last executing test programs: 47.988535355s ago: executing program 1 (id=310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000180)=[{r0, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r0, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) unshare(0x48000000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x2000000b) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1, &(0x7f0000000200)=""/118, 0x76}, 0x4}, {{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f00000003c0)=""/8, 0x8}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f00000004c0)=""/160, 0xa0}], 0x5, &(0x7f0000000640)=""/178, 0xb2}, 0x200}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000000900)=""/57, 0x39}], 0x4, &(0x7f0000000a40)=""/107, 0x6b}, 0x1}, {{&(0x7f0000000ac0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/81, 0x51}, {&(0x7f0000000bc0)=""/169, 0xa9}, {&(0x7f0000000980)=""/41, 0x29}, {&(0x7f0000000c80)=""/191, 0xbf}], 0x4}, 0x3}, {{&(0x7f0000000d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000e00)=""/17, 0x11}, {&(0x7f0000000e40)=""/116, 0x74}, {&(0x7f0000000ec0)=""/89, 0x59}, {&(0x7f0000000f40)=""/177, 0xb1}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/112, 0x70}, {&(0x7f0000002080)=""/41, 0x29}], 0x7, &(0x7f0000002140)=""/214, 0xd6}, 0x6}, {{&(0x7f0000002240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000022c0)=""/84, 0x54}, {&(0x7f0000002340)=""/100, 0x64}, {&(0x7f00000023c0)=""/74, 0x4a}, {&(0x7f0000002440)=""/86, 0x56}, {&(0x7f00000024c0)=""/26, 0x1a}, {&(0x7f0000002500)=""/140, 0x8c}], 0x6}, 0x5}, {{&(0x7f0000002640)=@tipc=@name, 0x80, &(0x7f0000002940)=[{&(0x7f00000026c0)=""/236, 0xec}, {&(0x7f00000027c0)=""/245, 0xf5}, {&(0x7f00000028c0)=""/21, 0x15}, {&(0x7f0000002900)}], 0x4}, 0x50}, {{&(0x7f0000002980)=@generic, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/183, 0xb7}, {&(0x7f0000003ac0)=""/55, 0x37}, {&(0x7f0000003b00)=""/194, 0xc2}, {&(0x7f0000003c00)=""/148, 0x94}, {&(0x7f0000003cc0)=""/222, 0xde}], 0x6}, 0xfff}], 0x8, 0x2000, &(0x7f0000004040)={0x0, 0x989680}) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) close(r3) 47.660142501s ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf250302000000000000080001"], 0x20}}, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x0, 0x7, 0x7, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x30}, {0x4, 0x1}, {0x30, 0x1}, {0x19}, {0x36}, {0x5, 0x1}, {0x6}, {0x2, 0x1}, {0x48, 0x1}, {0x1b}, {0x60, 0x1}, {0x16, 0x1}, {0x16, 0x1}, {0x18}, {0x16}, {}, {0x1b, 0x1}, {0x1, 0x1}, {0x12}, {0x18, 0x1}, {0x28}, {0x66}, {0x5f}, {0xb}, {0x30}, {0x1b}, {0x18}, {0x1b, 0x1}, {0xc}, {0x5, 0x1}, {0x24}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24800}, 0x20004040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14}}, 0x74}}, 0x0) bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$inet(r10, &(0x7f0000000200)="00e7dc4f154ef39c04b0ac3f5592423c54177d", 0x13, 0x0, 0x0, 0x0) 41.537884416s ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf250302000000000000080001"], 0x20}}, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x0, 0x7, 0x7, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x30}, {0x4, 0x1}, {0x30, 0x1}, {0x19}, {0x36}, {0x5, 0x1}, {0x6}, {0x2, 0x1}, {0x48, 0x1}, {0x1b}, {0x60, 0x1}, {0x16, 0x1}, {0x16, 0x1}, {0x18}, {0x16}, {}, {0x1b, 0x1}, {0x1, 0x1}, {0x12}, {0x18, 0x1}, {0x28}, {0x66}, {0x5f}, {0xb}, {0x30}, {0x1b}, {0x18}, {0x1b, 0x1}, {0xc}, {0x5, 0x1}, {0x24}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24800}, 0x20004040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14}}, 0x74}}, 0x0) bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$inet(r10, &(0x7f0000000200)="00e7dc4f154ef39c04b0ac3f5592423c54177d", 0x13, 0x0, 0x0, 0x0) 24.905215581s ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf250302000000000000080001"], 0x20}}, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x0, 0x7, 0x7, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x30}, {0x4, 0x1}, {0x30, 0x1}, {0x19}, {0x36}, {0x5, 0x1}, {0x6}, {0x2, 0x1}, {0x48, 0x1}, {0x1b}, {0x60, 0x1}, {0x16, 0x1}, {0x16, 0x1}, {0x18}, {0x16}, {}, {0x1b, 0x1}, {0x1, 0x1}, {0x12}, {0x18, 0x1}, {0x28}, {0x66}, {0x5f}, {0xb}, {0x30}, {0x1b}, {0x18}, {0x1b, 0x1}, {0xc}, {0x5, 0x1}, {0x24}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24800}, 0x20004040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14}}, 0x74}}, 0x0) bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$inet(r10, &(0x7f0000000200)="00e7dc4f154ef39c04b0ac3f5592423c54177d", 0x13, 0x0, 0x0, 0x0) 13.88281414s ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf250302000000000000080001"], 0x20}}, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x0, 0x7, 0x7, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x30}, {0x4, 0x1}, {0x30, 0x1}, {0x19}, {0x36}, {0x5, 0x1}, {0x6}, {0x2, 0x1}, {0x48, 0x1}, {0x1b}, {0x60, 0x1}, {0x16, 0x1}, {0x16, 0x1}, {0x18}, {0x16}, {}, {0x1b, 0x1}, {0x1, 0x1}, {0x12}, {0x18, 0x1}, {0x28}, {0x66}, {0x5f}, {0xb}, {0x30}, {0x1b}, {0x18}, {0x1b, 0x1}, {0xc}, {0x5, 0x1}, {0x24}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24800}, 0x20004040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14}}, 0x74}}, 0x0) bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$inet(r10, &(0x7f0000000200)="00e7dc4f154ef39c04b0ac3f5592423c54177d", 0x13, 0x0, 0x0, 0x0) 4.635659702s ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf250302000000000000080001"], 0x20}}, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x0, 0x7, 0x7, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x30}, {0x4, 0x1}, {0x30, 0x1}, {0x19}, {0x36}, {0x5, 0x1}, {0x6}, {0x2, 0x1}, {0x48, 0x1}, {0x1b}, {0x60, 0x1}, {0x16, 0x1}, {0x16, 0x1}, {0x18}, {0x16}, {}, {0x1b, 0x1}, {0x1, 0x1}, {0x12}, {0x18, 0x1}, {0x28}, {0x66}, {0x5f}, {0xb}, {0x30}, {0x1b}, {0x18}, {0x1b, 0x1}, {0xc}, {0x5, 0x1}, {0x24}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24800}, 0x20004040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14}}, 0x74}}, 0x0) bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$inet(r10, &(0x7f0000000200)="00e7dc4f154ef39c04b0ac3f5592423c54177d", 0x13, 0x0, 0x0, 0x0) 2.921136716s ago: executing program 2 (id=699): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000500)='cgroup.kill\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$cgroup_int(r2, &(0x7f0000000280)=0x1, 0x12) socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="c3e4932c4d4c4f3b264041fe3521b0ba6bd2a63040cf6986a1f7826b8e9f9a1622a68572e5d6cfdff322a891adbefd2f34e3e44eb9ea847de6de9bb13e44d2361e5121a8dae1fb6274d6d2d93d394a05ce7d8e9c891d98a68179915f0cf686"], 0x54}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000a00)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000a40)={0x194, 0x18, 0x200, 0x70bd27, 0x25dfdbff, "", [@nested={0x10, 0x89, 0x0, 0x1, [@typed={0x5, 0xee, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x53}]}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r2}, @nested={0x20, 0xf8, 0x0, 0x1, [@nested={0x4, 0xc7}, @typed={0x8, 0x14b, 0x0, 0x0, @pid}, @nested={0x4, 0xbb}, @typed={0xc, 0x51, 0x0, 0x0, @u64=0xa}]}, @generic="4f81267a2823f01bab2b5c208028178e5a2e", @generic="6cb5319716d4c5935c0874320cc4bbf1586ddcd8c51f1b7c33bda7dc03d487f17d745bf6b952644313e2752c16ce0872c5d5736bb9c3255cf4cff21f0c961b4ba94a1d25dafd999ee21943759a8ba2c9fd996cf11693c05b79d2e4239bf669d986d8f300c0db294ed26d20566c048443a317d6143fecad44d7f40c73", @generic="6447594f4064fb8bb260a4d89342ad37079a0d1ee34697ae606f941e46601f36af3ab24d51c107abbc1cc8d5b6ea1af6c075c5af425da7b44758bd599f16a45a4b5b97f9ed38f81768560d803a7e9d25763343f2c8fbd9be6fca362fdf1364515949e4176732ccaa9a7673777e09b1679c0c3840760e80d2e00927cc060b1356afc80452ceee33a1d9e9164389b5f1abba14c8bf880c90e5dcdf4c45351632364218154e1b2fb75478f5facd8ccc61f6a2ce58715b5747125eb84b9bc3a4"]}, 0x194}, {&(0x7f0000000480)={0x10, 0x21, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}, {&(0x7f00000004c0)={0x24, 0x3d, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x110, 0x0, 0x0, @u64=0xb}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r2}]}, 0x24}, {&(0x7f00000008c0)={0x11c, 0x14, 0x300, 0x70bd25, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0x12f, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r8}]}, 0x11c}], 0x4, &(0x7f0000000580), 0x0, 0x40891}, 0x4800) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="01"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x4e1f, 0x0, @empty}}, {{0xa, 0xfffb, 0x1, @remote, 0x6}}}, 0x108) close(0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan1\x00', 0x0}) 2.814178802s ago: executing program 3 (id=700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x101, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/151}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x1) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x6c, 0x0, @loopback, @local}, '8\x00eX\x00\x00\x00\x00'}}}}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r6}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000004c0)=[@mss={0x2, 0xffffffff}, @sack_perm, @window, @mss={0x2, 0xfff}, @sack_perm, @window, @window={0x3, 0x1ff, 0xe}], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0xc5) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 2.180700496s ago: executing program 2 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000102010c000000000000000001000006040001800600074000040000cfc747552739"], 0x20}, 0x1, 0x0, 0x0, 0x200000d5}, 0x8844) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) (async) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x4, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000040), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.119203628s ago: executing program 3 (id=704): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x41, {0x0, 0x0, 0x74, 0x0, 0xf3ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2.046560347s ago: executing program 2 (id=706): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002ffff0f000000000000001004000000000000000100000500000005000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.96900316s ago: executing program 0 (id=707): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x2, 'veth1_to_hsr\x00', {0x400}, 0x800}) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000014000000113333c0c57d5b60025d4dfb7dba7cabd85bfd33c417e4685399000000006480e4c263dba8da6b599e341405ded99a076353f78d201012da8b9f2141a304096aa407ae737bd21a4bab568552e479de1e0f1610e5f8f7cabd9d7c93c9c43063dd202c2631f0649638062b427323f2d6068b6c531bb2162543c97852e77b5898887a4e89476b7251bddab982c271ab1f4df81b3c969292b11581f1baf1478fb7ead05344c14435f7650ea32ba2e1161b1bc2bc9d0e03afb692b5ecb52b"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = accept(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x202000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000001580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000300)={0x1204, r11, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x17}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x11ab, 0x2a, [@cf={0x4, 0x6, {0x4, 0x61, 0x0, 0x7}}, @prep={0x83, 0x1f, {{}, 0x72, 0x10, @device_a, 0x7, @void, 0x8, 0x10001, @device_a, 0x5}}, @tim={0x5, 0xe8, {0x5, 0x79, 0xfe, "a9ffca1b5fd756c6cb536985187ab4ac3a3606fa54ee594436eaa3e7e1230cd906ac45f810fcb6ea0c60eb3d9e7444f1324f885c4a2ab8b2342b585cf2e73715c4064869102ff43ba2745077280d1c0d6b25cfaf1abfa98d1568134113853d0191420071139f44ab46b9a943e1c2733df5474c1abec33b53c82c5a15026a43f00def0ec5f54b734c8aae2f589fccd298bf4e9ffa44a2a251002196fbbde73f3db66011aaa2efc020facc27abeb00186ecea8596467725883f91d56f747f21283b33a0a4005ca24d46218d8ea0503a640aaae1eef6e58705ec3c1c5f29fdc569758264e1665"}}, @measure_req={0x26, 0x1003, {0x9e, 0x80, 0x3, "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"}}, @tim={0x5, 0x7b, {0x4, 0xd4, 0x0, "04f514960267430bfadb369ee3d6aa844ac697c358f3af01fa44e218cfce1568b3b3f6a6d161d91dc4f4fb04d49672b6e386ed74c4ac378fc1a79ba9f4b5de7b60831afd39d84c688fdf8d47a0b8fc5d87555740e9f4102a3cdeda52be92a87ee008db94ab22d0eb0d5e2a40485c2b325415a4eb6dddd74b"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfd, 0x20}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x1204}, 0x1, 0x0, 0x0, 0x2}, 0xd8def90080168a88) r13 = socket(0x1e, 0x805, 0x0) connect$tipc(r13, &(0x7f0000000000)=@id, 0x10) close(r13) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r14, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) 1.881744281s ago: executing program 2 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000c00000020000580080001007564700014000280080004000d8000000800030080"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 1.528161326s ago: executing program 4 (id=711): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002640)={0x54, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x54}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x2c) 1.401459618s ago: executing program 4 (id=712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x7ff, 0x2000}, 0x0, 0x9, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) 1.375051739s ago: executing program 4 (id=713): socketpair(0x29, 0x0, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) r2 = accept(r0, 0x0, &(0x7f0000000080)) (async) r3 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a8, 0x308, 0x180, 0x180, 0x0, 0x180, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d6]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10, 'syz1\x00', {0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'wlan1\x00', 'batadv0\x00', {}, {}, 0x11, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x5}}, @common=@ah={{0x30}, {[0x3, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@addrtype={{0x30}, {0xa02, 0x282, 0x1, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf24, 0x8, @ipv6=@loopback, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) (async) shutdown(r2, 0x1) (async) sendmsg(r2, &(0x7f0000001780)={&(0x7f0000000680)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="9f3d969ac76ba5f65f209cd61c6c21ac339909c7a7f593ea9e4bcc3f45918be5339e2791128a0939bdf46e89fa7914f455c05d7f2a3947080c4a26d63c2fcaf7", 0x40}], 0x2}, 0x4000000) (async) sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f00000017c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001800)="30b6e3f902873a09f364ba1bcb350250c2a15d466347457be243a123ef74a402b4c25c4c2f941d43f596ee50374c99b717a6dccfb2179d87de824211bc2c567332e3a1532cc12b06df62bb6bc9262af7cf6e06c13bc3db661ad73ceed7139928353fd1f011d5f82b8834a56ed17bd1ae997735dd5713dd9ab9410c22065302c7fe9dc8a88654a0b1d94bfdd067f95a5e", 0x90}, {&(0x7f00000018c0)="1b5a1db9ce3170888f25173d8c795e2f12e9d1d8bf2eb47b60db13f65b0c4f7a133efc39d10e8aceee1f9e0aad3554d711219ca9aaf681db8f1cd181e08d69780b13dd7fa509f8bc7d72f9fd00f4171379b2b566bd819a9d37b74af7a0bd00741412e46d0dc0f685288a9ee45a511331e653501049f93dcd0bb63088c671bfab5ff420c1a65924f5c1d17e0af34720fdd441ad7a092ded749b552505fac1ed704a335bf39787af", 0xa7}, {&(0x7f0000001980)="96f555e4d7939be1ced14de2e51d2ad4faefe3ca5a099a91f33625bce5a632998980987ba83045236d91cabdc12290bbf986cf11f9b6cff073d42cecdbc990dc9308e6f0b938bd2116cd0d3b152513c77b6d8c2192b67abcc9b38d4e03b43fed8c901fc58c89f8c3f593870b12c319350dba99dae897c219725f7b91a64c160457b0569c40ddd55730028be21bb8915428b0e769cecc649374a6b1f66727def63b316cf6cbf6a98aee231acf679435cafd45bd674f57480cdd6c1a73bb438ec41fd6472e2e411351a87f347865ede448277400c673bf64805c17b73f8c276b5683", 0xe1}], 0x3, &(0x7f0000001ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010100}}}, @ip_retopts={{0xec, 0x0, 0x7, {[@cipso={0x86, 0x64, 0xffffffffffffffff, [{0x2, 0xc, "412a8be5f91ad877f359"}, {0x0, 0xe, "7217e32b9989a5d725509d00"}, {0x6, 0x2}, {0x5, 0xd, "0171679bda423ad8ef948d"}, {0x72eddce8fdbc6132, 0xc, "110460fc3a926d46e564"}, {0x6, 0xe, "dc764a1f8ccd89ead5be9eab"}, {0x5, 0x12, "a06fc2e6e33be7cf92f00a6f7d651884"}, {0x0, 0x9, "5cad5e48009b2d"}]}, @generic={0x86, 0xf, "119ee8b037141d91d6054acdd2"}, @ssrr={0x89, 0x27, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @broadcast, @rand_addr=0x64010101, @empty, @multicast2, @empty, @private=0xa010101]}, @ssrr={0x89, 0x7, 0xc, [@local]}, @noop, @generic={0x94, 0x2}, @timestamp={0x44, 0x8, 0x4a, 0x0, 0x8, [0xff]}, @lsrr={0x83, 0x23, 0xf4, [@broadcast, @local, @local, @private=0xa010101, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x82, 0xa, "e1acadcbdd1cb942"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x8d, [@loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @empty, @multicast2, @private=0xa010102, @multicast1, @loopback, @private=0xa010102]}, @cipso={0x86, 0x47, 0x1, [{0x1, 0xf, "79fd5c0d97d2cc2ff61f686bb9"}, {0x7, 0x3, "dc"}, {0x0, 0x10, "d7720d8b78973c0806e5b1ff07bf"}, {0x7, 0x9, "46e98f7cc91c6c"}, {0x2, 0x8, "b64206d1f102"}, {0x0, 0xe, "413bab331c6cc17583b13325"}]}, @generic={0xf, 0x2}, @rr={0x7, 0xf, 0xe1, [@loopback, @loopback, @local]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0xf, "6e4559c92d7993a7de98902460"}, @ssrr={0x89, 0xf, 0x5, [@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @broadcast]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@rr={0x7, 