last executing test programs: 1m25.047759371s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m6.861113135s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 54.248115229s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 36.396155704s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 24.917985945s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 10.953545177s ago: executing program 3 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e0001000000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.341555436s ago: executing program 1 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x0, 0x9, 0x4, r2}, &(0x7f0000000080)=0x10) getsockopt(r0, 0x1, 0x6, &(0x7f0000000400)=""/21, &(0x7f0000000440)=0x15) 6.163532778s ago: executing program 1 (id=2763): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000740)={0xa, 0x4ea4, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000061a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007000000080006400000000208000440000000170900010073797a30009105d8e10361960e797a32000000001400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000002000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a0025000000170000003e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050ec6850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xbc}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000140)={0xe, [0x1000, 0x8]}, 0x10) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @null, 0x7, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="090000001800000000000000600000006000e1ff020000000c000000000000010000000008006a040c00000000f10011030000000a0000000500df0000000011015fa9ef48b4e48309bc63e4fd00000004200000010000dfbcc457bf7b62000000001d02000000000000000300000d00000000090000000100000006000000030000000e00000000000000006100"], &(0x7f00000002c0)=""/214, 0x7b, 0xd6, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x400, 0x3ff, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x66, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@noop, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xb0, 0x5]}, @noop]}}}}}) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r8}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1e0800000b004000000000000000000000200100f1fde75ef2194166d7702b85ee9c819d908927618925e9572cbd92f9a377d4f5688ca29bb32862e578faa419ff815030251e5db311cd47d5d3a5a731ba3c1c874e2084c96c089f802d1ff1496808a3e15fd77622f695f13c6d4ec9e9fe82be8fc9cb4a2cd4c1d79ca375ce58b6900b1b794f07e09294fcea5977125e28d44d0a65551aa1933240c2a4adc9fc7a7869735302dfc820a1b720baf201fa650dab25e7b9359852fbd7f19b5d9a56240c3289cde9f6240251981aefaed0dd2e23285fa987a50d0e7a811816ecfcbd4527e554", @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="03000000feffffff020000001100"/24, @ANYRES32=r10, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f0000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.147254329s ago: executing program 1 (id=2768): syz_init_net_socket$llc(0x1a, 0x3, 0x0) 4.952623034s ago: executing program 1 (id=2771): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000740)={0xa, 0x4ea4, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000061a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007000000080006400000000208000440000000170900010073797a30009105d8e10361960e797a32000000001400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000002000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a0025000000170000003e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050ec6850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xbc}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000140)={0xe, [0x1000, 0x8]}, 0x10) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @null, 0x7, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="090000001800000000000000600000006000e1ff020000000c000000000000010000000008006a040c00000000f10011030000000a0000000500df0000000011015fa9ef48b4e48309bc63e4fd00000004200000010000dfbcc457bf7b62000000001d02000000000000000300000d00000000090000000100000006000000030000000e00000000000000006100"], &(0x7f00000002c0)=""/214, 0x7b, 0xd6, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x400, 0x3ff, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x66, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@noop, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xb0, 0x5]}, @noop]}}}}}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r9}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1e0800000b004000000000000000000000200100f1fde75ef2194166d7702b85ee9c819d908927618925e9572cbd92f9a377d4f5688ca29bb32862e578faa419ff815030251e5db311cd47d5d3a5a731ba3c1c874e2084c96c089f802d1ff1496808a3e15fd77622f695f13c6d4ec9e9fe82be8fc9cb4a2cd4c1d79ca375ce58b6900b1b794f07e09294fcea5977125e28d44d0a65551aa1933240c2a4adc9fc7a7869735302dfc820a1b720baf201fa650dab25e7b9359852fbd7f19b5d9a56240c3289cde9f6240251981aefaed0dd2e23285fa987a50d0e7a811816ecfcbd4527e554", @ANYRES32=r4, @ANYBLOB='\x00'/19, @ANYRES32=r10, @ANYRES32, @ANYBLOB="03000000feffffff020000001100"/24, @ANYRES32=r11, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f0000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.723841407s ago: executing program 4 (id=2774): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000100)=0x8) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000004b80)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) close(r4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.24168819s ago: executing program 4 (id=2779): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000740)={0xa, 0x4ea4, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000061a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007000000080006400000000208000440000000170900010073797a30009105d8e10361960e797a32000000001400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xbc}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000140)={0xe, [0x1000, 0x8]}, 0x10) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @null, 0x7, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="090000001800000000000000600000006000e1ff020000000c000000000000010000000008006a040c00000000f10011030000000a0000000500df0000000011015fa9ef48b4e48309bc63e4fd00000004200000010000dfbcc457bf7b62000000001d02000000000000000300000d00000000090000000100000006000000030000000e00000000000000006100"], &(0x7f00000002c0)=""/214, 0x7b, 0xd6, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x400, 0x3ff, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x66, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@noop, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xb0, 0x5]}, @noop]}}}}}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r9}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="03000000feffffff020000001100"/24, @ANYRES32=r11, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f0000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.687243298s ago: executing program 1 (id=2781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x4cb, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000002c0), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000700)=ANY=[@ANYRES32=r5, @ANYBLOB="09000000bb2585b3ada248e2d1b214741064d4b06e2295926af0e131379c5483cab1a9bc04594f662d4a2d3111f125b82492f1fdfd5d99f273552d23a253937a1f4c639a1c5345cc5936d69aeff4cecae0d50e8fc00ae35836b7b806d407e00fceac0e1ea614f925cdbb471b5f6c5b3bd97458a5d76aa60ba879f51222981c838559b01272de26d370cbab0ad8da56e212e7"]) r6 = getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xfffffdc4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x4e21, @remote}}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c7698a3285aaf0020000000000a00"], 0x1c}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r11, 0x0) ppoll(0x0, 0x0, &(0x7f0000002d00)={0x0, 0x989680}, 0x0, 0x0) socket(0x21, 0x4, 0xa6) 3.27078063s ago: executing program 0 (id=2785): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0xfffeffff, '\x00', 0x0, r0, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pwritev(r0, &(0x7f0000000440), 0x0, 0x4000040, 0xb) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000710e42000000000040000000000000009500000000000000691770ea726390bd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xa, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 3.153468341s ago: executing program 4 (id=2786): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x3b, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="b5af00e31bc4c418260000000000000001000000040003006b6ddc566e6c36c772b12eb84aa26f45"], 0x18}}, 0x0) 3.107592911s ago: executing program 0 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x870bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001040000000000000000000071120f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x24020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="02fadb00008003000100"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.36287896s ago: executing program 0 (id=2790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0xa}]}]}]}]}, 0x2c}}, 0x4000) 2.101071129s ago: executing program 1 (id=2791): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xa2, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 1.90314741s ago: executing program 0 (id=2793): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001040000000000000000000071120f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r0}, 0xc) close(r1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x44040) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r3) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x14) getsockopt(r2, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3b000300010006", 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, [0xe4, 0xdcd, 0x6, 0x6b1c, 0x2, 0x7, 0x6, 0x0, 0x7, 0x3ff, 0x0, 0x8, 0x9, 0x3, 0x141c]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={r7, 0x53f}, &(0x7f00000004c0)=0x8) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.58791475s ago: executing program 4 (id=2796): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000740)={0xa, 0x4ea4, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000061a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007000000080006400000000208000440000000170900010073797a30009105d8e10361960e797a32000000001400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xbc}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000140)={0xe, [0x1000, 0x8]}, 0x10) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @null, 0x7, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="090000001800000000000000600000006000e1ff020000000c000000000000010000000008006a040c00000000f10011030000000a0000000500df0000000011015fa9ef48b4e48309bc63e4fd00000004200000010000dfbcc457bf7b62000000001d02000000000000000300000d00000000090000000100000006000000030000000e00000000000000006100"], &(0x7f00000002c0)=""/214, 0x7b, 0xd6, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x400, 0x3ff, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x66, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@noop, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xb0, 0x5]}, @noop]}}}}}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r9}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="03000000feffffff020000001100"/24, @ANYRES32=r11, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f0000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.518049018s ago: executing program 2 (id=2797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x400, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000001fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000042000b0026bd70000040000003000000080002"], 0x3c}, 0x1, 0x0, 0x0, 0x24000091}, 0x0) 1.275792294s ago: executing program 2 (id=2798): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x2, @empty, 0x20000000}, 0x1c) 1.229511236s ago: executing program 2 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x4, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0xfff0}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x2c}}, 0x0) 1.152978963s ago: executing program 2 (id=2800): accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80)=0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000040600000000000000000000000000090900020073797a3000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x2400c090) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3ac}, 0x1, 0x0, 0x0, 0xc0c0}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3440000068000903fd999992f00a00beb102082f2152e4f07732d50000001b000000000a0000000000000004000b001800088014009204010000000000000049"], 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000cccdf3b145ce1038050bb05a9f0720629abda7e1405b1f4cefb3fe6fdd2aac1c3f9edd8998fd355bd042e90440cc1e23cb93677f4103221e187b9b21509d03604bc1fb03960e3cd9d152f26464a7f6aefe704b39cf39703837925dd25b440adb2d935627f406ab04c0e8685a437e3fec52d4fdd4157a222f667b8825fd233e77a53635b14d33b1df3edd5fee6c6e8edeeef485a21f699dd3ef9fab86dac17572c4e1a0194ade1e6e619cf3eb4b8ceb8ea2ff7fd45ac9a5", @ANYRES16=r8, @ANYBLOB="8304000000000000000001000000340002800c00018008000100050000000c00018008000100070000000c00018008000100030000000b000180080001000400000004000180"], 0x4c}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x50717eecf5a1a9e6, &(0x7f0000000040)=0x4040, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300), 0x4) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r6, @ANYRES8=r5], 0x3c}}, 0x0) 1.014818126s ago: executing program 2 (id=2801): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x282a, 0x4) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f00000000c0)=@can={{0x2, 0x1}, 0x6, 0x1, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) unshare(0x68040200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r7, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYBLOB="18113656280007019c8a69fd6f5efadc027c0000040000"], 0x18}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000001c0)=0x2c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x70, r10, 0xd01, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x9004, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000080)={0x3, 0x8}) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 975.439226ms ago: executing program 0 (id=2802): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x18, 0x1401, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24001080}, 0x40000) (fail_nth: 7) 519.516961ms ago: executing program 0 (id=2803): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'netdevsim0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000440)='xprtrdma_frwr_dereg\x00', r3}, 0x18) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES16=r11], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r10, @ANYBLOB="0400000008000000090080000800000004000100", @ANYRES32=r10, @ANYRESOCT=r0, @ANYRESHEX=r6, @ANYBLOB="a60b7bd9f581ca1f5e780d5926543035d3b14f81dc3252d84109e53b8f477faed659b7e86d0f22981197f7a7c2d5513e6d22df0cb4924dfc62aff85a"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) 421.574835ms ago: executing program 4 (id=2804): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x744, 0x6}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @mcast1, 0x8}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x80, 0x8, 0x40}, 0x10) 169.611768ms ago: executing program 4 (id=2805): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000740)={0xa, 0x4ea4, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000061a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007000000080006400000000208000440000000170900010073797a30009105d8e10361960e797a32000000001400000011000100"/146], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xbc}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000140)={0xe, [0x1000, 0x8]}, 0x10) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @null, 0x7, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="090000001800000000000000600000006000e1ff020000000c000000000000010000000008006a040c00000000f10011030000000a0000000500df0000000011015fa9ef48b4e48309bc63e4fd00000004200000010000dfbcc457bf7b62000000001d02000000000000000300000d00000000090000000100000006000000030000000e00000000000000006100"], &(0x7f00000002c0)=""/214, 0x7b, 0xd6, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x400, 0x3ff, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x66, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, {[@noop, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xb0, 0x5]}, @noop]}}}}}) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r8}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1e0800000b004000000000000000000000200100f1fde75ef2194166d7702b85ee9c819d908927618925e9572cbd92f9a377d4f5688ca29bb32862e578faa419ff815030251e5db311cd47d5d3a5a731ba3c1c874e2084c96c089f802d1ff1496808a3e15fd77622f695f13c6d4ec9e9fe82be8fc9cb4a2cd4c1d79ca375ce58b6900b1b794f07e09294fcea5977125e28d44d0a65551aa1933240c2a4adc9fc7a7869735302dfc820a1b720baf201fa650dab25e7b9359852fbd7f19b5d9a56240c3289cde9f6240251981aefaed0dd2e23285fa987a50d0e7a811816ecfcbd4527e554", @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="03000000feffffff020000001100"/24, @ANYRES32=r10, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f0000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=2806): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x1100, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): T16202] xfrm0: entered allmulticast mode [ 655.324183][T16202] veth0_to_hsr: entered promiscuous mode [ 655.329874][T16202] veth0_to_hsr: entered allmulticast mode [ 655.337467][T16202] hsr_slave_0: entered allmulticast mode [ 655.343908][T16202] veth1_to_hsr: entered promiscuous mode [ 655.349666][T16202] veth1_to_hsr: entered allmulticast mode [ 655.357064][T16202] hsr_slave_1: entered allmulticast mode [ 655.366464][T16202] hsr0: entered promiscuous mode [ 655.371445][T16202] hsr0: entered allmulticast mode [ 655.377504][T16202] veth1_virt_wifi: entered promiscuous mode [ 655.383639][T16202] veth1_virt_wifi: entered allmulticast mode [ 655.389820][T16202] veth0_virt_wifi: entered promiscuous mode [ 655.395955][T16202] veth0_virt_wifi: