cba90784d9e63562104cb8716d5db0e78aaa3bf0cfae6912f2efb4244087dd68967ef6a7d9c935145a279de6d9ae562196c9936593e45ad88553aa272bff840426e6455bb2b5f084bac3d1689ddaf49ac94a1a8b71d757127bc0f4fe074c2e706d3620b4d3a54917ccb07ede4a8e8c7a7bd7c28432fcf067c52f758722cb222274656b803d8374897e0da3ffa2f18796fee03f3d784afaee6737fda6d38cc77a497f632e8fb3112760776960465350c1a2d92e52f36fa", &(0x7f0000000580)=""/221, 0x7ff, 0x0, 0x6c, 0x22, &(0x7f0000000680)="56aa822cd8800ea4efded8d653b931dd35a219c862741e76ebca7ec10893f9be5370a29f14593ba920cc6b8f42cf3f799aee9befeb3f0aaf1d9eea619ee49b00be70b5f6f55982c4a3e857749aa4133a6d40ec18caf11a5fd07ffaab42d00c50798448cb57942fe53725d9eb", &(0x7f0000000700)="49429885b994a3b4890443e6e048b8fdb4a7f0748449169c41ffb24e6c7f413af48b", 0x5, 0x0, 0x2}, 0x50) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000007c0)=@ccm_128={{0x303}, "9d0a568fa62e16ab", "3a63657080fe7287341adc0f09978a9c", "dbede202", "c625f639d61cbf59"}, 0x28) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000800)={r2, r6}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x1405, 0x200, 0x70bd29, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000881}, 0x2004104) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x833}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x947}]}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf56a}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xe4}}, 0x40010) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0xdc3, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'ip6gre0\x00', 0x0, 0x4, 0x7d, 0x0, 0x2d56cce5, 0xa, @remote, @mcast1, 0x20, 0x10, 0x4, 0x5}}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x1d, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae59, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='GPL\x00', 0x9, 0xa9, &(0x7f0000001040)=""/169, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0xa, 0xfffffff9}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x10, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000011c0)=[{0x3, 0x2, 0xd, 0x7}], 0x10, 0xd4, @void, @value}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0x0, 0x80cd, 0x30}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{0x1, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x20, 0x16, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @map_fd={0x18, 0x9, 0x1, 0x0, r9}, @exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0x100, 0x8c, &(0x7f0000000d40)=""/140, 0x40f00, 0xa, '\x00', r10, @netfilter=0xfeb76dc4efc723ec, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r11, 0x0, &(0x7f00000014c0)=[0xffffffffffffffff, r12, r13, r14, r15], 0x0, 0x10, 0x25, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r3) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001640), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x78, r16, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x814}, 0x4048004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x2, '\x00', r10, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 1.315824187s ago: executing program 2 (id=329): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) listen(r0, 0x9) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x28, 0x40085, 0x13}, 0x2c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000200000000000000"], 0x48) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x1, 0x8000, 0x3, 0x7, {{0x1b, 0x4, 0x2, 0x20, 0x6c, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@end, @timestamp_addr={0x44, 0x1c, 0xaa, 0x1, 0x6, [{@broadcast, 0x4}, {@empty, 0x5}, {@loopback, 0x5}]}, @generic={0x88, 0x12, "f09bb294f54606f03ee0f45573fc0296"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3a, [@remote, @rand_addr=0x64010100, @loopback, @local, @remote, @multicast2, @empty, @remote]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', r10, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.315300188s ago: executing program 0 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @reject={{0xb}, @void}}]}], {0x14, 0x10}}, 0x94}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x3, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xe4}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.137119405s ago: executing program 3 (id=331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001200810025bd7000fcdbdf250a010102000000000000000000000000000004d202000e000c001500"], 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)={0x3a, 0xe, 0x2, 0x5e, 0x0, [@empty, @loopback, @private2, @private1, @private0, @rand_addr=' \x01\x00', @local]}, 0x78) sendmsg$nl_generic(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) 1.092041184s ago: executing program 2 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0xab, 0x20}, {0x4d, 0x0, 0x0, 0x4}]}) 971.900938ms ago: executing program 0 (id=333): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xc, 0x1}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x2}]}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x2e]}}, 0x0, 0x4f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2022) syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @dstopts={0x6c}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff0a, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x4000084) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r8, @ANYBLOB="10002bbd7000fedbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00edb400000d0001006e657409007673696d0000000f0002006e657464657673696d30000008000b0034060000080001007063690011000200303030303a30303a31302e300000000005000b0000800000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 971.110149ms ago: executing program 3 (id=334): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffd}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x158}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4109001}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r7, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x98}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x44}}, 0x4080) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="42d6c8ef8b63bb299e0937e149057e604697df2e8adc115e6fb708f8781947869138", 0x22}, {&(0x7f00000002c0)="b4a4cecc9eb7f85f6a43295ce451433cd277d3", 0x13}, {&(0x7f0000000180)='\aL9', 0x3}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x8000) read$alg(r12, &(0x7f0000000580)=""/185, 0xa2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x12, &(0x7f0000001040)=@raw=[@ldst={0x2, 0x0, 0x4, 0x1, 0xb, 0x1b, 0x8}, @exit, @ldst={0x3, 0x3, 0x6, 0x1, 0x4, 0xffffffffffffffc0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0xfffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000001100)='syzkaller\x00', 0x81, 0x48, &(0x7f0000001140)=""/72, 0x40f00, 0x41, '\x00', r4, 0x25, r1, 0x8, &(0x7f00000011c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x1, 0x3, 0x57, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r8, r9, r10], 0x0, 0x10, 0xe3, @void, @value}, 0x94) 909.964882ms ago: executing program 1 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @random="66a29e19d8a7"}, 0x10) 827.078207ms ago: executing program 2 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x2b, 0x1, 0xab2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000003780)=""/4099, 0x1003}], 0x2}, 0x9}], 0x1, 0x10000, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3bf9f8d9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9b}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0x101, 0x7fffffff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000003c0)=[{0x5, 0x4, 0xb, 0x8}, {0x3, 0x1, 0xc, 0xb}, {0x0, 0x4, 0x2, 0x5}, {0x5, 0x2, 0x2, 0x1}, {0x0, 0x4, 0xe, 0x9}, {0x2, 0x2, 0x5, 0x8}, {0x3, 0x5, 0x5}, {0x1, 0x3, 0xb}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r0, 0x8, 0x10, 0x0, @void, @value=r4, @void, @void, r1}, 0x20) 671.582334ms ago: executing program 1 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x640042, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000001}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="6d6ff16900641101fe880000000000000000000000000001fc01000000000000000000000000000000800205831b607486a102b492cfeb3539861a5e6ee2a916ce01a43a4cc01cf3e05e4039913ea1373a5a7de06bc75b944bf18001c6b2b37b3a9ece3d4b2cb805ab87c9e071140500000000000000d223539a3b33a0e4e34b06ef"], 0x8c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000000440)=""/11, 0xb}], 0x6}, 0x40001000) ppoll(&(0x7f0000000080)=[{r1}, {r1, 0x48}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) 587.258608ms ago: executing program 3 (id=338): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@local}, {@dev, 0x2}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 580.671135ms ago: executing program 1 (id=339): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) 524.033856ms ago: executing program 2 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd0, 0x1, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x56, 0x6, "d89ba54d5bc60afdc675a2b777d385920bb0fae3987745e37b9be0511606c718e10f5a4988506ea77cb14263e58424494c3ec9f25e5fd80cedd12e4224bf20bee1c90434a733225e38a3d759e63ddeb6d981"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3b, 0x6, "c196f42caeb1d7802bf25bd4e9604d30109091403551943f8ddf99944fd5a23c7b560cc0c078dff05e371f5e5770d7de541a77304a1b1b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0xf7e66da85b0e372a}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x170, 0x30, 0x1, 0x0, 0x0, {}, [{0x15c, 0x1, [@m_ct={0x158, 0x2, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_PARMS={0x18, 0x1, {0xf704, 0x0, 0x5, 0x7, 0x6}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_MARK={0x8, 0x5, 0x9af8}]}, {0xdf, 