0x13, 0x9, [@multicast1, @multicast1, @private=0xa010102, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0x1c, 0x1, 0x6, [{@empty, 0x2}, {@broadcast, 0xdb}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x17e3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x80000000}, {@local, 0x6}]}, @timestamp={0x44, 0x2c, 0x6f, 0x0, 0x6, [0x2, 0x9, 0x8, 0xf5, 0x8, 0xec6, 0x10000, 0x4, 0x3, 0x8000]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x6, 0xa, "7c9edeea41a867ce"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x42}}}}], 0x2c8}, 0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e00)) (async) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000001e40), &(0x7f0000001e80)=0x4) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ec0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002f80)={r4, &(0x7f0000001f40)="da5a37f1", &(0x7f0000001f80)=""/4096}, 0x20) (async) r5 = socket$netlink(0x10, 0x3, 0xa) (async) bind$packet(r2, &(0x7f0000002fc0)={0x11, 0xd, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000003000), 0xffffffffffffffff) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000003040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000003080)={0x1, 'sit0\x00', 0x1}, 0x18) (async) r6 = accept4$rose(r0, &(0x7f00000030c0)=@short={0xb, @remote, @bcast, 0x1, @netrom}, &(0x7f0000003100)=0x1c, 0x800) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000003140), &(0x7f00000031c0)=0x68) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003380)={r4, &(0x7f0000003200)="26d40a38d57aa7e58d5bc49aa02e9a725948e17854bb593f9a2a695c276f5200c2a719663d5ea82e72c2b3d5927896f27c9a1a792440a1abdb9037b0839919fb2559020bd09569605796e3be21b7c1e3b64149d012fd42084232e40752f9897108a9d070e21ed510d6daa53815948f0ca14927ec10d5373eeac2a35b0eda27d083e15a8073b15fb304", &(0x7f00000032c0)=""/149, 0x4}, 0x20) (async) r7 = socket(0x2a, 0x2, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000033c0)={0x0, 0x101, 0x10}, &(0x7f0000003400)=0xc) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000003440)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x4b3c, 0x1, 0x3, 0x8, 0x2, 0x0, 0x8}, 0x9c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003540)={'batadv0\x00', 0x0}) (async) r11 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)=@dellinkprop={0x68, 0x6d, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x10a0, 0x64400}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x34156}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NET_NS_FD={0x8, 0x1c, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) pipe(&(0x7f0000003680)={0xffffffffffffffff}) openat$cgroup_ro(r12, &(0x7f00000036c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004800)={0xffffffffffffffff, &(0x7f0000003700)="bc35a7a25f45cb04151848e50f9a6562297eef894772622f8f5501347eee053deb115d66f69d0a2d9aed3f0249ce94e67ccc7e572218742c24db4bde2253d9592612eb849ae5c302f1238a5109a700c46bcaf8a1af464912699a477e787fe1cbb5b2bfeca582e4b39cf42e929777861976a2320d778cb7f926de9f485bdaddd81c278120956a387ab72e8213769eca83c1c66fea38bb82b51c0b62586ab544894056a4edd817a42dc8542b3d2a8906e7f9d4a128daf381a6bd5cf9dcb32a28ea032747551babb5a19e4c3df438c0cdf75dcd42aec7f0c6fe73c5c2589454f240783fd8e88f2df0e34bfe8d6434dba3a43bd09d2ffbda7922dc9e3d02009937acc3e4acdccc17fa1ffda104deb3f97a2ea3b7a52c20d7e831703af0bd598025199017867bc4839390a6706cc1f4c72b59efd1db5425708d5d8d3a04e8ddc195a6c5f9f4de8058e4b1f463ec8da91a6658c84a5e8151ddfcc8d3a207744e3fd8d5a5eba77884b3e0f0a2793649b685cbfccef331e6ad16209c73af9e2d673f5045f91b09d4d8b88d13f26abc101728b57865d5e340586a1372d355c4872fbf89a15e52f41460fc38abeeb64bbe3d1a4764211d0a7b4965df8e238671fadeb7a3e47f661d936c7ad17fccb1fc7a7bf11ce50ffc4c5f8cd2bbc9bd7463339049bfe190b58d673e0071b7e6a6f0d6f242041234e37ed691979c4203b894ac0ac43e948842f3d0ceeb558c4ca6532523a76a7aecc605cf1f660c76ec0fbcef9cd37ba2383ce906e57c028707b9f90c71af36c0956bcd8c9b24ee389c97f3e8b19484ff62036fd137fd24cba8040c1e1bdbbe834e4bc34e60a2003eb8a21a4de4a87f228e6fecbec61de211e01b88170fb3a202549474eeeae7e36f45a4adb438bbc3b60d2b592783b844ba89b3b1e7fcfb25cc1177722ced4ce5b2ef3e49df64f081db8b51597d251b6c05955ea7cd2f3084f56b56f4a35aa90fa2453635c43e1ee5fc17e10aaffe2d187b835119087164d11987b174951f2374f75d6cf9585558ca390d901ce1c9c54c73f73f87dad25bcd80a8009fc523c0b68dc349fe5b8c36cc4468d8d057ee36c464962ef5bf3511ab38682a6acec44f9113e9458206504b926da1341b207bd408aac22903f4af6acbd96f7aebb1f6ac7a754cc9128e6163f0ae006d545cb98b07393729fb28c45439bfcf00336aabb1200169e5060db753888167fa278f655ac2fee0bd80cd465fd623d9339b0c95af4f534cd1d8e19734cd321adb1039727e778adfb265a17c6315b287e9807f981115d2f58d9b8ea991a2eac60556f284d1fed916dbcbf2f9ca494926ead2ab5b22e43fa89dd2f60d07062ae012ce78573a99b21b7b7fec49091bb3f048c7b7c61ec98b2a217f8048c2aaca3491864c4dad3767621a7c10800ad12f0ff0d0754cdd3720c8bcc7b79a5bfc2bd39c14ffc15b6ba4440f083c76d49aee62735419bccdc4e7eb0729d376d9f62a9f85bed74895cf5ec5e6c0fdf86d31a169ed93a7f3369ec51e265c943e6e4b5c8efce22ab16864611c3da004d0657525917e44e6f355cd0bf2cbd605ed02e8c102c3d00155013e6ca7bc0b29b421cd74476dc947f672d0ae0d9cac1da1c2020e60c33a81899736560c45dd4a91cef5639ee767ab5d60b61321d39b1636016277b5f6bbb77dbdddbdd601abb76a6714f0368a54b7948510b67b3028b09a78ecd7b912a898c83d34c55b30b4e1aaaf0a5abe5501b95f3ba9df56c930b7a70dc029df4a704b700ad9533edc097b7c6d8ebb42a6bd7399325f26a5abfae10102e65d80686ef691b9e2cc7e708af6e71e506782c7406fa9d1feb1db7ad3465b5bd0b2cf6c225247d448473904109b3847f27ddb131adefbbd8c2ccabe3e1556c2a73e3186cf5d6d3faa9605a6012ef00beff35c2ec205eb67f527ab1b982d3a9daadefe62d5321cb8b9643ae88b0c17983b51ec6d919451e71527b22ac35b75478e6ea9628e441bfe1c93d811915c876c9b72894b74302e040d83201fd33fad817cf5d1f2442036659aee3d1cfb5f6b6fc13277e96167699dbe46a3dd0e630af2e87ceb5d1aba115783f073fbfd6f10709cc60b551e3e481890809633124c1677e22436ce8e7337d6c58992bb6bac1bbdbf48125fc9085d85dccee0da6ab20d1e5855c198984244970c7502719df3ab4a4c0c485314ca1876f88a69506798feee48307a504098a94383192d5a661d4f760fc1fb9724e97111607369b984585de211270f6160688b3224ee4747cfbf2028f1b62f02fb1b3aa45f7352cc5d9b89ec37c390702d8361570c3a36b3570e01d58b0d51527c92ffe0a0a46c63bc01e50dc2dad7aa44da292045da0d7328bbc9a6e8f85b3d0a817bbac33bb934a6cfcbd3c82a6f6b76259892662ac0c023a4a523a70e7415d8387504708cba1422e8615431c3f648eab769a70a6503ae06c384d7672fe9b5a5102ce205918d20199e31137ffc8945d7a8d57e6f9dc5747da31a0cdb810b9d7aecd3eeeae75c2dd2a1ae7e34753fce1746c63a43b3d08c91d419210f8edf164f2dc7544e87a62b22386c9822061ff1ebdc074c3b53bb1d321147084907857b0a9fd35322d9e35e120d2a109fef0b6be394f34b649f4f723501c6ec9e54cdccd5fa9bea59ca9a4228d0c20786721f9df88dd51d71dde3dcc345bada54b98bd1e0d7555f08e7b409f9b36ad1875b7a74a5c4674828daa97dfff449d88a9eedf1884097b64d0f994c897f7d70e5197e2b9a77c12550c9e1ba6396dbbbc624583171618d8eb9114559ed5e414f02a5714948f5f02f69ab74452039819da61d3088dc3b9e7ecebd90c70a7c0a1345109177f9c00e4975dda31e7da00acd850848fd7605ace3018fbc99b32b259702ac7450beb0516ddc2804588c3e116fb1ac5ea03580e48480e690dff09bc7019dfbecf9d061844b45c283a39a33a9085e2d5b3e2f34f598cdd287cd6a49892a2d7fd614ee427699dcb5954e0a2dcae958b24fd474401ad01a4579ba2542201e415fec660f1991a7605b3c3735d31b0e14cec533681103cda8da2e4a75c233020bce0acb698a1ad87936421a2749297a9283f39e5d17d5c7bc92932dd65cd65bff9a004e5a1373bca59557690ba9a76f26141c7a47d51b2098a3953f56ed82137e579586b5d3b89ac8f0c49d68ee34cd5d54f8eddc47d690d4d60f3047064644777dc87562065ce359dc30b882d322f30ba14d9cf9757bd1842f1249ee4874d3f7f573be230e98120dc250e03e594fcca576c24d8834b5c2f9963c2641ee934332a7f449579f27efe9849597a374732e3187b09109fc438adcd3e39c42cc462905e87233e605b2643692460570845664ac391d5000c230618139e268f0b8acff5e9780661b3a7a5d83ead20b8f3e642fad20753c94d76ee02e06865e70a26c3d1533bfb1106f5d3f2163f8615cbdca7c0a904a146b3ddd3db15c9455285159c96a9eeed633516239670c05c82f9d4974afcd66d548f6fecc863fd77f3acdb12ee145b214071cf38cfe7c80598410c7d7cc0928755d0a32c1827cfabe50d3c0bc28d7c99db14390fe6a7d530e2490dfd1e2656e50b6fabda9f3f328b9370044080d89cce813ba9bcb9b66ea76dfca033bf75027e520b19d5223521b3e3f80a8527117c00a4279641e6d6edc5d60c28b3960632fd184f61ef6ac794ba013ae88b83fc3ffaa521745b9687ff2603d4d99cc314de6e93992e8b4f4f32cfa31951b58112089dc01512f0d8985916ea601285dacbd37b6e700befb4414cac2a65640022a9a19469d1822b3a2b2aa21921aabca6a7171efe505082a11a93062abe5e7f8fbe0a53956e1d7baf247ab9f83f23bb17cb97263164d227d7ee1c62a0b4fbb8ad49c3476efda9d5f28c2770c5355dcc5fca7781a250bea9b672dc7f51bb713d2a6d7d492ff78e2acf8c59721087a4e533f1c7627b5870b4d91feab2a6bfbebde6be3b3c96429b7623e4a5c3363df6f6b1c290413be2fdb346e30a6416362dd82928dd6ddb8d94c6542e8f0842c734d06a669059c52180a39f47c9e2363a70602b628d992d8e1d977d2dc32cd7436a193598d5ff81fcde9cae97bc9e0a9b12091c2a50b0af7d1a5f57644d36b538062c1ced36d1210b61429a4c6acd25c39445a04a1068f550fefa87fd9ab6d3719857289da2b2342e1a3ff87854eecedd943b0b3dda458f4976a3ebd58aea1e7014a94311931a5fb874258f4d4af9b582ff29a49fd208e9e91aba66750ec55696f7f69aa4ad8c84d5dbacc65af21e8afbf92f1f9bc58888a834a0bfe608e23b2e6331d63f0ec3fd0ddb694098c1abf736144b8f12ef2a97818c0725996c6dac7b4709bacd2b9fcbf62f63ea215c99601150d51b0cf3d0c2fb1bcd9b1ee8a2a512b3aaa8bbb0234e7eb9acee23ca74057ed2f76dd7007b6e0e31775b6488ac3b44278e96825798f8d958acd6bfa9669ceb83eae1d267673b2bb998431d4f1a9aaadec18e2e98a2bbb9523c947928212ebfcd3d3d88fdeaf8b74d5829781230c94e873a5be34728b8574059c22ca7abf1cbfd2c53588857e3a889b0c7f79e68b3a87a574fd99c6ddeadc4c5e31ea53df3703595bb4baf532f72b95ccde8543559d808c9e5780b4078e5d8defba321293acaa72a903c49076e170115d7e10d0b3025a8afd626bab3d8e92ae5cb42ec239099ade2ffd092a4321a898a8dbb52b9db1ae13c071649109f79b953e5420c0d229833e4537e048a8d75dc21e0019221decdddb0af829e96317194c230778e3a5e265fee081604e02adca989393795eafbba5416e925397bd3eeb30a8736272f6bfa021e4cc1befddb844f8c818c72efa483e235bd7213934a28eef07b5d715550b882f7ea5b8c6430408fa66b13816af8639027a3ddd2b30c895adcafe36a486b39aea29ce97c64b6c5febd8795498eef5bd522c529481a54c24538588485a8f3c5a19681a09a3beaf90d1c2a20555a76099c4282e21cd05e90c543a928a57a08fe1da903f5e100a177e060cc966a049ad321cfb842fe7d358856f99e3cdfdbe8c460b3ddb06c39fd5f8d16cb563cfaa3b532e0f482faf26ca64008c7d8a5084cda4495cbe92f3309aa241fd8f40752a42a9ece98f0fa89606912a27ce2202d2dc7fced4c651b274e762254a83969c958b158261d16da01ee0635fa11fae38d110ff5e329c85fd10d5fe5e893e3a3d3aaa303bceb78518ae40ae829adee25e2f0f568fd42a152d69e55e68a1f6400267814532bb3aa7edae2e9fd6dda258796e9cb5b0e0ea45940b13df0b641389fa59c92c83534f472653e0f62d57d30fbe66a6346c7052c9083460e5a9845a79f1053d2872fb51a4355f53d2591955241841a3336d9db70cd1587abf8eecbbb596ec88028698c5b2e9967e1d1a28d74325bc097ff752840aae225cf391ee12ca58374632bb09d6a2e4ae7c21560356084306ad95aee2ca3d61a6526030de12c1e0ed045942a1dd729a818d2791fc2fa2d322d4b452f0ae2085890618efa9389fd6052d667c303f728f410795beda7946d0a62f6a45806bfbb0c1c6790c3b564b4cea8024c0d0972e8ef4ab6a3db2a9ff0c67bde97572ae002eef0c02cd83b401ff4a0cea6088fe1479458332826f1adae5e4cc7f26b41c88aa9a79c6336a5700083414dd2343348102d3f744887ec7867fbaf9eb11506e3e25de98d8bf451e020907a4ca8f43928cfdaac250ed5f5c70cffd8d6ca717b418e73a674e390b516cd39e7aa6adaa7be33d99ee288a8c23603c4a87732c552f8b", &(0x7f0000004700)=""/245}, 0x20) 1.184196845s ago: executing program 4 (id=714): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x4c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5e}]}, 0x4c}}, 0x0) 1.130576864s ago: executing program 2 (id=715): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x40140, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc4c043, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000fa000000fa00000003000000000000000000000300000000050000000100000005000000090000000700000f03000000030000000180000009000000040000000c0000000004000001000000b40700000600000004000000ffff0000001000000300000004000000070000000500000009000000040000000300000000100000070000001d5da2050000000600000f030000000500000003000000090000000400000040000000000200000300000000000000b100000002000000090000000100008003000000080000000300000004000000000200000300000044c046080000000000000a010000000e0000000000000c010000000b0000000000000e010000000000000000000061006e19209d92315616a975ea9cd93fdafd6e2feed8d8456199d166e0d1be0045583d5cb472d21b5e591104c558883566eda9941d75d9108b0352cdbea9fde348e8b402cb0590b433f7e8bdd5e16b87247d35d62ea2d867b50661fbdbfb4a43ecad48e71ce1938b73089970936ad55098e85bb53c20811b355a63b29701955c20dc18e3d814650e0c6a887c6f9ef10085a241e5666b023b05a9f6e8a6985d9a035849a68776a3e6b4c04a120a46d9b72df5cce1b50a9dcef7e0d9f4ba9ac0d7e5964e557d674f11fe7d3013fb4accdb4b517a73c70073a264"], &(0x7f0000000080)=""/120, 0x117, 0x78, 0x0, 0x7b2, 0x10000, @value}, 0x28) (async) close(r0) 1.129658061s ago: executing program 3 (id=716): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x101, 0xc1f, 0x3, 0x1}, 0x10) 977.217452ms ago: executing program 3 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x67}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netrom(0xffffffffffffffff, &(0x7f0000000700)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300000000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r10], 0x58}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3a7d, 0x3, 0x6, 0x8, r0, 0x1, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6, @void, @value, @void, @value}, 0x50) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r9, @ANYRES8=r6, @ANYRESDEC, @ANYRESOCT=r7, @ANYRES8=r10], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000d80)={0x208, r6, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x3, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x0, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcf13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x35b2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x208}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x70, r13, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffff403, 0x41}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000670000f208000300", @ANYRES32=r11, @ANYBLOB="0800c302000000000800c400010000001200c5"], 0x194}}, 0x0) 969.89245ms ago: executing program 0 (id=718): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x48, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x38, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04ab"]}]}, 0x48}], 0x1}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a0000ffffffffffffff80000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 888.464378ms ago: executing program 4 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000429bd7000fddbdf250100000008000100000000000c00060000000000000000000c000600020000000000000008000100030000000c000600020000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00060003000000030000000c0006b70003006ccb958f55782b171600010000000100000008000100020000885dfd2923c7fb0590ec3504e64ff33c58099e239f22b294ca9d0e62f88f07753219dd61e1dc1b4bacc58d2ace76c2e60e99fb2a4beaf258ec6ea9cae67ce9d9e204fc35b3f8b339536c5d112c4a01dd025c5a097929210c1eb790e9eb06878815a6a9f64e38140c0fe6b0c7585e82de8d190e39a916eb85b19e6380f2ebeab025c14f232ad6c483"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x50, r9, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) pselect6(0x0, 0x0, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x50}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x2, r12, 0x1, 0xe4}, 0x14) 836.530078ms ago: executing program 0 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x4000010) socket(0x26, 0x4, 0x80000001) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="553e7236f50e6f81d5de17fe17661763b2c4e0719841b8a8d86bc002b29c1e7a674de43f03e665e5cb1500a5ee2894c5077793bcd8f8b9ab982e3b73daf15463bb0601ea5c1b87ee55b10cad57ff5c8ca34fe16010684aa05270e78af0fd618593ad79b64e77579997cdb637bd60d458f10dd2975e129917d73d653bc3c95098ab2468797600e9b9f91cc7f6e63e8b3eccbcbb197e5d", @ANYRES16=r0, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) 645.477699ms ago: executing program 3 (id=721): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x9, 0x7fff, 0x2, 0x513e}, 0x8) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 596.55572ms ago: executing program 2 (id=722): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x1}}]}}, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) listen(0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) 594.286379ms ago: executing program 0 (id=723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x7ff, 0x2000000}, 0x0, 0x9, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) 511.71877ms ago: executing program 0 (id=724): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="e209a1fe3802ae0d2d19a04a79ed72a74efaa8a40d3518fc17b9bc344e60e0f7001b5c557cfd3cf12806ad65a85312f0d29047a6f35e7c9825547b2a073ab816f5e5e3949218447edccf1e9c731490dcbc6ca2312fbc63ae9736dc53a86d4d55cb624d4afe7e12449e297ec55d8c80f766206b895ec07425d65b36afa8c0aed7306132454dbc5fec9a3772bf2d5ae25a6b68aae7e26b3f9c549d1ea6d2e0cb7758b62643608fdd682db1f1c72ea8", 0xae}, {&(0x7f0000000240)="39da824f61aab1a7ca8f1910056d2d88cbb9f4424b7af9480f019123dbad585df6b6ff32", 0x24}, {&(0x7f0000000280)="279f90eac652c29d763d1bd59a3bd7a9f44baf0fbfd631ada8cb0e6bc3a8", 0x1e}, {&(0x7f00000002c0)="b347e24b28eb9a510dde66b5ddaf575e416b5a32abd5a39520ef5a195c7407d6f8a4df3cafae299c12359878e5df707b", 