entered allmulticast mode [ 655.402073][T16202] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 655.409403][T16202] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 655.416985][T16202] veth1_vlan: entered allmulticast mode [ 655.422661][T16202] veth0_vlan: entered allmulticast mode [ 655.428417][T16202] vlan0: entered promiscuous mode [ 655.433845][T16202] vlan0: entered allmulticast mode [ 655.439112][T16202] vlan1: entered promiscuous mode [ 655.444405][T16202] vlan1: entered allmulticast mode [ 655.449654][T16202] macvlan0: entered promiscuous mode [ 655.455142][T16202] macvlan0: entered allmulticast mode [ 655.460708][T16202] macvlan1: entered promiscuous mode [ 655.466100][T16202] macvlan1: entered allmulticast mode [ 655.473349][T16202] ipvlan0: entered promiscuous mode [ 655.479626][T16202] ipvlan0: entered allmulticast mode [ 655.485238][T16202] ipvlan1: entered promiscuous mode [ 655.490466][T16202] ipvlan1: entered allmulticast mode [ 655.496109][T16202] veth1_macvtap: entered allmulticast mode [ 655.502069][T16202] veth0_macvtap: entered allmulticast mode [ 655.508104][T16202] macvtap0: entered promiscuous mode [ 655.513615][T16202] macvtap0: entered allmulticast mode [ 655.519141][T16202] macsec0: entered promiscuous mode [ 655.524405][T16202] macsec0: entered allmulticast mode [ 655.529814][T16202] geneve0: entered promiscuous mode [ 655.535235][T16202] geneve0: entered allmulticast mode [ 655.540658][T16202] geneve1: entered promiscuous mode [ 655.545933][T16202] geneve1: entered allmulticast mode [ 655.551353][T16202] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 655.558591][T16202] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 655.565850][T16202] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 655.572976][T16202] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 655.580145][T16202] syztnl0: entered promiscuous mode [ 655.585557][T16202] syztnl0: entered allmulticast mode [ 655.590948][T16202] bridge1: entered promiscuous mode [ 655.596370][T16202] bridge1: entered allmulticast mode [ 655.601871][T16202] xfrm1: entered promiscuous mode [ 655.606980][T16202] xfrm1: entered allmulticast mode [ 655.612243][T16202] mac80211_hwsim hwsim18 wlan2: entered promiscuous mode [ 655.619468][T16202] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 655.626752][T16202] bond1: entered promiscuous mode [ 655.631787][T16202] bond1: entered allmulticast mode [ 655.637213][T16202] gre1: entered promiscuous mode [ 655.642174][T16202] gre1: entered allmulticast mode [ 655.647435][T16202] bond2: entered promiscuous mode [ 655.652499][T16202] bond2: entered allmulticast mode [ 655.657999][T16202] vxlan0: entered promiscuous mode [ 655.663198][T16202] vxlan0: entered allmulticast mode [ 655.668510][T16202] syztnl1: entered promiscuous mode [ 655.673915][T16202] syztnl1: entered allmulticast mode [ 655.679310][T16202] bond3: entered promiscuous mode [ 655.684429][T16202] bond3: entered allmulticast mode [ 655.689650][T16202] BAP: entered promiscuous mode [ 655.694992][T16202] BAP: entered allmulticast mode [ 655.700171][T16202] netdevsim netdevsim2 eth0: entered promiscuous mode [ 655.707029][T16202] netdevsim netdevsim2 eth0: entered allmulticast mode [ 655.714182][T16202] netdevsim netdevsim2 eth1: entered promiscuous mode [ 655.720949][T16202] netdevsim netdevsim2 eth1: entered allmulticast mode [ 655.728227][T16202] netdevsim netdevsim2 eth2: entered promiscuous mode [ 655.735242][T16202] netdevsim netdevsim2 eth2: entered allmulticast mode [ 655.742288][T16202] netdevsim netdevsim2 eth3: entered promiscuous mode [ 655.749129][T16202] netdevsim netdevsim2 eth3: entered allmulticast mode [ 656.040752][T16233] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 656.074635][T16232] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 656.156942][T16177] chnl_net:caif_netlink_parms(): no params data found [ 656.231167][T16238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 656.240694][T16238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 656.253719][T16238] netlink: 'syz.2.2566': attribute type 4 has an invalid length. [ 656.374029][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.394040][T16177] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.403236][T16177] bridge_slave_0: entered allmulticast mode [ 656.411190][T16177] bridge_slave_0: entered promiscuous mode [ 656.419983][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.427494][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.437648][T16177] bridge_slave_1: entered allmulticast mode [ 656.454939][T16177] bridge_slave_1: entered promiscuous mode [ 656.485310][T16243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2567'. [ 656.522985][ T5836] Bluetooth: hci0: command tx timeout [ 656.614562][T16177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.632119][T16177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.699725][T16177] team0: Port device team_slave_0 added [ 656.726339][T16177] team0: Port device team_slave_1 added [ 656.910975][T16177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.951410][T16177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.984823][T16177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.008682][T16177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.027570][T16177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.068917][T16177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.105507][T16258] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2571'. [ 657.115251][T16258] netlink: zone id is out of range [ 657.120420][T16258] netlink: zone id is out of range [ 657.121630][T16255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2572'. [ 657.129654][T16258] netlink: get zone limit has 8 unknown bytes [ 657.211795][T16177] hsr_slave_0: entered promiscuous mode [ 657.218876][T16177] hsr_slave_1: entered promiscuous mode [ 657.255519][T16177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.265882][T16177] Cannot create hsr debugfs directory [ 657.349089][T16268] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 657.379416][T16269] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 657.407357][T16267] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2576'. [ 658.469316][T16177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 658.481170][T16288] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 658.511564][T16177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 658.564842][T16177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 658.598403][T16177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 658.602975][ T5836] Bluetooth: hci0: command tx timeout [ 658.681533][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2584'. [ 658.720764][T16292] ªªªªªª: entered promiscuous mode [ 658.726055][T16292] ªªªªªª: entered allmulticast mode [ 658.731571][T16292] tunl0: entered promiscuous mode [ 658.737049][T16292] tunl0: entered allmulticast mode [ 658.742505][T16292] gre0: entered promiscuous mode [ 658.753006][T16292] gre0: entered allmulticast mode [ 658.762345][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 658.793071][T16292] gretap0: entered promiscuous mode [ 658.798379][T16292] gretap0: entered allmulticast mode [ 658.836571][T16289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2580'. [ 658.863267][T16292] erspan0: entered promiscuous mode [ 658.872850][T16292] erspan0: entered allmulticast mode [ 658.883191][T16292] ip_vti0: entered promiscuous mode [ 658.892956][T16292] ip_vti0: entered allmulticast mode [ 658.903249][T16292] ip6_vti0: entered promiscuous mode [ 658.912931][T16292] ip6_vti0: entered allmulticast mode [ 658.931232][T16292] sit0: entered promiscuous mode [ 658.949072][T16292] sit0: entered allmulticast mode [ 658.959335][T16292] ip6tnl0: entered promiscuous mode [ 658.989608][T16292] ip6tnl0: entered allmulticast mode [ 659.120017][T16292] ip6gre0: entered promiscuous mode [ 659.126895][T16292] ip6gre0: entered allmulticast mode [ 659.132517][T16292] syz_tun: entered promiscuous mode [ 659.141531][T16292] syz_tun: entered allmulticast mode [ 659.148410][T16292] ip6gretap0: entered promiscuous mode [ 659.157674][T16292] ip6gretap0: entered allmulticast mode [ 659.170792][T16292] bridge0: entered promiscuous mode [ 659.179881][T16292] bridge0: entered allmulticast mode [ 659.186765][T16292] vcan0: entered promiscuous mode [ 659.192040][T16292] vcan0: entered allmulticast mode [ 659.201054][T16292] bond0: entered promiscuous mode [ 659.207690][T16292] bond_slave_0: entered promiscuous mode [ 659.217147][T16292] bond_slave_1: entered promiscuous mode [ 659.230874][T16292] bond0: entered allmulticast mode [ 659.240464][T16292] bond_slave_0: entered allmulticast mode [ 659.249594][T16292] bond_slave_1: entered allmulticast mode [ 659.268040][T16292] dummy0: entered promiscuous mode [ 659.279106][T16292] dummy0: entered allmulticast mode [ 659.285964][T16292] nlmon0: entered promiscuous mode [ 659.291849][T16292] nlmon0: entered allmulticast mode [ 659.297339][T16292] caif0: entered promiscuous mode [ 659.302453][T16292] caif0: entered allmulticast mode [ 659.307885][T16292] batadv0: entered promiscuous mode [ 659.316111][T16292] batadv0: entered allmulticast mode [ 659.321686][T16292] vxcan0: entered promiscuous mode [ 659.327278][T16292] vxcan0: entered allmulticast mode [ 659.332680][T16292] vxcan1: entered promiscuous mode [ 659.337931][T16292] vxcan1: entered allmulticast mode [ 659.343669][T16292] veth0: entered promiscuous mode [ 659.348836][T16292] veth0: entered allmulticast mode [ 659.354500][T16292] veth1: entered promiscuous mode [ 659.359622][T16292] veth1: entered allmulticast mode [ 659.365156][T16292] wg0: entered promiscuous mode [ 659.370059][T16292] wg0: entered allmulticast mode [ 659.375500][T16292] wg1: entered promiscuous mode [ 659.380375][T16292] wg1: entered allmulticast mode [ 659.386317][T16292] wg2: entered promiscuous mode [ 659.391221][T16292] wg2: entered allmulticast mode [ 659.395828][T16301] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2586'. [ 659.396526][T16292] veth0_to_bridge: entered promiscuous mode [ 659.411781][T16292] veth0_to_bridge: entered allmulticast mode [ 659.418096][T16301] netlink: zone id is out of range [ 659.418226][T16292] veth1_to_bridge: entered promiscuous mode [ 659.429378][T16292] veth1_to_bridge: entered allmulticast mode [ 659.435613][T16301] netlink: zone id is out of range [ 659.440962][T16301] netlink: get zone limit has 8 unknown bytes [ 659.447906][T16292] veth0_to_bond: entered promiscuous mode [ 659.453821][T16292] veth0_to_bond: entered allmulticast mode [ 659.459968][T16292] veth1_to_bond: entered promiscuous mode [ 659.466103][T16292] veth1_to_bond: entered allmulticast mode [ 659.472282][T16292] veth0_to_team: entered promiscuous mode [ 659.478162][T16292] veth0_to_team: entered allmulticast mode [ 659.484553][T16292] team_slave_0: entered promiscuous mode [ 659.490212][T16292] team_slave_0: entered allmulticast mode [ 659.496621][T16292] veth1_to_team: entered promiscuous mode [ 659.502372][T16292] veth1_to_team: entered allmulticast mode [ 659.508566][T16292] team_slave_1: entered promiscuous mode [ 659.514536][T16292] team_slave_1: entered allmulticast mode [ 659.520387][T16292] veth0_to_batadv: entered promiscuous mode [ 659.526497][T16292] veth0_to_batadv: entered allmulticast mode [ 659.532623][T16292] batadv_slave_0: entered promiscuous mode [ 659.538521][T16292] batadv_slave_0: entered allmulticast mode [ 659.544908][T16292] veth1_to_batadv: entered promiscuous mode [ 659.550826][T16292] veth1_to_batadv: entered allmulticast mode [ 659.557999][T16292] batadv_slave_1: entered promiscuous mode [ 659.564006][T16292] batadv_slave_1: entered allmulticast mode [ 659.570037][T16292] xfrm0: entered promiscuous mode [ 659.575220][T16292] xfrm0: entered allmulticast mode [ 659.580493][T16292] veth0_to_hsr: entered promiscuous mode [ 659.586340][T16292] veth0_to_hsr: entered allmulticast mode [ 659.592202][T16292] hsr_slave_0: entered allmulticast mode [ 659.598130][T16292] veth1_to_hsr: entered promiscuous mode [ 659.604445][T16292] veth1_to_hsr: entered allmulticast mode [ 659.610331][T16292] hsr_slave_1: entered allmulticast mode [ 659.616248][T16292] hsr0: entered promiscuous mode [ 659.621216][T16292] hsr0: entered allmulticast mode [ 659.626589][T16292] veth1_virt_wifi: entered promiscuous mode [ 659.632499][T16292] veth1_virt_wifi: entered allmulticast mode [ 659.638852][T16292] veth0_virt_wifi: entered promiscuous mode [ 659.644943][T16292] veth0_virt_wifi: entered allmulticast mode [ 659.651114][T16292] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 659.658421][T16292] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 659.666139][T16292] veth1_vlan: entered allmulticast mode [ 659.671895][T16292] vlan1: entered promiscuous mode [ 659.677174][T16292] vlan1: entered allmulticast mode [ 659.682415][T16292] macvlan0: entered promiscuous mode [ 659.687899][T16292] macvlan0: entered allmulticast mode [ 659.693510][T16292] macvlan1: entered promiscuous mode [ 659.698817][T16292] macvlan1: entered allmulticast mode [ 659.704549][T16292] ipvlan0: entered promiscuous mode [ 659.709775][T16292] ipvlan0: entered allmulticast mode [ 659.715354][T16292] veth1_macvtap: entered allmulticast mode [ 659.721336][T16292] veth0_macvtap: entered allmulticast mode [ 659.727566][T16292] macvtap0: entered promiscuous mode [ 659.733171][T16292] macvtap0: entered allmulticast mode [ 659.738703][T16292] macsec0: entered promiscuous mode [ 659.744176][T16292] macsec0: entered allmulticast mode [ 659.749626][T16292] geneve0: entered promiscuous mode [ 659.754934][T16292] geneve0: entered allmulticast mode [ 659.760374][T16292] geneve1: entered promiscuous mode [ 659.765771][T16292] geneve1: entered allmulticast mode [ 659.771260][T16292] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 659.778506][T16292] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 659.785963][T16292] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 659.793093][T16292] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 659.800368][T16292] : entered promiscuous mode [ 659.805263][T16292] : entered allmulticast mode [ 659.810152][T16292] erspan0.3: entered promiscuous mode [ 659.815736][T16292] erspan0.3: entered allmulticast mode [ 659.821496][T16292] vxlan0: entered promiscuous mode [ 659.827488][T16292] vxlan0: entered allmulticast mode [ 659.833103][T16292] bond1: entered promiscuous mode [ 659.838190][T16292] bond1: entered allmulticast mode [ 659.843683][T16292] xfrm1: entered promiscuous mode [ 659.848735][T16292] xfrm1: entered allmulticast mode [ 659.854388][T16292] pim6reg: entered promiscuous mode [ 659.859751][T16292] syztnl1: entered promiscuous mode [ 659.865247][T16292] syztnl1: entered allmulticast mode [ 659.870871][T16292] syztnl0: entered promiscuous mode [ 659.876274][T16292] syztnl0: entered allmulticast mode [ 659.881903][T16292] veth0_vlan.0: entered promiscuous mode [ 659.887924][T16292] veth0_vlan.0: entered allmulticast mode [ 659.893976][T16292] bond2: entered promiscuous mode [ 659.899063][T16292] bond2: entered allmulticast mode [ 659.904586][T16292] mac80211_hwsim hwsim25 wlan2: entered promiscuous mode [ 659.911636][T16292] mac80211_hwsim hwsim25 wlan2: entered allmulticast mode [ 659.919001][T16292] &: entered promiscuous mode [ 659.923868][T16292] &: entered allmulticast mode [ 659.928760][T16292] bridge1: entered promiscuous mode [ 659.934059][T16292] bridge1: entered allmulticast mode [ 659.939500][T16292] vlan0: entered promiscuous mode [ 659.944891][T16292] vlan0: entered allmulticast mode [ 659.950157][T16292] bridge2: entered promiscuous mode [ 659.955437][T16292] bridge2: entered allmulticast mode [ 659.960858][T16292] vxlan1: entered promiscuous mode [ 659.966195][T16292] vxlan1: entered allmulticast mode [ 659.971537][T16292] bond3: entered promiscuous mode [ 659.976675][T16292] bond3: entered allmulticast mode [ 659.981903][T16292] bond4: entered promiscuous mode [ 659.987119][T16292] bond4: entered allmulticast mode [ 659.992358][T16292] netdevsim netdevsim4 eth0: entered promiscuous mode [ 659.999358][T16292] netdevsim netdevsim4 eth0: entered allmulticast mode [ 660.006625][T16292] netdevsim netdevsim4 eth1: entered promiscuous mode [ 660.013498][T16292] netdevsim netdevsim4 eth1: entered allmulticast mode [ 660.020541][T16292] netdevsim netdevsim4 eth2: entered promiscuous mode [ 660.027562][T16292] netdevsim netdevsim4 eth2: entered allmulticast mode [ 660.034833][T16292] netdevsim netdevsim4 eth3: entered promiscuous mode [ 660.041611][T16292] netdevsim netdevsim4 eth3: entered allmulticast mode [ 660.052940][T16292] bond5: entered promiscuous mode [ 660.058016][T16292] bond5: entered allmulticast mode [ 660.085276][T16298] ªªªªªª: entered promiscuous mode [ 660.090456][T16298] ªªªªªª: entered allmulticast mode [ 660.096068][T16298] tunl0: entered promiscuous mode [ 660.101126][T16298] tunl0: entered allmulticast mode [ 660.119129][T16298] gre0: entered promiscuous mode [ 660.142849][T16298] gre0: entered allmulticast mode [ 660.148576][T16298] gretap0: entered promiscuous mode [ 660.164297][T16298] gretap0: entered allmulticast mode [ 660.170426][T16298] erspan0: entered promiscuous mode [ 660.178054][T16298] erspan0: entered allmulticast mode [ 660.186530][T16298] ip_vti0: entered promiscuous mode [ 660.191790][T16298] ip_vti0: entered allmulticast mode [ 660.200811][T16298] ip6_vti0: entered promiscuous mode [ 660.212029][T16298] ip6_vti0: entered allmulticast mode [ 660.221825][T16298] sit0: entered promiscuous mode [ 660.228655][T16298] sit0: entered allmulticast mode [ 660.238898][T16298] ip6tnl0: entered promiscuous mode [ 660.246741][T16298] ip6tnl0: entered allmulticast mode [ 660.252231][T16298] ip6gre0: entered promiscuous mode [ 660.260217][T16298] ip6gre0: entered allmulticast mode [ 660.265926][T16298] syz_tun: entered promiscuous mode [ 660.271337][T16298] syz_tun: entered allmulticast mode [ 