0x6, "1e07ef7934d9a7130d7c493805260b73a4c6ae2ce27b57673f38e0ccee4bdf615b2b9d2b1ac1971c85841ed37f88b54a10de01a4cb764d3dfc8e3ff0c2275aec48dcc9ddcfca5bfe442c2b45474b9aac88e3412f866d9e1e103fe7e46557a8f3926ee8a3c8f5caf65ce6b4a0b139b41abfffc247d975a9644b317eeeb52020e55f9f739669ab7e123e56633648d69cb0c98cf89f485e83a6d885e4e445c645b49e379170ca70451b2cdc31f54525196c5f9b4377a5c1d3e81b86968c201ecc67c2caa866411e552ae7e049f1c099155af7b88758b082a5e11900f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 426.309457ms ago: executing program 3 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="d9", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="1fb6", 0x2}], 0x1}}], 0x2, 0x4080040) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0xfe48, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x9c3fa077fa966179, 0x1, 0x0, {{0x7e}, {@val={0x33}, @void}}, [@NL80211_ATTR_DURATION={0x0, 0x57, 0x59c5}, @NL80211_ATTR_DURATION={0x0, 0x57, 0x6}]}, 0x1c}}, 0x4000054) 364.643572ms ago: executing program 2 (id=342): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4048040}, 0x80) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) unshare(0x6a040000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500040001000000140007"], 0x90}}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e22, 0xff, 0x4e24, 0x81, 0x2, 0x0, 0x80, 0x8, r2, 0xee00}, {0x8, 0x3, 0xfe, 0x7, 0x8, 0x1, 0x34bf}, {0x3719, 0x100, 0x40, 0x4}, 0x4, 0x6e6bb1, 0x0, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d5}, 0x2, @in=@empty, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x7f}}, 0xe8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x10}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xffffffffffffffba}, {0x8}}]}, 0x38}}, 0x40) (async) unshare(0x22020600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r7 = socket(0xa, 0x557b440a9eb6e4ef, 0x4) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) (async, rerun: 64) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000002e98000000000000000000000000000000000a"], 0xb8}}, 0x0) (rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f00)={0x1c, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x84804) (async, rerun: 32) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d40), r8) (rerun: 32) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="01002cbd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x14}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000036c0)) 159.521435ms ago: executing program 1 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105fefd9a70561fcaa0a0c6acfe07fffffddbdf25", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008000) 0s ago: executing program 1 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x22020600) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0xe7, "4ecf68ecb97e9cf0a88a32ca6c510cd54c426931e70771fbc0fbd85812b21317c65a56d4a1a6fd36cef0aae6804740cabec19b47f3666553c31b8b5e753b78b4fa87afc3f082934a711f5a3f60697a082c53d2175b3868437ce0e2638f0fc9f1f9fae8efbed00126d41eb57a84439ce70a3986f8cf366e8469ee43f5c90973e4163a8fd9bb2441740e644a93257a7c43dc29e24d304741365ab55ec6c3803649e606d8c4c2e02c663b8677e2a0fb0dbceddd6c86e1982e92c06715aef48fbdc88c8b9cd5d6d86f12aec1fc3db4a02c32ed21cf1a5283ed5675338df03a460276e2ea5b5f586725"}, &(0x7f0000000780)=0xef) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000007c0)={r7, 0x6, 0x9}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x206}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getlink={0x68, 0x12, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x8110, 0x400}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000000}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_MAP={0x24, 0xe, {0x9, 0x81, 0xf4, 0x1, 0x7, 0xde}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4000044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000f0f2cd5bdf40f161000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140002400000000014000000020a05000000000000000000000000041400000011000100000000008cabc7bada89a7b4aa4e3cabbf9aed1bf0b0d3c03a6e1928d58eba4047703bcb3473aaa1ff3775712b6a78fb744f9828fae3c81c3e6826470fea0810c9abbd57836400"/230], 0xa4}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/78, 0x4e, 0x0, &(0x7f0000000300)=""/230, 0xe6}, &(0x7f0000000180)=0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 84.563762][ T5825] cgroup: Unknown subsys name 'net' [ 84.700525][ T5825] cgroup: Unknown subsys name 'cpuset' [ 84.710295][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.340712][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.533852][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.546603][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.554725][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.566723][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.576517][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.741752][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.754540][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.764571][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.772690][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.780760][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.788611][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.800769][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.808943][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.816346][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.823669][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.836986][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.842368][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.851506][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.852590][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.866660][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.867064][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.882997][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.890753][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.927340][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.935884][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.299506][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.524453][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.531843][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.540683][ T5835] bridge_slave_0: entered allmulticast mode [ 91.548252][ T5835] bridge_slave_0: entered promiscuous mode [ 91.584141][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.591764][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.600231][ T5835] bridge_slave_1: entered allmulticast mode [ 91.608422][ T5835] bridge_slave_1: entered promiscuous mode [ 91.722566][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.737470][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.787536][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.834263][ T5835] team0: Port device team_slave_0 added [ 91.906852][ T5835] team0: Port device team_slave_1 added [ 91.919773][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.012597][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.020159][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.046250][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.113438][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 92.140435][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.147473][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.173443][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.184634][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.312127][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.319727][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.328096][ T5850] bridge_slave_0: entered allmulticast mode [ 92.336832][ T5850] bridge_slave_0: entered promiscuous mode [ 92.438335][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.445587][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.464747][ T5850] bridge_slave_1: entered allmulticast mode [ 92.473403][ T5850] bridge_slave_1: entered promiscuous mode [ 92.547079][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.554275][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.566802][ T5840] bridge_slave_0: entered allmulticast mode [ 92.574252][ T5840] bridge_slave_0: entered promiscuous mode [ 92.606841][ T55] Bluetooth: hci0: command tx timeout [ 92.625400][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.632698][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.640451][ T5840] bridge_slave_1: entered allmulticast mode [ 92.648480][ T5840] bridge_slave_1: entered promiscuous mode [ 92.668523][ T5835] hsr_slave_0: entered promiscuous mode [ 92.675083][ T5835] hsr_slave_1: entered promiscuous mode [ 92.685887][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.754673][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.812491][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.836960][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.844174][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.852383][ T5841] bridge_slave_0: entered allmulticast mode [ 92.860033][ T5841] bridge_slave_0: entered promiscuous mode [ 92.868829][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.876417][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.883641][ T5841] bridge_slave_1: entered allmulticast mode [ 92.891332][ T5841] bridge_slave_1: entered promiscuous mode [ 92.915363][ T5850] team0: Port device team_slave_0 added [ 92.921787][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.929874][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.937221][ T5842] bridge_slave_0: entered allmulticast mode [ 92.944534][ T5842] bridge_slave_0: entered promiscuous mode [ 92.954650][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.007387][ T5150] Bluetooth: hci2: command tx timeout [ 93.007411][ T5848] Bluetooth: hci1: command tx timeout [ 93.007656][ T5848] Bluetooth: hci3: command tx timeout [ 93.013304][ T55] Bluetooth: hci4: command tx timeout [ 93.033946][ T5850] team0: Port device team_slave_1 added [ 