0x30}, {&(0x7f0000000300)="c513889a9000bef72ac59b901722173bac75d4", 0x13}, {&(0x7f0000000340)="e29c56d4b1e802f2c01a7a1db3bb63878483d467b10683ee3fad0aec61780c90ec72678462ac5af9aeef06494782b2dbdf3c72587f21b05598d98a414a4f3543f15658cc0faa12c5470f91a46dd3e22a9b8b5d64ae3776748caf2286708ee5d3c833a7493b010e02b8", 0x69}, {&(0x7f00000003c0)="0a8a7b71592aa7130a12489b99a867aeba3c94412ee308fd8592a7f81e0dad92a8142f74cc5ff30a119e0915d94c732cb60908cf2d94af6dc07dcbcb81dfdd35faa62c6f832ff5633b0df79bc7542dab4fa7bc291b50156466841de8fb87fda515c59ba639a8ec9d9fb1a2ebf9a835df49e157c2a322", 0x76}], 0x7}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000500)="2c178d4f6d5f3d", 0x7}, {&(0x7f0000000540)="1a82e27cd8d279826404443899cb96c40585bd868375df202439b99a7c93af72b534f9a77f807965162efd50e741479e0e315b3aaf49a8275dbb412d9c311cdf7deae5b5d46534ff8ef04e4a49bb63b8c6be2da4a1e38b069411ffc3b3632cfa8805f8f00bf7d238eb5661e90ccbd5edc9bb58a9ba58a83bc760f735e7a6215cffca8da37c225ceddda7c7ce5b69d87561b91a1c52f6acd57cd406a655862272b3", 0xa1}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000700)="6c21612bf78d16e36cf63be75e593bf01817d36531c9ca3329c3b67d5af7c9e515055792c9a4b6dc7db60f7ab4683752bd066ebbaf9e357f02115db38d860606a0fd9aeff0493aeb407505a37143bee315b48150c9978799874859e193ee91bdd4b1c0cf352e70e891daf835f4afeb28331fdce66c40ab10735667286dd65fddd11cb496f41639ef9423", 0x8a}, {&(0x7f00000007c0)="cadb5a6a4e73fe3334cbe13cf8b1c226df0135bcf40c583a1a17e95845cf39f16c280257ed1aacf8a51522619d09a495198ce03fcc2c04e1043794c9246ffad0160b35c98bb3ffdc987fd49d25f0e0a3ecfdcb", 0x53}, {&(0x7f0000000840)="e42b43ec782d8ce22840dcfad10365b915ce88699c155a4f330bf7c0e827c411833781279fe712c13e91b9625691013261efaaf042def5fb34d769500e29036d354e3e94a020f37e0e27144f7221dc654fc8b14bd7397c819c1e318b93409bad35890a070ef464cb77d0e07cb2db1dd2a19646d05c5ef32d15a3604cd3feff27d5107245d9f6dafb3da066bafb7bbd14b6cbd617e4c9288663e7b5c6fa77e021e873d71349a2c8f0e21dd56d489d7599d01ad64edfc7a3e52fd4b914c45adb3ad58b2690a4b7ee963c18d6bc172e37fc8e787befc8c63d241bbe95825fe2b65db542437dc650e21e4164c249bd9b2e8b62f4ef41994b7e830e", 0xf9}, {&(0x7f0000000940)="0d8e8e2a68243eaf9645", 0xa}], 0x7, &(0x7f0000000b40)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x37, 0x0, [@private2]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x3a}}}], 0x40}}], 0x3, 0x8048) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000240)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x4e23, 0xfffe, 0x0, 0x80, 0x20}, {0x0, 0x0, 0xddcf, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000200)="ad6a80dd1fc64f2f4821f3866c4e3b83cb97aadeaa50a20d2f9d06c4b4fbbc2dd00eefa4ced9027a216255b7a298f713fe541c00544d", 0x36, 0x4000, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 457.164138ms ago: executing program 3 (id=725): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x6c, r4, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c804}, 0x800) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @generic={0x4, 0x5, 0x3, 0x1, 0x3ff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x3, 0x3, 0x1, 0x8, 0x1, 0x50, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000003c0)={'vlan0\x00', @local}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r9, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000", @ANYRES32, @ANYRESDEC], 0x60}}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_rxfh_indir={0x38}}) accept4(r11, 0x0, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x3f, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 400.652278ms ago: executing program 0 (id=726): r0 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000142000a82dbddb4f5cb4f4bc7577698a148ccbbccafdf2479178192b5a844e5c4535ff296ee8d74ba04c824ad60826a0cdcce4e5a0ba0c817aa4da83cfa61b0294214165b818acef08262ac6d3af9a6c8ce70707d379a83af662c15f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x7ff9, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x19, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080000000000000000004400000004002400"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x804) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x1011, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @random="38c3de091d8e", @void, {@llc={0x4, {@llc={0xaa, 0x0, "e0", "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"}}}}}, &(0x7f0000000100)={0x1, 0x3, [0xed7, 0x1dd, 0xe2d, 0x144]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r11) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r11) 0s ago: executing program 4 (id=727): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x48, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x38, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04ab"]}]}, 0x48}], 0x1}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYRES16=r2, @ANYRESOCT=r0], 0xe0}}, 0x4040081) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 58.293331][ T5829] cgroup: Unknown subsys name 'net' [ 58.401206][ T5829] cgroup: Unknown subsys name 'cpuset' [ 58.409289][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.664486][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.645844][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.656673][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.669416][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.675553][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.679280][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.688700][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.693177][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.706153][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.715264][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.723907][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.725768][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.731626][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.746256][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.746832][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.761165][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.761923][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.770111][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.782612][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.790127][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.799123][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.800250][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.806510][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.821142][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.828686][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.828858][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.837045][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.844924][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.850621][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.885377][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.893312][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.257200][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 62.334549][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 62.345539][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 62.456601][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.466015][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.474556][ T5840] bridge_slave_0: entered allmulticast mode [ 62.482186][ T5840] bridge_slave_0: entered promiscuous mode [ 62.494071][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.501447][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.508861][ T5840] bridge_slave_1: entered allmulticast mode [ 62.515459][ T5840] bridge_slave_1: entered promiscuous mode [ 62.536831][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 62.566874][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.574103][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.581757][ T5852] bridge_slave_0: entered allmulticast mode [ 62.589048][ T5852] bridge_slave_0: entered promiscuous mode [ 62.645638][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.652943][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.661203][ T5852] bridge_slave_1: entered allmulticast mode [ 62.668364][ T5852] bridge_slave_1: entered promiscuous mode [ 62.687151][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.736146][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.760320][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.773029][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.813306][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.820680][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.828261][ T5839] bridge_slave_0: entered allmulticast mode [ 62.834924][ T5839] bridge_slave_0: entered promiscuous mode [ 62.873596][ T5840] team0: Port device team_slave_0 added [ 62.880307][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.887491][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.895210][ T5839] bridge_slave_1: entered allmulticast mode [ 62.902012][ T5839] bridge_slave_1: entered promiscuous mode [ 62.913493][ T5852] team0: Port device team_slave_0 added [ 62.929101][ T5840] team0: Port device team_slave_1 added [ 62.935094][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.942409][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.949926][ T5841] bridge_slave_0: entered allmulticast mode [ 62.956476][ T5841] bridge_slave_0: entered promiscuous mode [ 62.970513][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 62.983136][ T5852] team0: Port device team_slave_1 added [ 62.995660][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.003577][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.011141][ T5841] bridge_slave_1: entered allmulticast mode [ 63.017806][ T5841] bridge_slave_1: entered promiscuous mode [ 63.058230][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.080370][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.087360][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.113702][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.136994][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.162522][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.172769][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.198988][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.210523][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.217907][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.244474][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.257904][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.284645][ T5839] team0: Port device team_slave_0 added [ 63.294120][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.301372][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.327398][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.358999][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.378195][ T5839] team0: Port device team_slave_1 added [ 63.414512][ T5852] hsr_slave_0: entered promiscuous mode [ 63.421162][ T5852] hsr_slave_1: entered promiscuous mode [ 63.466398][ T5840] hsr_slave_0: entered promiscuous mode [ 63.472930][ T5840] hsr_slave_1: entered promiscuous mode [ 63.482318][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.490359][ T5840] Cannot create hsr debugfs directory [ 63.502196][ T5841] team0: Port device team_slave_0 added [ 63.539720][ T5841] team0: Port device team_slave_1 added [ 63.552732][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.560047][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.586321][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.598821][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.605796][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.631958][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.643440][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.654038][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.661535][ T5847] bridge_slave_0: entered allmulticast mode [ 63.668356][ T5847] bridge_slave_0: entered promiscuous mode [ 63.710362][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.717503][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.725450][ T5847] bridge_slave_1: entered allmulticast mode [ 63.732806][ T5847] bridge_slave_1: entered promiscuous mode [ 63.777292][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.784466][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.811384][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.811393][ T5850] Bluetooth: hci1: command tx timeout [ 63.823844][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.834819][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.860843][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.890379][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.904882][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.956905][ T5839] hsr_slave_0: entered promiscuous mode [ 63.963498][ T5850] Bluetooth: hci2: command tx timeout [ 63.963509][ T5849] Bluetooth: hci0: command tx timeout [ 63.968148][ T5849] Bluetooth: hci3: command tx timeout [ 63.970009][ T5850] Bluetooth: hci4: command tx timeout [ 63.977991][ T5839] hsr_slave_1: entered promiscuous mode [ 63.993686][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.001564][ T5839] Cannot create hsr debugfs directory [ 64.022290][ T5847] team0: Port device team_slave_0 added [ 64.071573][ T5847] team0: Port device team_slave_1 added [ 64.091470][ T5841] hsr_slave_0: entered promiscuous mode [ 64.098967][ T5841] hsr_slave_1: entered promiscuous mode [ 64.105110][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.113245][ T5841] Cannot create hsr debugfs directory [ 64.176479][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.184632][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.211326][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.223937][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.231251][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.257261][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.353632][ T5847] hsr_slave_0: entered promiscuous mode [ 64.360327][ T5847] hsr_slave_1: entered promiscuous mode [ 64.366367][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.374075][ T5847] Cannot create hsr debugfs directory [ 64.472393][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.499687][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.514531][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.542170][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.605840][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.631580][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.656087][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.670766][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.687428][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.710807][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.725470][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.759748][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.789622][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.816258][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.831574][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.859645][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.933648][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.946767][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.971249][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.998216][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.020647][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.082262][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.093906][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.128053][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.137756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.145746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.165341][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.183548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.190723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.200948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.208615][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.233596][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.240801][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.256471][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.292439][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.299641][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.312463][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.319649][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.383456][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.407011][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.418188][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.465040][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.491105][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.498329][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.546554][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.553832][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.611485][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.691083][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.712641][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.756986][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.764240][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.776826][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.784063][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.803819][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.875311][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.878879][ T5850] Bluetooth: hci1: command tx timeout [ 65.913919][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.009312][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.038643][ T5850] Bluetooth: hci3: command tx timeout [ 66.042760][ T5854] Bluetooth: hci2: command tx timeout [ 66.044103][ T5850] Bluetooth: hci0: command tx timeout [ 66.049641][ T5854] Bluetooth: hci4: command tx timeout [ 66.076879][ T5852] veth0_vlan: entered promiscuous mode [ 66.120500][ T5852] veth1_vlan: entered promiscuous mode [ 66.185781][ T5839] veth0_vlan: entered promiscuous mode [ 66.236759][ T5852] veth0_macvtap: entered promiscuous mode [ 66.250849][ T5852] veth1_macvtap: entered promiscuous mode [ 66.269969][ T5839] veth1_vlan: entered promiscuous mode [ 66.284449][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.309990][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.365771][ T5839] veth0_macvtap: entered promiscuous mode [ 66.379727][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.405424][ T5839] veth1_macvtap: entered promiscuous mode [ 66.415907][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.430970][ T5847] veth0_vlan: entered promiscuous mode [ 66.459782][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.470373][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479662][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.490181][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.502207][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.513273][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.526236][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.534384][ T5847] veth1_vlan: entered promiscuous mode [ 66.555425][ T5840] veth0_vlan: entered promiscuous mode [ 66.576173][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.588907][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.603685][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.635012][ T5840] veth1_vlan: entered promiscuous mode [ 66.644243][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.654374][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.666246][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.675450][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.724282][ T5841] veth0_vlan: entered promiscuous mode [ 66.800946][ T5847] veth0_macvtap: entered promiscuous mode [ 66.815427][ T5840] veth0_macvtap: entered promiscuous mode [ 66.828192][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.836209][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.849822][ T5841] veth1_vlan: entered promiscuous mode [ 66.863213][ T5847] veth1_macvtap: entered promiscuous mode [ 66.878930][ T5840] veth1_macvtap: entered promiscuous mode [ 66.934302][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.945628][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.952172][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.953823][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.968825][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.981195][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993256][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.003386][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.004528][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.022777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.029951][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.042187][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.054131][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.064957][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.118801][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.134607][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.143849][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.153156][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.164876][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.183166][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.184311][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.209175][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.219955][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.230014][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.241342][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.252402][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.264682][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.276090][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.286076][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.296705][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.306719][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.317364][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.328892][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.352445][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.371363][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.382450][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.393281][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.403708][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.424228][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.477192][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.496594][ T5923] Zero length message leads to an empty skb [ 67.516655][ T5841] veth0_macvtap: entered promiscuous mode [ 67.540048][ T5841] veth1_macvtap: entered promiscuous mode [ 67.628878][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.643832][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.682433][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.695140][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.705678][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.717298][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.729482][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.740270][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.751245][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762730][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.773699][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.931004][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.946224][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.958986][ T5850] Bluetooth: hci1: command tx timeout [ 67.959942][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.975742][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.985627][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.996708][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.006617][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.018368][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.045434][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.108114][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.116016][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.118380][ T5850] Bluetooth: hci0: command tx timeout [ 68.128968][ T5850] Bluetooth: hci4: command tx timeout [ 68.134414][ T5850] Bluetooth: hci2: command tx timeout [ 68.138360][ T5849] Bluetooth: hci3: command tx timeout [ 68.156286][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.166293][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175659][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.184606][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.193816][ T5937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 68.262258][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.308546][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.417104][ T5942] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 68.438780][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.443398][ T5942] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.455637][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.473667][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.500967][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.558713][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.593999][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.628196][ T5942] veth0_vlan: entered allmulticast mode [ 68.732553][ T5947] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 68.891601][ T5942] veth0_vlan: left promiscuous mode [ 68.949477][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.983543][ T5942] veth0_vlan: entered promiscuous mode [ 69.041789][ T5956] gre0: entered promiscuous mode [ 69.063270][ T5956] gre0: entered allmulticast mode [ 69.145817][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 69.180042][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.227678][ T5952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.270858][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.286433][ T5969] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9'. [ 69.316910][ T5969] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9'. [ 69.420582][ T5972] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 69.785194][ T5989] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 70.011271][ T5894] IPVS: starting estimator thread 0... [ 70.048346][ T5854] Bluetooth: hci1: command tx timeout [ 70.090069][ T5997] warning: `syz.4.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.168471][ T5999] IPVS: using max 18 ests per chain, 43200 per kthread [ 70.198767][ T5854] Bluetooth: hci2: command tx timeout [ 70.205170][ T5849] Bluetooth: hci4: command tx timeout [ 70.205251][ T5850] Bluetooth: hci0: command tx timeout [ 70.211608][ T5849] Bluetooth: hci3: command tx timeout [ 70.286292][ T6003] bridge0: port 3(gretap0) entered blocking state [ 70.322796][ T6003] bridge0: port 3(gretap0) entered disabled state [ 70.360432][ T6003] gretap0: entered allmulticast mode [ 70.390590][ T6003] gretap0: entered promiscuous mode [ 70.407431][ T6003] bridge0: port 3(gretap0) entered blocking state [ 70.414447][ T6003] bridge0: port 3(gretap0) entered forwarding state [ 70.470097][ T6008] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 70.481509][ T6006] gretap0: left allmulticast mode [ 70.486597][ T6006] gretap0: left promiscuous mode [ 70.534218][ T6006] bridge0: port 3(gretap0) entered disabled state [ 70.959042][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 71.084907][ T2982] tipc: Subscription rejected, illegal request [ 71.331398][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.407168][ T6028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 71.449111][ T6030] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 71.508024][ T6030] macvlan2: entered allmulticast mode [ 71.513483][ T6030] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 71.562603][ T6030] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 71.733088][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.739749][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.160957][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.298773][ T6065] bridge_slave_0: left allmulticast mode [ 72.304631][ T6065] bridge_slave_0: left promiscuous mode [ 72.313575][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.337057][ T6065] bridge_slave_1: left allmulticast mode [ 72.346445][ T6065] bridge_slave_1: left promiscuous mode [ 72.354844][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.375546][ T6065] bond0: (slave bond_slave_0): Releasing backup interface [ 72.405726][ T6065] bond0: (slave bond_slave_1): Releasing backup interface [ 72.439200][ T6065] team0: Port device team_slave_0 removed [ 72.462612][ T6065] team0: Port device team_slave_1 removed [ 72.469430][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.477441][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.486804][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.494466][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.546638][ T6071] team0: Port device wg2 added [ 72.750936][ T6090] __nla_validate_parse: 3 callbacks suppressed [ 72.750954][ T6090] netlink: 52 bytes leftover after parsing attributes in process `syz.2.41'. [ 72.753050][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 72.923177][ T6096] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 72.969957][ T6096] macvlan0: entered allmulticast mode [ 73.018972][ T6096] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 73.075720][ T6096] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 73.522982][ T6114] netlink: 168 bytes leftover after parsing attributes in process `syz.1.48'. [ 73.556757][ T6118] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 73.608399][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 73.646477][ T6120] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 73.676026][ T6120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.50'. [ 73.755260][ T6126] netem: incorrect gi model size [ 73.766991][ T6126] netem: change failed [ 73.891363][ T6130] netlink: 9 bytes leftover after parsing attributes in process `syz.0.55'. [ 73.907776][ T6130] 0·: renamed from hsr0 (while UP) [ 73.924032][ T6130] 0·: entered allmulticast mode [ 73.929432][ T6130] hsr_slave_0: entered allmulticast mode [ 73.935198][ T6130] hsr_slave_1: entered allmulticast mode [ 73.945756][ T6130] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 73.970798][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 73.981480][ T6133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.008928][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 74.041035][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 74.217317][ T6144] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 74.260171][ T6144] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 74.311681][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 74.693417][ T6168] netlink: 'syz.4.67': attribute type 39 has an invalid length. [ 75.271727][ T6201] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 75.311984][ T6202] pim6reg1: entered allmulticast mode [ 75.339675][ T6202] netlink: 'syz.2.76': attribute type 11 has an invalid length. [ 75.379749][ T6202] netlink: 'syz.2.76': attribute type 16 has an invalid length. [ 75.382932][ T6204] ip6t_srh: unknown srh invflags 4000 [ 76.841255][ T8] cfg80211: failed to load regulatory.db [ 77.504465][ T6299] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 4, id = 0 [ 77.785752][ T6321] __nla_validate_parse: 16 callbacks suppressed [ 77.785771][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.115'. [ 77.891500][ T6324] Cannot find add_set index 0 as target [ 78.198435][ T52] wlan1: Trigger new scan to find an IBSS to join [ 78.302893][ T6359] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 78.450533][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 78.499589][ T6365] Bluetooth: MGMT ver 1.23 [ 78.573266][ T6365] bridge0: port 1(gretap0) entered blocking state [ 78.580293][ T6365] bridge0: port 1(gretap0) entered disabled state [ 78.587348][ T6365] gretap0: entered allmulticast mode [ 78.600496][ T6365] gretap0: entered promiscuous mode [ 78.610944][ T6365] bridge0: port 1(gretap0) entered blocking state [ 78.614603][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.132'. [ 78.617536][ T6365] bridge0: port 1(gretap0) entered forwarding state [ 78.956042][ T6395] netlink: 168 bytes leftover after parsing attributes in process `syz.0.136'. [ 78.998085][ T6397] veth1_macvtap: left promiscuous mode [ 79.075863][ T6406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'. [ 79.389364][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 79.414654][ T6417] No such timeout policy "syz0" [ 79.624212][ T6435] netlink: 'syz.4.147': attribute type 23 has an invalid length. [ 79.648545][ T6437] netlink: 'syz.2.149': attribute type 8 has an invalid length. [ 79.658059][ T6435] netlink: 'syz.4.147': attribute type 11 has an invalid length. [ 79.674325][ T6435] netlink: 224 bytes leftover after parsing attributes in process `syz.4.147'. [ 79.944590][ T6447] netlink: 'syz.4.151': attribute type 21 has an invalid length. [ 79.971213][ T6447] netlink: 156 bytes leftover after parsing attributes in process `syz.4.151'. [ 80.817001][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 81.605271][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 81.643079][ T6537] unknown channel width for channel at 909000KHz? [ 82.201570][ T6559] netlink: 'syz.3.173': attribute type 11 has an invalid length. [ 82.213960][ T6566] Cannot find set identified by id 0 to match [ 82.367124][ T6575] xt_ecn: cannot match TCP bits for non-tcp packets [ 83.167302][ T1335] wlan1: Trigger