last executing test programs: 7.043420528s ago: executing program 2 (id=306): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000680)={0x2, 'nr0\x00', {0x1}, 0x4}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) 5.859277911s ago: executing program 2 (id=319): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000680)={0x2, 'nr0\x00', {0x1}, 0x4}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], 0x1000f) 5.072860768s ago: executing program 2 (id=327): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x24020400) socket$netlink(0x10, 0x3, 0x10) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4120, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0xfffffffc, 0x1}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 3.96258485s ago: executing program 1 (id=337): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000680)={0x2, 'nr0\x00', {0x1}, 0x4}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], 0x1000f) 3.203071808s ago: executing program 1 (id=342): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async, rerun: 64) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 32) close(r2) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05000000000000001a000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f0000000440), &(0x7f0000000140)=r6}, 0x20) (async) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000010000e7c99ede2732f6e274fbf5b03c98d5cfb245356a171a6cda95b118e9336aa6b43de454c485aac67e1b74be2c954ca33face99c567af89661e7dc30", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRESDEC, @ANYRES32=r7], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r13, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 3.09929229s ago: executing program 0 (id=343): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x2d7b, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x2d7b, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) sendto$packet(r0, &(0x7f0000000040)="bb53a94584285101010000853e60", 0xe, 0x14, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=""/98, 0x62}, 0xb45}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x2040, 0x0) (async) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=""/98, 0x62}, 0xb45}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x2040, 0x0) 2.637035051s ago: executing program 0 (id=345): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) 2.386702035s ago: executing program 1 (id=346): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) 2.367567813s ago: executing program 2 (id=347): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000680)={0x2, 'nr0\x00', {0x1}, 0x4}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) 2.227063469s ago: executing program 3 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/73}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000090601020000000000040000000000000000020073797a3100000000480007802edb8b72da530c001680080001400a0101000900130073797a30000000000a001100aaaaaaaaaabb000008000b40000000011800148014000240fe8000"/108], 0x6c}, 0x1, 0x0, 0x0, 0x100000ca}, 0x4000080) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0xc4, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ZONE={0x6}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xaf}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x5870, 0xfffffff7]}, @CTA_ZONE={0x6}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x8}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xf9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x34}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) 1.877032414s ago: executing program 4 (id=349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000440)="9a", 0x1}, {&(0x7f0000000340)="347648a92c1bff9734e91680794f81d912bdfc214ba2b50b76b30d80d56c620173f5b26a3d67faf85076a40fbe35e55241ef21bd9cbe7816726cf987273a93e4f667bc2ece8493de18a6fb713490cb769ca8eb4ece8e0f5cb83d46c36ab927bb590c69890198063570d42e4548aa17efd3c541ec18cc8656341f0720ff6e38b2a06cc57feb5526fad2c37bceafaf3e9f6be586b9a41b9d05b3e6efb218d5d46fa80a02a3daed021605bff37b57f848dea709eebff0124fab13d779809e06c02ab4fee0d69d612c6279d586c942c50b94733d52b510c91ffc6f8f2aeb2f4ba791", 0xe0}], 0x2}}, {{&(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)='V', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x3, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r6}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x5}, &(0x7f0000000100)=0x8) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg(r7, 0x0, 0x4004044) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b00ffff6970768a616e08000c0002800600010000000001000027"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) 1.779458786s ago: executing program 3 (id=350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c020000190001000000400003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbffffffffffffff0000000000000000efb0000000000000010000000000000008000000000000000000000000000000000000000000000000000002000000000a00100001"], 0x25c}}, 0x4004) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x4000004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001"], 0x50}}, 0x0) 1.693220616s ago: executing program 4 (id=351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1.692731492s ago: executing program 3 (id=352): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000680)={0x2, 'nr0\x00', {0x1}, 0x4}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], 0x1000f) 1.65602654s ago: executing program 4 (id=353): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x5, 0xc}}}, 0x24}}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) write(r4, &(0x7f00000000c0)="024b47a6ae738a1d592fb6db21f59a9144e906b9a068bba0941c70aa756f99dd9465", 0x22) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0801000013000100"/20, @ANYRES32=r7, @ANYBLOB="00000000182800000500270000000000d8001a800800028004000180300002802c00018008001000ff00000008001a00ff07000008000600"], 0x108}}, 0x0) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327d", 0x9}}, 0xee) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x88) getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000140)=0x2, 0x4) close(r5) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0xffffd, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.598366949s ago: executing program 0 (id=354): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x100042, 0x1, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0) shutdown(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX=r4], 0x44) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000480)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000100)=0xfffffffffffffcee) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = accept$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@netrom, @rose, @bcast, @bcast, @null, @rose, @null]}, &(0x7f00000003c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000400)={0x0, @bcast, @rose={'rose', 0x0}, 0xfff, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000300)=0x59cc, 0x4) ppoll(&(0x7f0000000700)=[{r6, 0x80}], 0x1, &(0x7f0000000780), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) socketpair(0xb, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000002c0)={r5, 0x4800}, 0x8) 1.443603853s ago: executing program 0 (id=355): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffc3, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e0003000000080007006401010108000a00", @ANYRES32], 0x54}}, 0x0) 1.414838932s ago: executing program 1 (id=356): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000480)=""/235, &(0x7f0000000580)=0xeb) sendto$inet(r0, 0x0, 0x2, 0x4044898, &(0x7f0000e68000)={0x2, 0x4e26, @remote}, 0x10) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) (fail_nth: 21) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) 1.30747401s ago: executing program 2 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$vsock_stream(0x28, 0x1, 0x0) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@tcp={0x8, 0x6, "400698", 0x60, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@fragment={0x89, 0x0, 0xa, 0x0, 0x0, 0x0, 0x68}, @fragment={0x21, 0x0, 0x7, 0x1, 0x0, 0x5, 0x68}, @fragment={0x21, 0x0, 0x3, 0x0, 0x0, 0x19, 0x67}, @hopopts={0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x42ab}]}, @fragment={0x5e, 0x0, 0x9, 0x0, 0x0, 0xf, 0x68}], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x10, 0x4, 0x0, 0xe, {[@fastopen={0x22, 0xf, "54b94d3a8c470d552b6c880407"}, @exp_fastopen={0xfe, 0xa, 0xf989, "95018834cc36"}]}}}}}}}, 0x96) 1.117311093s ago: executing program 1 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/73}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000090601020000000000040000000000000000020073797a3100000000480007802edb8b72da530c001680080001400a0101000900130073797a30000000000a001100aaaaaaaaaabb000008000b40000000011800148014000240fe8000"/108], 0x6c}, 0x1, 0x0, 0x0, 0x100000ca}, 0x4000080) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x4804) 1.008975355s ago: executing program 4 (id=359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000001000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 986.481629ms ago: executing program 0 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/73}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000090601020000000000040000000000000000020073797a3100000000480007802edb8b72da530c001680080001400a0101000900130073797a30000000000a001100aaaaaaaaaabb000008000b40000000011800148014000240fe8000"/108], 0x6c}, 0x1, 0x0, 0x0, 0x100000ca}, 0x4000080) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0xc4, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ZONE={0x6}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xaf}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x5870, 0xfffffff7]}, @CTA_ZONE={0x6}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x8}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xf9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x34}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) 916.949779ms ago: executing program 4 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/73}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000090601020000000000040000000000000000020073797a3100000000480007802edb8b72da530c001680080001400a0101000900130073797a30000000000a001100aaaaaaaaaabb000008000b40000000011800148014000240fe8000"/108], 