93.040506][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.048749][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.056128][ T5842] bridge_slave_1: entered allmulticast mode [ 93.063522][ T5842] bridge_slave_1: entered promiscuous mode [ 93.137881][ T5840] team0: Port device team_slave_0 added [ 93.152508][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.167684][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.205789][ T5840] team0: Port device team_slave_1 added [ 93.234416][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.241558][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.268209][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.281537][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.288617][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.314601][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.329499][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.390594][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.423602][ T5841] team0: Port device team_slave_0 added [ 93.433358][ T5841] team0: Port device team_slave_1 added [ 93.484162][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.495650][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.522342][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.574427][ T5842] team0: Port device team_slave_0 added [ 93.581497][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.588554][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.614959][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.656794][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.663774][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.690044][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.703924][ T5842] team0: Port device team_slave_1 added [ 93.739707][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.746860][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.773438][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.809339][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.816779][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.843225][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.875742][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.883086][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.909265][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.925788][ T5850] hsr_slave_0: entered promiscuous mode [ 93.932972][ T5850] hsr_slave_1: entered promiscuous mode [ 93.939727][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.947741][ T5850] Cannot create hsr debugfs directory [ 94.029146][ T5840] hsr_slave_0: entered promiscuous mode [ 94.035677][ T5840] hsr_slave_1: entered promiscuous mode [ 94.042440][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.050091][ T5840] Cannot create hsr debugfs directory [ 94.110010][ T5841] hsr_slave_0: entered promiscuous mode [ 94.118097][ T5841] hsr_slave_1: entered promiscuous mode [ 94.124369][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.133011][ T5841] Cannot create hsr debugfs directory [ 94.244495][ T5842] hsr_slave_0: entered promiscuous mode [ 94.252834][ T5842] hsr_slave_1: entered promiscuous mode [ 94.259294][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.266947][ T5842] Cannot create hsr debugfs directory [ 94.384690][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.456896][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.502106][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.550712][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.696571][ T55] Bluetooth: hci0: command tx timeout [ 94.809023][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.822253][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.833223][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.847430][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.950766][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.971324][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.983361][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.020050][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.087273][ T55] Bluetooth: hci3: command tx timeout [ 95.087777][ T5848] Bluetooth: hci4: command tx timeout [ 95.092730][ T5854] Bluetooth: hci2: command tx timeout [ 95.098889][ T5848] Bluetooth: hci1: command tx timeout [ 95.143259][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.157243][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.171177][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.184221][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.196927][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.289160][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.337653][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.362560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.369964][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.399316][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.415990][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.423160][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.445474][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.458337][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.474250][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.514905][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.543384][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.550698][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.594518][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.601732][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.651106][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.764521][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.791260][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.822736][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.829942][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.893995][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.901225][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.945191][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.052135][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.059570][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.098458][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.105660][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.162415][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.219476][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.266093][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.361819][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.415997][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.423206][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.496961][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.504229][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.555730][ T5840] veth0_vlan: entered promiscuous mode [ 96.577480][ T5835] veth0_vlan: entered promiscuous mode [ 96.614601][ T5840] veth1_vlan: entered promiscuous mode [ 96.639500][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.706985][ T5835] veth1_vlan: entered promiscuous mode [ 96.755680][ T5840] veth0_macvtap: entered promiscuous mode [ 96.767001][ T5848] Bluetooth: hci0: command tx timeout [ 96.791022][ T5840] veth1_macvtap: entered promiscuous mode [ 96.800826][ T5850] veth0_vlan: entered promiscuous mode [ 96.812800][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.843170][ T5850] veth1_vlan: entered promiscuous mode [ 96.923361][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.981805][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.990133][ T5835] veth0_macvtap: entered promiscuous mode [ 97.014453][ T5835] veth1_macvtap: entered promiscuous mode [ 97.062020][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.072224][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.082441][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.093329][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.113408][ T5850] veth0_macvtap: entered promiscuous mode [ 97.154524][ T5850] veth1_macvtap: entered promiscuous mode [ 97.168027][ T5848] Bluetooth: hci2: command tx timeout [ 97.168066][ T55] Bluetooth: hci4: command tx timeout [ 97.173501][ T5848] Bluetooth: hci1: command tx timeout [ 97.180068][ T5854] Bluetooth: hci3: command tx timeout [ 97.190507][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.202981][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.215416][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.244691][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.260191][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.273740][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.315171][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.324650][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.339101][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.341092][ T1207] cfg80211: failed to load regulatory.db [ 97.351258][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.419369][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.430764][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.441483][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.452249][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.463796][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.513593][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.528506][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.545873][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.557746][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.568393][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.578903][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.591837][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.602594][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.659399][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669945][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.679001][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.688414][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.711264][ T5841] veth0_vlan: entered promiscuous mode [ 97.768492][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.778371][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.791438][ T5841] veth1_vlan: entered promiscuous mode [ 97.842489][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.860736][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.926655][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.934677][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.999427][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.000968][ T5842] veth0_vlan: entered promiscuous mode [ 98.054967][ T5842] veth1_vlan: entered promiscuous mode [ 98.101005][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.121318][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.138698][ T5841] veth0_macvtap: entered promiscuous mode [ 98.224574][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.263307][ T5841] veth1_macvtap: entered promiscuous mode [ 98.299761][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.319270][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.348922][ T5926] netlink: 'syz.2.3': attribute type 16 has an invalid length. [ 98.357242][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.380250][ T5842] veth0_macvtap: entered promiscuous mode [ 98.398872][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.413333][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.423889][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.439606][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.481092][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.493685][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.524009][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.622381][ T5842] veth1_macvtap: entered promiscuous mode [ 98.712795][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.728188][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.738340][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.748987][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.759187][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.770709][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.782957][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.795664][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.804792][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.815104][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.838623][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.856620][ T5854] Bluetooth: hci0: command tx timeout [ 98.888785][ T5937] netlink: 'syz.1.7': attribute type 27 has an invalid length. [ 98.972197][ T5943] Illegal XDP return value 2542502817 on prog (id 2) dev N/A, expect packet loss! [ 99.094183][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.102994][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.253413][ T5854] Bluetooth: hci1: command tx timeout [ 99.259040][ T55] Bluetooth: hci3: command tx timeout [ 99.259063][ T5848] Bluetooth: hci4: command tx timeout [ 99.264466][ T55] Bluetooth: hci2: command tx timeout [ 99.294644][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.309978][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.358048][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 99.572787][ T5937] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.582651][ T5937] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.593491][ T5937] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.611651][ T5937] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.765903][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.788998][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.838573][ T5938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.877265][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.901963][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.912308][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.923774][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.935118][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.975826][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.993145][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.007167][ T5957] tipc: Started in network mode [ 100.012168][ T5957] tipc: Node identity 3a00ff7f0000000009, cluster identity 4711 [ 100.025051][ T5938] syz.1.7 (5938) used greatest stack depth: 19288 bytes left [ 100.044871][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.080299][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.094883][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.111298][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.122663][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.142571][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.174276][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.313189][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.404991][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.461613][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.506121][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.617752][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 101.512036][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.545981][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.693047][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.706986][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.970168][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.984546][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.264419][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.279413][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.053617][ T6034] netlink: 'syz.0.18': attribute type 16 has an invalid length. [ 103.127171][ T6034] netlink: 'syz.0.18': attribute type 17 has an invalid length. [ 103.167052][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 103.216976][ T6034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.322782][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 103.405013][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 103.506145][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 103.546804][ T6024] netlink: 'syz.1.17': attribute type 18 has an invalid length. [ 103.600584][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 103.610631][ T6052] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 103.669122][ T6048] tipc: Started in network mode [ 103.674779][ T6048] tipc: Node identity 72432390606e, cluster identity 4711 [ 103.711562][ T6048] tipc: Enabled bearer , priority 0 [ 103.974112][ T6050] syzkaller0: entered promiscuous mode [ 103.981056][ T6050] syzkaller0: entered allmulticast mode [ 103.987924][ T6050] tipc: Resetting bearer [ 104.004602][ T6071] warning: `syz.4.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.082842][ T6047] tipc: Resetting bearer [ 104.456305][ T6087] xt_SECMARK: invalid mode: 0 [ 104.615099][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 104.799224][ T5901] tipc: Node number set to 304948112 [ 105.656892][ T6047] tipc: Disabling bearer [ 106.053759][ T6120] Zero length message leads to an empty skb [ 106.599597][ T6133] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 106.621261][ T6135] sctp: [Deprecated]: syz.0.42 (pid 6135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.621261][ T6135] Use struct sctp_sack_info instead [ 106.658299][ T6133] netlink: 208 bytes leftover after parsing attributes in process `syz.3.43'. [ 107.181910][ T6153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.408282][ T6167] xt_CT: No such helper "pptp" [ 107.531555][ T6176] netlink: 'syz.4.54': attribute type 21 has an invalid length. [ 107.585596][ T6178] netlink: 248 bytes leftover after parsing attributes in process `syz.4.54'. [ 107.609554][ T6176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.54'. [ 107.693239][ T10] IPVS: starting estimator thread 0... [ 107.785376][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.786295][ T6184] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.808227][ T6180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.836375][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.862371][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.642811][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 108.762478][ T6208] IPv6: sit1: Disabled Multicast RS [ 109.187656][ T6217] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 109.209056][ T6217] netlink: 244 bytes leftover after parsing attributes in process `syz.3.65'. [ 109.271205][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 109.590707][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.839445][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.884323][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.948857][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.991780][ T6247] netlink: 'syz.2.74': attribute type 18 has an invalid length. [ 110.367345][ T6260] netlink: 'syz.0.77': attribute type 4 has an invalid length. [ 110.475472][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 110.639048][ T6272] netlink: 'syz.4.80': attribute type 21 has an invalid length. [ 110.678201][ T6272] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.80'. [ 110.801034][ T6277] veth0_to_bridge: entered promiscuous mode [ 110.856270][ T6277] team0: entered promiscuous mode [ 110.861385][ T6277] team_slave_0: entered promiscuous mode [ 110.903377][ T6277] team_slave_1: entered promiscuous mode [ 110.928901][ T6275] team0: left promiscuous mode [ 110.952260][ T6275] team_slave_0: left promiscuous mode [ 110.989338][ T6275] team_slave_1: left promiscuous mode [ 111.020773][ T6275] veth0_to_bridge: left promiscuous mode [ 111.333785][ T6303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.87'. [ 111.494925][ T6299] syzkaller0: entered promiscuous mode [ 111.526088][ T6299] syzkaller0: entered allmulticast mode [ 111.927859][ T6328] netlink: 64 bytes leftover after parsing attributes in process `syz.2.92'. [ 112.043487][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 112.078076][ T6334] sctp: [Deprecated]: syz.4.93 (pid 6334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.078076][ T6334] Use struct sctp_sack_info instead [ 113.778080][ T6357] netlink: 'syz.0.97': attribute type 10 has an invalid length. [ 114.102263][ T6357] team0: Port device syz_tun added [ 114.143156][ T6374] __nla_validate_parse: 1 callbacks suppressed [ 114.143178][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 114.517750][ T6400] netlink: 260 bytes leftover after parsing attributes in process `syz.0.106'. [ 114.758452][ T6409] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (98) [ 114.975325][ T6413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.164234][ T6427] sock: sock_set_timeout: `syz.3.113' (pid 6427) tries to set negative timeout [ 115.350975][ T6425] netlink: 'syz.2.112': attribute type 303 has an invalid length. [ 115.398426][ T6413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.432869][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 115.597195][ T6425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.635142][ T6413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.638779][ T6442] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 115.664447][ T6425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.819733][ T6442] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.915700][ T6413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.158477][ T6463] sctp: [Deprecated]: syz.1.117 (pid 6463) Use of int in max_burst socket option deprecated. [ 116.158477][ T6463] Use struct sctp_assoc_value instead [ 116.331934][ T6413] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.366380][ T6413] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.422961][ T6413] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.485485][ T6413] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.716084][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 116.812544][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 116.915361][ T6485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.127'. [ 117.301133][ T6507] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 117.364369][ T6514] netlink: 'syz.4.134': attribute type 16 has an invalid length. [ 117.394412][ T6514] netlink: 'syz.4.134': attribute type 17 has an invalid length. [ 117.590130][ T6514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.775603][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 117.802202][ T6525] netlink: 'syz.2.137': attribute type 3 has an invalid length. [ 117.822540][ T6523] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 117.843550][ T6523] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.079235][ T6540] xt_cgroup: invalid path, errno=-2 [ 118.344534][ T6553] netlink: 9 bytes leftover after parsing attributes in process `syz.4.144'. [ 118.360537][ T6553] 0: renamed from hsr_slave_1 (while UP) [ 118.402565][ T6553] 0: entered allmulticast mode [ 118.422938][ T6558] netlink: 9 bytes leftover after parsing attributes in process `syz.4.144'. [ 118.452600][ T6553] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 118.489264][ T6558] 1: renamed from c0 (while UP) [ 118.502580][ T6558] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 118.855009][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.526355][ T6584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.656147][ T6590] ipip0: entered promiscuous mode [ 119.666143][ T6590] ipip0: entered allmulticast mode [ 119.711359][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 119.970551][ T6598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.157'. [ 120.010512][ T6600] x_tables: duplicate underflow at hook 1 [ 121.140089][ T6646] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.185515][ T6646] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 121.476714][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 122.089368][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 122.254745][ T6677] xfrm1: entered allmulticast mode [ 122.301971][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 122.374998][ T6686] vlan3: entered promiscuous mode [ 122.388905][ T6686] batadv0: entered promiscuous mode [ 122.478677][ T6684] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 122.517461][ T6684] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 122.720690][ T6694] No such timeout policy "syz1" [ 123.500186][ T6725] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 123.536117][ T6725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.197'. [ 123.602098][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 123.678809][ T6730] netlink: 172 bytes leftover after parsing attributes in process `syz.1.195'. [ 123.860274][ T6737] netlink: 248 bytes leftover after parsing attributes in process `syz.0.199'. [ 124.702355][ T6754] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.891929][ T6754] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.043296][ T6754] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.215242][ T6754] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.443614][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.537585][ T6754] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.621887][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.704198][ T6754] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.738254][ T6754] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.778337][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.859742][ T6771] FAULT_INJECTION: forcing a failure. [ 125.859742][ T6771] name failslab, interval 1, probability 0, space 0, times 1 [ 125.874526][ T6754] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.906080][ T6771] CPU: 1 UID: 0 PID: 6771 Comm: syz.0.210 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 125.906111][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.906130][ T6771] Call Trace: [ 125.906138][ T6771] [ 125.906147][ T6771] dump_stack_lvl+0x241/0x360 [ 125.906194][ T6771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.906224][ T6771] ? __pfx__printk+0x10/0x10 [ 125.906257][ T6771] ? __pfx___might_resched+0x10/0x10 [ 125.906287][ T6771] should_fail_ex+0x424/0x570 [ 125.906318][ T6771] should_failslab+0xac/0x100 [ 125.906349][ T6771] __kmalloc_noprof+0xdf/0x4d0 [ 125.906376][ T6771] ? sk_prot_alloc+0xe0/0x210 [ 125.906406][ T6771] sk_prot_alloc+0xe0/0x210 [ 125.906428][ T6771] ? sk_alloc+0x27/0x370 [ 125.906455][ T6771] sk_alloc+0x3e/0x370 [ 125.906484][ T6771] bpf_prog_test_run_skb+0x3b7/0x1850 [ 125.906543][ T6771] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 125.906574][ T6771] ? __fget_files+0x2a/0x420 [ 125.906611][ T6771] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 125.906653][ T6771] bpf_prog_test_run+0x2e4/0x360 [ 125.906680][ T6771] __sys_bpf+0x4ee/0x8b0 [ 125.906703][ T6771] ? __pfx___sys_bpf+0x10/0x10 [ 125.906739][ T6771] ? ksys_write+0x275/0x2d0 [ 125.906776][ T6771] __x64_sys_bpf+0x7c/0x90 [ 125.906808][ T6771] do_syscall_64+0xf3/0x230 [ 125.906832][ T6771] ? clear_bhb_loop+0x45/0xa0 [ 125.906857][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.906881][ T6771] RIP: 0033:0x7fcb2058e169 [ 125.906903][ T6771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.906920][ T6771] RSP: 002b:00007fcb2144d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.906942][ T6771] RAX: ffffffffffffffda RBX: 00007fcb207b5fa0 RCX: 00007fcb2058e169 [ 125.906957][ T6771] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 125.906970][ T6771] RBP: 00007fcb2144d090 R08: 0000000000000000 R09: 0000000000000000 [ 125.906983][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.906994][ T6771] R13: 0000000000000000 R14: 00007fcb207b5fa0 R15: 00007ffd89be7a58 [ 125.907027][ T6771] [ 126.412497][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.414487][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.432480][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.445374][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.457217][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.466132][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.811052][ T6789] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 127.071682][ T6801] netlink: 'syz.0.218': attribute type 16 has an invalid length. [ 127.109079][ T6801] netlink: 'syz.0.218': attribute type 17 has an invalid length. [ 127.210469][ T6801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.350043][ T1147] bridge_slave_1: left allmulticast mode [ 127.361919][ T1147] bridge_slave_1: left promiscuous mode [ 127.391159][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.451719][ T1147] bridge_slave_0: left allmulticast mode [ 127.469956][ T1147] bridge_slave_0: left promiscuous mode [ 127.475892][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.087803][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 128.104545][ T6830] xt_TCPMSS: Only works on TCP SYN packets [ 128.473714][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.492561][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.509798][ T1147] bond0 (unregistering): Released all slaves [ 128.527380][ T5848] Bluetooth: hci2: command tx timeout [ 128.549419][ T1147] bond1 (unregistering): Released all slaves [ 129.183126][ T6851] netlink: 'syz.1.230': attribute type 16 has an invalid length. [ 129.241379][ T6851] netlink: 'syz.1.230': attribute type 17 has an invalid length. [ 129.443766][ T6851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.541090][ T6776] chnl_net:caif_netlink_parms(): no params data found [ 129.678562][ T1147] hsr_slave_0: left promiscuous mode [ 129.693593][ T1147] 1: left promiscuous mode [ 129.715783][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.736745][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.758358][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.773045][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.824832][ T1147] veth1_macvtap: left promiscuous mode [ 129.840952][ T1147] veth0_macvtap: left promiscuous mode [ 129.846991][ T1147] veth1_vlan: left promiscuous mode [ 129.855011][ T1147] veth0_vlan: left promiscuous mode [ 130.403887][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 130.454522][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 130.610588][ T5848] Bluetooth: hci2: command tx timeout [ 130.875164][ T6860] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 131.039845][ T6878] gretap0: entered promiscuous mode [ 131.046311][ T6878] vlan2: entered promiscuous mode [ 131.350443][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.362994][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.382110][ T6776] bridge_slave_0: entered allmulticast mode [ 131.391957][ T6776] bridge_slave_0: entered promiscuous mode [ 131.422933][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.430579][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.438227][ T6776] bridge_slave_1: entered allmulticast mode [ 131.448851][ T6776] bridge_slave_1: entered promiscuous mode [ 131.565310][ T6896] netlink: 'syz.0.243': attribute type 32 has an invalid length. [ 131.579217][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.592856][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 131.621989][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.631642][ T6896] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 131.817051][ T6910] netlink: 'syz.1.247': attribute type 39 has an invalid length. [ 131.831703][ T6907] macvtap1: entered allmulticast mode [ 131.837701][ T6907] veth0_macvtap: entered allmulticast mode [ 131.852122][ T6776] team0: Port device team_slave_0 added [ 131.917615][ T6776] team0: Port device team_slave_1 added [ 132.034247][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.042191][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.069152][ T6776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.101080][ T6914] FAULT_INJECTION: forcing a failure. [ 132.101080][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.114819][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.0.249 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 132.114847][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.114860][ T6914] Call Trace: [ 132.114868][ T6914] [ 132.114876][ T6914] dump_stack_lvl+0x241/0x360 [ 132.114921][ T6914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.114951][ T6914] ? __pfx__printk+0x10/0x10 [ 132.114990][ T6914] should_fail_ex+0x424/0x570 [ 132.115022][ T6914] _copy_to_user+0x31/0xb0 [ 132.115046][ T6914] bpf_test_finish+0x5ec/0x930 [ 132.115077][ T6914] ? __pfx_bpf_test_finish+0x10/0x10 [ 132.115103][ T6914] ? bpf_prog_test_run_skb+0x854/0x1850 [ 132.115133][ T6914] ? convert___skb_to_skb+0x41/0x630 [ 132.115150][ T6914] ? convert_skb_to___skb+0x2d7/0x510 [ 132.115173][ T6914] bpf_prog_test_run_skb+0x1018/0x1850 [ 132.115232][ T6914] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 132.115262][ T6914] ? __fget_files+0x2a/0x420 [ 132.115298][ T6914] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 132.115333][ T6914] bpf_prog_test_run+0x2e4/0x360 [ 132.115360][ T6914] __sys_bpf+0x4ee/0x8b0 [ 132.115382][ T6914] ? __pfx___sys_bpf+0x10/0x10 [ 132.115417][ T6914] ? ksys_write+0x275/0x2d0 [ 132.115454][ T6914] __x64_sys_bpf+0x7c/0x90 [ 132.115485][ T6914] do_syscall_64+0xf3/0x230 [ 132.115508][ T6914] ? clear_bhb_loop+0x45/0xa0 [ 132.115533][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.115552][ T6914] RIP: 0033:0x7fcb2058e169 [ 132.115570][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.115586][ T6914] RSP: 002b:00007fcb2144d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.115608][ T6914] RAX: ffffffffffffffda RBX: 00007fcb207b5fa0 RCX: 00007fcb2058e169 [ 132.115623][ T6914] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 132.115636][ T6914] RBP: 00007fcb2144d090 R08: 0000000000000000 R09: 0000000000000000 [ 132.115648][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.115660][ T6914] R13: 0000000000000000 R14: 00007fcb207b5fa0 R15: 00007ffd89be7a58 [ 132.115693][ T6914] [ 132.430481][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.437726][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.464718][ T6776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.554311][ T6776] hsr_slave_0: entered promiscuous mode [ 132.561449][ T6776] hsr_slave_1: entered promiscuous mode [ 132.571488][ T6776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.580597][ T6776] Cannot create hsr debugfs directory [ 132.689624][ T5848] Bluetooth: hci2: command tx timeout [ 132.812302][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 132.883135][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'. [ 132.890861][ T6929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.203447][ T6940] netlink: 'syz.2.259': attribute type 16 has an invalid length. [ 133.203496][ T6929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.211474][ T6940] netlink: 'syz.2.259': attribute type 17 has an invalid length. [ 133.299279][ T6940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.433711][ T6929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.524521][ T6937] netlink: 5 bytes leftover after parsing attributes in process `syz.1.258'. [ 133.650059][ T6956] FAULT_INJECTION: forcing a failure. [ 133.650059][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.664907][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.262 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 133.664938][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.664952][ T6956] Call Trace: [ 133.664960][ T6956] [ 133.664969][ T6956] dump_stack_lvl+0x241/0x360 [ 133.665007][ T6956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.665036][ T6956] ? __pfx__printk+0x10/0x10 [ 133.665077][ T6956] should_fail_ex+0x424/0x570 [ 133.665109][ T6956] _copy_to_user+0x31/0xb0 [ 133.665133][ T6956] bpf_test_finish+0x626/0x930 [ 133.665165][ T6956] ? __pfx_bpf_test_finish+0x10/0x10 [ 133.665191][ T6956] ? bpf_prog_test_run_skb+0x854/0x1850 [ 133.665222][ T6956] ? convert___skb_to_skb+0x41/0x630 [ 133.665239][ T6956] ? convert_skb_to___skb+0x2d7/0x510 [ 133.665262][ T6956] bpf_prog_test_run_skb+0x1018/0x1850 [ 133.665320][ T6956] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 133.665351][ T6956] ? __fget_files+0x2a/0x420 [ 133.665387][ T6956] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 133.665422][ T6956] bpf_prog_test_run+0x2e4/0x360 [ 133.665449][ T6956] __sys_bpf+0x4ee/0x8b0 [ 133.665471][ T6956] ? __pfx___sys_bpf+0x10/0x10 [ 133.665506][ T6956] ? ksys_write+0x275/0x2d0 [ 133.665543][ T6956] __x64_sys_bpf+0x7c/0x90 [ 133.665575][ T6956] do_syscall_64+0xf3/0x230 [ 133.665599][ T6956] ? clear_bhb_loop+0x45/0xa0 [ 133.665624][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.665644][ T6956] RIP: 0033:0x7f826578e169 [ 133.665662][ T6956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.665679][ T6956] RSP: 002b:00007f8266621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.665701][ T6956] RAX: ffffffffffffffda RBX: 00007f82659b5fa0 RCX: 00007f826578e169 [ 133.665716][ T6956] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 133.665729][ T6956] RBP: 00007f8266621090 R08: 0000000000000000 R09: 0000000000000000 [ 133.665741][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.665760][ T6956] R13: 0000000000000000 R14: 00007f82659b5fa0 R15: 00007ffe2c309e88 [ 133.665793][ T6956] [ 133.908882][ T6929] bond0: (slave netdevsim0): Releasing backup interface [ 133.924669][ T6929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.034417][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 134.100025][ T6962] 8021q: VLANs not supported on ip_vti0 [ 134.165195][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 134.319483][ T6929] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.398860][ T6929] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.484262][ T6929] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.550755][ T6929] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.595763][ T6981] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.756959][ T6981] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.766211][ T5848] Bluetooth: hci2: command tx timeout [ 134.824439][ T6986] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.874290][ T6981] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.932994][ T6995] xt_l2tp: wrong L2TP version: 0 [ 134.940990][ T6776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.966662][ T6981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.053806][ T6776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.089869][ T6776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.150362][ T6776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.235003][ T6981] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.275325][ T6981] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.312140][ T6981] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.333462][ T6981] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.515464][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.577356][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 135.598129][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.614543][ T7007] macvlan2: entered promiscuous mode [ 135.620294][ T7007] macvlan2: entered allmulticast mode [ 135.625797][ T7007] erspan0: entered allmulticast mode [ 135.644365][ T7010] xt_TCPMSS: Only works on TCP SYN packets [ 135.659459][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 135.672634][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.679889][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.754921][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.762306][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.306254][ T7032] netlink: 112 bytes leftover after parsing attributes in process `syz.3.286'. [ 136.331954][ T7034] netlink: 'syz.2.285': attribute type 3 has an invalid length. [ 136.349725][ T7033] macvlan1: entered promiscuous mode [ 136.371860][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'. [ 136.373669][ T7033] ipvlan0: entered promiscuous mode [ 136.405134][ T7033] ipvlan0: left promiscuous mode [ 136.568385][ T7041] netlink: 'syz.1.288': attribute type 16 has an invalid length. [ 136.593184][ T7033] macvlan1: left promiscuous mode [ 136.611651][ T7041] netlink: 'syz.1.288': attribute type 17 has an invalid length. [ 136.672673][ T7041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.791637][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.812200][ T7044] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.894781][ T7044] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.034029][ T7044] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.134736][ T7044] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.411657][ T6776] veth0_vlan: entered promiscuous mode [ 137.458046][ T6776] veth1_vlan: entered promiscuous mode [ 137.529634][ T6776] veth0_macvtap: entered promiscuous mode [ 137.563111][ T6776] veth1_macvtap: entered promiscuous mode [ 137.609330][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.638657][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.671126][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.711427][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.738174][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.755644][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.825389][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.887669][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.898708][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.916638][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.940581][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.966571][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.030110][ T6776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.069069][ T6776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.100438][ T6776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.120556][ T6776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.132674][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 138.306260][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.514371][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 138.536148][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 138.566539][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 138.718620][ T7093] xfrm1: left allmulticast mode [ 138.795650][ T7107] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 138.802293][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.817668][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.854137][ T7107] netlink: 228 bytes leftover after parsing attributes in process `syz.2.306'. [ 138.874069][ T7109] Bluetooth: MGMT ver 1.23 [ 138.947176][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.966957][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.100581][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 139.371066][ T7120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.389188][ T7125] netlink: 1 bytes leftover after parsing attributes in process `syz.3.313'. [ 139.539156][ T7120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.601929][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 139.700733][ T7136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.316'. [ 139.797326][ T7134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.810017][ T7120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.847052][ T7137] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 139.898019][ T7120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.990514][ T7141] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 140.016516][ T7141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.318'. [ 140.055214][ T7120] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.097844][ T7142] netlink: 252 bytes leftover after parsing attributes in process `syz.2.317'. [ 140.213089][ T7120] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.256665][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.269113][ T7143] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 140.281086][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.290321][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.299527][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.307467][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.314458][ T7143] netlink: 224 bytes leftover after parsing attributes in process `syz.3.318'. [ 140.331917][ T7120] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.334663][ T7143] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 140.427016][ T7120] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.474827][ T7156] netem: incorrect gi model size [ 140.495699][ T7156] netem: change failed [ 140.554770][ T7158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.584487][ T7158] bond0: (slave bond1): Enslaving as an active interface with an up link [ 140.615767][ T7163] netlink: 'syz.1.320': attribute type 29 has an invalid length. [ 140.999081][ T7176] netlink: 'syz.3.326': attribute type 12 has an invalid length. [ 141.140269][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 141.159036][ T7187] netlink: 'syz.2.329': attribute type 11 has an invalid length. [ 141.474013][ T7200] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.603597][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.620345][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.634826][ T7152] bridge_slave_0: entered allmulticast mode [ 141.645846][ T7152] bridge_slave_0: entered promiscuous mode [ 141.655819][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.663913][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.671559][ T7152] bridge_slave_1: entered allmulticast mode [ 141.682115][ T7152] bridge_slave_1: entered promiscuous mode [ 141.730198][ T7200] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.892804][ T7223] netlink: 'syz.1.339': attribute type 16 has an invalid length. [ 141.902927][ T7200] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.939324][ T7223] netlink: 'syz.1.339': attribute type 17 has an invalid length. [ 141.964605][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.065167][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.074024][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.084954][ T7223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.109693][ T7200] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.135358][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.183838][ T7228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.235125][ T7228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.253379][ T7152] team0: Port device team_slave_0 added [ 142.274006][ T7152] team0: Port device team_slave_1 added [ 142.366495][ T5848] Bluetooth: hci2: command tx timeout [ 142.381174][ T7152] ------------[ cut here ]------------ [ 142.386955][ T7152] WARNING: CPU: 1 PID: 7152 at ./include/net/netdev_lock.h:17 netdev_nl_dev_fill+0x6bc/0x860 [ 142.397281][ T7152] Modules linked in: [ 142.401421][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 142.414177][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.424795][ T7152] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 142.430724][ T7152] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 85 ec c3 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 77 ec c3 f7 90 0f 0b 90 42 80 3c 3b 00 [ 142.451472][ T7152] RSP: 0018:ffffc9000e1ae860 EFLAGS: 00010293 [ 142.458193][ T7152] RAX: ffffffff89ff68eb RBX: 0000000000000000 RCX: ffff88806b051e00 [ 142.466273][ T7152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.474724][ T7152] RBP: ffffc9000e1ae990 R08: ffffffff89ff630c R09: 1ffff1100ec75ddc [ 142.482793][ T7152] R10: dffffc0000000000 R11: ffffed100ec75ddd R12: ffff88807cb2e000 [ 142.491191][ T7152] R13: ffff88802b736280 R14: ffff88802b736280 R15: ffffc9000e1ae9e0 [ 142.499250][ T7152] FS: 000055556b90c500(0000) GS:ffff8881250a5000(0000) knlGS:0000000000000000 [ 142.508343][ T7152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.514953][ T7152] CR2: 000000110c37469d CR3: 0000000030a22000 CR4: 00000000003526f0 [ 142.523150][ T7152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.531999][ T7152] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.540239][ T7152] Call Trace: [ 142.543560][ T7152] [ 142.546653][ T7152] ? __build_skb_around+0x247/0x3d0 [ 142.552555][ T7152] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 142.558638][ T7152] ? __alloc_skb+0x298/0x480 [ 142.563285][ T7152] ? __pfx___alloc_skb+0x10/0x10 [ 142.568317][ T7152] netdev_genl_dev_notify+0x1fb/0x450 [ 142.573725][ T7152] ? dev_map_notification+0x197/0x9a0 [ 142.579199][ T7152] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 142.585176][ T7152] ? dev_map_notification+0x990/0x9a0 [ 142.590689][ T7152] ? ip_vs_dst_event+0x508/0x6a0 [ 142.595670][ T7152] netdev_genl_netdevice_event+0x81/0xa0 [ 142.601411][ T7152] notifier_call_chain+0x1a5/0x3f0 [ 142.607235][ T7152] register_netdevice+0x16c0/0x1b80 [ 142.612529][ T7152] ? rcu_is_watching+0x15/0xb0 [ 142.618010][ T7152] ? __pfx_register_netdevice+0x10/0x10 [ 142.624274][ T7152] ? dev_addr_mod+0xf4/0x430 [ 142.629029][ T7152] ? __asan_memset+0x23/0x50 [ 142.634468][ T7152] ? netif_inherit_tso_max+0x1f3/0x340 [ 142.640040][ T7152] veth_newlink+0x4c3/0xb80 [ 142.644602][ T7152] ? __pfx_veth_newlink+0x10/0x10 [ 142.650352][ T7152] ? rtnetlink_rcv_msg+0x80f/0xd70 [ 142.655515][ T7152] ? netlink_rcv_skb+0x208/0x480 [ 142.661032][ T7152] ? netlink_unicast+0x7f8/0x9a0 [ 142.666143][ T7152] ? netlink_sendmsg+0x8c3/0xcd0 [ 142.671143][ T7152] ? __sock_sendmsg+0x221/0x270 [ 142.676216][ T7152] ? __x64_sys_sendto+0xde/0x100 [ 142.681211][ T7152] ? do_syscall_64+0xf3/0x230 [ 142.686551][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.692721][ T7152] ? rtnl_create_link+0xb3f/0xea0 [ 142.697855][ T7152] ? __asan_memset+0x23/0x50 [ 142.702496][ T7152] ? nla_strscpy+0x115/0x180 [ 142.707197][ T7152] ? __pfx_veth_newlink+0x10/0x10 [ 142.712271][ T7152] rtnl_newlink_create+0x3a1/0xc30 [ 142.717547][ T7152] ? __mutex_lock+0x380/0x10c0 [ 142.722361][ T7152] ? __pfx_aa_get_newest_label+0x10/0x10 [ 142.728127][ T7152] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 142.733906][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 142.739132][ T7152] ? nla_strscpy+0x102/0x180 [ 142.743787][ T7152] ? full_name_hash+0x93/0xe0 [ 142.748576][ T7152] rtnl_newlink+0x18b0/0x1fe0 [ 142.753714][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 142.759317][ T7152] ? aa_get_newest_label+0x101/0x6f0 [ 142.764703][ T7152] ? __lock_acquire+0xad5/0xd80 [ 142.769847][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 142.774947][ T7152] rtnetlink_rcv_msg+0x80f/0xd70 [ 142.779996][ T7152] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 142.785163][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.790727][ T7152] ? __lock_acquire+0xad5/0xd80 [ 142.795684][ T7152] netlink_rcv_skb+0x208/0x480 [ 142.800593][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.806269][ T7152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.811623][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.817010][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.822295][ T7152] netlink_unicast+0x7f8/0x9a0 [ 142.827254][ T7152] ? __pfx_netlink_unicast+0x10/0x10 [ 142.832598][ T7152] ? skb_put+0x114/0x1f0 [ 142.837114][ T7152] netlink_sendmsg+0x8c3/0xcd0 [ 142.842266][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.848165][ T7152] ? aa_sock_msg_perm+0x91/0x160 [ 142.853296][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.859455][ T7152] __sock_sendmsg+0x221/0x270 [ 142.864199][ T7152] __sys_sendto+0x365/0x4c0 [ 142.869279][ T7152] ? __pfx___sys_sendto+0x10/0x10 [ 142.874503][ T7152] __x64_sys_sendto+0xde/0x100 [ 142.879365][ T7152] do_syscall_64+0xf3/0x230 [ 142.883922][ T7152] ? clear_bhb_loop+0x45/0xa0 [ 142.888696][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.894630][ T7152] RIP: 0033:0x7fc72478fffc [ 142.899194][ T7152] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 142.918933][ T7152] RSP: 002b:00007ffdafa1e840 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 142.927708][ T7152] RAX: ffffffffffffffda RBX: 00007fc7254e4620 RCX: 00007fc72478fffc [ 142.935733][ T7152] RDX: 000000000000006c RSI: 00007fc7254e4670 RDI: 0000000000000003 [ 142.943806][ T7152] RBP: 0000000000000000 R08: 00007ffdafa1e894 R09: 000000000000000c [ 142.951877][ T7152] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 142.960577][ T7152] R13: 0000000000000000 R14: 00007fc7254e4670 R15: 0000000000000000 [ 142.969179][ T7152] [ 142.972275][ T7152] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.979609][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 142.991800][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.001876][ T7152] Call Trace: [ 143.005172][ T7152] [ 143.008117][ T7152] dump_stack_lvl+0x241/0x360 [ 143.012826][ T7152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.018049][ T7152] ? __pfx__printk+0x10/0x10 [ 143.022669][ T7152] ? vscnprintf+0x5d/0x90 [ 143.027038][ T7152] panic+0x349/0x880 [ 143.030958][ T7152] ? __warn+0x174/0x4d0 [ 143.035151][ T7152] ? __pfx_panic+0x10/0x10 [ 143.039606][ T7152] __warn+0x344/0x4d0 [ 143.043642][ T7152] ? netdev_nl_dev_fill+0x6bc/0x860 [ 143.049409][ T7152] report_bug+0x2b3/0x500 [ 143.053753][ T7152] ? netdev_nl_dev_fill+0x6bc/0x860 [ 143.058972][ T7152] ? netdev_nl_dev_fill+0x6bc/0x860 [ 143.064238][ T7152] ? netdev_nl_dev_fill+0x6be/0x860 [ 143.069546][ T7152] handle_bug+0x89/0x170 [ 143.073853][ T7152] exc_invalid_op+0x1a/0x50 [ 143.078385][ T7152] asm_exc_invalid_op+0x1a/0x20 [ 143.083270][ T7152] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 143.089100][ T7152] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 85 ec c3 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 77 ec c3 f7 90 0f 0b 90 42 80 3c 3b 00 [ 143.108730][ T7152] RSP: 0018:ffffc9000e1ae860 EFLAGS: 00010293 [ 143.114821][ T7152] RAX: ffffffff89ff68eb RBX: 0000000000000000 RCX: ffff88806b051e00 [ 143.122816][ T7152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.130893][ T7152] RBP: ffffc9000e1ae990 R08: ffffffff89ff630c R09: 1ffff1100ec75ddc [ 143.138996][ T7152] R10: dffffc0000000000 R11: ffffed100ec75ddd R12: ffff88807cb2e000 [ 143.147067][ T7152] R13: ffff88802b736280 R14: ffff88802b736280 R15: ffffc9000e1ae9e0 [ 143.155063][ T7152] ? netdev_nl_dev_fill+0xdc/0x860 [ 143.160226][ T7152] ? netdev_nl_dev_fill+0x6bb/0x860 [ 143.165458][ T7152] ? __build_skb_around+0x247/0x3d0 [ 143.170696][ T7152] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 143.176264][ T7152] ? __alloc_skb+0x298/0x480 [ 143.180878][ T7152] ? __pfx___alloc_skb+0x10/0x10 [ 143.185857][ T7152] netdev_genl_dev_notify+0x1fb/0x450 [ 143.191472][ T7152] ? dev_map_notification+0x197/0x9a0 [ 143.196918][ T7152] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 143.202962][ T7152] ? dev_map_notification+0x990/0x9a0 [ 143.208461][ T7152] ? ip_vs_dst_event+0x508/0x6a0 [ 143.213435][ T7152] netdev_genl_netdevice_event+0x81/0xa0 [ 143.219094][ T7152] notifier_call_chain+0x1a5/0x3f0 [ 143.224232][ T7152] register_netdevice+0x16c0/0x1b80 [ 143.229715][ T7152] ? rcu_is_watching+0x15/0xb0 [ 143.234514][ T7152] ? __pfx_register_netdevice+0x10/0x10 [ 143.240090][ T7152] ? dev_addr_mod+0xf4/0x430 [ 143.244702][ T7152] ? __asan_memset+0x23/0x50 [ 143.249668][ T7152] ? netif_inherit_tso_max+0x1f3/0x340 [ 143.255361][ T7152] veth_newlink+0x4c3/0xb80 [ 143.259897][ T7152] ? __pfx_veth_newlink+0x10/0x10 [ 143.264945][ T7152] ? rtnetlink_rcv_msg+0x80f/0xd70 [ 143.270084][ T7152] ? netlink_rcv_skb+0x208/0x480 [ 143.275044][ T7152] ? netlink_unicast+0x7f8/0x9a0 [ 143.280004][ T7152] ? netlink_sendmsg+0x8c3/0xcd0 [ 143.284957][ T7152] ? __sock_sendmsg+0x221/0x270 [ 143.289837][ T7152] ? __x64_sys_sendto+0xde/0x100 [ 143.294789][ T7152] ? do_syscall_64+0xf3/0x230 [ 143.299488][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.305630][ T7152] ? rtnl_create_link+0xb3f/0xea0 [ 143.310687][ T7152] ? __asan_memset+0x23/0x50 [ 143.315293][ T7152] ? nla_strscpy+0x115/0x180 [ 143.319912][ T7152] ? __pfx_veth_newlink+0x10/0x10 [ 143.324967][ T7152] rtnl_newlink_create+0x3a1/0xc30 [ 143.330120][ T7152] ? __mutex_lock+0x380/0x10c0 [ 143.334941][ T7152] ? __pfx_aa_get_newest_label+0x10/0x10 [ 143.340617][ T7152] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 143.346272][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 143.351348][ T7152] ? nla_strscpy+0x102/0x180 [ 143.355965][ T7152] ? full_name_hash+0x93/0xe0 [ 143.360675][ T7152] rtnl_newlink+0x18b0/0x1fe0 [ 143.365394][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.370585][ T7152] ? aa_get_newest_label+0x101/0x6f0 [ 143.375905][ T7152] ? __lock_acquire+0xad5/0xd80 [ 143.380805][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.385846][ T7152] rtnetlink_rcv_msg+0x80f/0xd70 [ 143.391263][ T7152] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 143.396431][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.402018][ T7152] ? __lock_acquire+0xad5/0xd80 [ 143.406910][ T7152] netlink_rcv_skb+0x208/0x480 [ 143.411727][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.417204][ T7152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.422517][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.427732][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.432944][ T7152] netlink_unicast+0x7f8/0x9a0 [ 143.437738][ T7152] ? __pfx_netlink_unicast+0x10/0x10 [ 143.443074][ T7152] ? skb_put+0x114/0x1f0 [ 143.447353][ T7152] netlink_sendmsg+0x8c3/0xcd0 [ 143.452176][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.457493][ T7152] ? aa_sock_msg_perm+0x91/0x160 [ 143.462487][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.467791][ T7152] __sock_sendmsg+0x221/0x270 [ 143.472530][ T7152] __sys_sendto+0x365/0x4c0 [ 143.477089][ T7152] ? __pfx___sys_sendto+0x10/0x10 [ 143.482170][ T7152] __x64_sys_sendto+0xde/0x100 [ 143.486953][ T7152] do_syscall_64+0xf3/0x230 [ 143.491758][ T7152] ? clear_bhb_loop+0x45/0xa0 [ 143.496452][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.502355][ T7152] RIP: 0033:0x7fc72478fffc [ 143.506783][ T7152] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 143.526404][ T7152] RSP: 002b:00007ffdafa1e840 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 143.534845][ T7152] RAX: ffffffffffffffda RBX: 00007fc7254e4620 RCX: 00007fc72478fffc [ 143.542880][ T7152] RDX: 000000000000006c RSI: 00007fc7254e4670 RDI: 0000000000000003 [ 143.550878][ T7152] RBP: 0000000000000000 R08: 00007ffdafa1e894 R09: 000000000000000c [ 143.558969][ T7152] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 143.566956][ T7152] R13: 0000000000000000 R14: 00007fc7254e4670 R15: 0000000000000000 [ 143.574978][ T7152] [ 143.578535][ T7152] Kernel Offset: disabled [ 143.582901][ T7152] Rebooting in 86400 seconds..