new scan to find an IBSS to join [ 84.073633][ T52] wlan1: Creating new IBSS network, BSSID be:50:a3:5e:bf:14 [ 84.453979][ T6585] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 84.599609][ T6558] delete_channel: no stack [ 85.423218][ T6619] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 86.598523][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 100.493920][ T6681] IPVS: set_ctl: invalid protocol: 58 172.20.20.64:20001 [ 100.550815][ T6689] __nla_validate_parse: 3 callbacks suppressed [ 100.550834][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 100.553385][ T6681] can: request_module (can-proto-5) failed. [ 100.600749][ T6692] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.813998][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.188'. [ 100.883880][ T6710] netlink: 'syz.2.190': attribute type 5 has an invalid length. [ 100.969373][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 100.994885][ T6716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 101.027779][ T5893] IPVS: starting estimator thread 0... [ 101.137710][ T6720] IPVS: using max 20 ests per chain, 48000 per kthread [ 101.150790][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 101.470192][ T6734] netlink: 'syz.4.199': attribute type 12 has an invalid length. [ 101.494622][ T6734] netlink: 244 bytes leftover after parsing attributes in process `syz.4.199'. [ 101.588901][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.628736][ T6738] batadv_slave_0: entered promiscuous mode [ 101.788629][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 101.950428][ T6751] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 102.004425][ T6752] netlink: 'syz.2.206': attribute type 20 has an invalid length. [ 102.092897][ T6751] vlan0: entered allmulticast mode [ 102.151858][ T6751] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 102.199243][ T6751] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 102.250346][ T5893] IPVS: starting estimator thread 0... [ 102.337860][ T6768] IPVS: using max 19 ests per chain, 45600 per kthread [ 102.769716][ T6756] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 102.818649][ T6756] vlan2: entered allmulticast mode [ 102.841615][ T6756] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 102.906914][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 102.918634][ T6756] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 103.000844][ T6792] netlink: 10 bytes leftover after parsing attributes in process `syz.1.214'. [ 103.028820][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 103.294318][ T6809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.187075][ T6861] Cannot find set identified by id 3 to match [ 104.594558][ T6885] netlink: 'syz.4.237': attribute type 8 has an invalid length. [ 104.724742][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.413054][ T6934] netlink: 'syz.1.251': attribute type 24 has an invalid length. [ 105.465311][ T6936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.621105][ T6946] gretap0: left allmulticast mode [ 105.634203][ T6946] gretap0: left promiscuous mode [ 105.646761][ T6946] bridge0: port 1(gretap0) entered disabled state [ 105.704196][ T6947] __nla_validate_parse: 7 callbacks suppressed [ 105.704216][ T6947] netlink: 256 bytes leftover after parsing attributes in process `syz.0.254'. [ 105.727648][ T6950] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 105.825311][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 105.994860][ T6968] netlink: 168 bytes leftover after parsing attributes in process `syz.0.261'. [ 106.193984][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 106.359256][ T6986] : entered promiscuous mode [ 106.563491][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 106.608922][ T7004] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 106.617222][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.271'. [ 106.668142][ T7004] batman_adv: batadv0: Adding interface: vlan1 [ 106.677130][ T7004] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.723994][ T7004] batman_adv: batadv0: Interface activated: vlan1 [ 106.736986][ T7015] netlink: 168 bytes leftover after parsing attributes in process `syz.0.274'. [ 106.971779][ T7027] FAULT_INJECTION: forcing a failure. [ 106.971779][ T7027] name failslab, interval 1, probability 0, space 0, times 1 [ 107.028296][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.4.279 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 107.038950][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.049052][ T7027] Call Trace: [ 107.052353][ T7027] [ 107.055311][ T7027] dump_stack_lvl+0x241/0x360 [ 107.060049][ T7027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.065292][ T7027] ? __pfx__printk+0x10/0x10 [ 107.070014][ T7027] ? kmem_cache_alloc_bulk_noprof+0x51/0x7c0 [ 107.076033][ T7027] ? __pfx___might_resched+0x10/0x10 [ 107.081361][ T7027] should_fail_ex+0x3b0/0x4e0 [ 107.086121][ T7027] should_failslab+0xac/0x100 [ 107.090834][ T7027] kmem_cache_alloc_bulk_noprof+0x7d/0x7c0 [ 107.096663][ T7027] ? mas_alloc_nodes+0x26c/0x840 [ 107.101630][ T7027] ? mas_alloc_nodes+0x26c/0x840 [ 107.106581][ T7027] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 107.111971][ T7027] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 107.117668][ T7027] mas_alloc_nodes+0x3d5/0x840 [ 107.122462][ T7027] mas_preallocate+0x554/0x8c0 [ 107.127227][ T7027] ? __pfx_mas_preallocate+0x10/0x10 [ 107.132537][ T7027] ? __raw_spin_lock_init+0x45/0x100 [ 107.137849][ T7027] ? __mas_set_range+0x133/0x3c0 [ 107.142806][ T7027] mmap_region+0x1245/0x23f0 [ 107.147439][ T7027] ? kernel_text_address+0xa7/0xe0 [ 107.152589][ T7027] ? __pfx_mmap_region+0x10/0x10 [ 107.157553][ T7027] ? hugetlb_get_unmapped_area+0x40b/0xbb0 [ 107.163376][ T7027] ? __pfx_hugetlb_get_unmapped_area+0x10/0x10 [ 107.169544][ T7027] ? bpf_lsm_mmap_addr+0x9/0x10 [ 107.174396][ T7027] ? security_mmap_addr+0x6f/0x250 [ 107.179520][ T7027] do_mmap+0x8f0/0x1000 [ 107.183723][ T7027] ? __pfx_do_mmap+0x10/0x10 [ 107.188347][ T7027] ? __pfx_down_write_killable+0x10/0x10 [ 107.193999][ T7027] ? common_file_perm+0x1a6/0x210 [ 107.199037][ T7027] vm_mmap_pgoff+0x1dd/0x3d0 [ 107.203663][ T7027] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 107.208792][ T7027] ? hugetlb_file_setup+0x3dc/0x5c0 [ 107.214001][ T7027] ksys_mmap_pgoff+0x53e/0x720 [ 107.218776][ T7027] do_syscall_64+0xf3/0x230 [ 107.223372][ T7027] ? clear_bhb_loop+0x35/0x90 [ 107.228053][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.233949][ T7027] RIP: 0033:0x7f8381f7e759 [ 107.238395][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.258007][ T7027] RSP: 002b:00007f8382d8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.266430][ T7027] RAX: ffffffffffffffda RBX: 00007f8382135f80 RCX: 00007f8381f7e759 [ 107.274455][ T7027] RDX: 000000000200000b RSI: 000000000095c000 RDI: 0000000020000000 [ 107.282436][ T7027] RBP: 00007f8382d8e090 R08: ffffffffffffffff R09: 0000000000000000 [ 107.290418][ T7027] R10: 8c4b815a5465c2b2 R11: 0000000000000246 R12: 0000000000000002 [ 107.298396][ T7027] R13: 0000000000000000 R14: 00007f8382135f80 R15: 00007fff6703daf8 [ 107.306423][ T7027] [ 107.482180][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 107.704818][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.286'. [ 107.899960][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 107.957108][ T7063] veth1_macvtap: left promiscuous mode [ 108.404498][ T7087] netlink: 'syz.0.299': attribute type 29 has an invalid length. [ 108.667404][ T7107] netlink: 'syz.4.306': attribute type 21 has an invalid length. [ 108.765267][ T7111] syz.3.304[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.765375][ T7111] syz.3.304[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.788706][ T7111] syz.3.304[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.559600][ T7146] netlink: 'syz.3.318': attribute type 28 has an invalid length. [ 109.803897][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.825644][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.854238][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.865908][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.889791][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.904578][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.239171][ T7173] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 110.289828][ T7173] netlink: 'syz.2.326': attribute type 2 has an invalid length. [ 110.368214][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 110.539815][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.546982][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.566934][ T7155] bridge_slave_0: entered allmulticast mode [ 110.574791][ T7155] bridge_slave_0: entered promiscuous mode [ 110.608466][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.638753][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.646256][ T7155] bridge_slave_1: entered allmulticast mode [ 110.654228][ T7155] bridge_slave_1: entered promiscuous mode [ 110.702845][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.720196][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.764506][ T7155] team0: Port device team_slave_0 added [ 110.775229][ T7155] team0: Port device team_slave_1 added [ 110.808778][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.819003][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.846074][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.860721][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.867903][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.894777][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.964413][ T7155] hsr_slave_0: entered promiscuous mode [ 110.972824][ T7155] hsr_slave_1: entered promiscuous mode [ 111.005286][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.017714][ T7155] Cannot create hsr debugfs directory [ 111.142033][ T7202] __nla_validate_parse: 8 callbacks suppressed [ 111.142056][ T7202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.331'. [ 111.340645][ T7155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.389759][ T7220] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 111.511878][ T7155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.605787][ T7228] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 111.649074][ T7155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.755259][ T7155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.815990][ T7240] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.957957][ T5854] Bluetooth: hci3: command tx timeout [ 112.066881][ T7155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.082626][ T7155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.108587][ T7155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.124186][ T7155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.190091][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 112.207214][ T7251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.349'. [ 112.291487][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.353111][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.363054][ T7260] bridge: RTM_NEWNEIGH with invalid ether address [ 112.374962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.382147][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.429920][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.437328][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.457463][ T7266] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 112.513267][ T7268] ip6t_srh: unknown srh invflags 4000 [ 112.674079][ T7274] netlink: 'syz.4.355': attribute type 3 has an invalid length. [ 112.705457][ T7274] hsr0: entered promiscuous mode [ 112.932351][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.988839][ T7288] tap0: tun_chr_ioctl cmd 2147767506 [ 113.071901][ T7155] veth0_vlan: entered promiscuous mode [ 113.083881][ T7155] veth1_vlan: entered promiscuous mode [ 113.126665][ T7155] veth0_macvtap: entered promiscuous mode [ 113.136809][ T7155] veth1_macvtap: entered promiscuous mode [ 113.146325][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 113.195393][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 113.200379][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.215056][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 113.234927][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.253775][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.264438][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.268647][ T7298] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 113.281213][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.284408][ T7298] netlink: 'syz.3.359': attribute type 2 has an invalid length. [ 113.325922][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.341664][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.361594][ T7301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.360'. [ 113.394749][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.427787][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.471995][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.493185][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.504648][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.518153][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.528447][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.540289][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.552374][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.640751][ T7155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.664158][ T7155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.673750][ T7155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.678068][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 113.683005][ T7155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.843148][ T7320] sctp: [Deprecated]: syz.2.368 (pid 7320) Use of int in max_burst socket option. [ 113.843148][ T7320] Use struct sctp_assoc_value instead [ 113.903280][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.932523][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.991953][ T7324] vlan0: entered promiscuous mode [ 113.997095][ T7324] batadv0: entered promiscuous mode [ 114.037106][ T7324] vlan0: entered allmulticast mode [ 114.042643][ T5854] Bluetooth: hci3: command 0x041b tx timeout [ 114.077505][ T7324] batadv0: entered allmulticast mode [ 114.115665][ T7324] batadv0: left allmulticast mode [ 114.122166][ T7324] batadv0: left promiscuous mode [ 114.148667][ T1335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 114.159866][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.180555][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 114.199507][ T7341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.372'. [ 114.201429][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.226614][ T7343] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.235918][ T7343] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.245036][ T7343] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.254597][ T7343] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.279455][ T7343] vxlan0: entered promiscuous mode [ 114.583056][ T7359] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 114.632362][ T7359] netlink: 'syz.3.379': attribute type 3 has an invalid length. [ 114.810707][ T7373] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 114.962133][ T7377] Driver unsupported XDP return value 0 on prog (id 179) dev N/A, expect packet loss! [ 115.459923][ T1335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.742006][ T7411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.041278][ T7423] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.112942][ T7428] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 116.196281][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.238426][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.265658][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.310105][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.337918][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.355440][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.363064][ T7447] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 116.394626][ T1335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.451172][ T7432] syzkaller0: entered promiscuous mode [ 116.456858][ T7432] syzkaller0: entered allmulticast mode [ 116.485847][ T7447] team0: Device hsr_slave_0 is of different type [ 116.562837][ T1335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.439535][ T5854] Bluetooth: hci3: command tx timeout [ 118.491584][ T1335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.510433][ T7467] batadv_slave_1: entered promiscuous mode [ 118.516805][ T7474] batadv_slave_1: left promiscuous mode [ 118.605587][ T7487] __nla_validate_parse: 4 callbacks suppressed [ 118.605610][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 118.835364][ T7435] chnl_net:caif_netlink_parms(): no