0x6c}, 0x1, 0x0, 0x0, 0x100000ca}, 0x4000080) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x4804) 855.746022ms ago: executing program 3 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001880)=ANY=[@ANYBLOB="5800000010000304df2c7b37e4d13c3600000000fedbdf2500000000e06865318cd3149355a3d5a82a79d32e8159b0eedfa2e0236a59155b2fc5e453bf70f3", @ANYRES32=0x0, @ANYBLOB="0001000008a600003000128009000100766c616e00000000200002800600010000000000100003800c00390009000000000000000400048008000500", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701}, 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff6727e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b15c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f00"/202, 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmmsg(r8, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/120, 0x78}], 0x3, &(0x7f0000000800)=""/4096, 0x1000}, 0x9}], 0x1, 0x100, &(0x7f0000001840)={0x0, 0x989680}) r9 = openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000fc0), 0x0, 0x0, 0x0) 844.318459ms ago: executing program 2 (id=363): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000003080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x81) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0xf8, 0x4, 0x5, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x20, 0x81, 0x983f}}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @multicast2}, &(0x7f0000000380)=0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100003b000103000000000000000001"], 0x114}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000680)="ab6ab29ffbd3af06c936bab8302eb54e9c30cf35beff4fca113ddfae13933608be9d59d9aa4c588b99e74914ad1997022766f7bfee5bb0e814c9e12eff653de6a299bc8be418f6ffbf6f6dbbc7295ea9713b365ea1d38d25394346236c8eaaf6a8ffd2dff0cb34dd2b2bfce36f5e4279e0b064a2225e5035f9a08680209f5467e10faa112a3f85672af9d5764939aed3aaaf96dbf1bf006c08859a9bbf568fa10eacd0828fe03df69b6babcc4a3f46c29c5069e63cf473f7d7aa054d256be2e163d206d6ff1dd50d8acc9e6a03", 0xcd, 0x200008c0, &(0x7f0000000100)={0xa, 0x4e23, 0xffffffff, @mcast1, 0x9}, 0x1c) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xa, 0x1, 0x9, 0x0, "b81af436cd0471587fdfb6733a7bd36f2562cbacb1804403be396c70c6d4fd7a3c580cfb59f696fe6595865dbd499d23158dd64f4d5ee4945043a4ce0ff4802d66a7752630daa299e625db14f08cfc11456fca95e920d876a37aeb6453a99f7404723f3bced127dcc4c45a928d3e629ce828afe41df4fcf193ad147131275f5b"}) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x4000080) 842.845756ms ago: executing program 1 (id=364): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) 327.361514ms ago: executing program 4 (id=365): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0) poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6004c2ad00101100fc0100000000000001ff0200000000000000000000000000014e210e22001090780200"/70], 0x0) 256.611346ms ago: executing program 3 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x0, 0x0, 0x2, 0xff, 0x1, 0x1600}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4008094) 225.493158ms ago: executing program 0 (id=367): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0) unshare(0x6a040000) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c", 0x2d}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="010091ddc0", 0xfffffffffffffea1}], 0x1}, 0x4000001) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000680)={0x2, 'nr0\x00', {0x1}, 0x4}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) 0s ago: executing program 3 (id=368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x3c}}, 0x4044) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x16}}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x800) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r5, 0x210, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x38}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000101401002cbd7000fedbdf65080003000400000008000180"], 0x20}, 0x1, 0x0, 0x0, 0x2000c836}, 0x40) setsockopt$inet6_tcp_int(r0, 0x11a, 0x1b, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x2010, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r7, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) sendto$isdn(r7, &(0x7f00000005c0)={0x84, 0x6, "2065d4aead964eac6ef27add0bcf11"}, 0x17, 0x10, &(0x7f0000000600)={0x22, 0x9, 0x6, 0x80, 0x8}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 82.894630][ T5818] cgroup: Unknown subsys name 'net' [ 83.021475][ T5818] cgroup: Unknown subsys name 'cpuset' [ 83.031463][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.614930][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.367957][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.401626][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.409736][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.417612][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.425058][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.468126][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.476138][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.484158][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.498906][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.507235][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.522230][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.530430][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.538315][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.548722][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.551419][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.556601][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.571155][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.573435][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.579612][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.593783][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.607851][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.615524][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.617963][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.631385][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.631479][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.284028][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.363987][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.417075][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.453836][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.667822][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.675678][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.684459][ T5831] bridge_slave_0: entered allmulticast mode [ 88.692045][ T5831] bridge_slave_0: entered promiscuous mode [ 88.712019][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.735978][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.743310][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.750587][ T5831] bridge_slave_1: entered allmulticast mode [ 88.758122][ T5831] bridge_slave_1: entered promiscuous mode [ 88.859476][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.867545][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.874723][ T5829] bridge_slave_0: entered allmulticast mode [ 88.882129][ T5829] bridge_slave_0: entered promiscuous mode [ 88.919279][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.926420][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.934379][ T5835] bridge_slave_0: entered allmulticast mode [ 88.942309][ T5835] bridge_slave_0: entered promiscuous mode [ 88.984155][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.991435][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.998884][ T5829] bridge_slave_1: entered allmulticast mode [ 89.006169][ T5829] bridge_slave_1: entered promiscuous mode [ 89.016266][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.026488][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.033736][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.041056][ T5833] bridge_slave_0: entered allmulticast mode [ 89.048772][ T5833] bridge_slave_0: entered promiscuous mode [ 89.056182][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.063702][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.071130][ T5835] bridge_slave_1: entered allmulticast mode [ 89.078925][ T5835] bridge_slave_1: entered promiscuous mode [ 89.133829][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.143563][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.151125][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.158488][ T5833] bridge_slave_1: entered allmulticast mode [ 89.165698][ T5833] bridge_slave_1: entered promiscuous mode [ 89.270357][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.298439][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.311463][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.323393][ T5831] team0: Port device team_slave_0 added [ 89.332588][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.346006][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.358435][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.367815][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.374942][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.382535][ T5828] bridge_slave_0: entered allmulticast mode [ 89.389854][ T5828] bridge_slave_0: entered promiscuous mode [ 89.398450][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.405596][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.412888][ T5828] bridge_slave_1: entered allmulticast mode [ 89.420414][ T5828] bridge_slave_1: entered promiscuous mode [ 89.441942][ T5831] team0: Port device team_slave_1 added [ 89.562374][ T5829] team0: Port device team_slave_0 added [ 89.586307][ T5833] team0: Port device team_slave_0 added [ 89.596917][ T5835] team0: Port device team_slave_0 added [ 89.605556][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.618387][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.630495][ T5829] team0: Port device team_slave_1 added [ 89.637268][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.644282][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.648831][ T5847] Bluetooth: hci1: command tx timeout [ 89.670799][ T55] Bluetooth: hci4: command tx timeout [ 89.677364][ T5846] Bluetooth: hci0: command