660.277866][T16298] ip6gretap0: entered promiscuous mode [ 660.283719][T16298] ip6gretap0: entered allmulticast mode [ 660.289523][T16298] bridge0: entered promiscuous mode [ 660.295159][T16298] bridge0: entered allmulticast mode [ 660.300575][T16298] vcan0: entered promiscuous mode [ 660.305770][T16298] vcan0: entered allmulticast mode [ 660.311001][T16298] bond0: entered promiscuous mode [ 660.316548][T16298] bond_slave_0: entered promiscuous mode [ 660.322392][T16298] bond_slave_1: entered promiscuous mode [ 660.330652][T16298] bond0: entered allmulticast mode [ 660.336056][T16298] bond_slave_0: entered allmulticast mode [ 660.341969][T16298] bond_slave_1: entered allmulticast mode [ 660.348266][T16298] dummy0: entered promiscuous mode [ 660.353638][T16298] dummy0: entered allmulticast mode [ 660.359145][T16298] nlmon0: entered promiscuous mode [ 660.364820][T16298] nlmon0: entered allmulticast mode [ 660.370236][T16298] caif0: entered promiscuous mode [ 660.375693][T16298] caif0: entered allmulticast mode [ 660.381013][T16298] batadv0: entered promiscuous mode [ 660.386791][T16298] batadv0: entered allmulticast mode [ 660.392234][T16298] vxcan0: entered promiscuous mode [ 660.397517][T16298] vxcan0: entered allmulticast mode [ 660.406344][T16298] vxcan1: entered promiscuous mode [ 660.411500][T16298] vxcan1: entered allmulticast mode [ 660.416875][T16298] veth0: entered promiscuous mode [ 660.422103][T16298] veth0: entered allmulticast mode [ 660.427635][T16298] veth1: entered promiscuous mode [ 660.432928][T16298] veth1: entered allmulticast mode [ 660.438197][T16298] wg0: entered promiscuous mode [ 660.446524][T16298] wg0: entered allmulticast mode [ 660.451593][T16298] wg1: entered promiscuous mode [ 660.456517][T16298] wg1: entered allmulticast mode [ 660.461757][T16298] wg2: entered promiscuous mode [ 660.466781][T16298] wg2: entered allmulticast mode [ 660.471978][T16298] veth0_to_bridge: entered promiscuous mode [ 660.478004][T16298] veth0_to_bridge: entered allmulticast mode [ 660.484598][T16298] veth1_to_bridge: entered promiscuous mode [ 660.490512][T16298] veth1_to_bridge: entered allmulticast mode [ 660.497038][T16298] veth0_to_bond: entered promiscuous mode [ 660.502847][T16298] veth0_to_bond: entered allmulticast mode [ 660.509301][T16298] veth1_to_bond: entered promiscuous mode [ 660.516083][T16298] veth1_to_bond: entered allmulticast mode [ 660.522125][T16298] veth0_to_team: entered promiscuous mode [ 660.527958][T16298] veth0_to_team: entered allmulticast mode [ 660.533957][T16298] team_slave_0: entered promiscuous mode [ 660.539608][T16298] team_slave_0: entered allmulticast mode [ 660.545655][T16298] veth1_to_team: entered promiscuous mode [ 660.551414][T16298] veth1_to_team: entered allmulticast mode [ 660.557476][T16298] team_slave_1: entered promiscuous mode [ 660.563356][T16298] team_slave_1: entered allmulticast mode [ 660.569260][T16298] veth0_to_batadv: entered promiscuous mode [ 660.575361][T16298] veth0_to_batadv: entered allmulticast mode [ 660.581523][T16298] batadv_slave_0: entered promiscuous mode [ 660.587442][T16298] batadv_slave_0: entered allmulticast mode [ 660.593576][T16298] veth1_to_batadv: entered promiscuous mode [ 660.599497][T16298] veth1_to_batadv: entered allmulticast mode [ 660.605912][T16298] batadv_slave_1: entered promiscuous mode [ 660.611804][T16298] batadv_slave_1: entered allmulticast mode [ 660.617932][T16298] xfrm0: entered promiscuous mode [ 660.623114][T16298] xfrm0: entered allmulticast mode [ 660.628456][T16298] veth0_to_hsr: entered promiscuous mode [ 660.634184][T16298] veth0_to_hsr: entered allmulticast mode [ 660.640159][T16298] hsr_slave_0: entered allmulticast mode [ 660.646266][T16298] veth1_to_hsr: entered promiscuous mode [ 660.651955][T16298] veth1_to_hsr: entered allmulticast mode [ 660.657927][T16298] hsr_slave_1: entered allmulticast mode [ 660.663830][T16298] hsr0: entered promiscuous mode [ 660.668802][T16298] hsr0: entered allmulticast mode [ 660.674113][T16298] veth1_virt_wifi: entered promiscuous mode [ 660.680053][T16298] veth1_virt_wifi: entered allmulticast mode [ 660.684410][ T5836] Bluetooth: hci0: command tx timeout [ 660.689961][T16298] veth0_virt_wifi: entered promiscuous mode [ 660.697515][T16298] veth0_virt_wifi: entered allmulticast mode [ 660.704156][T16298] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 660.711447][T16298] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 660.720098][T16298] veth1_vlan: entered allmulticast mode [ 660.726080][T16298] veth0_vlan: entered allmulticast mode [ 660.731922][T16298] vlan0: entered promiscuous mode [ 660.737537][T16298] vlan0: entered allmulticast mode [ 660.743053][T16298] vlan1: entered promiscuous mode [ 660.748512][T16298] vlan1: entered allmulticast mode [ 660.754336][T16298] macvlan0: entered promiscuous mode [ 660.759685][T16298] macvlan0: entered allmulticast mode [ 660.765486][T16298] macvlan1: entered promiscuous mode [ 660.770794][T16298] macvlan1: entered allmulticast mode [ 660.776581][T16298] ipvlan0: entered promiscuous mode [ 660.781820][T16298] ipvlan0: entered allmulticast mode [ 660.787356][T16298] ipvlan1: entered promiscuous mode [ 660.792614][T16298] ipvlan1: entered allmulticast mode [ 660.798412][T16298] veth1_macvtap: entered allmulticast mode [ 660.804522][T16298] veth0_macvtap: entered allmulticast mode [ 660.810493][T16298] macvtap0: entered promiscuous mode [ 660.816002][T16298] macvtap0: entered allmulticast mode [ 660.821532][T16298] macsec0: entered promiscuous mode [ 660.827790][T16298] macsec0: entered allmulticast mode [ 660.833498][T16298] geneve0: entered promiscuous mode [ 660.838723][T16298] geneve0: entered allmulticast mode [ 660.844386][T16298] geneve1: entered promiscuous mode [ 660.849597][T16298] geneve1: entered allmulticast mode [ 660.855295][T16298] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 660.862275][T16298] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 660.869535][T16298] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 660.876838][T16298] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 660.884222][T16298] syztnl0: entered promiscuous mode [ 660.889543][T16298] syztnl0: entered allmulticast mode [ 660.895250][T16298] syztnl1: entered promiscuous mode [ 660.900485][T16298] syztnl1: entered allmulticast mode [ 660.906019][T16298] ipip0: entered promiscuous mode [ 660.911066][T16298] ipip0: entered allmulticast mode [ 660.916619][T16298] xfrm1: entered promiscuous mode [ 660.921670][T16298] xfrm1: entered allmulticast mode [ 660.927020][T16298] bond1: entered promiscuous mode [ 660.932073][T16298] bond1: entered allmulticast mode [ 660.937659][T16298] bond2: entered promiscuous mode [ 660.942695][T16298] bond2: entered allmulticast mode [ 660.948101][T16298] bond3: entered promiscuous mode [ 660.953398][T16298] bond3: entered allmulticast mode [ 660.958613][T16298] bond4: entered promiscuous mode [ 660.963714][T16298] bond4: entered allmulticast mode [ 660.968945][T16298] netdevsim netdevsim0 eth0: entered promiscuous mode [ 660.975942][T16298] netdevsim netdevsim0 eth0: entered allmulticast mode [ 660.983228][T16298] netdevsim netdevsim0 eth1: entered promiscuous mode [ 660.990006][T16298] netdevsim netdevsim0 eth1: entered allmulticast mode [ 660.997254][T16298] netdevsim netdevsim0 eth2: entered promiscuous mode [ 661.004216][T16298] netdevsim netdevsim0 eth2: entered allmulticast mode [ 661.011210][T16298] netdevsim netdevsim0 eth3: entered promiscuous mode [ 661.018202][T16298] netdevsim netdevsim0 eth3: entered allmulticast mode [ 661.272190][T16317] netlink: 'syz.0.2589': attribute type 27 has an invalid length. [ 661.307529][T16317] ªªªªªª: left promiscuous mode [ 661.312448][T16317] ªªªªªª: left allmulticast mode [ 661.323463][T16322] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 661.338333][T16323] __nla_validate_parse: 1 callbacks suppressed [ 661.338354][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2589'. [ 661.343599][T16317] tunl0: left promiscuous mode [ 661.378290][T16317] tunl0: left allmulticast mode [ 661.387552][T16326] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 661.412013][T16317] gre0: left promiscuous mode [ 661.421076][T16317] gre0: left allmulticast mode [ 661.437440][T16317] gretap0: left promiscuous mode [ 661.453519][T16317] gretap0: left allmulticast mode [ 661.458846][T16317] erspan0: left promiscuous mode [ 661.509039][T16317] erspan0: left allmulticast mode [ 661.524371][T16317] ip_vti0: left promiscuous mode [ 661.536880][T16317] ip_vti0: left allmulticast mode [ 661.542155][T16317] ip6_vti0: left promiscuous mode [ 661.550726][T16317] ip6_vti0: left allmulticast mode [ 661.562636][T16317] sit0: left promiscuous mode [ 661.568200][T16317] sit0: left allmulticast mode [ 661.574168][T16317] ip6tnl0: left promiscuous mode [ 661.579557][T16317] ip6tnl0: left allmulticast mode [ 661.585687][T16317] ip6gre0: left promiscuous mode [ 661.597102][T16317] ip6gre0: left allmulticast mode [ 661.602370][T16317] syz_tun: left promiscuous mode [ 661.608953][T16317] syz_tun: left allmulticast mode [ 661.614727][T16317] ip6gretap0: left promiscuous mode [ 661.620313][T16317] ip6gretap0: left allmulticast mode [ 661.626470][T16317] bridge0: left promiscuous mode [ 661.631641][T16317] bridge0: left allmulticast mode [ 661.637633][T16317] vcan0: left promiscuous mode [ 661.642628][T16317] vcan0: left allmulticast mode [ 661.648459][T16317] bond0: left promiscuous mode [ 661.654136][T16317] bond0: left allmulticast mode [ 661.659245][T16317] dummy0: left promiscuous mode [ 661.664927][T16317] dummy0: left allmulticast mode [ 661.670138][T16317] nlmon0: left promiscuous mode [ 661.675716][T16317] nlmon0: left allmulticast mode [ 661.680952][T16317] caif0: left promiscuous mode [ 661.686478][T16317] caif0: left allmulticast mode [ 661.691571][T16317] batadv0: left promiscuous mode [ 661.698254][T16317] batadv0: left allmulticast mode [ 661.703967][T16317] vxcan0: left promiscuous mode [ 661.709068][T16317] vxcan0: left allmulticast mode [ 661.714958][T16317] vxcan1: left promiscuous mode [ 661.720072][T16317] vxcan1: left allmulticast mode [ 661.725922][T16317] veth0: left promiscuous mode [ 661.731052][T16317] veth0: left allmulticast mode [ 661.737421][T16317] veth1: left promiscuous mode [ 661.742419][T16317] veth1: left allmulticast mode [ 661.750383][T16317] wg0: left promiscuous mode [ 661.757358][T16317] wg0: left allmulticast mode [ 661.762360][T16317] wg1: left promiscuous mode [ 661.770252][T16317] wg1: left allmulticast mode [ 661.777166][T16317] wg2: left promiscuous mode [ 661.782034][T16317] wg2: left allmulticast mode [ 661.789928][T16317] veth0_to_bridge: left promiscuous mode [ 661.797803][T16317] veth0_to_bridge: left allmulticast mode [ 661.806805][T16317] veth1_to_bridge: left promiscuous mode [ 661.812649][T16317] veth1_to_bridge: left allmulticast mode [ 661.821224][T16317] veth0_to_bond: left promiscuous mode [ 661.830132][T16317] veth0_to_bond: left allmulticast mode [ 661.837849][T16317] bond_slave_0: left promiscuous mode [ 661.846324][T16317] bond_slave_0: left allmulticast mode [ 661.852120][T16317] veth1_to_bond: left promiscuous mode [ 661.859842][T16317] veth1_to_bond: left allmulticast mode [ 661.868611][T16317] bond_slave_1: left promiscuous mode [ 661.877114][T16317] bond_slave_1: left allmulticast mode [ 661.885778][T16317] veth0_to_team: left promiscuous mode [ 661.891446][T16317] veth0_to_team: left allmulticast mode [ 661.899330][T16317] team_slave_0: left promiscuous mode [ 661.907661][T16317] team_slave_0: left allmulticast mode [ 661.915573][T16317] veth1_to_team: left promiscuous mode [ 661.921283][T16317] veth1_to_team: left allmulticast mode [ 661.930066][T16317] team_slave_1: left promiscuous mode [ 661.938259][T16317] team_slave_1: left allmulticast mode [ 661.946985][T16317] veth0_to_batadv: left promiscuous mode [ 661.955249][T16317] veth0_to_batadv: left allmulticast mode [ 661.961405][T16317] batadv_slave_0: left promiscuous mode [ 661.970064][T16317] batadv_slave_0: left allmulticast mode [ 661.977985][T16317] veth1_to_batadv: left promiscuous mode [ 661.987631][T16317] veth1_to_batadv: left allmulticast mode [ 661.995581][T16317] batadv_slave_1: left promiscuous mode [ 662.001494][T16317] batadv_slave_1: left allmulticast mode [ 662.010457][T16317] xfrm0: left promiscuous mode [ 662.017598][T16317] xfrm0: left allmulticast mode [ 662.026085][T16317] veth0_to_hsr: left promiscuous mode [ 662.031675][T16317] veth0_to_hsr: left allmulticast mode [ 662.039689][T16317] veth1_to_hsr: left promiscuous mode [ 662.059725][T16317] veth1_to_hsr: left allmulticast mode [ 662.067517][T16317] hsr0: left promiscuous mode [ 662.072494][T16317] hsr0: left allmulticast mode [ 662.086648][T16317] hsr_slave_0: left allmulticast mode [ 662.106584][T16317] hsr_slave_1: left allmulticast mode [ 662.115360][T16317] veth1_virt_wifi: left promiscuous mode [ 662.121368][T16317] veth1_virt_wifi: left allmulticast mode [ 662.136532][T16317] veth0_virt_wifi: left promiscuous mode [ 662.142422][T16317] veth0_virt_wifi: left allmulticast mode [ 662.148851][T16317] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 662.156414][T16317] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 662.164978][T16317] veth1_vlan: left allmulticast mode [ 662.170657][T16317] vlan0: left promiscuous mode [ 662.176034][T16317] vlan0: left allmulticast mode [ 662.181078][T16317] vlan1: left promiscuous mode [ 662.186390][T16317] vlan1: left allmulticast mode [ 662.191388][T16317] macvlan0: left promiscuous mode [ 662.196896][T16317] macvlan0: left allmulticast mode [ 662.202149][T16317] macvlan1: left promiscuous mode [ 662.207533][T16317] macvlan1: left allmulticast mode [ 662.212882][T16317] ipvlan0: left promiscuous mode [ 662.217954][T16317] ipvlan0: left allmulticast mode [ 662.223364][T16317] ipvlan1: left promiscuous mode [ 662.228311][T16317] ipvlan1: left allmulticast mode [ 662.233476][T16317] veth0_vlan: left allmulticast mode [ 662.239133][T16317] veth1_macvtap: left allmulticast mode [ 662.245113][T16317] veth0_macvtap: left allmulticast mode [ 662.250852][T16317] macvtap0: left promiscuous mode [ 662.255965][T16317] macvtap0: left allmulticast mode [ 662.261361][T16317] macsec0: left promiscuous mode [ 662.266590][T16317] macsec0: left allmulticast mode [ 662.271749][T16317] geneve0: left promiscuous mode [ 662.277010][T16317] geneve0: left allmulticast mode [ 662.282161][T16317] geneve1: left promiscuous mode [ 662.287311][T16317] geneve1: left allmulticast mode [ 662.292840][T16317] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 662.299661][T16317] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 662.306907][T16317] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 662.313810][T16317] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 662.320692][T16317] syztnl0: left promiscuous mode [ 662.325972][T16317] syztnl0: left allmulticast mode [ 662.331140][T16317] syztnl1: left promiscuous mode [ 662.336150][T16317] syztnl1: left allmulticast mode [ 662.341484][T16317] ipip0: left promiscuous mode [ 662.346499][T16317] ipip0: left allmulticast mode [ 662.351480][T16317] xfrm1: left promiscuous mode [ 662.358838][T16317] xfrm1: left allmulticast mode [ 662.364243][T16317] bond1: left promiscuous mode [ 662.369033][T16317] bond1: left allmulticast mode [ 662.374086][T16317] bond2: left promiscuous mode [ 662.378870][T16317] bond2: left allmulticast mode [ 662.384059][T16317] bond3: left promiscuous mode [ 662.388830][T16317] bond3: left allmulticast mode [ 662.394445][T16317] bond4: left promiscuous mode [ 662.399233][T16317] bond4: left allmulticast mode [ 662.404451][T16317] netdevsim netdevsim0 eth0: left promiscuous mode [ 662.410965][T16317] netdevsim netdevsim0 eth0: left allmulticast mode [ 662.417812][T16317] netdevsim netdevsim0 eth1: left promiscuous mode [ 662.424430][T16317] netdevsim netdevsim0 eth1: left allmulticast mode [ 662.431161][T16317] netdevsim netdevsim0 eth2: left promiscuous mode [ 662.437716][T16317] netdevsim netdevsim0 eth2: left allmulticast mode [ 662.444696][T16317] netdevsim netdevsim0 eth3: left promiscuous mode [ 662.451244][T16317] netdevsim netdevsim0 eth3: left allmulticast mode [ 662.479224][T16177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.544790][T16177] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.586722][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.593937][T11309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.635480][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.642812][T11309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.699150][T16344] syz.2.2599: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 662.724694][T16344] CPU: 1 UID: 0 PID: 16344 Comm: syz.2.2599 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 662.724724][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 662.724738][T16344] Call Trace: [ 662.724746][T16344] [ 662.724757][T16344] dump_stack_lvl+0x189/0x250 [ 662.724796][T16344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.724828][T16344] ? __pfx__printk+0x10/0x10 [ 662.724851][T16344] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 662.724888][T16344] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 662.724925][T16344] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 662.724961][T16344] warn_alloc+0x214/0x310 [ 662.724991][T16344] ? __pfx___schedule+0x10/0x10 [ 662.725024][T16344] ? __pfx_warn_alloc+0x10/0x10 [ 662.725053][T16344] ? kasan_save_track+0x4f/0x80 [ 662.725076][T16344] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 662.725100][T16344] ? xskq_create+0x56/0x170 [ 662.725130][T16344] ? __x64_sys_setsockopt+0x18b/0x220 [ 662.725156][T16344] ? do_syscall_64+0xf6/0x210 [ 662.725173][T16344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.725215][T16344] __vmalloc_node_range_noprof+0x125/0x12c0 [ 662.725278][T16344] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 662.725312][T16344] ? __kasan_kmalloc+0x93/0xb0 [ 662.725343][T16344] vmalloc_user_noprof+0x74/0x80 [ 662.725372][T16344] ? xskq_create+0xbf/0x170 [ 662.725399][T16344] xskq_create+0xbf/0x170 [ 662.725435][T16344] xsk_init_queue+0xb0/0x110 [ 662.725467][T16344] xsk_setsockopt+0x43f/0x710 [ 662.725499][T16344] ? __pfx_xsk_setsockopt+0x10/0x10 [ 662.725538][T16344] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 662.725562][T16344] ? __pfx_xsk_setsockopt+0x10/0x10 [ 662.725592][T16344] do_sock_setsockopt+0x257/0x3e0 [ 662.725623][T16344] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 662.725646][T16344] ? __fget_files+0x2a/0x420 [ 662.725679][T16344] ? __fget_files+0x3a0/0x420 [ 662.725705][T16344] ? __fget_files+0x2a/0x420 [ 662.725742][T16344] __x64_sys_setsockopt+0x18b/0x220 [ 662.725776][T16344] do_syscall_64+0xf6/0x210 [ 662.725796][T16344] ? clear_bhb_loop+0x45/0xa0 [ 662.725823][T16344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.725844][T16344] RIP: 0033:0x7f91bc58e969 [ 662.725863][T16344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.725882][T16344] RSP: 002b:00007f91bd45c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 662.725905][T16344] RAX: ffffffffffffffda RBX: 00007f91bc7b5fa0 RCX: 00007f91bc58e969 [ 662.725921][T16344] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 662.725934][T16344] RBP: 00007f91bc610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 662.725947][T16344] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.725961][T16344] R13: 0000000000000000 R14: 00007f91bc7b5fa0 R15: 00007ffea77e9dd8 [ 662.725996][T16344] [ 662.726159][T16344] Mem-Info: [ 662.735858][T16177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.749484][T16344] active_anon:8482 inactive_anon:0 isolated_anon:0 [ 662.749484][T16344] active_file:1811 inactive_file:38565 isolated_file:0 [ 662.749484][T16344] unevictable:768 dirty:218 writeback:0 [ 662.749484][T16344] slab_reclaimable:10065 slab_unreclaimable:104758 [ 662.749484][T16344] mapped:28826 shmem:1424 pagetables:796 [ 662.749484][T16344] sec_pagetables:0 bounce:0 [ 662.749484][T16344] kernel_misc_reclaimable:0 [ 662.749484][T16344] free:1335669 free_pcp:509 free_cma:0 [ 663.162334][T16352] Bluetooth: MGMT ver 1.23 [ 663.174079][T16357] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2600'. [ 663.192679][T16344] Node 0 active_anon:34164kB inactive_anon:0kB active_file:7244kB inactive_file:154184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119472kB dirty:896kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:3356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.274995][T16344] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.353974][T16344] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.405761][T16344] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 663.438997][T16344] Node 0 DMA32 free:1412716kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:34156kB inactive_anon:0kB active_file:7244kB inactive_file:154092kB unevictable:1536kB writepending:892kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:1732kB local_pcp:952kB free_cma:0kB [ 663.538188][T16365] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2601'. [ 663.552967][T16365] netlink: zone id is out of range [ 663.558152][T16365] netlink: zone id is out of range [ 663.576256][T16344] lowmem_reserve[]: 0 0 0 0 0 [ 663.579972][T16365] netlink: get zone limit has 8 unknown bytes [ 663.581522][T16344] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 663.679162][T16177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.712969][T16344] lowmem_reserve[]: 0 0 0 0 0 [ 663.717990][T16344] Node 1 Normal free:3912484kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.770724][T16344] lowmem_reserve[]: 0 0 0 0 0 [ 663.777349][T16344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 663.801863][T16344] Node 0 DMA32: 25*4kB (U) 704*8kB (UME) 443*16kB (UME) 389*32kB (UME) 398*64kB (UME) 270*128kB (UME) 328*256kB (UME) 281*512kB (UME) 195*1024kB (UM) 9*2048kB (UM) 215*4096kB (M) = 1411892kB [ 663.831067][T16344] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 663.847018][T16344] Node 1 Normal: 247*4kB (UME) 59*8kB (UME) 47*16kB (UME) 216*32kB (UME) 100*64kB (UME) 27*128kB (UME) 15*256kB (UME) 11*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3912484kB [ 663.876279][T16344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.886742][T16344] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.900027][T16344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.909822][T16344] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.919462][T16344] 41803 total pagecache pages [ 663.924258][T16344] 0 pages in swap cache [ 663.928429][T16344] Free swap = 124996kB [ 663.932581][T16344] Total swap = 124996kB [ 663.936792][T16344] 2097051 pages RAM [ 663.940635][T16344] 0 pages HighMem/MovableOnly [ 663.946126][T16344] 424375 pages reserved [ 663.950326][T16344] 0 pages cma reserved [ 663.962218][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 663.972419][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 663.986446][T16372] netlink: 'syz.1.2604': attribute type 4 has an invalid length. [ 663.996555][T16350] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 664.008736][T16378] netlink: 'syz.4.2605': attribute type 27 has an invalid length. [ 664.016861][T16378] ªªªªªª: left promiscuous mode [ 664.021748][T16378] ªªªªªª: left allmulticast mode [ 664.039527][T16378] tunl0: left promiscuous mode [ 664.045474][T16378] tunl0: left allmulticast mode [ 664.051093][T16378] gre0: left promiscuous mode [ 664.056035][T16378] gre0: left allmulticast mode [ 664.062028][T16378] gretap0: left promiscuous mode [ 664.068057][T16378] gretap0: left allmulticast mode [ 664.068195][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2605'. [ 664.074785][T16378] ip_vti0: left promiscuous mode [ 664.087970][T16378] ip_vti0: left allmulticast mode [ 664.112339][T16378] ip6_vti0: left promiscuous mode [ 664.127099][T16378] ip6_vti0: left allmulticast mode [ 664.145322][T16378] sit0: left promiscuous mode [ 664.150369][T16378] sit0: left allmulticast mode [ 664.165467][T16378] ip6tnl0: left promiscuous mode [ 664.171428][T16378] ip6tnl0: left allmulticast mode [ 664.193155][T16378] ip6gre0: left promiscuous mode [ 664.198153][T16378] ip6gre0: left allmulticast mode [ 664.216314][T16378] syz_tun: left promiscuous mode [ 664.221376][T16378] syz_tun: left allmulticast mode [ 664.231267][T16378] ip6gretap0: left promiscuous mode [ 664.237070][T16378] ip6gretap0: left allmulticast mode [ 664.242603][T16385] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 664.254345][T16378] vcan0: left promiscuous mode [ 664.259357][T16378] vcan0: left allmulticast mode [ 664.267146][T16378] bond0: left promiscuous mode [ 664.272680][T16378] bond0: left allmulticast mode [ 664.288815][T16378] dummy0: left promiscuous mode [ 664.294066][T16378] dummy0: left allmulticast mode [ 664.299875][T16378] nlmon0: left promiscuous mode [ 664.305011][T16378] nlmon0: left allmulticast mode [ 664.310257][T16378] caif0: left promiscuous mode [ 664.315401][T16378] caif0: left allmulticast mode [ 664.320618][T16378] batadv0: left promiscuous mode [ 664.330768][T16378] batadv0: left allmulticast mode [ 664.336236][T16378] vxcan0: left promiscuous mode [ 664.341205][T16378] vxcan0: left allmulticast mode [ 664.346842][T16378] vxcan1: left promiscuous mode [ 664.353142][T16378] vxcan1: left allmulticast mode [ 664.359627][T16378] veth0: left promiscuous mode [ 664.365147][T16378] veth0: left allmulticast mode [ 664.370960][T16378] veth1: left promiscuous mode [ 664.376049][T16378] veth1: left allmulticast mode [ 664.381079][T16389] netlink: 'syz.1.2608': attribute type 27 has an invalid length. [ 664.390167][T16378] wg0: left promiscuous mode [ 664.395306][T16378] wg0: left allmulticast mode [ 664.400218][T16378] wg1: left promiscuous mode [ 664.411060][T16378] wg1: left allmulticast mode [ 664.416062][T16378] wg2: left promiscuous mode [ 664.420695][T16378] wg2: left allmulticast mode [ 664.426635][T16378] veth0_to_bridge: left promiscuous mode [ 664.432338][T16378] veth0_to_bridge: left allmulticast mode [ 664.439329][T16378] veth1_to_bridge: left promiscuous mode [ 664.445568][T16378] veth1_to_bridge: left allmulticast mode [ 664.451771][T16378] veth0_to_bond: left promiscuous mode [ 664.457335][T16378] veth0_to_bond: left allmulticast mode [ 664.483001][T16378] bond_slave_0: left promiscuous mode [ 664.488444][T16378] bond_slave_0: left allmulticast mode [ 664.494880][T16378] veth1_to_bond: left promiscuous mode [ 664.500583][T16378] veth1_to_bond: left allmulticast mode [ 664.507000][T16378] bond_slave_1: left promiscuous mode [ 664.513524][T16378] bond_slave_1: left allmulticast mode [ 664.519821][T16378] veth0_to_team: left promiscuous mode [ 664.525967][T16378] veth0_to_team: left allmulticast mode [ 664.532396][T16378] team_slave_0: left promiscuous mode [ 664.538318][T16378] team_slave_0: left allmulticast mode [ 664.570143][T16378] veth1_to_team: left promiscuous mode [ 664.576380][T16378] veth1_to_team: left allmulticast mode [ 664.582489][T16378] team_slave_1: left promiscuous mode [ 664.592335][T16378] team_slave_1: left allmulticast mode [ 664.598476][T16378] veth0_to_batadv: left promiscuous mode [ 664.614799][T16378] veth0_to_batadv: left allmulticast mode [ 664.620931][T16378] batadv_slave_0: left promiscuous mode [ 664.629593][T16378] batadv_slave_0: left allmulticast mode [ 664.637492][T16378] veth1_to_batadv: left promiscuous mode [ 664.643855][T16378] veth1_to_batadv: left allmulticast mode [ 664.649926][T16378] batadv_slave_1: left promiscuous mode [ 664.656273][T16378] batadv_slave_1: left allmulticast mode [ 664.662258][T16378] xfrm0: left promiscuous mode [ 664.667601][T16378] xfrm0: left allmulticast mode [ 664.673460][T16378] veth0_to_hsr: left promiscuous mode [ 664.679018][T16378] veth0_to_hsr: left allmulticast mode [ 664.685529][T16378] veth1_to_hsr: left promiscuous mode [ 664.691085][T16378] veth1_to_hsr: left allmulticast mode [ 664.697965][T16378] hsr0: left promiscuous mode [ 664.703141][T16378] hsr0: left allmulticast mode [ 664.708076][T16378] hsr_slave_0: left allmulticast mode [ 664.714089][T16378] hsr_slave_1: left allmulticast mode [ 664.719806][T16378] veth1_virt_wifi: left promiscuous mode [ 664.726073][T16378] veth1_virt_wifi: left allmulticast mode [ 664.732165][T16378] veth0_virt_wifi: left promiscuous mode [ 664.738539][T16378] veth0_virt_wifi: left allmulticast mode [ 664.751331][T16378] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 664.762291][T16378] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 664.770558][T16378] veth1_vlan: left allmulticast mode [ 664.776774][T16378] vlan1: left promiscuous mode [ 664.781931][T16378] vlan1: left allmulticast mode [ 664.787588][T16378] macvlan0: left promiscuous mode [ 664.793151][T16378] macvlan0: left allmulticast mode [ 664.798599][T16378] macvlan1: left promiscuous mode [ 664.804699][T16378] macvlan1: left allmulticast mode [ 664.810242][T16378] ipvlan0: left promiscuous mode [ 664.815916][T16378] ipvlan0: left allmulticast mode [ 664.821286][T16378] veth1_macvtap: left allmulticast mode [ 664.827622][T16378] veth0_macvtap: left allmulticast mode [ 664.833835][T16378] macvtap0: left promiscuous mode [ 664.839053][T16378] macvtap0: left allmulticast mode [ 664.845419][T16378] macsec0: left promiscuous mode [ 664.850564][T16378] macsec0: left allmulticast mode [ 664.856467][T16378] geneve0: left promiscuous mode [ 664.861630][T16378] geneve0: left allmulticast mode [ 664.867390][T16378] geneve1: left promiscuous mode [ 664.872537][T16378] geneve1: left allmulticast mode [ 664.878539][T16378] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 664.885918][T16378] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 664.893528][T16378] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 664.900554][T16378] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 664.908130][T16378] : left promiscuous mode [ 664.913123][T16378] : left allmulticast mode [ 664.917927][T16378] erspan0.3: left promiscuous mode [ 664.924066][T16378] erspan0: left promiscuous mode [ 664.929307][T16378] erspan0.3: left allmulticast mode [ 664.935100][T16378] erspan0: left allmulticast mode [ 664.940495][T16378] vxlan0: left promiscuous mode [ 664.945984][T16378] vxlan0: left allmulticast mode [ 664.951240][T16378] bond1: left promiscuous mode [ 664.956694][T16378] bond1: left allmulticast mode [ 664.961839][T16378] xfrm1: left promiscuous mode [ 664.967295][T16378] xfrm1: left allmulticast mode [ 664.972451][T16378] pim6reg: left promiscuous mode [ 664.978220][T16378] syztnl1: left promiscuous mode [ 664.983771][T16378] syztnl1: left allmulticast mode [ 664.989197][T16378] syztnl0: left promiscuous mode [ 664.994713][T16378] syztnl0: left allmulticast mode [ 665.013291][T16378] veth0_vlan.0: left promiscuous mode [ 665.022312][T16378] veth0_vlan.0: left allmulticast mode [ 665.039282][T16378] bond2: left promiscuous mode [ 665.044496][T16378] bond2: left allmulticast mode [ 665.049554][T16378] mac80211_hwsim hwsim25 wlan2: left promiscuous mode [ 665.062824][T16378] mac80211_hwsim hwsim25 wlan2: left allmulticast mode [ 665.071279][T16378] &: left promiscuous mode [ 665.076565][T16378] &: left allmulticast mode [ 665.081294][T16378] bridge1: left promiscuous mode [ 665.088270][T16378] bridge1: left allmulticast mode [ 665.097106][T16378] vlan0: left promiscuous mode [ 665.101990][T16378] bridge0: left promiscuous mode [ 665.110825][T16378] vlan0: left allmulticast mode [ 665.116874][T16378] bridge0: left allmulticast mode [ 665.122041][T16378] bridge2: left promiscuous mode [ 665.127371][T16378] bridge2: left allmulticast mode [ 665.132545][T16378] vxlan1: left promiscuous mode [ 665.137575][T16378] vxlan1: left allmulticast mode [ 665.142618][T16378] bond3: left promiscuous mode [ 665.147471][T16378] bond3: left allmulticast mode [ 665.152491][T16378] bond4: left promiscuous mode [ 665.157308][T16378] bond4: left allmulticast mode [ 665.162269][T16378] netdevsim netdevsim4 eth0: left promiscuous mode [ 665.168891][T16378] netdevsim netdevsim4 eth0: left allmulticast mode [ 665.175738][T16378] netdevsim netdevsim4 eth1: left promiscuous mode [ 665.182273][T16378] netdevsim netdevsim4 eth1: left allmulticast mode [ 665.189106][T16378] netdevsim netdevsim4 eth2: left promiscuous mode [ 665.195656][T16378] netdevsim netdevsim4 eth2: left allmulticast mode [ 665.202388][T16378] netdevsim netdevsim4 eth3: left promiscuous mode [ 665.209086][T16378] netdevsim netdevsim4 eth3: left allmulticast mode [ 665.215989][T16378] bond5: left promiscuous mode [ 665.220762][T16378] bond5: left allmulticast mode [ 665.327107][T16177] veth0_vlan: entered promiscuous mode [ 665.396726][T16177] veth1_vlan: entered promiscuous mode [ 665.419743][T16401] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2611'. [ 665.447077][T16402] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 665.535878][T16177] veth0_macvtap: entered promiscuous mode [ 665.558105][T16177] veth1_macvtap: entered promiscuous mode [ 665.569068][T16404] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2613'. [ 665.591263][T16404] netlink: zone id is out of range [ 665.606875][T16404] netlink: zone id is out of range [ 665.639499][T16177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.660624][T16404] netlink: get zone limit has 8 unknown bytes [ 665.759844][T16177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.821036][T16177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.844920][T16177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.857626][T16177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.868046][T16177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.054288][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 666.439516][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.450121][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2618'. [ 666.471145][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2618'. [ 666.483457][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.490729][T16421] netlink: 'syz.0.2618': attribute type 4 has an invalid length. [ 666.590208][T11309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.614386][T11309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.810936][T16430] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 666.881835][T16429] xt_hashlimit: size too large, truncated to 1048576 [ 666.945117][T16434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2621'. [ 667.067529][T16439] netlink: 'syz.1.2623': attribute type 27 has an invalid length. [ 667.081727][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2623'. [ 667.138882][T16440] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 667.181206][T16440] bpq0: entered promiscuous mode [ 667.186848][T16440] bpq0: entered allmulticast mode [ 667.409093][T16448] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2627'. [ 667.421057][T16448] netlink: zone id is out of range [ 667.430607][T16448] netlink: zone id is out of range [ 667.436274][T16448] netlink: get zone limit has 8 unknown bytes [ 667.556500][T16454] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 667.686275][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.015703][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.132220][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.250806][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.499930][ T36] bridge_slave_1: left allmulticast mode [ 668.506121][ T36] bridge_slave_1: left promiscuous mode [ 668.511843][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.521784][ T36] bridge_slave_0: left allmulticast mode [ 668.528551][ T36] bridge_slave_0: left promiscuous mode [ 668.534832][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.816762][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.827928][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.838835][ T36] bond0 (unregistering): Released all slaves [ 669.044196][ T36] hsr_slave_0: left promiscuous mode [ 669.050239][ T36] hsr_slave_1: left promiscuous mode [ 669.056584][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.064468][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.072356][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.079944][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.102538][ T36] veth1_macvtap: left promiscuous mode [ 669.108141][ T36] veth0_macvtap: left promiscuous mode [ 669.114052][ T36] veth1_vlan: left promiscuous mode [ 669.119355][ T36] veth0_vlan: left promiscuous mode [ 669.494055][ T36] team0 (unregistering): Port device team_slave_1 removed [ 669.527251][ T36] team0 (unregistering): Port device team_slave_0 removed [ 669.697731][T16471] xt_hashlimit: size too large, truncated to 1048576 [ 670.113184][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 670.122317][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 670.130242][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 670.143657][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 670.165874][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 670.808099][T16489] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 671.666264][T16466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2631'. [ 671.692957][T16466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2631'. [ 671.722507][T16466] netlink: 'syz.1.2631': attribute type 4 has an invalid length. [ 672.127441][T16496] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.2636'. [ 672.147082][T16496] netlink: zone id is out of range [ 672.152252][T16496] netlink: zone id is out of range [ 672.181508][T16497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2635'. [ 672.188415][T16496] netlink: zone id is out of range [ 672.195915][T16496] netlink: zone id is out of range [ 672.202137][T16496] netlink: zone id is out of range [ 672.207646][T16496] netlink: zone id is out of range [ 672.212838][T16496] netlink: zone id is out of range [ 672.217984][T16496] netlink: zone id is out of range [ 672.223961][T16496] netlink: zone id is out of range [ 672.229106][T16496] netlink: zone id is out of range [ 672.258029][T16504] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2638'. [ 672.282950][ T5829] Bluetooth: hci0: command tx timeout [ 672.303805][T16496] Bluetooth: MGMT ver 1.23 [ 672.434524][T16511] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 672.474195][T16485] chnl_net:caif_netlink_parms(): no params data found [ 672.607147][T16519] netlink: 'syz.1.2641': attribute type 27 has an invalid length. [ 672.619373][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2641'. [ 672.673843][T16485] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.687638][T16485] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.697018][T16485] bridge_slave_0: entered allmulticast mode [ 672.709051][T16485] bridge_slave_0: entered promiscuous mode [ 672.722237][T16485] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.732264][T16485] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.742234][T16485] bridge_slave_1: entered allmulticast mode [ 672.754957][T16485] bridge_slave_1: entered promiscuous mode [ 672.841959][T16485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.859654][T16485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.939067][T16485] team0: Port device team_slave_0 added [ 672.950239][T16485] team0: Port device team_slave_1 added [ 673.014362][T16485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.021517][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.048434][T16485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.063253][T16485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.070385][T16485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.096777][T16485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.175034][T16485] hsr_slave_0: entered promiscuous mode [ 673.182399][T16485] hsr_slave_1: entered promiscuous mode [ 673.189238][T16485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.197642][T16485] Cannot create hsr debugfs directory [ 673.514986][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2645'. [ 673.547611][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2645'. [ 673.569823][T16529] netlink: 'syz.1.2645': attribute type 4 has an invalid length. [ 673.855738][T16543] xt_hashlimit: size too large, truncated to 1048576 [ 673.960766][T16548] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2651'. [ 674.362916][ T5829] Bluetooth: hci0: command tx timeout [ 674.419464][T16485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.459084][T16485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.500428][T16485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.526246][T16558] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2653'. [ 674.545908][T16485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 674.741336][T16485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.799577][T16485] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.836801][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.844025][T11309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.879756][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.887034][T11309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.013107][T16571] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 675.937331][T16587] netlink: 'syz.4.2660': attribute type 4 has an invalid length. [ 676.071335][T16485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.165380][T16485] veth0_vlan: entered promiscuous mode [ 676.185279][T16485] veth1_vlan: entered promiscuous mode [ 676.252052][T16485] veth0_macvtap: entered promiscuous mode [ 676.277145][T16485] veth1_macvtap: entered promiscuous mode [ 676.446282][ T5829] Bluetooth: hci0: command tx timeout [ 676.470608][T16485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.536716][T16485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.588600][T16485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.608153][T16485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.620826][T16485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.629957][T16485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.687126][T16598] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 676.792097][T16605] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 677.098062][T16615] netlink: 'syz.0.2669': attribute type 27 has an invalid length. [ 677.143231][T16613] __nla_validate_parse: 4 callbacks suppressed [ 677.143255][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2669'. [ 677.203865][T11309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.211734][T11309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.384612][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.426438][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.768135][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'. [ 677.781909][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'. [ 677.791517][T16619] netlink: 'syz.2.2671': attribute type 4 has an invalid length. [ 677.959659][T16625] xt_hashlimit: size too large, truncated to 1048576 [ 678.011760][T16627] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 678.267308][T16636] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 678.811424][T16643] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2680'. [ 678.842850][T16643] net_ratelimit: 4061 callbacks suppressed [ 678.842911][T16643] netlink: zone id is out of range [ 678.891442][T16643] netlink: zone id is out of range [ 678.913027][T16643] netlink: get zone limit has 8 unknown bytes [ 679.156013][T16650] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 679.161723][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.231413][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 679.240715][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 679.258076][T16655] netlink: 'syz.4.2684': attribute type 4 has an invalid length. [ 679.312395][T16656] netlink: 'syz.1.2683': attribute type 27 has an invalid length. [ 679.350125][T16656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2683'. [ 679.718913][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.799951][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.900276][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.087650][ T36] bridge_slave_1: left allmulticast mode [ 680.095854][ T36] bridge_slave_1: left promiscuous mode [ 680.101659][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.118318][ T36] bridge_slave_0: left allmulticast mode [ 680.125870][ T36] bridge_slave_0: left promiscuous mode [ 680.131587][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.379160][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.389794][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.401010][ T36] bond0 (unregistering): Released all slaves [ 680.617703][ T36] hsr_slave_0: left promiscuous mode [ 680.624025][ T36] hsr_slave_1: left promiscuous mode [ 680.629826][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.638299][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.646593][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.654582][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.675071][ T36] veth1_macvtap: left promiscuous mode [ 680.680625][ T36] veth0_macvtap: left promiscuous mode [ 680.686857][ T36] veth1_vlan: left promiscuous mode [ 680.692954][ T36] veth0_vlan: left promiscuous mode [ 681.045967][ T36] team0 (unregistering): Port device team_slave_1 removed [ 681.081838][ T36] team0 (unregistering): Port device team_slave_0 removed [ 681.309960][T16667] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 681.344136][T16669] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 681.359041][T16668] xt_hashlimit: size too large, truncated to 1048576 [ 681.566702][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2689'. [ 682.271854][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.286484][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.298073][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.313226][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.321553][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.373867][T16680] bond4: entered promiscuous mode [ 682.378977][T16680] bond4: entered allmulticast mode [ 682.508487][T16689] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2691'. [ 682.586168][T16693] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2693'. [ 682.598003][T16693] netlink: zone id is out of range [ 682.603657][T16693] netlink: zone id is out of range [ 682.608985][T16693] netlink: get zone limit has 8 unknown bytes [ 683.028516][T16683] chnl_net:caif_netlink_parms(): no params data found [ 683.175828][T16706] netlink: 'syz.1.2696': attribute type 27 has an invalid length. [ 683.287707][T16683] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.295437][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.302640][T16683] bridge_slave_0: entered allmulticast mode [ 683.310509][T16683] bridge_slave_0: entered promiscuous mode [ 683.320037][T16683] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.328053][T16683] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.335560][T16683] bridge_slave_1: entered allmulticast mode [ 683.343296][T16683] bridge_slave_1: entered promiscuous mode [ 683.405594][T16683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.419872][T16683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.510309][T16683] team0: Port device team_slave_0 added [ 683.517140][T16713] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 683.536118][T16683] team0: Port device team_slave_1 added [ 683.674575][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2699'. [ 683.703475][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2699'. [ 683.712583][T16715] netlink: 'syz.2.2699': attribute type 4 has an invalid length. [ 683.726988][T16683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.751143][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.794684][T16683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.823565][T16683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.846328][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.876794][T16683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.887417][T16721] xt_hashlimit: size too large, truncated to 1048576 [ 684.113813][T16683] hsr_slave_0: entered promiscuous mode [ 684.124020][T16683] hsr_slave_1: entered promiscuous mode [ 684.134446][T16683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.156564][T16683] Cannot create hsr debugfs directory [ 684.171744][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'. [ 684.239431][T16726] ªªªªªª: entered promiscuous mode [ 684.244831][T16726] ªªªªªª: entered allmulticast mode [ 684.251693][T16726] tunl0: entered promiscuous mode [ 684.265988][T16726] tunl0: entered allmulticast mode [ 684.271493][T16726] gre0: entered promiscuous mode [ 684.283218][T16726] gre0: entered allmulticast mode [ 684.301233][T16726] gretap0: entered promiscuous mode [ 684.311867][T16726] gretap0: entered allmulticast mode [ 684.320979][T16729] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 684.328515][T16726] erspan0: entered promiscuous mode [ 684.342787][T16726] erspan0: entered allmulticast mode [ 684.348276][T16726] ip_vti0: entered promiscuous mode [ 684.363093][ T5829] Bluetooth: hci0: command tx timeout [ 684.379176][T16726] ip_vti0: entered allmulticast mode [ 684.404808][T16726] ip6_vti0: entered promiscuous mode [ 684.410150][T16726] ip6_vti0: entered allmulticast mode [ 684.439899][T16726] sit0: entered promiscuous mode [ 684.445792][T16726] sit0: entered allmulticast mode [ 684.451641][T16726] ip6tnl0: entered promiscuous mode [ 684.457112][T16726] ip6tnl0: entered allmulticast mode [ 684.463554][T16726] ip6gre0: entered promiscuous mode [ 684.468984][T16726] ip6gre0: entered allmulticast mode [ 684.475422][T16726] syz_tun: entered promiscuous mode [ 684.480851][T16726] syz_tun: entered allmulticast mode [ 684.487395][T16726] ip6gretap0: entered promiscuous mode [ 684.494892][T16726] ip6gretap0: entered allmulticast mode [ 684.509358][T16726] bridge0: entered promiscuous mode [ 684.516743][T16726] bridge0: entered allmulticast mode [ 684.523312][T16726] vcan0: entered promiscuous mode [ 684.528543][T16726] vcan0: entered allmulticast mode [ 684.534892][T16726] bond0: entered promiscuous mode [ 684.540198][T16726] bond_slave_0: entered promiscuous mode [ 684.547563][T16726] bond_slave_1: entered promiscuous mode [ 684.554219][T16726] bond0: entered allmulticast mode [ 684.560082][T16726] bond_slave_0: entered allmulticast mode [ 684.566636][T16726] bond_slave_1: entered allmulticast mode [ 684.577166][T16740] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.2704'. [ 684.587324][T16740] netlink: zone id is out of range [ 684.592520][T16740] netlink: zone id is out of range [ 684.598321][T16740] netlink: zone id is out of range [ 684.604885][T16726] team0: entered promiscuous mode [ 684.615530][T16726] team_slave_0: entered promiscuous mode [ 684.622089][T16726] team_slave_1: entered promiscuous mode [ 684.629199][T16726] team0: entered allmulticast mode [ 684.634775][T16726] team_slave_0: entered allmulticast mode [ 684.641152][T16726] team_slave_1: entered allmulticast mode [ 684.648173][T16726] dummy0: entered allmulticast mode [ 684.654388][T16726] nlmon0: entered promiscuous mode [ 684.659760][T16726] nlmon0: entered allmulticast mode [ 684.665992][T16726] caif0: entered promiscuous mode [ 684.671251][T16726] caif0: entered allmulticast mode [ 684.677413][T16726] batadv0: entered promiscuous mode [ 684.683602][T16726] batadv0: entered allmulticast mode [ 684.689738][T16726] vxcan0: entered promiscuous mode [ 684.695311][T16726] vxcan0: entered allmulticast mode [ 684.701860][T16726] vxcan1: entered promiscuous mode [ 684.707369][T16726] vxcan1: entered allmulticast mode [ 684.714376][T16726] veth0: entered promiscuous mode [ 684.720448][T16726] veth0: entered allmulticast mode [ 684.726669][T16726] veth1: entered promiscuous mode [ 684.731932][T16726] veth1: entered allmulticast mode [ 684.738139][T16726] wg0: entered promiscuous mode [ 684.743649][T16726] wg0: entered allmulticast mode [ 684.749515][T16726] wg1: entered promiscuous mode [ 684.754754][T16726] wg1: entered allmulticast mode [ 684.760659][T16726] wg2: entered promiscuous mode [ 684.766057][T16726] wg2: entered allmulticast mode [ 684.771837][T16726] veth0_to_bridge: entered promiscuous mode [ 684.778078][T16726] veth0_to_bridge: entered allmulticast mode [ 684.785326][T16726] veth1_to_bridge: entered promiscuous mode [ 684.791497][T16726] veth1_to_bridge: entered allmulticast mode [ 684.798674][T16726] veth0_to_bond: entered promiscuous mode [ 684.805019][T16726] veth0_to_bond: entered allmulticast mode [ 684.811957][T16726] veth1_to_bond: entered promiscuous mode [ 684.818018][T16726] veth1_to_bond: entered allmulticast mode [ 684.825142][T16726] veth0_to_team: entered promiscuous mode [ 684.831151][T16726] veth0_to_team: entered allmulticast mode [ 684.838192][T16726] veth1_to_team: entered promiscuous mode [ 684.844360][T16726] veth1_to_team: entered allmulticast mode [ 684.851288][T16726] veth0_to_batadv: entered promiscuous mode [ 684.857694][T16726] veth0_to_batadv: entered allmulticast mode [ 684.864818][T16726] batadv_slave_0: entered promiscuous mode [ 684.870897][T16726] batadv_slave_0: entered allmulticast mode [ 684.877844][T16726] veth1_to_batadv: entered promiscuous mode [ 684.884152][T16726] veth1_to_batadv: entered allmulticast mode [ 684.891033][T16726] batadv_slave_1: entered promiscuous mode [ 684.897183][T16726] batadv_slave_1: entered allmulticast mode [ 684.904130][T16726] xfrm0: entered promiscuous mode [ 684.909440][T16726] xfrm0: entered allmulticast mode [ 684.921221][T16726] veth0_to_hsr: entered promiscuous mode [ 684.933543][T16726] veth0_to_hsr: entered allmulticast mode [ 684.946578][T16726] hsr_slave_0: entered allmulticast mode [ 684.963514][T16726] veth1_to_hsr: entered promiscuous mode [ 