params data found [ 119.047326][ T1335] bridge_slave_1: left allmulticast mode [ 119.065986][ T1335] bridge_slave_1: left promiscuous mode [ 119.101533][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.126974][ T1335] bridge_slave_0: left allmulticast mode [ 119.146919][ T1335] bridge_slave_0: left promiscuous mode [ 119.158820][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.872984][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.890799][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.901795][ T1335] bond0 (unregistering): Released all slaves [ 120.349537][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.428'. [ 120.396510][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.422351][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.425949][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 120.439484][ T7435] bridge_slave_0: entered allmulticast mode [ 120.446484][ T7435] bridge_slave_0: entered promiscuous mode [ 120.454605][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.462004][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.469431][ T7435] bridge_slave_1: entered allmulticast mode [ 120.476580][ T7435] bridge_slave_1: entered promiscuous mode [ 120.538470][ T5854] Bluetooth: hci3: command tx timeout [ 120.663842][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.687699][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.698583][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.710523][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.721080][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.737016][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.748897][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.773002][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.854887][ T7564] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 120.905585][ T7564] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 120.915169][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.940837][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 120.948264][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.007754][ T7580] geneve2: entered promiscuous mode [ 121.025869][ T7580] geneve2: entered allmulticast mode [ 121.102606][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'. [ 121.175871][ T1335] hsr_slave_0: left promiscuous mode [ 121.227113][ T1335] hsr_slave_1: left promiscuous mode [ 121.244748][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.259732][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.294160][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.325532][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.408826][ T1335] veth1_macvtap: left promiscuous mode [ 121.416175][ T1335] veth0_macvtap: left promiscuous mode [ 121.423461][ T1335] veth1_vlan: left promiscuous mode [ 121.430345][ T1335] veth0_vlan: left promiscuous mode [ 121.998568][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 122.038708][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 122.466487][ T7435] team0: Port device team_slave_0 added [ 122.481173][ T7435] team0: Port device team_slave_1 added [ 122.573107][ T7622] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 122.597862][ T5854] Bluetooth: hci3: command tx timeout [ 122.622139][ T7622] hsr0: entered promiscuous mode [ 122.662802][ T7622] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 122.675403][ T7622] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 122.723349][ T7622] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 122.763535][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.798061][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.850879][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.870459][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.907732][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.959867][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.989359][ T7644] veth1_macvtap: left promiscuous mode [ 122.993898][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 123.226399][ T7658] netlink: 72 bytes leftover after parsing attributes in process `syz.4.450'. [ 123.272795][ T7435] hsr_slave_0: entered promiscuous mode [ 123.281936][ T7435] hsr_slave_1: entered promiscuous mode [ 123.289135][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.306491][ T7435] Cannot create hsr debugfs directory [ 123.456688][ T7658] batadv0: entered promiscuous mode [ 123.498848][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.508625][ T7666] netlink: 'syz.3.449': attribute type 7 has an invalid length. [ 124.677732][ T5854] Bluetooth: hci3: command tx timeout [ 125.423532][ T7703] netlink: 72 bytes leftover after parsing attributes in process `syz.4.458'. [ 125.447741][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 125.470771][ T7703] netlink: 72 bytes leftover after parsing attributes in process `syz.4.458'. [ 126.616387][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.466'. [ 126.642520][ T7728] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 126.657649][ T7728] netlink: 224 bytes leftover after parsing attributes in process `syz.0.466'. [ 127.441578][ T7724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.478896][ T7724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.533720][ T7735] netlink: 59 bytes leftover after parsing attributes in process `syz.2.467'. [ 127.615488][ T7738] netlink: 'syz.3.468': attribute type 12 has an invalid length. [ 127.642098][ T7738] netlink: 244 bytes leftover after parsing attributes in process `syz.3.468'. [ 127.917376][ T7724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.938553][ T7724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.096252][ T7724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.112945][ T7724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.320861][ T7724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.353300][ T7724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.429284][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.473'. [ 128.610460][ T7784] raw_sendmsg: syz.2.474 forgot to set AF_INET. Fix it! [ 128.645871][ T7724] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.664470][ T7724] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.696848][ T7790] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 128.713705][ T7724] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.722782][ T7790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.475'. [ 128.731346][ T7724] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.750714][ T7724] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.759203][ T7724] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.829858][ T7724] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.847236][ T7724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.873960][ T7790] netlink: 5200 bytes leftover after parsing attributes in process `syz.0.475'. [ 128.905633][ T7794] dummy0: entered promiscuous mode [ 128.916464][ T7794] erspan0: entered promiscuous mode [ 128.983048][ T7435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.003844][ T7435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.043226][ T7796] pimreg: entered allmulticast mode [ 129.056081][ T7435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.066519][ T7435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.083723][ T7800] tipc: Enabling of bearer rejected, failed to enable media [ 129.199158][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.249250][ T7435] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.275545][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.282839][ T5048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.298298][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.305525][ T5048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.767507][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.867117][ T7435] veth0_vlan: entered promiscuous mode [ 129.880171][ T7435] veth1_vlan: entered promiscuous mode [ 129.904003][ T7435] veth0_macvtap: entered promiscuous mode [ 129.913434][ T7435] veth1_macvtap: entered promiscuous mode [ 129.931362][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.942300][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.952539][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.965163][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.975636][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.986413][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.999663][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.012308][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.023218][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.033444][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.044099][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.054399][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.065023][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.074950][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.085517][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.096503][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.106788][ T7435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.115823][ T7435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.125097][ T7435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.134550][ T7435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.356675][ T5048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.370410][ T5048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.383876][ T7855] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.407513][ T7855] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.416570][ T7855] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.428522][ T7855] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.481334][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.494426][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.699851][ T7865] tc_dump_action: action bad kind [ 131.078744][ T7851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 131.490198][ T7914] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 131.712765][ T7921] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 131.741500][ T7921] __nla_validate_parse: 6 callbacks suppressed [ 131.741520][ T7921] netlink: 55 bytes leftover after parsing attributes in process `syz.2.501'. [ 132.183828][ T5048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.373477][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 132.492171][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 132.523614][ T7945] Cannot find del_set index 1 as target [ 132.757961][ T7956] netlink: 'syz.2.509': attribute type 21 has an invalid length. [ 132.806670][ T7956] netlink: 168 bytes leftover after parsing attributes in process `syz.2.509'. [ 132.866798][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.883692][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.894992][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.906843][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.927983][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.942120][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.104518][ T7959] chnl_net:caif_netlink_parms(): no params data found [ 133.163504][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.523321][ T7984] No such timeout policy "syz0" [ 133.557471][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.606881][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.638811][ T7959] bridge_slave_0: entered allmulticast mode [ 133.665672][ T7959] bridge_slave_0: entered promiscuous mode [ 133.688973][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.701739][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.747868][ T7959] bridge_slave_1: entered allmulticast mode [ 133.775552][ T7959] bridge_slave_1: entered promiscuous mode [ 133.864686][ T8001] --map-set only usable from mangle table [ 133.960557][ T5048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.040416][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.063747][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.132653][ T5048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.248259][ T7959] team0: Port device team_slave_0 added [ 134.348760][ T5048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.420172][ T7959] team0: Port device team_slave_1 added [ 134.547497][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.575744][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.645964][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.716441][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.749751][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.794188][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.532'. [ 134.827628][ T7959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.908655][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 134.997897][ T5854] Bluetooth: hci3: command tx timeout [ 135.302782][ T7959] hsr_slave_0: entered promiscuous mode [ 135.327345][ T7959] hsr_slave_1: entered promiscuous mode [ 135.334454][ T7959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.342523][ T7959] Cannot create hsr debugfs directory [ 135.453709][ T5048] bridge_slave_1: left allmulticast mode [ 135.462483][ T5048] bridge_slave_1: left promiscuous mode [ 135.468545][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 135.487880][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.515373][ T5048] bridge_slave_0: left allmulticast mode [ 135.534652][ T5048] bridge_slave_0: left promiscuous mode [ 135.559172][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.693939][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 136.161225][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.173235][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.184217][ T5048] bond0 (unregistering): Released all slaves [ 136.243202][ T8095] gre1: entered promiscuous mode [ 136.339845][ T8100] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 136.348042][ T8100] netlink: 17 bytes leftover after parsing attributes in process `syz.0.540'. [ 136.635744][ T8113] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.546'. [ 136.837982][ T5048] hsr_slave_0: left promiscuous mode [ 136.856595][ T5048] hsr_slave_1: left promiscuous mode [ 136.892945][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.914706][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.936118][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.967721][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.030890][ T5048] veth1_macvtap: left promiscuous mode [ 137.045917][ T5048] veth0_macvtap: left promiscuous mode [ 137.057139][ T5048] veth1_vlan: left promiscuous mode [ 137.064889][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 137.074619][ T5048] veth0_vlan: left promiscuous mode [ 137.080276][ T5854] Bluetooth: hci3: command tx timeout [ 137.589456][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 137.635218][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 138.128313][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 138.277446][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 138.485556][ T8157] netlink: 'syz.4.558': attribute type 5 has an invalid length. [ 138.781659][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 138.807408][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 139.081887][ T7959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.128075][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 139.156443][ T7959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.166412][ T5854] Bluetooth: hci3: command tx timeout [ 139.200872][ T7959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.274641][ T7959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.294020][ T8182] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 139.328029][ T8182] netlink: 'syz.3.563': attribute type 2 has an invalid length. [ 139.521125][ T8192] FAULT_INJECTION: forcing a failure. [ 139.521125][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.575453][ T8198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.567'. [ 139.591029][ T8199] netlink: 'syz.4.565': attribute type 39 has an invalid length. [ 139.592697][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.616497][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.0.566 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 139.627603][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.638042][ T8192] Call Trace: [ 139.641827][ T8192] [ 139.644816][ T8192] dump_stack_lvl+0x241/0x360 [ 139.649786][ T8192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.655479][ T8192] ? __pfx__printk+0x10/0x10 [ 139.660127][ T8192] ? __pfx_lock_release+0x10/0x10 [ 139.665739][ T8192] ? rcu_is_watching+0x15/0xb0 [ 139.670651][ T8192] should_fail_ex+0x3b0/0x4e0 [ 139.675747][ T8192] _copy_from_iter+0x21f/0x1e70 [ 139.680742][ T8192] ? alloc_pages_mpol_noprof+0x417/0x680 [ 139.686692][ T8192] ? __pfx__copy_from_iter+0x10/0x10 [ 139.692132][ T8192] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 139.698309][ T8192] ? alloc_pages_noprof+0xef/0x170 [ 139.704452][ T8192] ? page_copy_sane+0x46/0x260 [ 139.710454][ T8192] copy_page_from_iter+0x7a/0x100 [ 139.717203][ T8192] tun_get_user+0x203c/0x4890 [ 139.723772][ T8192] ? tun_get_user+0x86e/0x4890 [ 139.729061][ T8192] ? __lock_acquire+0x1384/0x2050 [ 139.735966][ T8192] ? __pfx_tun_get_user+0x10/0x10 [ 139.742725][ T8192] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 139.748865][ T8192] ? tun_get+0x1e/0x2f0 [ 139.753698][ T8192] ? __pfx_lock_release+0x10/0x10 [ 139.759035][ T8192] ? tun_get+0x1e/0x2f0 [ 139.763593][ T8192] ? tun_get+0x27d/0x2f0 [ 139.768300][ T8192] tun_chr_write_iter+0x10d/0x1f0 [ 139.774023][ T8192] vfs_write+0xaeb/0xd30 [ 139.778722][ T8192] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 139.785056][ T8192] ? __pfx_vfs_write+0x10/0x10 [ 139.791269][ T8192] ? fdget_pos+0x19a/0x320 [ 139.796254][ T8192] ksys_write+0x183/0x2b0 [ 139.801380][ T8192] ? __pfx_ksys_write+0x10/0x10 [ 139.807008][ T8192] ? do_syscall_64+0x100/0x230 [ 139.812224][ T8192] ? do_syscall_64+0xb6/0x230 [ 139.818410][ T8192] do_syscall_64+0xf3/0x230 [ 139.823508][ T8192] ? clear_bhb_loop+0x35/0x90 [ 139.828455][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.834911][ T8192] RIP: 0033:0x7fc355b7d23f [ 139.839809][ T8192] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 139.862487][ T8192] RSP: 002b:00007fc356a15000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.871417][ T8192] RAX: ffffffffffffffda RBX: 00007fc355d35f80 RCX: 00007fc355b7d23f [ 139.879567][ T8192] RDX: 0000000000000036 RSI: 0000000020001800 RDI: 00000000000000c8 [ 139.888085][ T8192] RBP: 00007fc356a15090 R08: 0000000000000000 R09: 0000000000000000 [ 139.896273][ T8192] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 139.905816][ T8192] R13: 0000000000000000 R14: 00007fc355d35f80 R15: 00007fffd6fbfe08 [ 139.915142][ T8192] [ 140.093610][ T8204] syz.2.570 (8204) used greatest stack depth: 18328 bytes left [ 140.137867][ T8202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.569'. [ 140.170681][ T7959] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.275946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.283787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.364952][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.372212][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.864018][ T8235] netlink: 'syz.4.578': attribute type 25 has an invalid length. [ 140.886770][ T8235] netlink: 'syz.4.578': attribute type 7 has an invalid length. [ 140.959416][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.065784][ T7959] veth0_vlan: entered promiscuous mode [ 141.111716][ T7959] veth1_vlan: entered promiscuous mode [ 141.200154][ T7959] veth0_macvtap: entered promiscuous mode [ 141.218852][ T7959] veth1_macvtap: entered promiscuous mode [ 141.238025][ T5854] Bluetooth: hci3: command tx timeout [ 141.264031][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.274916][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.290555][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.303918][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.317924][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.337624][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.364207][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.421927][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.449214][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.460376][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.471599][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.485101][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.499847][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.509958][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.526747][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.553214][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.601354][ T7959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.626788][ T7959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.645425][ T7959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.665758][ T7959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.780771][ T8285] syzkaller1: entered promiscuous mode [ 141.802517][ T8285] syzkaller1: entered allmulticast mode [ 141.953217][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.992367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.081985][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.101184][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.175429][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.593'. [ 142.816432][ T8332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.162514][ T2968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.533954][ T2968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.756744][ T8348] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.027457][ T2968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.055748][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.066858][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.075764][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.093430][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.101172][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.111115][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.363041][ T2968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.555089][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 144.789771][ T8400] netlink: 52 bytes leftover after parsing attributes in process `syz.3.618'. [ 144.859354][ T8373] tc_dump_action: action bad kind [ 144.905937][ T8413] x_tables: duplicate underflow at hook 1 [ 144.913375][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.925868][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.940413][ T8360] bridge_slave_0: entered allmulticast mode [ 144.966893][ T8360] bridge_slave_0: entered promiscuous mode [ 145.044426][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.052157][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.060630][ T8360] bridge_slave_1: entered allmulticast mode [ 145.073171][ T1335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 145.085760][ T8360] bridge_slave_1: entered promiscuous mode [ 145.093252][ T2968] bridge_slave_1: left allmulticast mode [ 145.099562][ T2968] bridge_slave_1: left promiscuous mode [ 145.105694][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.124169][ T2968] bridge_slave_0: left allmulticast mode [ 145.130089][ T2968] bridge_slave_0: left promiscuous mode [ 145.137822][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.567145][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.582919][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.594929][ T2968] bond0 (unregistering): Released all slaves [ 145.620624][ T8429] tipc: Enabling of bearer rejected, failed to enable media [ 145.810772][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.944798][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 145.956140][ T8453] netlink: 'syz.2.634': attribute type 3 has an invalid length. [ 145.964849][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 145.986077][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.028497][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.059375][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.067502][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.075867][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.085461][ T8452] batman_adv: batadv0: Interface deactivated: vlan1 [ 146.093036][ T8452] batman_adv: batadv0: Removing interface: vlan1 [ 146.190167][ T8457] bridge0: port 3(hsr_slave_1) entered blocking state [ 146.197309][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 146.214506][ T5854] Bluetooth: hci3: command tx timeout [ 146.222027][ T8457] bridge0: port 3(hsr_slave_1) entered disabled state [ 146.241502][ T8457] hsr_slave_1: entered allmulticast mode [ 146.257455][ T8457] hsr_slave_1: left allmulticast mode [ 146.271792][ T8360] team0: Port device team_slave_0 added [ 146.281034][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 146.324958][ T8360] team0: Port device team_slave_1 added [ 146.338514][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 146.366169][ T2968] hsr_slave_0: left promiscuous mode [ 146.385885][ T8454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.419341][ T2968] hsr_slave_1: left promiscuous mode [ 146.446452][ T8454] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.464391][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.484613][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.519464][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.549949][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.587445][ T2968] veth1_macvtap: left promiscuous mode [ 146.594303][ T2968] veth0_macvtap: left promiscuous mode [ 146.606970][ T2968] veth1_vlan: left promiscuous mode [ 146.614036][ T2968] veth0_vlan: left promiscuous mode [ 146.783964][ T8487] netlink: 248 bytes leftover after parsing attributes in process `syz.2.638'. [ 147.261163][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 147.309063][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 147.767115][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 147.809135][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.827942][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.866512][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.897481][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.905116][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.935115][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.948626][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 147.962358][ T8498] netlink: 'syz.2.640': attribute type 4 has an invalid length. [ 147.986729][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 148.003554][ T8495] netlink: 'syz.2.640': attribute type 4 has an invalid length. [ 148.073029][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 148.083480][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 148.097174][ T8454] ip6gretap0 speed is unknown, defaulting to 1000 [ 148.178025][ T8360] hsr_slave_0: entered promiscuous mode [ 148.198365][ T8360] hsr_slave_1: entered promiscuous mode [ 148.214993][ T8506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.225193][ T8360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.235336][ T8360] Cannot create hsr debugfs directory [ 148.263656][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.285526][ T5854] Bluetooth: hci3: command tx timeout [ 148.307807][ T8506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.364843][ T8506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.389315][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.433696][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.449136][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.482548][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.792826][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 148.847054][ T8536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.651'. [ 149.303771][ T8360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.326863][ T8360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.343870][ T8360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.361201][ T8360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.536428][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.581825][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.618618][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.625863][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.672336][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.679533][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.901330][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.006156][ T8360] veth0_vlan: entered promiscuous mode [ 150.020053][ T8360] veth1_vlan: entered promiscuous mode [ 150.062531][ T8360] veth0_macvtap: entered promiscuous mode [ 150.076556][ T8360] veth1_macvtap: entered promiscuous mode [ 150.105576][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.123386][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.133397][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.144001][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.155487][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.165777][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.176639][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.186779][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.198645][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.209168][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.219711][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.230711][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.243379][ T8360] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.252418][ T8360] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.261254][ T8360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.270070][ T8360] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.358117][ T5854] Bluetooth: hci3: command tx timeout [ 150.466412][ T8596] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 150.481405][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.490958][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.561356][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.570301][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.644365][ T8600] netlink: 'syz.2.670': attribute type 4 has an invalid length. [ 150.944966][ T8616] tipc: Started in network mode [ 150.973129][ T8616] tipc: Node identity 00000069b5003a000000000000000001, cluster identity 4711 [ 150.990414][ T8618] GUP no longer grows the stack in syz.3.677 (8618): 20006000-2000a000 (20005000) [ 151.002027][ T8616] tipc: Enabling of bearer rejected, failed to enable media [ 151.007403][ T8618] CPU: 0 UID: 0 PID: 8618 Comm: syz.3.677 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 151.020717][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.030898][ T8618] Call Trace: [ 151.034226][ T8618] [ 151.037198][ T8618] dump_stack_lvl+0x241/0x360 [ 151.041923][ T8618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.047399][ T8618] ? __pfx__printk+0x10/0x10 [ 151.052132][ T8618] ? find_vma+0xf9/0x170 [ 151.056404][ T8618] ? vma_is_secretmem+0xd/0x50 [ 151.061191][ T8618] ? check_vma_flags+0x52b/0x5a0 [ 151.066181][ T8618] __get_user_pages+0x4385/0x49e0 [ 151.071241][ T8618] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.077258][ T8618] ? __pfx___get_user_pages+0x10/0x10 [ 151.082661][ T8618] __gup_longterm_locked+0x49a/0x17f0 [ 151.088038][ T8618] ? __pfx___might_resched+0x10/0x10 [ 151.093347][ T8618] ? __pfx___gup_longterm_locked+0x10/0x10 [ 151.099160][ T8618] ? down_read+0x82b/0xa40 [ 151.103611][ T8618] ? is_valid_gup_args+0x124/0x200 [ 151.108739][ T8618] pin_user_pages+0x137/0x1f0 [ 151.113427][ T8618] ? __pfx_pin_user_pages+0x10/0x10 [ 151.118640][ T8618] ? __kmalloc_node_noprof+0x247/0x440 [ 151.124124][ T8618] xdp_umem_create+0x978/0xf30 [ 151.129030][ T8618] xsk_setsockopt+0x732/0x950 [ 151.133730][ T8618] ? __pfx_xsk_setsockopt+0x10/0x10 [ 151.138946][ T8618] ? __pfx_lock_acquire+0x10/0x10 [ 151.143988][ T8618] ? __fget_files+0x29/0x470 [ 151.148587][ T8618] ? aa_sock_opt_perm+0x79/0x120 [ 151.153544][ T8618] ? __pfx_xsk_setsockopt+0x10/0x10 [ 151.158751][ T8618] do_sock_setsockopt+0x3af/0x720 [ 151.163805][ T8618] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 151.169359][ T8618] ? __fget_files+0x29/0x470 [ 151.173964][ T8618] ? __fget_files+0x3f3/0x470 [ 151.178645][ T8618] ? __fget_files+0x29/0x470 [ 151.183263][ T8618] __sys_setsockopt+0x1a2/0x250 [ 151.188123][ T8618] __x64_sys_setsockopt+0xb5/0xd0 [ 151.193159][ T8618] do_syscall_64+0xf3/0x230 [ 151.197674][ T8618] ? clear_bhb_loop+0x35/0x90 [ 151.202369][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.208449][ T8618] RIP: 0033:0x7f2552b7e759 [ 151.212868][ T8618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.232967][ T8618] RSP: 002b:00007f2553a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.241514][ T8618] RAX: ffffffffffffffda RBX: 00007f2552d35f80 RCX: 00007f2552b7e759 [ 151.249506][ T8618] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 151.258013][ T8618] RBP: 00007f2552bf175e R08: 0000000000000020 R09: 0000000000000000 [ 151.266163][ T8618] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 151.274138][ T8618] R13: 0000000000000000 R14: 00007f2552d35f80 R15: 00007fff4a7fef08 [ 151.282223][ T8618] [ 151.473563][ T8631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 151.642056][ T8642] netlink: 'syz.4.684': attribute type 7 has an invalid length. [ 151.699859][ T8644] ip6gretap0 speed is unknown, defaulting to 1000 [ 