tx timeout [ 89.681535][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.700291][ T5833] team0: Port device team_slave_1 added [ 89.706887][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.713922][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.740142][ T5847] Bluetooth: hci2: command tx timeout [ 89.744118][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.745913][ T5847] Bluetooth: hci3: command tx timeout [ 89.759900][ T5835] team0: Port device team_slave_1 added [ 89.856513][ T5828] team0: Port device team_slave_0 added [ 89.881781][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.889576][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.915839][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.928938][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.935919][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.961882][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.988252][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.995248][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.021328][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.034100][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.041184][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.067489][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.080572][ T5828] team0: Port device team_slave_1 added [ 90.087053][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.094108][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.121115][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.152699][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.160067][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.186199][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.242464][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.249883][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.277230][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.308575][ T5831] hsr_slave_0: entered promiscuous mode [ 90.315413][ T5831] hsr_slave_1: entered promiscuous mode [ 90.356693][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.364088][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.390745][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.525443][ T5835] hsr_slave_0: entered promiscuous mode [ 90.537278][ T5835] hsr_slave_1: entered promiscuous mode [ 90.543732][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.552176][ T5835] Cannot create hsr debugfs directory [ 90.563164][ T5829] hsr_slave_0: entered promiscuous mode [ 90.570784][ T5829] hsr_slave_1: entered promiscuous mode [ 90.577065][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.584741][ T5829] Cannot create hsr debugfs directory [ 90.615534][ T5833] hsr_slave_0: entered promiscuous mode [ 90.622619][ T5833] hsr_slave_1: entered promiscuous mode [ 90.628896][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.636461][ T5833] Cannot create hsr debugfs directory [ 90.697811][ T5828] hsr_slave_0: entered promiscuous mode [ 90.704366][ T5828] hsr_slave_1: entered promiscuous mode [ 90.710716][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.718407][ T5828] Cannot create hsr debugfs directory [ 91.265720][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.283059][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.294231][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.314583][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.383362][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.396106][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.421445][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.442457][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.497085][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.513353][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.541786][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.554677][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.651468][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.664124][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.702747][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.716893][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.728081][ T5847] Bluetooth: hci1: command tx timeout [ 91.733541][ T5846] Bluetooth: hci0: command tx timeout [ 91.733553][ T55] Bluetooth: hci4: command tx timeout [ 91.809995][ T5847] Bluetooth: hci3: command tx timeout [ 91.815571][ T5846] Bluetooth: hci2: command tx timeout [ 91.825406][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.836567][ T24] cfg80211: failed to load regulatory.db [ 91.869915][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.881475][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.893839][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.904962][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.950784][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.992149][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.999514][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.054726][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.062060][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.152386][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.171140][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.241147][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.257048][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.264281][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.283458][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.316477][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.323687][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.340914][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.391396][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.413332][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.420592][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.462420][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.469645][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.522137][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.529324][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.575012][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.601983][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.609209][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.641741][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.692059][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.761055][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.768286][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.825809][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.833040][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.194521][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.269836][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.359709][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.455194][ T5833] veth0_vlan: entered promiscuous mode [ 93.505062][ T5835] veth0_vlan: entered promiscuous mode [ 93.514374][ T5831] veth0_vlan: entered promiscuous mode [ 93.535494][ T5829] veth0_vlan: entered promiscuous mode [ 93.554252][ T5833] veth1_vlan: entered promiscuous mode [ 93.566421][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.589095][ T5835] veth1_vlan: entered promiscuous mode [ 93.601384][ T5831] veth1_vlan: entered promiscuous mode [ 93.623082][ T5829] veth1_vlan: entered promiscuous mode [ 93.695125][ T5833] veth0_macvtap: entered promiscuous mode [ 93.721791][ T5835] veth0_macvtap: entered promiscuous mode [ 93.755442][ T5835] veth1_macvtap: entered promiscuous mode [ 93.769406][ T5833] veth1_macvtap: entered promiscuous mode [ 93.782697][ T5831] veth0_macvtap: entered promiscuous mode [ 93.808036][ T5847] Bluetooth: hci1: command tx timeout [ 93.813503][ T5847] Bluetooth: hci4: command tx timeout [ 93.818435][ T5829] veth0_macvtap: entered promiscuous mode [ 93.819181][ T5846] Bluetooth: hci0: command tx timeout [ 93.834385][ T5829] veth1_macvtap: entered promiscuous mode [ 93.857893][ T5831] veth1_macvtap: entered promiscuous mode [ 93.883964][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.887929][ T5846] Bluetooth: hci3: command tx timeout [ 93.896790][ T5846] Bluetooth: hci2: command tx timeout [ 93.914368][ T5828] veth0_vlan: entered promiscuous mode [ 93.922543][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.937151][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.949873][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.970190][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.980692][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.991515][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.004448][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.023371][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.034077][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.044521][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.056711][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.069104][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.079405][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.090445][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.100775][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.112011][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.122001][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.132691][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.143923][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.154602][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.163836][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.172923][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.183009][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199617][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.211533][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.220881][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229796][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.247751][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.259177][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.270255][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.280826][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.293666][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.317610][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326358][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.335734][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.345112][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364916][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.376197][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.386530][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.397478][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.409982][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.420916][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.432876][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.442383][ T5828] veth1_vlan: entered promiscuous mode [ 94.474635][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.483629][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.493324][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.502173][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.647954][ T5828] veth0_macvtap: entered promiscuous mode [ 94.678732][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.687584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.701824][ T5828] veth1_macvtap: entered promiscuous mode [ 94.759998][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.771105][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.782558][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.794248][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.804535][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.815465][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.825624][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.836247][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.849142][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.865928][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.875758][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.903318][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.916213][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.923515][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.923555][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.923567][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.923580][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.923591][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.923604][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.923614][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.923627][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.010434][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.053637][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.062938][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.071774][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.083205][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.111434][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.119550][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.132333][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.132917][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.232931][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.250510][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.273354][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.297697][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.305572][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.327058][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.343265][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.462788][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.487113][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.563595][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.594041][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.714602][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.851380][ T5929] Zero length message leads to an empty skb [ 95.888367][ T5847] Bluetooth: hci0: command tx timeout [ 95.888382][ T55] Bluetooth: hci4: command tx timeout [ 95.900007][ T5846] Bluetooth: hci1: command tx timeout [ 95.968265][ T5846] Bluetooth: hci2: command tx timeout [ 95.973742][ T5846] Bluetooth: hci3: command tx timeout [ 96.121394][ T5934] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 96.158618][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7'. [ 96.289857][ T5940] 8021q: adding VLAN 0 to HW filter on device team1 [ 96.564835][ T5949] veth3: entered promiscuous mode [ 96.640235][ T5934] erspan0: entered allmulticast mode [ 96.647668][ T5960] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 96.897346][ T30] audit: type=1800 audit(1746592038.234:2): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 97.013785][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10'. [ 97.156801][ T5968] netlink: 'syz.0.11': attribute type 5 has an invalid length. [ 97.316515][ T5973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.326600][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.343535][ T5972] openvswitch: netlink: Multiple metadata blocks provided [ 97.369726][ T5972] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.417191][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.427017][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 98.016841][ T5996] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 98.114503][ T5998] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 98.354965][ T6000] veth3: entered promiscuous mode [ 98.374037][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 98.414737][ T6001] erspan0: entered allmulticast mode [ 98.420592][ T6007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.472272][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 98.811854][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 98.886786][ T6018] openvswitch: netlink: Multiple metadata blocks provided [ 98.894511][ T6021] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 98.943095][ T6018] netlink: 88 bytes leftover after parsing attributes in process `syz.2.25'. [ 99.139070][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 99.202984][ T6023] xt_CT: No such helper "pptp" [ 99.424299][ T6038] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 99.455156][ T6039] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 99.594907][ T6039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.799742][ T6043] veth3: entered promiscuous mode [ 99.866534][ T6048] veth3: entered promiscuous mode [ 99.922311][ T6036] erspan0: entered allmulticast mode [ 100.214896][ T6055] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 100.422597][ T6064] veth3: entered promiscuous mode [ 100.579742][ T6075] netlink: 'syz.4.38': attribute type 1 has an invalid length. [ 100.623222][ T6076] netlink: 'syz.0.39': attribute type 5 has an invalid length. [ 100.805441][ T6071] veth3: entered promiscuous mode [ 100.851076][ T6075] erspan0: entered allmulticast mode [ 101.285851][ T6088] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 101.295839][ T6090] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 101.540662][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.557822][ T6092] veth3: entered promiscuous mode [ 101.714146][ T6088] veth3: entered promiscuous mode [ 101.827113][ T6106] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 101.919416][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 102.075855][ T6105] veth3: entered promiscuous mode [ 102.775851][ T6128] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 103.164746][ T6135] veth3: entered promiscuous mode [ 103.458735][ T6148] netlink: 'syz.2.56': attribute type 5 has an invalid length. [ 103.650080][ T6152] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 103.805429][ T6159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.868574][ T6163] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 103.870011][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 103.901277][ T6164] netlink: 'syz.1.60': attribute type 5 has an invalid length. [ 103.920034][ T6150] veth3: entered promiscuous mode [ 104.140783][ T6163] veth3: entered promiscuous mode [ 104.158877][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 104.570303][ T6178] netlink: 'syz.4.64': attribute type 5 has an invalid length. [ 105.102535][ T6191] netlink: 'syz.1.66': attribute type 5 has an invalid length. [ 105.769381][ T6208] openvswitch: netlink: Multiple metadata blocks provided [ 105.813439][ T6208] netlink: 88 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.856508][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 106.104480][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 106.398362][ T6231] validate_nla: 1 callbacks suppressed [ 106.398382][ T6231] netlink: 'syz.0.79': attribute type 5 has an invalid length. [ 107.148056][ T6247] openvswitch: netlink: Multiple metadata blocks provided [ 107.192439][ T6247] netlink: 88 bytes leftover after parsing attributes in process `syz.4.81'. [ 107.233333][ T6248] openvswitch: netlink: Multiple metadata blocks provided [ 107.255890][ T6248] netlink: 88 bytes leftover after parsing attributes in process `syz.2.82'. [ 107.585164][ T6260] netlink: 'syz.3.85': attribute type 5 has an invalid length. [ 107.613513][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 107.692651][ T6267] netlink: 'syz.2.89': attribute type 39 has an invalid length. [ 107.733614][ T6269] netlink: 'syz.4.88': attribute type 5 has an invalid length. [ 107.822860][ T6272] netlink: 420 bytes leftover after parsing attributes in process `syz.2.89'. [ 107.844555][ T6272] netlink: 104 bytes leftover after parsing attributes in process `syz.2.89'. [ 107.905681][ T6270] vlan2: entered promiscuous mode [ 107.914310][ T6270] vlan2: entered allmulticast mode [ 107.929847][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 107.932075][ T6270] hsr_slave_1: entered allmulticast mode [ 107.947119][ T6276] netlink: 'syz.3.91': attribute type 5 has an invalid length. [ 108.078654][ T6283] netlink: 'syz.0.92': attribute type 39 has an invalid length. [ 108.184807][ T6286] netlink: 420 bytes leftover after parsing attributes in process `syz.0.92'. [ 108.204976][ T6285] vlan2: entered promiscuous mode [ 108.226312][ T6286] netlink: 104 bytes leftover after parsing attributes