684.979832][T16726] veth1_to_hsr: entered allmulticast mode [ 684.993739][T16726] hsr_slave_1: entered allmulticast mode [ 685.003003][T16726] hsr0: entered promiscuous mode [ 685.008066][T16726] hsr0: entered allmulticast mode [ 685.013883][T16726] veth1_virt_wifi: entered promiscuous mode [ 685.019891][T16726] veth1_virt_wifi: entered allmulticast mode [ 685.026835][T16726] veth0_virt_wifi: entered promiscuous mode [ 685.033727][T16726] veth0_virt_wifi: entered allmulticast mode [ 685.040604][T16726] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 685.048181][T16726] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 685.056460][T16726] veth1_vlan: entered allmulticast mode [ 685.062559][T16726] veth0_vlan: entered allmulticast mode [ 685.069001][T16726] vlan0: entered promiscuous mode [ 685.075430][T16726] vlan0: entered allmulticast mode [ 685.081383][T16726] vlan1: entered promiscuous mode [ 685.091630][T16726] vlan1: entered allmulticast mode [ 685.112621][T16726] macvlan0: entered promiscuous mode [ 685.120970][T16726] macvlan0: entered allmulticast mode [ 685.129773][T16726] macvlan1: entered promiscuous mode [ 685.135312][T16726] macvlan1: entered allmulticast mode [ 685.141638][T16726] ipvlan0: entered promiscuous mode [ 685.147260][T16726] ipvlan0: entered allmulticast mode [ 685.152963][T16726] ipvlan1: entered promiscuous mode [ 685.158195][T16726] ipvlan1: entered allmulticast mode [ 685.168329][T16726] veth1_macvtap: entered allmulticast mode [ 685.174496][T16726] veth0_macvtap: entered allmulticast mode [ 685.180538][T16726] macvtap0: entered promiscuous mode [ 685.189354][T16726] macvtap0: entered allmulticast mode [ 685.195071][T16726] macsec0: entered promiscuous mode [ 685.200304][T16726] macsec0: entered allmulticast mode [ 685.209314][T16726] geneve0: entered promiscuous mode [ 685.214613][T16726] geneve0: entered allmulticast mode [ 685.220080][T16726] geneve1: entered promiscuous mode [ 685.225840][T16726] geneve1: entered allmulticast mode [ 685.231498][T16726] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 685.238588][T16726] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 685.245969][T16726] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 685.253016][T16726] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 685.260221][T16726] syztnl0: entered promiscuous mode [ 685.265674][T16726] syztnl0: entered allmulticast mode [ 685.271341][T16726] xfrm1: entered promiscuous mode [ 685.276504][T16726] xfrm1: entered allmulticast mode [ 685.281745][T16726] vxlan0: entered promiscuous mode [ 685.287086][T16726] vxlan0: entered allmulticast mode [ 685.292390][T16726] bridge1: entered promiscuous mode [ 685.297663][T16726] bridge1: entered allmulticast mode [ 685.303277][T16726] xfrm2: entered promiscuous mode [ 685.308319][T16726] xfrm2: entered allmulticast mode [ 685.313727][T16726] bond1: entered promiscuous mode [ 685.318877][T16726] bond1: entered allmulticast mode [ 685.324618][T16726] veth2: entered promiscuous mode [ 685.329671][T16726] veth2: entered allmulticast mode [ 685.335594][T16726] veth3: entered promiscuous mode [ 685.340646][T16726] veth3: entered allmulticast mode [ 685.346232][T16726] bridge2: entered promiscuous mode [ 685.351439][T16726] bridge2: entered allmulticast mode [ 685.357269][T16726] bridge3: entered promiscuous mode [ 685.362476][T16726] bridge3: entered allmulticast mode [ 685.368251][T16726] bond2: entered promiscuous mode [ 685.373396][T16726] bond2: entered allmulticast mode [ 685.378744][T16726] syztnl1: entered promiscuous mode [ 685.384381][T16726] syztnl1: entered allmulticast mode [ 685.389846][T16726] &: entered promiscuous mode [ 685.394699][T16726] &: entered allmulticast mode [ 685.399586][T16726] bond3: entered promiscuous mode [ 685.407291][T16726] bond3: entered allmulticast mode [ 685.412496][T16726] bond4: entered promiscuous mode [ 685.417578][T16726] bond4: entered allmulticast mode [ 685.422868][T16726] bond5: entered promiscuous mode [ 685.427933][T16726] bond5: entered allmulticast mode [ 685.433230][T16726] bond6: entered promiscuous mode [ 685.438279][T16726] bond6: entered allmulticast mode [ 685.443585][T16726] netdevsim netdevsim1 eth0: entered promiscuous mode [ 685.450373][T16726] netdevsim netdevsim1 eth0: entered allmulticast mode [ 685.457458][T16726] netdevsim netdevsim1 eth1: entered promiscuous mode [ 685.464293][T16726] netdevsim netdevsim1 eth1: entered allmulticast mode [ 685.471264][T16726] netdevsim netdevsim1 eth2: entered promiscuous mode [ 685.478093][T16726] netdevsim netdevsim1 eth2: entered allmulticast mode [ 685.485327][T16726] netdevsim netdevsim1 eth3: entered promiscuous mode [ 685.492105][T16726] netdevsim netdevsim1 eth3: entered allmulticast mode [ 685.559163][T16743] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2705'. [ 685.568804][T16743] netlink: zone id is out of range [ 685.575147][T16743] netlink: zone id is out of range [ 685.583337][T16743] netlink: get zone limit has 8 unknown bytes [ 685.717996][T16748] netlink: 'syz.1.2707': attribute type 27 has an invalid length. [ 685.731188][T16748] ªªªªªª: left promiscuous mode [ 685.737596][T16748] ªªªªªª: left allmulticast mode [ 685.743528][T16748] tunl0: left promiscuous mode [ 685.748447][T16748] tunl0: left allmulticast mode [ 685.754011][T16748] gre0: left promiscuous mode [ 685.758795][T16748] gre0: left allmulticast mode [ 685.763985][T16748] gretap0: left promiscuous mode [ 685.769045][T16748] gretap0: left allmulticast mode [ 685.776858][T16748] ip_vti0: left promiscuous mode [ 685.781830][T16748] ip_vti0: left allmulticast mode [ 685.787107][T16748] ip6_vti0: left promiscuous mode [ 685.792323][T16748] ip6_vti0: left allmulticast mode [ 685.800254][T16748] sit0: left promiscuous mode [ 685.805275][T16748] sit0: left allmulticast mode [ 685.810354][T16748] ip6tnl0: left promiscuous mode [ 685.818140][T16748] ip6tnl0: left allmulticast mode [ 685.823649][T16748] ip6gre0: left promiscuous mode [ 685.828600][T16748] ip6gre0: left allmulticast mode [ 685.833969][T16748] syz_tun: left promiscuous mode [ 685.838928][T16748] syz_tun: left allmulticast mode [ 685.841833][T16756] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2708'. [ 685.844155][T16748] ip6gretap0: left promiscuous mode [ 685.844174][T16748] ip6gretap0: left allmulticast mode [ 685.844308][T16748] bridge0: left promiscuous mode [ 685.869218][T16748] bridge0: left allmulticast mode [ 685.874779][T16748] vcan0: left promiscuous mode [ 685.879736][T16748] vcan0: left allmulticast mode [ 685.885130][T16748] bond0: left promiscuous mode [ 685.890306][T16748] bond0: left allmulticast mode [ 685.895577][T16748] team0: left promiscuous mode [ 685.900690][T16748] team0: left allmulticast mode [ 685.905781][T16748] dummy0: left allmulticast mode [ 685.910941][T16748] nlmon0: left promiscuous mode [ 685.916097][T16748] nlmon0: left allmulticast mode [ 685.921485][T16748] caif0: left promiscuous mode [ 685.926380][T16748] caif0: left allmulticast mode [ 685.931499][T16748] batadv0: left promiscuous mode [ 685.939639][T16748] batadv0: left allmulticast mode [ 685.945029][T16748] vxcan0: left promiscuous mode [ 685.949899][T16748] vxcan0: left allmulticast mode [ 685.957845][T16748] vxcan1: left promiscuous mode [ 685.964593][T16748] vxcan1: left allmulticast mode [ 685.969687][T16748] veth0: left promiscuous mode [ 685.977118][T16748] veth0: left allmulticast mode [ 685.982150][T16748] veth1: left promiscuous mode [ 685.986992][T16748] veth1: left allmulticast mode [ 685.992014][T16748] wg0: left promiscuous mode [ 685.999314][T16748] wg0: left allmulticast mode [ 686.004252][T16748] wg1: left promiscuous mode [ 686.008887][T16748] wg1: left allmulticast mode [ 686.016433][T16748] wg2: left promiscuous mode [ 686.021047][T16748] wg2: left allmulticast mode [ 686.036710][T16748] veth0_to_bridge: left promiscuous mode [ 686.042402][T16748] veth0_to_bridge: left allmulticast mode [ 686.055983][T16748] veth1_to_bridge: left promiscuous mode [ 686.061636][T16748] veth1_to_bridge: left allmulticast mode [ 686.069962][T16748] veth0_to_bond: left promiscuous mode [ 686.079007][T16748] veth0_to_bond: left allmulticast mode [ 686.085308][T16748] bond_slave_0: left promiscuous mode [ 686.090727][T16748] bond_slave_0: left allmulticast mode [ 686.099142][T16748] veth1_to_bond: left promiscuous mode [ 686.104737][T16748] veth1_to_bond: left allmulticast mode [ 686.110452][T16748] bond_slave_1: left promiscuous mode [ 686.118619][T16748] bond_slave_1: left allmulticast mode [ 686.124357][T16748] veth0_to_team: left promiscuous mode [ 686.129840][T16748] veth0_to_team: left allmulticast mode [ 686.138481][T16748] team_slave_0: left promiscuous mode [ 686.143940][T16748] team_slave_0: left allmulticast mode [ 686.149522][T16748] veth1_to_team: left promiscuous mode [ 686.155400][T16748] veth1_to_team: left allmulticast mode [ 686.161093][T16748] team_slave_1: left promiscuous mode [ 686.166528][T16748] team_slave_1: left allmulticast mode [ 686.172184][T16748] veth0_to_batadv: left promiscuous mode [ 686.177901][T16748] veth0_to_batadv: left allmulticast mode [ 686.183934][T16748] batadv_slave_0: left promiscuous mode [ 686.189504][T16748] batadv_slave_0: left allmulticast mode [ 686.195365][T16748] veth1_to_batadv: left promiscuous mode [ 686.201039][T16748] veth1_to_batadv: left allmulticast mode [ 686.207141][T16748] batadv_slave_1: left promiscuous mode [ 686.212793][T16748] batadv_slave_1: left allmulticast mode [ 686.218667][T16748] xfrm0: left promiscuous mode [ 686.223508][T16748] xfrm0: left allmulticast mode [ 686.228476][T16748] veth0_to_hsr: left promiscuous mode [ 686.233913][T16748] veth0_to_hsr: left allmulticast mode [ 686.239583][T16748] veth1_to_hsr: left promiscuous mode [ 686.245015][T16748] veth1_to_hsr: left allmulticast mode [ 686.250776][T16748] hsr0: left promiscuous mode [ 686.255525][T16748] hsr0: left allmulticast mode [ 686.260331][T16748] hsr_slave_0: left allmulticast mode [ 686.265775][T16748] hsr_slave_1: left allmulticast mode [ 686.271342][T16748] veth1_virt_wifi: left promiscuous mode [ 686.277069][T16748] veth1_virt_wifi: left allmulticast mode [ 686.283516][T16748] veth0_virt_wifi: left promiscuous mode [ 686.289179][T16748] veth0_virt_wifi: left allmulticast mode [ 686.295148][T16748] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 686.302100][T16748] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 686.309317][T16748] veth1_vlan: left allmulticast mode [ 686.314874][T16748] vlan0: left promiscuous mode [ 686.319806][T16748] vlan0: left allmulticast mode [ 686.325123][T16748] vlan1: left promiscuous mode [ 686.330028][T16748] vlan1: left allmulticast mode [ 686.335274][T16748] macvlan0: left promiscuous mode [ 686.340310][T16748] macvlan0: left allmulticast mode [ 686.345664][T16748] macvlan1: left promiscuous mode [ 686.350722][T16748] macvlan1: left allmulticast mode [ 686.356040][T16748] ipvlan0: left promiscuous mode [ 686.361011][T16748] ipvlan0: left allmulticast mode [ 686.366309][T16748] ipvlan1: left promiscuous mode [ 686.371275][T16748] ipvlan1: left allmulticast mode [ 686.376353][T16748] veth0_vlan: left allmulticast mode [ 686.381766][T16748] veth1_macvtap: left allmulticast mode [ 686.387854][T16748] veth0_macvtap: left allmulticast mode [ 686.393961][T16748] macvtap0: left promiscuous mode [ 686.399080][T16748] macvtap0: left allmulticast mode [ 686.404809][T16748] macsec0: left promiscuous mode [ 686.409794][T16748] macsec0: left allmulticast mode [ 686.415106][T16748] geneve0: left promiscuous mode [ 686.420080][T16748] geneve0: left allmulticast mode [ 686.425708][T16748] geneve1: left promiscuous mode [ 686.430695][T16748] geneve1: left allmulticast mode [ 686.436094][T16748] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 686.443023][ T5829] Bluetooth: hci0: command tx timeout [ 686.451146][T16748] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 686.458173][T16748] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 686.464921][T16748] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 686.471807][T16748] syztnl0: left promiscuous mode [ 686.476847][T16748] syztnl0: left allmulticast mode [ 686.482006][T16748] xfrm1: left promiscuous mode [ 686.486869][T16748] xfrm1: left allmulticast mode [ 686.491898][T16748] vxlan0: left promiscuous mode [ 686.497056][T16748] vxlan0: left allmulticast mode [ 686.502143][T16748] bridge1: left promiscuous mode [ 686.507472][T16748] bridge1: left allmulticast mode [ 686.513071][T16748] xfrm2: left promiscuous mode [ 686.517872][T16748] xfrm2: left allmulticast mode [ 686.524352][T16748] bond1: left promiscuous mode [ 686.529156][T16748] erspan0: left promiscuous mode [ 686.535035][T16748] bond1: left allmulticast mode [ 686.539927][T16748] erspan0: left allmulticast mode [ 686.545466][T16748] veth2: left promiscuous mode [ 686.550252][T16748] veth2: left allmulticast mode [ 686.555668][T16748] veth3: left promiscuous mode [ 686.560469][T16748] veth3: left allmulticast mode [ 686.565921][T16748] bridge2: left promiscuous mode [ 686.570898][T16748] bridge2: left allmulticast mode [ 686.584241][T16748] bridge3: left promiscuous mode [ 686.589220][T16748] bridge3: left allmulticast mode [ 686.594851][T16748] bond2: left promiscuous mode [ 686.599660][T16748] bond2: left allmulticast mode [ 686.605934][T16748] syztnl1: left promiscuous mode [ 686.610913][T16748] syztnl1: left allmulticast mode [ 686.625636][T16748] &: left promiscuous mode [ 686.630242][T16748] &: left allmulticast mode [ 686.635741][T16748] bond3: left promiscuous mode [ 686.641033][T16748] bond3: left allmulticast mode [ 686.646234][T16748] bond4: left promiscuous mode [ 686.651022][T16748] bond4: left allmulticast mode [ 686.656215][T16748] bond5: left promiscuous mode [ 686.661108][T16748] bond5: left allmulticast mode [ 686.666521][T16748] bond6: left promiscuous mode [ 686.671350][T16748] bond6: left allmulticast mode [ 686.676414][T16748] netdevsim netdevsim1 eth0: left promiscuous mode [ 686.683060][T16748] netdevsim netdevsim1 eth0: left allmulticast mode [ 686.689794][T16748] netdevsim netdevsim1 eth1: left promiscuous mode [ 686.696720][T16748] netdevsim netdevsim1 eth1: left allmulticast mode [ 686.703598][T16748] netdevsim netdevsim1 eth2: left promiscuous mode [ 686.710189][T16748] netdevsim netdevsim1 eth2: left allmulticast mode [ 686.717031][T16748] netdevsim netdevsim1 eth3: left promiscuous mode [ 686.723639][T16748] netdevsim netdevsim1 eth3: left allmulticast mode [ 686.845902][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 686.857837][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 686.882966][T16763] netlink: 'syz.1.2711': attribute type 4 has an invalid length. [ 687.150663][T16777] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 687.604900][T16779] __nla_validate_parse: 1 callbacks suppressed [ 687.604920][T16779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2712'. [ 687.631181][T16683] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 687.657890][T16683] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 687.689616][T16683] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 687.752366][T16683] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 687.954653][T16781] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 688.060889][T16683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.115698][T16683] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.116876][T16786] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2717'. [ 688.134306][T16786] netlink: zone id is out of range [ 688.139468][T16786] netlink: zone id is out of range [ 688.144619][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.144754][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.181498][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.183050][T16786] netlink: get zone limit has 8 unknown bytes [ 688.188689][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.524493][ T5829] Bluetooth: hci0: command tx timeout [ 688.530621][T16795] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 688.860107][T16683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.007940][T16683] veth0_vlan: entered promiscuous mode [ 689.028356][T16683] veth1_vlan: entered promiscuous mode [ 689.090373][T16683] veth0_macvtap: entered promiscuous mode [ 689.107009][T16683] veth1_macvtap: entered promiscuous mode [ 689.139323][T16808] netlink: 'syz.0.2723': attribute type 27 has an invalid length. [ 689.142244][T16683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.171729][T16683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.191199][T16683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.205498][T16683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.217581][T16683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.238501][T16683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.388153][T16814] warn_alloc: 1 callbacks suppressed [ 689.388174][T16814] syz.2.2726: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 689.398293][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.434157][T16814] ,cpuset=/,mems_allowed=0-1 [ 689.435803][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.454530][T16814] CPU: 0 UID: 0 PID: 16814 Comm: syz.2.2726 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 689.454561][T16814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 689.454575][T16814] Call Trace: [ 689.454584][T16814] [ 689.454594][T16814] dump_stack_lvl+0x189/0x250 [ 689.454634][T16814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.454664][T16814] ? __pfx__printk+0x10/0x10 [ 689.454685][T16814] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.454721][T16814] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 689.454757][T16814] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 689.454806][T16814] warn_alloc+0x214/0x310 [ 689.454835][T16814] ? __pfx___schedule+0x10/0x10 [ 689.454867][T16814] ? __pfx_warn_alloc+0x10/0x10 [ 689.454895][T16814] ? kasan_save_track+0x4f/0x80 [ 