152.356248][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.226966][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.238382][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.247182][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.257443][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.268582][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.276034][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.302231][ T8676] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 153.324102][ T8672] ip6gretap0 speed is unknown, defaulting to 1000 [ 153.333212][ T8677] __nla_validate_parse: 7 callbacks suppressed [ 153.333227][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.694'. [ 153.533176][ T8672] chnl_net:caif_netlink_parms(): no params data found [ 153.608606][ T8684] syzkaller1: entered promiscuous mode [ 153.614316][ T8684] syzkaller1: entered allmulticast mode [ 153.715096][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.727156][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.742537][ T8672] bridge_slave_0: entered allmulticast mode [ 153.751924][ T8672] bridge_slave_0: entered promiscuous mode [ 153.782728][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.791135][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.800519][ T8672] bridge_slave_1: entered allmulticast mode [ 153.812589][ T8672] bridge_slave_1: entered promiscuous mode [ 153.890016][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.909405][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.965230][ T8672] team0: Port device team_slave_0 added [ 154.018038][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.040770][ T8672] team0: Port device team_slave_1 added [ 154.112702][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.137093][ T8695] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 154.225945][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.247723][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.292595][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.296143][ T8697] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 154.336201][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.388602][ T8694] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 154.412878][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.420275][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.455822][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.489935][ T8695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.492495][ T5048] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.618270][ T5048] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.736052][ T8672] hsr_slave_0: entered promiscuous mode [ 154.760567][ T8672] hsr_slave_1: entered promiscuous mode [ 154.775843][ T8672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.789450][ T8672] Cannot create hsr debugfs directory [ 154.870533][ T8723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 154.877419][ T8711] bond2: entered promiscuous mode [ 154.884808][ T8711] bond2: entered allmulticast mode [ 154.900091][ T8711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.902025][ T8723] netlink: 'syz.3.704': attribute type 7 has an invalid length. [ 154.965480][ T8723] netlink: 'syz.3.704': attribute type 8 has an invalid length. [ 154.994506][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 155.019973][ T12] bridge_slave_1: left allmulticast mode [ 155.032389][ T12] bridge_slave_1: left promiscuous mode [ 155.043378][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.053881][ T12] bridge_slave_0: left allmulticast mode [ 155.065264][ T12] bridge_slave_0: left promiscuous mode [ 155.071628][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.331046][ T5854] Bluetooth: hci3: command tx timeout [ 155.548991][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.570669][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.584696][ T12] bond0 (unregistering): Released all slaves [ 155.604383][ T8723] erspan0: entered promiscuous mode [ 155.611060][ T8723] batadv_slave_1: entered promiscuous mode [ 155.618804][ T8723] erspan0: left promiscuous mode [ 155.626154][ T8723] batadv_slave_1: left promiscuous mode [ 155.907494][ T8762] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 155.909800][ T8761] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 155.980739][ T8762] bridge0: port 3(team0) entered blocking state [ 155.997500][ T8762] bridge0: port 3(team0) entered disabled state [ 156.004663][ T8762] team0: entered allmulticast mode [ 156.024737][ T8762] team_slave_0: entered allmulticast mode [ 156.034866][ T8762] team_slave_1: entered allmulticast mode [ 156.049140][ T8762] team0: entered promiscuous mode [ 156.054232][ T8762] team_slave_0: entered promiscuous mode [ 156.070624][ T8762] team_slave_1: entered promiscuous mode [ 156.077109][ T8762] bridge0: port 3(team0) entered blocking state [ 156.083585][ T8762] bridge0: port 3(team0) entered forwarding state [ 156.108946][ T8761] bridge0: port 3(team0) entered disabled state [ 156.115841][ T8761] team0: left allmulticast mode [ 156.122492][ T8761] team_slave_0: left allmulticast mode [ 156.129069][ T8761] team_slave_1: left allmulticast mode [ 156.136046][ T8761] team0: left promiscuous mode [ 156.141325][ T8761] team_slave_0: left promiscuous mode [ 156.146895][ T8761] team_slave_1: left promiscuous mode [ 156.152940][ T8761] bridge0: port 3(team0) entered disabled state [ 156.163986][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.232516][ T8777] netlink: 48 bytes leftover after parsing attributes in process `syz.4.719'. [ 156.560811][ T12] hsr_slave_0: left promiscuous mode [ 156.574706][ T12] hsr_slave_1: left promiscuous mode [ 156.582589][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.590332][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.604024][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.615459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.644753][ T12] veth1_macvtap: left promiscuous mode [ 156.650583][ T12] veth0_macvtap: left promiscuous mode [ 156.656486][ T12] veth1_vlan: left promiscuous mode [ 156.662260][ T12] veth0_vlan: left promiscuous mode [ 157.175471][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.222092][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.398548][ T5854] Bluetooth: hci3: command tx timeout [ 157.481109][ C1] ------------[ cut here ]------------ [ 157.486967][ C1] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1254 ip_rt_bug+0x2c/0x110 [ 157.495313][ C1] Modules linked in: [ 157.499266][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 157.509640][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 157.519772][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 157.524720][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 1b 61 72 f7 66 90 e8 14 61 72 f7 31 ff 48 89 de ba 02 00 00 00 e8 65 44 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 157.544411][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 157.550538][ C1] RAX: f134cd00719ad200 RBX: ffff888027f11500 RCX: ffffffff8170cfaa [ 157.558575][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c610de0 [ 157.566595][ C1] RBP: 0000000000000001 R08: ffffffff942e589f R09: ffffffff8a22890b [ 157.574631][ C1] R10: dffffc0000000000 R11: fffffbfff285cb14 R12: dffffc0000000000 [ 157.582676][ C1] R13: ffffc90000a188f8 R14: ffff888063238000 R15: ffff8881456da1c0 [ 157.590704][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 157.599702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.606308][ C1] CR2: 000000110c397265 CR3: 00000000631de000 CR4: 00000000003526f0 [ 157.614358][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.622408][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.630440][ C1] Call Trace: [ 157.633741][ C1] [ 157.636582][ C1] ? __warn+0x168/0x4e0 [ 157.640815][ C1] ? ip_rt_bug+0x2c/0x110 [ 157.645191][ C1] ? report_bug+0x2b3/0x500 [ 157.649777][ C1] ? ip_rt_bug+0x2c/0x110 [ 157.654140][ C1] ? handle_bug+0x60/0x90 [ 157.658522][ C1] ? exc_invalid_op+0x1a/0x50 [ 157.663227][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 157.668331][ C1] ? ip_rt_bug+0x2b/0x110 [ 157.672694][ C1] ? mark_lock+0x9a/0x360 [ 157.677107][ C1] ? ip_rt_bug+0x2c/0x110 [ 157.681495][ C1] ip_push_pending_frames+0xbf/0x150 [ 157.686811][ C1] __icmp_send+0x1013/0x15c0 [ 157.691471][ C1] ? __icmp_send+0x5cb/0x15c0 [ 157.696191][ C1] ? __pfx___icmp_send+0x10/0x10 [ 157.701209][ C1] ? mark_lock+0x9a/0x360 [ 157.705565][ C1] ? look_up_lock_class+0x77/0x170 [ 157.710789][ C1] ipv4_link_failure+0x62f/0xa10 [ 157.715765][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 157.721330][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 157.726473][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 157.732021][ C1] arp_error_report+0x114/0x160 [ 157.736927][ C1] neigh_invalidate+0x247/0x470 [ 157.741866][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 157.747014][ C1] call_timer_fn+0x18e/0x650 [ 157.751684][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 157.757436][ C1] ? call_timer_fn+0xc0/0x650 [ 157.762186][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 157.767902][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 157.773062][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 157.778751][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 157.784411][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 157.790095][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.795350][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 157.800650][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 157.806310][ C1] __run_timer_base+0x66a/0x8e0 [ 157.811238][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 157.816640][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.823058][ C1] run_timer_softirq+0xb7/0x170 [ 157.828059][ C1] handle_softirqs+0x2c5/0x980 [ 157.832856][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 157.837691][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 157.843012][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 157.848301][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 157.852932][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 157.858209][ C1] irq_exit_rcu+0x9/0x30 [ 157.862480][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 157.868170][ C1] [ 157.871121][ C1] [ 157.874059][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.880095][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 157.885423][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 a0 9f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 157.905139][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 157.911265][ C1] RAX: ffff88801d2e8000 RBX: ffff88801d687864 RCX: 0000000000048a41 [ 157.919308][ C1] RDX: 0000000000000001 RSI: ffff88801d687800 RDI: ffff88801d687864 [ 157.927302][ C1] RBP: 000000000003a9b8 R08: ffff8880b8737e9b R09: 1ffff110170e6fd3 [ 157.935339][ C1] R10: dffffc0000000000 R11: ffffffff8bcb3a50 R12: ffff88801f3d3800 [ 157.943372][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f12ec60 [ 157.951408][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 157.956728][ C1] acpi_idle_enter+0xe4/0x140 [ 157.961485][ C1] cpuidle_enter_state+0x109/0x470 [ 157.966670][ C1] ? __pfx_menu_select+0x10/0x10 [ 157.971680][ C1] cpuidle_enter+0x5d/0xa0 [ 157.976136][ C1] do_idle+0x375/0x5d0 [ 157.980260][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.986626][ C1] ? __pfx_do_idle+0x10/0x10 [ 157.991310][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 157.997242][ C1] ? complete+0xb4/0x1c0 [ 158.001560][ C1] cpu_startup_entry+0x42/0x60 [ 158.006350][ C1] start_secondary+0x102/0x110 [ 158.011171][ C1] common_startup_64+0x13e/0x147 [ 158.016151][ C1] [ 158.019240][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.026539][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 158.036865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 158.046920][ C1] Call Trace: [ 158.050195][ C1] [ 158.053028][ C1] dump_stack_lvl+0x241/0x360 [ 158.057701][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.062895][ C1] ? __pfx__printk+0x10/0x10 [ 158.067477][ C1] ? vscnprintf+0x5d/0x90 [ 158.071807][ C1] panic+0x349/0x880 [ 158.075696][ C1] ? __warn+0x177/0x4e0 [ 158.079853][ C1] ? __pfx_panic+0x10/0x10 [ 158.084270][ C1] ? common_startup_64+0x13e/0x147 [ 158.089376][ C1] __warn+0x34b/0x4e0 [ 158.093352][ C1] ? ip_rt_bug+0x2c/0x110 [ 158.097680][ C1] report_bug+0x2b3/0x500 [ 158.102002][ C1] ? ip_rt_bug+0x2c/0x110 [ 158.106329][ C1] handle_bug+0x60/0x90 [ 158.110572][ C1] exc_invalid_op+0x1a/0x50 [ 158.115068][ C1] asm_exc_invalid_op+0x1a/0x20 [ 158.120005][ C1] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 158.124949][ C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 1b 61 72 f7 66 90 e8 14 61 72 f7 31 ff 48 89 de ba 02 00 00 00 e8 65 44 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 158.144658][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 158.150717][ C1] RAX: f134cd00719ad200 RBX: ffff888027f11500 RCX: ffffffff8170cfaa [ 158.158769][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c610de0 [ 158.166735][ C1] RBP: 0000000000000001 R08: ffffffff942e589f R09: ffffffff8a22890b [ 158.174704][ C1] R10: dffffc0000000000 R11: fffffbfff285cb14 R12: dffffc0000000000 [ 158.182676][ C1] R13: ffffc90000a188f8 R14: ffff888063238000 R15: ffff8881456da1c0 [ 158.190645][ C1] ? ip_rt_bug+0x2b/0x110 [ 158.194974][ C1] ? mark_lock+0x9a/0x360 [ 158.199298][ C1] ip_push_pending_frames+0xbf/0x150 [ 158.204603][ C1] __icmp_send+0x1013/0x15c0 [ 158.209194][ C1] ? __icmp_send+0x5cb/0x15c0 [ 158.213951][ C1] ? __pfx___icmp_send+0x10/0x10 [ 158.218891][ C1] ? mark_lock+0x9a/0x360 [ 158.223217][ C1] ? look_up_lock_class+0x77/0x170 [ 158.228364][ C1] ipv4_link_failure+0x62f/0xa10 [ 158.233337][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 158.238797][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 158.243904][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 158.249360][ C1] arp_error_report+0x114/0x160 [ 158.254232][ C1] neigh_invalidate+0x247/0x470 [ 158.259084][ C1] neigh_timer_handler+0x8a5/0xfe0 [ 158.264195][ C1] call_timer_fn+0x18e/0x650 [ 158.268775][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 158.274399][ C1] ? call_timer_fn+0xc0/0x650 [ 158.279082][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 158.284736][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 158.289844][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 158.295470][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 158.301094][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 158.306717][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.311992][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 158.317209][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 158.322837][ C1] __run_timer_base+0x66a/0x8e0 [ 158.327703][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 158.333096][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.339421][ C1] run_timer_softirq+0xb7/0x170 [ 158.344264][ C1] handle_softirqs+0x2c5/0x980 [ 158.349024][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 158.353779][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 158.359059][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 158.364252][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 158.368834][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 158.374030][ C1] irq_exit_rcu+0x9/0x30 [ 158.378277][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 158.383923][ C1] [ 158.386850][ C1] [ 158.389778][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.395751][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 158.401034][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 a0 9f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 158.420636][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 158.426718][ C1] RAX: ffff88801d2e8000 RBX: ffff88801d687864 RCX: 0000000000048a41 [ 158.434713][ C1] RDX: 0000000000000001 RSI: ffff88801d687800 RDI: ffff88801d687864 [ 158.442686][ C1] RBP: 000000000003a9b8 R08: ffff8880b8737e9b R09: 1ffff110170e6fd3 [ 158.450665][ C1] R10: dffffc0000000000 R11: ffffffff8bcb3a50 R12: ffff88801f3d3800 [ 158.458634][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f12ec60 [ 158.466603][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 158.471925][ C1] acpi_idle_enter+0xe4/0x140 [ 158.476602][ C1] cpuidle_enter_state+0x109/0x470 [ 158.481715][ C1] ? __pfx_menu_select+0x10/0x10 [ 158.486655][ C1] cpuidle_enter+0x5d/0xa0 [ 158.491091][ C1] do_idle+0x375/0x5d0 [ 158.495155][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.501484][ C1] ? __pfx_do_idle+0x10/0x10 [ 158.506066][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.511955][ C1] ? complete+0xb4/0x1c0 [ 158.516189][ C1] cpu_startup_entry+0x42/0x60 [ 158.520947][ C1] start_secondary+0x102/0x110 [ 158.525702][ C1] common_startup_64+0x13e/0x147 [ 158.530667][ C1] [ 158.534089][ C1] Kernel Offset: disabled [ 158.538514][ C1] Rebooting in 86400 seconds..