in process `syz.0.92'. [ 108.238008][ T6285] vlan2: entered allmulticast mode [ 108.243342][ T6285] hsr_slave_1: entered allmulticast mode [ 108.564226][ T6294] netlink: 'syz.0.94': attribute type 39 has an invalid length. [ 108.667475][ T6294] netlink: 420 bytes leftover after parsing attributes in process `syz.0.94'. [ 108.727512][ T6294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.94'. [ 109.602643][ T6327] netlink: 'syz.0.103': attribute type 5 has an invalid length. [ 109.774289][ T6332] FAULT_INJECTION: forcing a failure. [ 109.774289][ T6332] name failslab, interval 1, probability 0, space 0, times 1 [ 109.825945][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.2.105 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 109.825975][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 109.825992][ T6332] Call Trace: [ 109.826003][ T6332] [ 109.826012][ T6332] dump_stack_lvl+0x189/0x250 [ 109.826056][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.826085][ T6332] ? __pfx__printk+0x10/0x10 [ 109.826110][ T6332] ? __pfx___might_resched+0x10/0x10 [ 109.826127][ T6332] ? fs_reclaim_acquire+0x7d/0x100 [ 109.826160][ T6332] should_fail_ex+0x414/0x560 [ 109.826196][ T6332] should_failslab+0xa8/0x100 [ 109.826223][ T6332] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 109.826248][ T6332] ? __d_alloc+0x31/0x6f0 [ 109.826282][ T6332] __d_alloc+0x31/0x6f0 [ 109.826317][ T6332] d_alloc_pseudo+0x1f/0xb0 [ 109.826347][ T6332] alloc_file_pseudo+0xcc/0x210 [ 109.826379][ T6332] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 109.826405][ T6332] ? __local_bh_enable_ip+0x12d/0x1c0 [ 109.826458][ T6332] anon_inode_getfile+0xc5/0x1a0 [ 109.826488][ T6332] bpf_link_prime+0xfc/0x220 [ 109.826512][ T6332] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 109.826549][ T6332] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 109.826592][ T6332] ? __fget_files+0x2a/0x420 [ 109.826627][ T6332] bpf_raw_tracepoint_open+0x178/0x1f0 [ 109.826657][ T6332] __sys_bpf+0x3cd/0x860 [ 109.826684][ T6332] ? __pfx___sys_bpf+0x10/0x10 [ 109.826722][ T6332] ? ksys_write+0x1f0/0x250 [ 109.826742][ T6332] ? rcu_is_watching+0x15/0xb0 [ 109.826784][ T6332] __x64_sys_bpf+0x7c/0x90 [ 109.826807][ T6332] do_syscall_64+0xf6/0x210 [ 109.826826][ T6332] ? clear_bhb_loop+0x45/0xa0 [ 109.826850][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.826869][ T6332] RIP: 0033:0x7f6bea38e969 [ 109.826893][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.826908][ T6332] RSP: 002b:00007f6beb226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.826929][ T6332] RAX: ffffffffffffffda RBX: 00007f6bea5b5fa0 RCX: 00007f6bea38e969 [ 109.826943][ T6332] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000011 [ 109.826955][ T6332] RBP: 00007f6beb226090 R08: 0000000000000000 R09: 0000000000000000 [ 109.826967][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.826978][ T6332] R13: 0000000000000000 R14: 00007f6bea5b5fa0 R15: 00007ffdb7059428 [ 109.827009][ T6332] [ 109.942996][ T6336] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 110.128587][ T6339] netlink: 'syz.2.106': attribute type 39 has an invalid length. [ 110.434371][ T6336] veth3: entered promiscuous mode [ 110.654866][ T6353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.126419][ T6377] openvswitch: netlink: Multiple metadata blocks provided [ 111.395800][ T6384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.585382][ T6387] FAULT_INJECTION: forcing a failure. [ 111.585382][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.618798][ T6390] FAULT_INJECTION: forcing a failure. [ 111.618798][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 111.637363][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.0.117 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 111.637392][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 111.637403][ T6387] Call Trace: [ 111.637410][ T6387] [ 111.637418][ T6387] dump_stack_lvl+0x189/0x250 [ 111.637450][ T6387] ? __lock_acquire+0xaac/0xd20 [ 111.637480][ T6387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.637508][ T6387] ? __pfx__printk+0x10/0x10 [ 111.637527][ T6387] ? __might_fault+0xb0/0x130 [ 111.637562][ T6387] should_fail_ex+0x414/0x560 [ 111.637599][ T6387] _copy_from_user+0x2d/0xb0 [ 111.637627][ T6387] ___sys_sendmsg+0x158/0x2a0 [ 111.637655][ T6387] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.637717][ T6387] ? __fget_files+0x2a/0x420 [ 111.637737][ T6387] ? __fget_files+0x3a0/0x420 [ 111.637766][ T6387] __x64_sys_sendmsg+0x19b/0x260 [ 111.637789][ T6387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.637823][ T6387] ? do_syscall_64+0xba/0x210 [ 111.637840][ T6387] do_syscall_64+0xf6/0x210 [ 111.637855][ T6387] ? clear_bhb_loop+0x45/0xa0 [ 111.637874][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.637888][ T6387] RIP: 0033:0x7f90a5d8e969 [ 111.637903][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.637916][ T6387] RSP: 002b:00007f90a6c23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.637933][ T6387] RAX: ffffffffffffffda RBX: 00007f90a5fb5fa0 RCX: 00007f90a5d8e969 [ 111.637943][ T6387] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 111.637952][ T6387] RBP: 00007f90a6c23090 R08: 0000000000000000 R09: 0000000000000000 [ 111.637961][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.637970][ T6387] R13: 0000000000000000 R14: 00007f90a5fb5fa0 R15: 00007ffcc2a14ce8 [ 111.637995][ T6387] [ 111.911540][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.1.118 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 111.911569][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 111.911581][ T6390] Call Trace: [ 111.911588][ T6390] [ 111.911597][ T6390] dump_stack_lvl+0x189/0x250 [ 111.911633][ T6390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.911661][ T6390] ? __pfx__printk+0x10/0x10 [ 111.911686][ T6390] ? __pfx___might_resched+0x10/0x10 [ 111.911722][ T6390] ? fs_reclaim_acquire+0x7d/0x100 [ 111.911756][ T6390] should_fail_ex+0x414/0x560 [ 111.911793][ T6390] should_failslab+0xa8/0x100 [ 111.911821][ T6390] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 111.911847][ T6390] ? __alloc_skb+0x112/0x2d0 [ 111.911874][ T6390] __alloc_skb+0x112/0x2d0 [ 111.911901][ T6390] netlink_ack+0x146/0xa50 [ 111.911922][ T6390] ? __mutex_trylock_common+0x153/0x260 [ 111.911945][ T6390] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.911984][ T6390] netlink_rcv_skb+0x2a0/0x490 [ 111.912007][ T6390] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 111.912033][ T6390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.912081][ T6390] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.912102][ T6390] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.912127][ T6390] xfrm_netlink_rcv+0x79/0x90 [ 111.912151][ T6390] netlink_unicast+0x758/0x8d0 [ 111.912183][ T6390] netlink_sendmsg+0x805/0xb30 [ 111.912217][ T6390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.912244][ T6390] ? aa_sock_msg_perm+0x94/0x160 [ 111.912267][ T6390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.912288][ T6390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.912312][ T6390] __sock_sendmsg+0x219/0x270 [ 111.912334][ T6390] ____sys_sendmsg+0x505/0x830 [ 111.912366][ T6390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.912403][ T6390] ? import_iovec+0x74/0xa0 [ 111.912433][ T6390] ___sys_sendmsg+0x21f/0x2a0 [ 111.912462][ T6390] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.912529][ T6390] ? __fget_files+0x2a/0x420 [ 111.912553][ T6390] ? __fget_files+0x3a0/0x420 [ 111.912590][ T6390] __x64_sys_sendmsg+0x19b/0x260 [ 111.912620][ T6390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.912665][ T6390] ? do_syscall_64+0xba/0x210 [ 111.912687][ T6390] do_syscall_64+0xf6/0x210 [ 111.912705][ T6390] ? clear_bhb_loop+0x45/0xa0 [ 111.912729][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.912747][ T6390] RIP: 0033:0x7f21c6d8e969 [ 111.912765][ T6390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.912781][ T6390] RSP: 002b:00007f21c7bc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.912801][ T6390] RAX: ffffffffffffffda RBX: 00007f21c6fb5fa0 RCX: 00007f21c6d8e969 [ 111.912816][ T6390] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000005 [ 111.912828][ T6390] RBP: 00007f21c7bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 111.912839][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.912850][ T6390] R13: 0000000000000000 R14: 00007f21c6fb5fa0 R15: 00007ffea2583c68 [ 111.912882][ T6390] [ 112.515811][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.683506][ T6408] __nla_validate_parse: 8 callbacks suppressed [ 112.683527][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 112.758762][ T6415] netlink: 'syz.4.123': attribute type 39 has an invalid length. [ 112.866854][ T6421] netlink: 420 bytes leftover after parsing attributes in process `syz.4.123'. [ 112.918350][ T6421] netlink: 104 bytes leftover after parsing attributes in process `syz.4.123'. [ 113.005698][ T6419] vlan2: entered promiscuous mode [ 113.014673][ T6419] vlan2: entered allmulticast mode [ 113.037705][ T6419] hsr_slave_1: entered allmulticast mode [ 113.051680][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 113.321262][ T6433] netlink: 'syz.0.127': attribute type 5 has an invalid length. [ 113.743550][ T6442] netlink: 'syz.4.129': attribute type 39 has an invalid length. [ 113.764885][ T6442] netlink: 420 bytes leftover after parsing attributes in process `syz.4.129'. [ 113.768752][ T6443] openvswitch: netlink: Multiple metadata blocks provided [ 113.775299][ T6442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.129'. [ 113.796488][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 113.855156][ T6443] netlink: 88 bytes leftover after parsing attributes in process `syz.1.128'. [ 113.902080][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.128'. [ 113.975609][ T6448] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 114.137599][ T6455] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 114.589902][ T6470] trusted_key: syz.0.138 sent an empty control message without MSG_MORE. [ 114.642677][ T6472] netlink: 'syz.2.139': attribute type 29 has an invalid length. [ 