689.454917][T16814] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 689.454940][T16814] ? xskq_create+0x56/0x170 [ 689.454968][T16814] ? __x64_sys_setsockopt+0x18b/0x220 [ 689.454992][T16814] ? do_syscall_64+0xf6/0x210 [ 689.455008][T16814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.455042][T16814] __vmalloc_node_range_noprof+0x125/0x12c0 [ 689.455103][T16814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 689.455130][T16814] ? xskq_create+0x56/0x170 [ 689.455164][T16814] ? __kasan_kmalloc+0x93/0xb0 [ 689.455195][T16814] vmalloc_user_noprof+0x74/0x80 [ 689.455224][T16814] ? xskq_create+0xbf/0x170 [ 689.455250][T16814] xskq_create+0xbf/0x170 [ 689.455292][T16814] xsk_init_queue+0xb0/0x110 [ 689.455321][T16814] xsk_setsockopt+0x43f/0x710 [ 689.455350][T16814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 689.455387][T16814] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 689.455408][T16814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 689.455432][T16814] do_sock_setsockopt+0x257/0x3e0 [ 689.455458][T16814] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 689.455478][T16814] ? __fget_files+0x2a/0x420 [ 689.455518][T16814] ? __fget_files+0x3a0/0x420 [ 689.455540][T16814] ? __fget_files+0x2a/0x420 [ 689.455571][T16814] __x64_sys_setsockopt+0x18b/0x220 [ 689.455601][T16814] do_syscall_64+0xf6/0x210 [ 689.455619][T16814] ? clear_bhb_loop+0x45/0xa0 [ 689.455643][T16814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.455662][T16814] RIP: 0033:0x7f91bc58e969 [ 689.455680][T16814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.455695][T16814] RSP: 002b:00007f91bd45c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 689.455715][T16814] RAX: ffffffffffffffda RBX: 00007f91bc7b5fa0 RCX: 00007f91bc58e969 [ 689.455730][T16814] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 689.455741][T16814] RBP: 00007f91bc610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 689.455753][T16814] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.455764][T16814] R13: 0000000000000000 R14: 00007f91bc7b5fa0 R15: 00007ffea77e9dd8 [ 689.455795][T16814] [ 689.455869][T16814] Mem-Info: [ 689.566213][T16818] Bluetooth: MGMT ver 1.23 [ 689.775897][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.775980][T16814] active_anon:8576 inactive_anon:0 isolated_anon:0 [ 689.775980][T16814] active_file:1811 inactive_file:38579 isolated_file:0 [ 689.775980][T16814] unevictable:768 dirty:302 writeback:0 [ 689.775980][T16814] slab_reclaimable:10420 slab_unreclaimable:103760 [ 689.775980][T16814] mapped:29879 shmem:1450 pagetables:820 [ 689.775980][T16814] sec_pagetables:0 bounce:0 [ 689.775980][T16814] kernel_misc_reclaimable:0 [ 689.775980][T16814] free:1334562 free_pcp:990 free_cma:0 [ 689.828922][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.878810][T16814] Node 0 active_anon:34204kB inactive_anon:0kB active_file:7244kB inactive_file:154240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119516kB dirty:1204kB writeback:0kB shmem:4264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11924kB pagetables:3180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 689.916724][T16814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 689.950776][T16814] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.986566][T16814] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 689.993399][T16814] Node 0 DMA32 free:1412184kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:34296kB inactive_anon:0kB active_file:7244kB inactive_file:154148kB unevictable:1536kB writepending:1200kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:1720kB local_pcp:984kB free_cma:0kB [ 690.025017][T16814] lowmem_reserve[]: 0 0 0 0 0 [ 690.039220][T16814] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 690.085057][T16814] lowmem_reserve[]: 0 0 0 0 0 [ 690.090033][T16814] Node 1 Normal free:3912484kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.119786][T16826] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 690.150860][T16814] lowmem_reserve[]: 0 0 0 0 0 [ 690.160700][T16814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 690.175990][T16828] xt_hashlimit: size too large, truncated to 1048576 [ 690.178772][T16814] Node 0 DMA32: 65*4kB (ME) 298*8kB (ME) 652*16kB (UME) 704*32kB (UME) 449*64kB (UME) 303*128kB (UME) 346*256kB (UM) 275*512kB (UME) 199*1024kB (UM) 5*2048kB (UM) 211*4096kB (UM) = 1410772kB [ 690.211586][T16814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.237381][T16814] Node 1 Normal: 247*4kB (UME) 59*8kB (UME) 47*16kB (UME) 216*32kB (UME) 100*64kB (UME) 27*128kB (UME) 15*256kB (UME) 11*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3912484kB [ 690.333048][T16814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.406970][T16814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.458866][T16814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.490898][T16814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.515005][T16814] 41840 total pagecache pages [ 690.527645][T16814] 0 pages in swap cache [ 690.538879][T16814] Free swap = 124996kB [ 690.543686][T16814] Total swap = 124996kB [ 690.547943][T16814] 2097051 pages RAM [ 690.551836][T16814] 0 pages HighMem/MovableOnly [ 690.557344][T16814] 424375 pages reserved [ 690.561609][T16814] 0 pages cma reserved [ 690.625353][T16817] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 690.799143][T16834] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2731'. [ 690.809857][T16834] netlink: zone id is out of range [ 690.819887][T16834] netlink: zone id is out of range [ 690.843202][T16834] netlink: get zone limit has 8 unknown bytes [ 690.986758][T16843] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 691.097596][T16850] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.2736'. [ 691.133096][T16850] netlink: zone id is out of range [ 691.142116][T16850] netlink: zone id is out of range [ 691.154430][T16850] netlink: zone id is out of range [ 691.168264][T16850] netlink: zone id is out of range [ 691.175704][T16850] netlink: zone id is out of range [ 691.181677][T16850] netlink: zone id is out of range [ 691.188906][T16850] netlink: zone id is out of range [ 691.369650][T16859] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 691.592994][T16862] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 692.540399][T16877] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 692.682894][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 693.188254][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.332499][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.471673][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.524774][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2745'. [ 693.577938][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.708277][ T36] bridge_slave_1: left allmulticast mode [ 693.714051][ T36] bridge_slave_1: left promiscuous mode [ 693.730055][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.757940][ T36] bridge_slave_0: left allmulticast mode [ 693.763704][ T36] bridge_slave_0: left promiscuous mode [ 693.769473][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.037908][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.049965][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.060049][ T36] bond0 (unregistering): Released all slaves [ 694.279067][ T36] hsr_slave_0: left promiscuous mode [ 694.285517][ T36] hsr_slave_1: left promiscuous mode [ 694.291316][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.298776][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.306619][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.315309][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.335878][ T36] veth1_macvtap: left promiscuous mode [ 694.341412][ T36] veth0_macvtap: left promiscuous mode [ 694.347238][ T36] veth1_vlan: left promiscuous mode [ 694.352553][ T36] veth0_vlan: left promiscuous mode [ 694.705376][ T36] team0 (unregistering): Port device team_slave_1 removed [ 694.740543][ T36] team0 (unregistering): Port device team_slave_0 removed [ 695.264395][T16903] xt_hashlimit: size too large, truncated to 1048576 [ 695.288775][T16904] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 695.304515][T16905] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 696.046485][T16910] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 696.251119][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.259729][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.273093][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.280914][T16915] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 696.292899][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.305812][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.555605][T16921] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2756'. [ 696.968425][T16913] chnl_net:caif_netlink_parms(): no params data found [ 697.133384][T16935] xt_hashlimit: size too large, truncated to 1048576 [ 697.392034][T16940] veth2: entered allmulticast mode [ 697.592559][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2758'. [ 697.662923][T16932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2758'. [ 697.679425][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.691766][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 697.726968][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.741981][T16913] bridge_slave_0: entered allmulticast mode [ 697.754791][T16913] bridge_slave_0: entered promiscuous mode [ 697.763476][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.770647][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.778058][T16913] bridge_slave_1: entered allmulticast mode [ 697.786036][T16913] bridge_slave_1: entered promiscuous mode [ 697.869724][T16925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2757'. [ 697.913460][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.936122][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.025402][T16960] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 698.055242][T16961] xt_hashlimit: size too large, truncated to 1048576 [ 698.097041][T16913] team0: Port device team_slave_0 added [ 698.137543][T16913] team0: Port device team_slave_1 added [ 698.362889][ T5829] Bluetooth: hci0: command tx timeout [ 698.426313][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.436545][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.672942][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.757582][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.794481][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.843169][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.024793][T16913] hsr_slave_0: entered promiscuous mode [ 699.040482][T16913] hsr_slave_1: entered promiscuous mode [ 699.057643][T16913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.076143][T16913] Cannot create hsr debugfs directory [ 699.156860][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2770'. [ 699.203227][T16990] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 699.365824][T16995] xt_hashlimit: size too large, truncated to 1048576 [ 699.410206][T16999] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2774'. [ 699.419959][T16999] net_ratelimit: 4058 callbacks suppressed [ 699.419976][T16999] netlink: zone id is out of range [ 699.529161][T16999] netlink: zone id is out of range [ 699.553029][T16999] netlink: get zone limit has 8 unknown bytes [ 699.607096][T17004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2776'. [ 699.907320][T17014] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 699.926046][T17010] ip6gretap1: entered promiscuous mode [ 699.941858][T17010] ip6gretap1: entered allmulticast mode [ 700.452743][ T5829] Bluetooth: hci0: command tx timeout [ 700.897154][T16913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 700.917960][T16913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 700.930989][T17033] warn_alloc: 1 callbacks suppressed [ 700.931006][T17033] syz.4.2786: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 700.937948][T16913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 700.950727][T17034] xt_hashlimit: size too large, truncated to 1048576 [ 700.958201][T17033] ,cpuset=/,mems_allowed=0-1 [ 700.989856][T17033] CPU: 0 UID: 0 PID: 17033 Comm: syz.4.2786 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 700.989886][T17033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 700.989900][T17033] Call Trace: [ 700.989909][T17033] [ 700.989918][T17033] dump_stack_lvl+0x189/0x250 [ 700.989954][T17033] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 700.989989][T17033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.990019][T17033] ? __pfx__printk+0x10/0x10 [ 700.990040][T17033] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 700.990074][T17033] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 700.990115][T17033] warn_alloc+0x214/0x310 [ 700.990144][T17033] ? __pfx___schedule+0x10/0x10 [ 700.990175][T17033] ? __pfx_warn_alloc+0x10/0x10 [ 700.990202][T17033] ? kasan_save_track+0x4f/0x80 [ 700.990224][T17033] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 700.990247][T17033] ? xskq_create+0x56/0x170 [ 700.990276][T17033] ? __x64_sys_setsockopt+0x18b/0x220 [ 700.990300][T17033] ? do_syscall_64+0xf6/0x210 [ 700.990316][T17033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.990348][T17033] __vmalloc_node_range_noprof+0x125/0x12c0 [ 700.990411][T17033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 700.990443][T17033] ? __kasan_kmalloc+0x93/0xb0 [ 700.990473][T17033] vmalloc_user_noprof+0x74/0x80 [ 700.990501][T17033] ? xskq_create+0xbf/0x170 [ 700.990527][T17033] xskq_create+0xbf/0x170 [ 700.990558][T17033] xsk_init_queue+0xb0/0x110 [ 700.990599][T17033] xsk_setsockopt+0x43f/0x710 [ 700.990639][T17033] ? __pfx_xsk_setsockopt+0x10/0x10 [ 700.990676][T17033] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 700.990697][T17033] ? __pfx_xsk_setsockopt+0x10/0x10 [ 700.990723][T17033] do_sock_setsockopt+0x257/0x3e0 [ 700.990769][T17033] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 700.990804][T17033] ? __fget_files+0x2a/0x420 [ 700.990833][T17033] ? __fget_files+0x3a0/0x420 [ 700.990856][T17033] ? __fget_files+0x2a/0x420 [ 700.990894][T17033] __x64_sys_setsockopt+0x18b/0x220 [ 700.990924][T17033] do_syscall_64+0xf6/0x210 [ 700.990942][T17033] ? clear_bhb_loop+0x45/0xa0 [ 700.990965][T17033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.990983][T17033] RIP: 0033:0x7f12ecd8e969 [ 700.991000][T17033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.991017][T17033] RSP: 002b:00007f12edb2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 700.991038][T17033] RAX: ffffffffffffffda RBX: 00007f12ecfb5fa0 RCX: 00007f12ecd8e969 [ 700.991052][T17033] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 700.991064][T17033] RBP: 00007f12ece10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 700.991076][T17033] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.991088][T17033] R13: 0000000000000000 R14: 00007f12ecfb5fa0 R15: 00007fff17f0c728 [ 700.991118][T17033] [ 700.996256][T16913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 701.285062][T17033] Mem-Info: [ 701.288210][T17033] active_anon:8712 inactive_anon:0 isolated_anon:0 [ 701.288210][T17033] active_file:1811 inactive_file:38585 isolated_file:0 [ 701.288210][T17033] unevictable:768 dirty:192 writeback:0 [ 701.288210][T17033] slab_reclaimable:10257 slab_unreclaimable:102841 [ 701.288210][T17033] mapped:28836 shmem:1405 pagetables:843 [ 701.288210][T17033] sec_pagetables:0 bounce:0 [ 701.288210][T17033] kernel_misc_reclaimable:0 [ 701.288210][T17033] free:1334449 free_pcp:407 free_cma:0 [ 701.342164][T17033] Node 0 active_anon:34848kB inactive_anon:0kB active_file:7244kB inactive_file:154264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115344kB dirty:764kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12028kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 701.376309][T17033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 701.418068][T17033] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.446307][T17033] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 701.452227][T17033] Node 0 DMA32 free:1409720kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:34840kB inactive_anon:0kB active_file:7244kB inactive_file:154172kB unevictable:1536kB writepending:760kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:7604kB local_pcp:864kB free_cma:0kB [ 701.558247][T17045] FAULT_INJECTION: forcing a failure. [ 701.558247][T17045] name failslab, interval 1, probability 0, space 0, times 0 [ 701.573561][T17033] lowmem_reserve[]: 0 0 0 0 0 [ 701.582326][T17033] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 701.596206][T17041] Bluetooth: MGMT ver 1.23 [ 701.633008][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.2.2789 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 701.633036][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 701.633048][T17045] Call Trace: [ 701.633055][T17045] [ 701.633064][T17045] dump_stack_lvl+0x189/0x250 [ 701.633099][T17045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.633126][T17045] ? __pfx__printk+0x10/0x10 [ 701.633149][T17045] ? __pfx___might_resched+0x10/0x10 [ 701.633166][T17045] ? fs_reclaim_acquire+0x7d/0x100 [ 701.633196][T17045] should_fail_ex+0x414/0x560 [ 701.633231][T17045] should_failslab+0xa8/0x100 [ 701.633255][T17045] __kmalloc_noprof+0xcb/0x4f0 [ 701.633288][T17045] ? kfree+0x4d/0x440 [ 701.633306][T17045] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.633334][T17045] tomoyo_realpath_from_path+0xe3/0x5d0 [ 701.633358][T17045] ? tomoyo_domain+0xda/0x130 [ 701.633387][T17045] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 701.633416][T17045] tomoyo_path_number_perm+0x1e8/0x5a0 [ 701.633448][T17045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 701.633495][T17045] ? __lock_acquire+0xaac/0xd20 [ 701.633539][T17045] ? __fget_files+0x2a/0x420 [ 701.633567][T17045] ? __fget_files+0x3a0/0x420 [ 701.633594][T17045] ? __fget_files+0x2a/0x420 [ 701.633639][T17045] security_file_ioctl+0xcb/0x2d0 [ 701.633672][T17045] __se_sys_ioctl+0x47/0x170 [ 701.633697][T17045] do_syscall_64+0xf6/0x210 [ 701.633717][T17045] ? clear_bhb_loop+0x45/0xa0 [ 701.633743][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.633762][T17045] RIP: 0033:0x7f91bc58e969 [ 701.633780][T17045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.633798][T17045] RSP: 002b:00007f91bd45c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 701.633819][T17045] RAX: ffffffffffffffda RBX: 00007f91bc7b5fa0 RCX: 00007f91bc58e969 [ 701.633835][T17045] RDX: 0000200000000000 RSI: 0000000000008953 RDI: 0000000000000003 [ 701.633848][T17045] RBP: 00007f91bd45c090 R08: 0000000000000000 R09: 0000000000000000 [ 701.633861][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.633873][T17045] R13: 0000000000000000 R14: 00007f91bc7b5fa0 R15: 00007ffea77e9dd8 [ 701.633906][T17045] [ 701.633925][T17045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.796585][T17036] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 701.817300][T17033] lowmem_reserve[]: 0 0 0 0 0 [ 701.880845][T17033] Node 1 Normal free:3912484kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.910215][T17033] lowmem_reserve[]: 0 0 0 0 0 [ 701.915190][T17033] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 701.928162][T17033] Node 0 DMA32: 309*4kB (UM) 572*8kB (UME) 794*16kB (UME) 638*32kB (UME) 526*64kB (UME) 327*128kB (UME) 353*256kB (UM) 287*512kB (UME) 200*1024kB (UM) 3*2048kB (UM) 209*4096kB (UM) = 1418772kB [ 701.947560][T17033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 701.959184][T17033] Node 1 Normal: 247*4kB (UME) 59*8kB (UME) 47*16kB (UME) 216*32kB (UME) 100*64kB (UME) 27*128kB (UME) 15*256kB (UME) 11*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3912484kB [ 701.987753][T17047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2790'. [ 702.068061][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.077459][T17033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.089112][T17033] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 702.135300][T17033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.145869][T17033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 702.156919][T17033] 41805 total pagecache pages [ 702.161724][T17033] 0 pages in swap cache [ 702.170940][T17033] Free swap = 124996kB [ 702.173434][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.175454][T17033] Total swap = 124996kB [ 702.195208][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.202444][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.217753][T17033] 2097051 pages RAM [ 702.224283][T17055] netlink: 'syz.0.2793': attribute type 27 has an invalid length. [ 702.236046][T17055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2793'. [ 702.250069][T11927] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.257310][T11927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.267960][T17033] 0 pages HighMem/MovableOnly [ 702.278069][T17033] 424375 pages reserved [ 702.287454][T17033] 0 pages cma reserved [ 702.511484][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 702.521879][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 702.536630][T17067] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 702.595930][T17065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2797'. [ 702.659864][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.750015][T16913] veth0_vlan: entered promiscuous mode [ 702.786822][T16913] veth1_vlan: entered promiscuous mode [ 702.878737][T16913] veth0_macvtap: entered promiscuous mode [ 702.892489][T17075] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2800'. [ 702.902243][T16913] veth1_macvtap: entered promiscuous mode [ 702.957438][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.015610][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.073509][T16913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.087603][T16913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.088205][T17079] FAULT_INJECTION: forcing a failure. [ 703.088205][T17079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.099324][T16913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.120366][T16913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.132380][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.0.2802 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 703.132409][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 703.132422][T17079] Call Trace: [ 703.132430][T17079] [ 703.132440][T17079] dump_stack_lvl+0x189/0x250 [ 703.132478][T17079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.132508][T17079] ? __pfx__printk+0x10/0x10 [ 703.132543][T17079] should_fail_ex+0x414/0x560 [ 703.132582][T17079] _copy_to_user+0x31/0xb0 [ 703.132612][T17079] simple_read_from_buffer+0xe1/0x170 [ 703.132643][T17079] proc_fail_nth_read+0x1df/0x250 [ 703.132671][T17079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.132705][T17079] ? rw_verify_area+0x258/0x650 [ 703.132726][T17079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.132757][T17079] vfs_read+0x1fd/0x980 [ 703.132785][T17079] ? __pfx___mutex_lock+0x10/0x10 [ 703.132817][T17079] ? __pfx_vfs_read+0x10/0x10 [ 703.132841][T17079] ? __fget_files+0x2a/0x420 [ 703.132871][T17079] ? __fget_files+0x3a0/0x420 [ 703.132896][T17079] ? __fget_files+0x2a/0x420 [ 703.132931][T17079] ksys_read+0x145/0x250 [ 703.132957][T17079] ? __pfx_ksys_read+0x10/0x10 [ 703.132984][T17079] ? do_syscall_64+0xba/0x210 [ 703.133007][T17079] do_syscall_64+0xf6/0x210 [ 703.133027][T17079] ? clear_bhb_loop+0x45/0xa0 [ 703.133052][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.133072][T17079] RIP: 0033:0x7f149a58d37c [ 703.133091][T17079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 703.133117][T17079] RSP: 002b:00007f149b433030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.133139][T17079] RAX: ffffffffffffffda RBX: 00007f149a7b5fa0 RCX: 00007f149a58d37c [ 703.133154][T17079] RDX: 000000000000000f RSI: 00007f149b4330a0 RDI: 0000000000000004 [ 703.133167][T17079] RBP: 00007f149b433090 R08: 0000000000000000 R09: 0000000000000000 [ 703.133180][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.133193][T17079] R13: 0000000000000000 R14: 00007f149a7b5fa0 R15: 00007ffca0999b68 [ 703.133226][T17079] [ 703.523691][T11927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.546935][T11927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.627681][T17082] tipc: Failed to obtain node identity [ 703.649401][T17082] tipc: Enabling of bearer rejected, failed to enable media [ 703.699927][T11309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.707352][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2803'. [ 703.710861][T11309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.927380][T17096] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 704.047025][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 704.073348][T17049] ================================================================== [ 704.081464][T17049] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 [ 704.089739][T17049] Read of size 8 at addr ffff888031331058 by task syz.1.2791/17049 [ 704.097663][T17049] [ 704.100013][T17049] CPU: 1 UID: 0 PID: 17049 Comm: syz.1.2791 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 704.100041][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 704.100054][T17049] Call Trace: [ 704.100063][T17049] [ 704.100071][T17049] dump_stack_lvl+0x189/0x250 [ 704.100102][T17049] ? __virt_addr_valid+0x18c/0x540 [ 704.100127][T17049] ? rcu_is_watching+0x15/0xb0 [ 704.100155][T17049] ? __kasan_check_byte+0x12/0x40 [ 704.100178][T17049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.100203][T17049] ? rcu_is_watching+0x15/0xb0 [ 704.100230][T17049] ? lock_release+0x4b/0x3e0 [ 704.100259][T17049] ? __virt_addr_valid+0x18c/0x540 [ 704.100282][T17049] ? __virt_addr_valid+0x469/0x540 [ 704.100307][T17049] print_report+0xb4/0x290 [ 704.100338][T17049] ? skb_queue_purge_reason+0x99/0x360 [ 704.100357][T17049] kasan_report+0x118/0x150 [ 704.100382][T17049] ? skb_queue_purge_reason+0x99/0x360 [ 704.100405][T17049] skb_queue_purge_reason+0x99/0x360 [ 704.100427][T17049] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 704.100447][T17049] ? __pfx___mutex_lock+0x10/0x10 [ 704.100475][T17049] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.100507][T17049] ? drain_workqueue+0x2cb/0x390 [ 704.100529][T17049] ? __pfx_vhci_flush+0x10/0x10 [ 704.100548][T17049] vhci_flush+0x44/0x50 [ 704.100566][T17049] hci_dev_reset+0x41d/0x5c0 [ 704.100592][T17049] sock_do_ioctl+0xd9/0x300 [ 704.100620][T17049] ? __pfx_sock_do_ioctl+0x10/0x10 [ 704.100649][T17049] ? __lock_acquire+0xaac/0xd20 [ 704.100680][T17049] sock_ioctl+0x576/0x790 [ 704.100707][T17049] ? __pfx_sock_ioctl+0x10/0x10 [ 704.100736][T17049] ? __fget_files+0x3a0/0x420 [ 704.100760][T17049] ? __fget_files+0x2a/0x420 [ 704.100785][T17049] ? bpf_lsm_file_ioctl+0x9/0x20 [ 704.100808][T17049] ? __pfx_sock_ioctl+0x10/0x10 [ 704.100835][T17049] __se_sys_ioctl+0xf9/0x170 [ 704.100854][T17049] do_syscall_64+0xf6/0x210 [ 704.100872][T17049] ? clear_bhb_loop+0x45/0xa0 [ 704.100893][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.100911][T17049] RIP: 0033:0x7fa809f8e969 [ 704.100928][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.100946][T17049] RSP: 002b:00007fa80ae25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.100966][T17049] RAX: ffffffffffffffda RBX: 00007fa80a1b5fa0 RCX: 00007fa809f8e969 [ 704.100981][T17049] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000007 [ 704.100994][T17049] RBP: 00007fa80a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 704.101006][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.101019][T17049] R13: 0000000000000000 R14: 00007fa80a1b5fa0 R15: 00007fff14fb9bf8 [ 704.101041][T17049] [ 704.101048][T17049] [ 704.373453][T17049] Allocated by task 16913: [ 704.377879][T17049] kasan_save_track+0x3e/0x80 [ 704.382562][T17049] __kasan_kmalloc+0x93/0xb0 [ 704.387168][T17049] __kmalloc_cache_noprof+0x230/0x3d0 [ 704.392542][T17049] vhci_open+0x57/0x360 [ 704.396692][T17049] misc_open+0x2b9/0x330 [ 704.400939][T17049] chrdev_open+0x4c9/0x5e0 [ 704.405366][T17049] do_dentry_open+0xdf0/0x1970 [ 704.410138][T17049] vfs_open+0x3b/0x340 [ 704.414214][T17049] path_openat+0x2ee5/0x3830 [ 704.418806][T17049] do_filp_open+0x1fa/0x410 [ 704.423313][T17049] do_sys_openat2+0x121/0x1c0 [ 704.427996][T17049] __x64_sys_openat+0x138/0x170 [ 704.432856][T17049] do_syscall_64+0xf6/0x210 [ 704.437381][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.443278][T17049] [ 704.445602][T17049] Freed by task 16913: [ 704.449666][T17049] kasan_save_track+0x3e/0x80 [ 704.454348][T17049] kasan_save_free_info+0x46/0x50 [ 704.459383][T17049] __kasan_slab_free+0x62/0x70 [ 704.464149][T17049] kfree+0x193/0x440 [ 704.468044][T17049] vhci_release+0xbc/0xd0 [ 704.472363][T17049] __fput+0x449/0xa70 [ 704.476351][T17049] task_work_run+0x1d1/0x260 [ 704.480942][T17049] do_exit+0x8d6/0x2550 [ 704.485096][T17049] do_group_exit+0x21c/0x2d0 [ 704.489683][T17049] __x64_sys_exit_group+0x3f/0x40 [ 704.494714][T17049] x64_sys_call+0x21ba/0x21c0 [ 704.499404][T17049] do_syscall_64+0xf6/0x210 [ 704.503908][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.509799][T17049] [ 704.512120][T17049] The buggy address belongs to the object at ffff888031331000 [ 704.512120][T17049] which belongs to the cache kmalloc-1k of size 1024 [ 704.526177][T17049] The buggy address is located 88 bytes inside of [ 704.526177][T17049] freed 1024-byte region [ffff888031331000, ffff888031331400) [ 704.539978][T17049] [ 704.542296][T17049] The buggy address belongs to the physical page: [ 704.548725][T17049] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31330 [ 704.557478][T17049] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 704.565971][T17049] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 704.573950][T17049] page_type: f5(slab) [ 704.577931][T17049] raw: 00fff00000000040 ffff88801a041dc0 0000000000000000 dead000000000001 [ 704.586506][T17049] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 704.595083][T17049] head: 00fff00000000040 ffff88801a041dc0 0000000000000000 dead000000000001 [ 704.603754][T17049] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 704.612425][T17049] head: 00fff00000000003 ffffea0000c4cc01 00000000ffffffff 00000000ffffffff [ 704.621098][T17049] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 704.629761][T17049] page dumped because: kasan: bad access detected [ 704.636186][T17049] page_owner tracks the page as allocated [ 704.641900][T17049] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 97978458281, free_ts 96899165289 [ 704.660922][T17049] post_alloc_hook+0x1d8/0x230 [ 704.665704][T17049] get_page_from_freelist+0x21e0/0x22c0 [ 704.671277][T17049] __alloc_frozen_pages_noprof+0x181/0x370 [ 704.677113][T17049] alloc_pages_mpol+0x232/0x4a0 [ 704.681980][T17049] allocate_slab+0x8a/0x3b0 [ 704.686487][T17049] ___slab_alloc+0xbfc/0x1480 [ 704.691165][T17049] __kmalloc_noprof+0x305/0x4f0 [ 704.696021][T17049] ieee802_11_parse_elems_full+0x152/0x2b20 [ 704.701921][T17049] ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0 [ 704.707993][T17049] ieee80211_iface_work+0x806/0xfe0 [ 704.713206][T17049] cfg80211_wiphy_work+0x2dc/0x460 [ 704.718319][T17049] process_scheduled_works+0xadb/0x17a0 [ 704.723873][T17049] worker_thread+0x8a0/0xda0 [ 704.728458][T17049] kthread+0x70e/0x8a0 [ 704.732528][T17049] ret_from_fork+0x4b/0x80 [ 704.736944][T17049] ret_from_fork_asm+0x1a/0x30 [ 704.741706][T17049] page last free pid 5961 tgid 5961 stack trace: [ 704.748028][T17049] __free_frozen_pages+0xb14/0xce0 [ 704.753161][T17049] __folio_put+0x21b/0x2c0 [ 704.757570][T17049] skb_release_data+0x4df/0x890 [ 704.762426][T17049] __kfree_skb+0x55/0x70 [ 704.766667][T17049] tcp_write_queue_purge+0x143/0x2f0 [ 704.771975][T17049] tcp_v4_destroy_sock+0x27b/0x5d0 [ 704.777095][T17049] inet_csk_destroy_sock+0x163/0x3a0 [ 704.782469][T17049] __tcp_close+0xb19/0xde0 [ 704.786878][T17049] tcp_close+0x28/0x110 [ 704.791030][T17049] inet_release+0x184/0x210 [ 704.795544][T17049] sock_close+0xc0/0x240 [ 704.799794][T17049] __fput+0x449/0xa70 [ 704.803783][T17049] task_work_run+0x1d1/0x260 [ 704.808378][T17049] resume_user_mode_work+0x5e/0x80 [ 704.813490][T17049] syscall_exit_to_user_mode+0x9a/0x120 [ 704.819127][T17049] do_syscall_64+0x103/0x210 [ 704.823728][T17049] [ 704.826052][T17049] Memory state around the buggy address: [ 704.831681][T17049] ffff888031330f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 704.839740][T17049] ffff888031330f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 704.847811][T17049] >ffff888031331000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 704.855872][T17049] ^ [ 704.862803][T17049] ffff888031331080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 704.870887][T17049] ffff888031331100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 704.878959][T17049] ================================================================== [ 704.943845][T17049] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 704.951107][T17049] CPU: 0 UID: 0 PID: 17049 Comm: syz.1.2791 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 704.963207][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 704.973289][T17049] Call Trace: [ 704.976587][T17049] [ 704.979531][T17049] dump_stack_lvl+0x99/0x250 [ 704.984160][T17049] ? __asan_memcpy+0x40/0x70 [ 704.988777][T17049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.994016][T17049] ? __pfx__printk+0x10/0x10 [ 704.998657][T17049] panic+0x2db/0x790 [ 705.002579][T17049] ? __pfx_panic+0x10/0x10 [ 705.007018][T17049] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 705.012937][T17049] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 705.019300][T17049] ? print_memory_metadata+0x314/0x400 [ 705.024810][T17049] ? skb_queue_purge_reason+0x99/0x360 [ 705.030304][T17049] check_panic_on_warn+0x89/0xb0 [ 705.035298][T17049] ? skb_queue_purge_reason+0x99/0x360 [ 705.040788][T17049] end_report+0x78/0x160 [ 705.045071][T17049] kasan_report+0x129/0x150 [ 705.049610][T17049] ? skb_queue_purge_reason+0x99/0x360 [ 705.055095][T17049] skb_queue_purge_reason+0x99/0x360 [ 705.060391][T17049] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 705.066283][T17049] ? __pfx___mutex_lock+0x10/0x10 [ 705.071323][T17049] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 705.077320][T17049] ? drain_workqueue+0x2cb/0x390 [ 705.082266][T17049] ? __pfx_vhci_flush+0x10/0x10 [ 705.087130][T17049] vhci_flush+0x44/0x50 [ 705.091285][T17049] hci_dev_reset+0x41d/0x5c0 [ 705.095890][T17049] sock_do_ioctl+0xd9/0x300 [ 705.100413][T17049] ? __pfx_sock_do_ioctl+0x10/0x10 [ 705.105545][T17049] ? __lock_acquire+0xaac/0xd20 [ 705.110419][T17049] sock_ioctl+0x576/0x790 [ 705.114763][T17049] ? __pfx_sock_ioctl+0x10/0x10 [ 705.119628][T17049] ? __fget_files+0x3a0/0x420 [ 705.124311][T17049] ? __fget_files+0x2a/0x420 [ 705.128910][T17049] ? bpf_lsm_file_ioctl+0x9/0x20 [ 705.133861][T17049] ? __pfx_sock_ioctl+0x10/0x10 [ 705.138720][T17049] __se_sys_ioctl+0xf9/0x170 [ 705.143315][T17049] do_syscall_64+0xf6/0x210 [ 705.147835][T17049] ? clear_bhb_loop+0x45/0xa0 [ 705.152511][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.158400][T17049] RIP: 0033:0x7fa809f8e969 [ 705.162811][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.182420][T17049] RSP: 002b:00007fa80ae25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.190848][T17049] RAX: ffffffffffffffda RBX: 00007fa80a1b5fa0 RCX: 00007fa809f8e969 [ 705.198818][T17049] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000007 [ 705.206789][T17049] RBP: 00007fa80a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 705.214798][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.222779][T17049] R13: 0000000000000000 R14: 00007fa80a1b5fa0 R15: 00007fff14fb9bf8 [ 705.230769][T17049] [ 705.234103][T17049] Kernel Offset: disabled [ 705.238429][T17049] Rebooting in 86400 seconds..