114.687770][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 114.711151][ T6472] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 115.486209][ T6487] openvswitch: netlink: Multiple metadata blocks provided [ 116.131373][ T6497] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 116.397975][ T6497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.555977][ T6503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.590321][ T6503] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 116.615216][ T6503] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 116.704856][ T6504] veth3: entered promiscuous mode [ 117.568865][ T6528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.650231][ T6530] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.659818][ T6530] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.668611][ T6530] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.677387][ T6530] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.718979][ T6530] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 117.813736][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880240d9c00: rx timeout, send abort [ 117.886297][ T30] audit: type=1800 audit(1746592059.224:3): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.150" name="memory.events" dev="tmpfs" ino=179 res=0 errno=0 [ 118.127190][ T6544] openvswitch: netlink: Multiple metadata blocks provided [ 118.171453][ T6544] __nla_validate_parse: 3 callbacks suppressed [ 118.171472][ T6544] netlink: 88 bytes leftover after parsing attributes in process `syz.0.156'. [ 118.253212][ T6544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.156'. [ 118.322809][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880240d9c00: abort rx timeout. Force session deactivation [ 118.991955][ T6563] ip6gre1: entered promiscuous mode [ 119.004201][ T6566] netlink: 'syz.4.162': attribute type 5 has an invalid length. [ 119.016154][ T6571] openvswitch: netlink: Multiple metadata blocks provided [ 119.040224][ T6567] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 119.180011][ T6576] nbd: must specify a device to reconfigure [ 119.266845][ T6578] netlink: 'syz.0.164': attribute type 5 has an invalid length. [ 119.638938][ T6590] openvswitch: netlink: Multiple metadata blocks provided [ 119.686376][ T6585] netlink: 88 bytes leftover after parsing attributes in process `syz.3.167'. [ 119.725434][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 119.752420][ T6598] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 119.763423][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.167'. [ 119.791013][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.810901][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 119.813520][ T6598] team0: Port device bond0 added [ 120.214495][ T6617] netlink: 'syz.0.174': attribute type 39 has an invalid length. [ 120.224541][ T6604] team0 (unregistering): Port device team_slave_0 removed [ 120.242173][ T6604] team0 (unregistering): Port device team_slave_1 removed [ 120.264793][ T6604] team0 (unregistering): Port device bond0 removed [ 120.300614][ T30] audit: type=1800 audit(1746592061.644:4): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="memory.events" dev="tmpfs" ino=176 res=0 errno=0 [ 120.342058][ T6627] netlink: 420 bytes leftover after parsing attributes in process `syz.0.174'. [ 120.386233][ T6627] netlink: 104 bytes leftover after parsing attributes in process `syz.0.174'. [ 120.485787][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 121.088024][ T5846] Bluetooth: hci3: command 0x0401 tx timeout [ 121.095058][ T6654] warning: `syz.2.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.167542][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 121.197663][ T6659] openvswitch: netlink: Multiple metadata blocks provided [ 121.236580][ T6663] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 121.273077][ T6666] netlink: 'syz.3.183': attribute type 5 has an invalid length. [ 121.312940][ T6663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.371007][ T6668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.387984][ T6668] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.402734][ T6668] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 121.455251][ T6673] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.483540][ T6663] veth3: entered promiscuous mode [ 121.734768][ T6677] veth0_to_bond: entered allmulticast mode [ 121.958352][ T6685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.965918][ T6685] IPv6: NLM_F_CREATE should be set when creating new route [ 121.973265][ T6685] IPv6: NLM_F_CREATE should be set when creating new route [ 122.202645][ T6693] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 122.416420][ T6701] syz_tun: entered allmulticast mode [ 122.483229][ T6701] dvmrp1: entered allmulticast mode [ 122.636637][ T6705] openvswitch: netlink: Multiple metadata blocks provided [ 122.647230][ T6700] syz_tun: left allmulticast mode [ 122.724717][ T6708] FAULT_INJECTION: forcing a failure. [ 122.724717][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 122.783493][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.3.197 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 122.783522][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 122.783532][ T6708] Call Trace: [ 122.783539][ T6708] [ 122.783547][ T6708] dump_stack_lvl+0x189/0x250 [ 122.783595][ T6708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.783623][ T6708] ? __pfx__printk+0x10/0x10 [ 122.783646][ T6708] ? __pfx___might_resched+0x10/0x10 [ 122.783670][ T6708] ? fs_reclaim_acquire+0x7d/0x100 [ 122.783704][ T6708] should_fail_ex+0x414/0x560 [ 122.783741][ T6708] should_failslab+0xa8/0x100 [ 122.783769][ T6708] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 122.783795][ T6708] ? page_pool_create_percpu+0x76/0xbe0 [ 122.783828][ T6708] page_pool_create_percpu+0x76/0xbe0 [ 122.783854][ T6708] ? __kvmalloc_node_noprof+0x338/0x5e0 [ 122.783880][ T6708] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 122.783908][ T6708] bpf_test_run_xdp_live+0x1cd/0x1aa0 [ 122.783939][ T6708] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 122.783977][ T6708] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.784012][ T6708] ? synchronize_rcu+0x11a/0x310 [ 122.784031][ T6708] ? __pfx_synchronize_rcu+0x10/0x10 [ 122.784053][ T6708] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 122.784078][ T6708] ? 0xffffffffa0003b40 [ 122.784122][ T6708] ? 0xffffffffa0000d4c [ 122.784167][ T6708] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 122.784208][ T6708] ? _copy_from_user+0x94/0xb0 [ 122.784235][ T6708] ? bpf_test_init+0x133/0x170 [ 122.784254][ T6708] ? xdp_convert_md_to_buff+0x5b/0x330 [ 122.784280][ T6708] bpf_prog_test_run_xdp+0x713/0xf90 [ 122.784319][ T6708] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 122.784347][ T6708] ? __fget_files+0x2a/0x420 [ 122.784378][ T6708] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 122.784401][ T6708] bpf_prog_test_run+0x2a9/0x340 [ 122.784432][ T6708] __sys_bpf+0x4a4/0x860 [ 122.784458][ T6708] ? __pfx___sys_bpf+0x10/0x10 [ 122.784496][ T6708] ? ksys_write+0x1f0/0x250 [ 122.784517][ T6708] ? rcu_is_watching+0x15/0xb0 [ 122.784558][ T6708] __x64_sys_bpf+0x7c/0x90 [ 122.784580][ T6708] do_syscall_64+0xf6/0x210 [ 122.784599][ T6708] ? clear_bhb_loop+0x45/0xa0 [ 122.784623][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.784641][ T6708] RIP: 0033:0x7f0d7218e969 [ 122.784658][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.784673][ T6708] RSP: 002b:00007f0d72f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.784703][ T6708] RAX: ffffffffffffffda RBX: 00007f0d723b5fa0 RCX: 00007f0d7218e969 [ 122.784717][ T6708] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 122.784729][ T6708] RBP: 00007f0d72f92090 R08: 0000000000000000 R09: 0000000000000000 [ 122.784741][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.784752][ T6708] R13: 0000000000000000 R14: 00007f0d723b5fa0 R15: 00007fff8c662578 [ 122.784783][ T6708] [ 123.172275][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.231393][ T6711] __nla_validate_parse: 7 callbacks suppressed [ 123.231413][ T6711] netlink: 168 bytes leftover after parsing attributes in process `syz.4.198'. [ 123.379723][ T6727] netlink: 'syz.0.202': attribute type 5 has an invalid length. [ 123.524180][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 123.528946][ T6726] bridge_slave_0: left allmulticast mode [ 123.573586][ T6726] bridge_slave_0: left promiscuous mode [ 123.602813][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.661969][ T6726] bridge_slave_1: left allmulticast mode [ 123.691521][ T6726] bridge_slave_1: left promiscuous mode [ 123.714220][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.763467][ T6726] bond0: (slave bond_slave_0): Releasing backup interface [ 123.771414][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 123.824812][ T6726] bond0: (slave bond_slave_1): Releasing backup interface [ 123.864031][ T6751] No such timeout policy "syz0" [ 123.892354][ T6726] team0: Port device team_slave_0 removed [ 123.923468][ T6726] team0: Port device team_slave_1 removed [ 123.941452][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.963732][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.976368][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.986128][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.053460][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 124.085379][ T6758] syz.4.210 uses old SIOCAX25GETINFO [ 124.274546][ T6765] netlink: 'syz.2.211': attribute type 5 has an invalid length. [ 124.743963][ T6782] netlink: 'syz.1.216': attribute type 5 has an invalid length. [ 124.855820][ T6786] netlink: 316 bytes leftover after parsing attributes in process `syz.0.217'. [ 125.233151][ T6796] netlink: 'syz.2.219': attribute type 5 has an invalid length. [ 125.346692][ T6802] netlink: 'syz.3.220': attribute type 5 has an invalid length. [ 125.636957][ T6811] netlink: 104 bytes leftover after parsing attributes in process `syz.1.224'. [ 125.815325][ T6816] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 125.937157][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.980856][ T6823] veth3: entered promiscuous mode [ 126.103499][ T6820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.113238][ T6820] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.126158][ T6820] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 126.153410][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.187475][ T6825] batadv_slave_0: entered promiscuous mode [ 126.209208][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 126.239761][ T6833] nbd: must specify an index to disconnect [ 126.703769][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 126.820045][ T6857] netlink: 'syz.4.237': attribute type 5 has an invalid length. [ 126.861102][ T5907] IPVS: starting estimator thread 0... [ 126.926181][ T6858] netlink: 224 bytes leftover after parsing attributes in process `syz.3.238'. [ 126.968245][ T6859] IPVS: using max 27 ests per chain, 64800 per kthread [ 127.213381][ T6871] netlink: 'syz.1.240': attribute type 5 has an invalid length. [ 127.239052][ T6872] netlink: 'syz.3.241': attribute type 5 has an invalid length. [ 127.704072][ T6887] batman_adv: batadv0: Adding interface: dummy0 [ 127.710915][ T6889] xt_hashlimit: size too large, truncated to 1048576 [ 127.717876][ T6887] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.751923][ T6887] batman_adv: batadv0: Interface activated: dummy0 [ 127.848179][ T6895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 128.086715][ T6898] netlink: 'syz.0.249': attribute type 5 has an invalid length. [ 128.884028][ T6925] netlink: 'syz.2.255': attribute type 9 has an invalid length. [ 128.935803][ T6927] __nla_validate_parse: 2 callbacks suppressed [ 128.935823][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 129.086852][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 129.291548][ T6942] validate_nla: 1 callbacks suppressed [ 129.291567][ T6942] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 129.377263][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 129.459754][ T6942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.625292][ T6954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.265'. [ 129.673004][ T6949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.684452][ T6949] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 129.702714][ T6949] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 129.846764][ T6942] veth3: entered promiscuous mode [ 129.874700][ T6966] can: request_module (can-proto-3) failed. [ 129.953128][ T6954] veth1_to_bond: entered allmulticast mode [ 129.965976][ T6962] veth1_to_bond: entered promiscuous mode [ 129.975482][ T6951] veth1_to_bond: left promiscuous mode [ 129.981475][ T6951] veth1_to_bond: left allmulticast mode [ 130.161518][ T30] audit: type=1800 audit(1746592071.504:5): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.268" name="memory.events" dev="tmpfs" ino=314 res=0 errno=0 [ 130.266604][ T6987] netlink: 'syz.4.273': attribute type 5 has an invalid length. [ 130.308184][ T6989] netlink: 'syz.3.274': attribute type 5 has an invalid length. [ 131.141963][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 131.228965][ T7028] netlink: 'syz.4.283': attribute type 5 has an invalid length. [ 131.254392][ T7026] bond0: option ad_select: unable to set because the bond device is up [ 131.597679][ T7036] xt_TCPMSS: Only works on TCP SYN packets [ 131.940019][ T7059] netlink: 140 bytes leftover after parsing attributes in process `syz.1.294'. [ 131.956699][ T5907] IPVS: starting estimator thread 0... [ 131.980118][ T7061] netlink: 'syz.3.293': attribute type 5 has an invalid length. [ 132.021371][ T7059] xt_cgroup: invalid path, errno=-2 [ 132.048468][ T7060] IPVS: using max 26 ests per chain, 62400 per kthread [ 132.589812][ T7092] openvswitch: netlink: Multiple metadata blocks provided [ 132.598642][ T7093] FAULT_INJECTION: forcing a failure. [ 132.598642][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 132.615717][ T7092] netlink: 88 bytes leftover after parsing attributes in process `syz.0.303'. [ 132.616390][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.4.304 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 132.616419][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 132.616432][ T7093] Call Trace: [ 132.616441][ T7093] [ 132.616450][ T7093] dump_stack_lvl+0x189/0x250 [ 132.616490][ T7093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.616522][ T7093] ? __pfx__printk+0x10/0x10 [ 132.616551][ T7093] ? __pfx___might_resched+0x10/0x10 [ 132.616568][ T7093] ? fs_reclaim_acquire+0x7d/0x100 [ 132.616610][ T7093] should_fail_ex+0x414/0x560 [ 132.616651][ T7093] should_failslab+0xa8/0x100 [ 132.616682][ T7093] __kmalloc_noprof+0xcb/0x4f0 [ 132.616707][ T7093] ? sock_kmalloc+0xd6/0x160 [ 132.616734][ T7093] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 132.616772][ T7093] sock_kmalloc+0xd6/0x160 [ 132.616804][ T7093] hash_recvmsg+0x1c8/0x750 [ 132.616831][ T7093] ? __pfx_hash_recvmsg+0x10/0x10 [ 132.616852][ T7093] sock_recvmsg_nosec+0x183/0x1c0 [ 132.616877][ T7093] ____sys_recvmsg+0x3aa/0x460 [ 132.616916][ T7093] ? __pfx_____sys_recvmsg+0x10/0x10 [ 132.616963][ T7093] ? import_iovec+0x74/0xa0 [ 132.616996][ T7093] ___sys_recvmsg+0x1b5/0x510 [ 132.617032][ T7093] ? __pfx____sys_recvmsg+0x10/0x10 [ 132.617096][ T7093] ? __might_fault+0xb0/0x130 [ 132.617128][ T7093] do_recvmmsg+0x307/0x760 [ 132.617167][ T7093] ? __pfx_do_recvmmsg+0x10/0x10 [ 132.617210][ T7093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.617266][ T7093] __x64_sys_recvmmsg+0x190/0x240 [ 132.617294][ T7093] ? rcu_is_watching+0x15/0xb0 [ 132.617329][ T7093] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 132.617370][ T7093] ? do_syscall_64+0xba/0x210 [ 132.617394][ T7093] do_syscall_64+0xf6/0x210 [ 132.617414][ T7093] ? clear_bhb_loop+0x45/0xa0 [ 132.617439][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.617460][ T7093] RIP: 0033:0x7f846bd8e969 [ 132.617478][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.617495][ T7093] RSP: 002b:00007f846cc38038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 132.617517][ T7093] RAX: ffffffffffffffda RBX: 00007f846bfb5fa0 RCX: 00007f846bd8e969 [ 132.617533][ T7093] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 132.617546][ T7093] RBP: 00007f846cc38090 R08: 0000000000000000 R09: 0000000000000000 [ 132.617558][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.617570][ T7093] R13: 0000000000000000 R14: 00007f846bfb5fa0 R15: 00007ffe4d01b738 [ 132.617603][ T7093] [ 132.730651][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'. [ 132.779083][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.915772][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.078842][ T7105] netlink: 'syz.2.306': attribute type 5 has an invalid length. [ 133.186623][ T7112] netlink: 'syz.0.307': attribute type 5 has an invalid length. [ 133.480782][ T7125] FAULT_INJECTION: forcing a failure. [ 133.480782][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 133.600812][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.3.313 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 133.600842][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 133.600854][ T7125] Call Trace: [ 133.600862][ T7125] [ 133.600871][ T7125] dump_stack_lvl+0x189/0x250 [ 133.600908][ T7125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.600937][ T7125] ? __pfx__printk+0x10/0x10 [ 133.600960][ T7125] ? __pfx___might_resched+0x10/0x10 [ 133.600978][ T7125] ? fs_reclaim_acquire+0x7d/0x100 [ 133.601013][ T7125] should_fail_ex+0x414/0x560 [ 133.601050][ T7125] should_failslab+0xa8/0x100 [ 133.601078][ T7125] __kmalloc_noprof+0xcb/0x4f0 [ 133.601101][ T7125] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.601139][ T7125] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 133.601175][ T7125] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 133.601212][ T7125] genl_family_rcv_msg_doit+0xb8/0x300 [ 133.601247][ T7125] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 133.601278][ T7125] ? rcu_is_watching+0x15/0xb0 [ 133.601310][ T7125] ? apparmor_capable+0x137/0x1b0 [ 133.601345][ T7125] ? bpf_lsm_capable+0x9/0x20 [ 133.601371][ T7125] ? security_capable+0x7e/0x2e0 [ 133.601398][ T7125] genl_rcv_msg+0x60e/0x790 [ 133.601432][ T7125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.601457][ T7125] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 133.601481][ T7125] ? __pfx_nl80211_set_interface+0x10/0x10 [ 133.601507][ T7125] ? __pfx_nl80211_post_doit+0x10/0x10 [ 133.601534][ T7125] ? ref_tracker_free+0x63a/0x7d0 [ 133.601552][ T7125] ? __copy_skb_header+0xa7/0x550 [ 133.601588][ T7125] netlink_rcv_skb+0x219/0x490 [ 133.601611][ T7125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.601639][ T7125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.601687][ T7125] ? down_read+0x1ad/0x2e0 [ 133.601708][ T7125] genl_rcv+0x28/0x40 [ 133.601732][ T7125] netlink_unicast+0x758/0x8d0 [ 133.601764][ T7125] netlink_sendmsg+0x805/0xb30 [ 133.601796][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.601822][ T7125] ? aa_sock_msg_perm+0x94/0x160 [ 133.601850][ T7125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.601871][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.601894][ T7125] __sock_sendmsg+0x219/0x270 [ 133.601916][ T7125] ____sys_sendmsg+0x505/0x830 [ 133.601946][ T7125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.601981][ T7125] ? import_iovec+0x74/0xa0 [ 133.602011][ T7125] ___sys_sendmsg+0x21f/0x2a0 [ 133.602038][ T7125] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.602103][ T7125] ? __fget_files+0x2a/0x420 [ 133.602127][ T7125] ? __fget_files+0x3a0/0x420 [ 133.602163][ T7125] __x64_sys_sendmsg+0x19b/0x260 [ 133.602191][ T7125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.602235][ T7125] ? do_syscall_64+0xba/0x210 [ 133.602256][ T7125] do_syscall_64+0xf6/0x210 [ 133.602274][ T7125] ? clear_bhb_loop+0x45/0xa0 [ 133.602298][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.602323][ T7125] RIP: 0033:0x7f0d7218e969 [ 133.602340][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.602356][ T7125] RSP: 002b:00007f0d72f92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.602394][ T7125] RAX: ffffffffffffffda RBX: 00007f0d723b5fa0 RCX: 00007f0d7218e969 [ 133.602408][ T7125] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 133.602420][ T7125] RBP: 00007f0d72f92090 R08: 0000000000000000 R09: 0000000000000000 [ 133.602432][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.602443][ T7125] R13: 0000000000000000 R14: 00007f0d723b5fa0 R15: 00007fff8c662578 [ 133.602475][ T7125] [ 134.077977][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 134.087102][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 134.198161][ T7136] netlink: 'syz.2.319': attribute type 5 has an invalid length. [ 134.200204][ T7130] bridge0: entered promiscuous mode [ 134.215328][ T7130] ip6gretap0: entered promiscuous mode [ 134.238985][ T7134] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 134.829773][ T7163] netlink: 'syz.0.325': attribute type 5 has an invalid length. [ 135.021172][ T7166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.190371][ T30] audit: type=1800 audit(1746592076.534:6): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.320" name="memory.events" dev="tmpfs" ino=323 res=0 errno=0 [ 135.282696][ T7166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.350295][ T7175] openvswitch: netlink: Multiple metadata blocks provided [ 135.538368][ T7166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.833539][ T7166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.845625][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 135.952610][ T7196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.336'. [ 136.050459][ T7200] openvswitch: netlink: Multiple metadata blocks provided [ 136.076818][ T7200] netlink: 88 bytes leftover after parsing attributes in process `syz.4.335'. [ 136.101964][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.335'. [ 136.153292][ T7206] netlink: 'syz.1.337': attribute type 5 has an invalid length. [ 136.608098][ T7166] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.902009][ T7166] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.977021][ T7166] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.214700][ T7166] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.658464][ T7235] netlink: 'syz.0.345': attribute type 5 has an invalid length. [ 137.775346][ T7243] netlink: 'syz.1.346': attribute type 5 has an invalid length. [ 137.799857][ T7244] netlink: 'syz.2.347': attribute type 5 has an invalid length. [ 137.996541][ T7248] openvswitch: netlink: Multiple metadata blocks provided [ 138.067224][ T7246] netlink: 88 bytes leftover after parsing attributes in process `syz.3.348'. [ 138.131704][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.348'. [ 138.231347][ T7259] netlink: 420 bytes leftover after parsing attributes in process `syz.3.350'. [ 138.345934][ T7265] netlink: 'syz.3.352': attribute type 5 has an invalid length. [ 138.426162][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 138.457889][ T7270] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 138.634106][ T7275] FAULT_INJECTION: forcing a failure. [ 138.634106][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.651796][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.1.356 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 138.651824][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 138.651835][ T7275] Call Trace: [ 138.651864][ T7275] [ 138.651874][ T7275] dump_stack_lvl+0x189/0x250 [ 138.651906][ T7275] ? __lock_acquire+0xaac/0xd20 [ 138.651936][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.651964][ T7275] ? __pfx__printk+0x10/0x10 [ 138.651983][ T7275] ? __might_fault+0xb0/0x130 [ 138.652020][ T7275] should_fail_ex+0x414/0x560 [ 138.652056][ T7275] _copy_from_user+0x2d/0xb0 [ 138.652084][ T7275] ___sys_recvmsg+0x12e/0x510 [ 138.652115][ T7275] ? __pfx____sys_recvmsg+0x10/0x10 [ 138.652153][ T7273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.652167][ T7275] ? __might_fault+0xb0/0x130 [ 138.652195][ T7275] do_recvmmsg+0x307/0x760 [ 138.652227][ T7275] ? __pfx_do_recvmmsg+0x10/0x10 [ 138.652270][ T7275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.652324][ T7275] __x64_sys_recvmmsg+0x190/0x240 [ 138.652352][ T7275] ? rcu_is_watching+0x15/0xb0 [ 138.652385][ T7275] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 138.652419][ T7275] ? do_syscall_64+0xba/0x210 [ 138.652442][ T7275] do_syscall_64+0xf6/0x210 [ 138.652462][ T7275] ? clear_bhb_loop+0x45/0xa0 [ 138.652488][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.652507][ T7275] RIP: 0033:0x7f21c6d8e969 [ 138.652527][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.652544][ T7275] RSP: 002b:00007f21c7bc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 138.652566][ T7275] RAX: ffffffffffffffda RBX: 00007f21c6fb5fa0 RCX: 00007f21c6d8e969 [ 138.652581][ T7275] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000008 [ 138.652594][ T7275] RBP: 00007f21c7bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 138.652604][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.652613][ T7275] R13: 0000000000000000 R14: 00007f21c6fb5fa0 R15: 00007ffea2583c68 [ 138.652644][ T7275] [ 139.024231][ T7279] openvswitch: netlink: Multiple metadata blocks provided [ 139.259991][ T7301] openvswitch: netlink: Multiple metadata blocks provided [ 139.276225][ T7300] __nla_validate_parse: 5 callbacks suppressed [ 139.276244][ T7300] netlink: 56 bytes leftover after parsing attributes in process `syz.3.362'. [ 139.295617][ T7301] netlink: 88 bytes leftover after parsing attributes in process `syz.4.361'. [ 139.305085][ T7304] openvswitch: netlink: Multiple metadata blocks provided [ 139.317405][ T7301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.361'. [ 139.329574][ T7304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.360'. [ 139.340683][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.360'. [ 139.353062][ T7306] netlink: 'syz.1.364': attribute type 5 has an invalid length. [ 139.764813][ T7325] xt_TCPMSS: Only works on TCP SYN packets [ 139.890232][ T7332] netlink: 'syz.0.367': attribute type 5 has an invalid length. [ 139.966283][ T7333] ------------[ cut here ]------------ [ 139.972693][ T7333] WARNING: CPU: 1 PID: 7333 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 [ 139.983252][ T7333] Modules linked in: [ 139.987921][ T7333] CPU: 1 UID: 0 PID: 7333 Comm: syz.4.365 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 139.999931][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 140.010108][ T7333] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 140.016968][ T7333] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 140.036859][ T7333] RSP: 0018:ffffc9000b96f3d0 EFLAGS: 00010287 [ 140.044562][ T7333] RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: 0000000000080000 [ 140.052651][ T7333] RDX: ffffc9000f791000 RSI: 0000000000006e17 RDI: 0000000000006e18 [ 140.061266][ T7333] RBP: 0000000000008a3e R08: ffff88805ce88000 R09: 0000000000000004 [ 140.069743][ T7333] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c808eba [ 140.077826][ T7333] R13: ffffc9000b96f5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6 [ 140.085845][ T7333] FS: 00007f846cbf66c0(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 140.095238][ T7333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.101986][ T7333] CR2: 00007f846bd74420 CR3: 00000000237cc000 CR4: 00000000003526f0 [ 140.110172][ T7333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.118311][ T7333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.126325][ T7333] Call Trace: [ 140.129680][ T7333] [ 140.132654][ T7333] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 140.139047][ T7333] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 140.145898][ T7333] ? stack_trace_save+0x9c/0xe0 [ 140.150887][ T7333] ? stack_depot_save_flags+0x40/0x910 [ 140.156407][ T7333] ? __asan_memset+0x22/0x50 [ 140.161626][ T7333] ? __nla_put+0x85/0xd0 [ 140.165939][ T7333] ? __asan_memcpy+0x40/0x70 [ 140.171018][ T7333] ? nla_put+0xd0/0x150 [ 140.175233][ T7333] netlink_policy_dump_write+0x1e1/0x6e0 [ 140.181003][ T7333] ctrl_dumppolicy+0x6f4/0xb90 [ 140.185833][ T7333] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 140.191168][ T7333] ? genl_dumpit+0xdb/0x1b0 [ 140.195697][ T7333] ? __pfx___mutex_lock+0x10/0x10 [ 140.200797][ T7333] ? __build_skb_around+0x257/0x3e0 [ 140.206023][ T7333] genl_dumpit+0x108/0x1b0 [ 140.210576][ T7333] netlink_dump+0x64e/0xe70 [ 140.215140][ T7333] ? __pfx_netlink_dump+0x10/0x10 [ 140.220285][ T7333] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.225554][ T7333] ? kmem_cache_free+0x192/0x3f0 [ 140.230618][ T7333] netlink_recvmsg+0x67b/0xe00 [ 140.235447][ T7333] ? __lock_acquire+0xaac/0xd20 [ 140.240432][ T7333] ? __pfx_netlink_recvmsg+0x10/0x10 [ 140.245782][ T7333] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.250749][ T7333] ? aa_sock_msg_perm+0x94/0x160 [ 140.255748][ T7333] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 140.261142][ T7333] ? security_socket_recvmsg+0x7e/0x2e0 [ 140.267143][ T7333] ? __pfx_netlink_recvmsg+0x10/0x10 [ 140.272892][ T7333] sock_recvmsg+0x229/0x270 [ 140.277522][ T7333] __sys_recvfrom+0x1f6/0x340 [ 140.282244][ T7333] ? __pfx___sys_recvfrom+0x10/0x10 [ 140.287590][ T7333] ? count_memcg_event_mm+0x92/0x3b0 [ 140.292970][ T7333] ? rcu_is_watching+0x15/0xb0 [ 140.298062][ T7333] __x64_sys_recvfrom+0xde/0x100 [ 140.303053][ T7333] do_syscall_64+0xf6/0x210 [ 140.307719][ T7333] ? clear_bhb_loop+0x45/0xa0 [ 140.312463][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.318451][ T7333] RIP: 0033:0x7f846bd90734 [ 140.322898][ T7333] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 140.342670][ T7333] RSP: 002b:00007f846cbf4f30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 140.351137][ T7333] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f846bd90734 [ 140.359215][ T7333] RDX: 0000000000001000 RSI: 00007f846cbf5010 RDI: 0000000000000005 [ 140.368267][ T7333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.376298][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 140.384508][ T7333] R13: 00007f846cbf4fc0 R14: 000000000000000d R15: 0000000000000000 [ 140.392557][ T7333] [ 140.395699][ T7333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.403020][ T7333] CPU: 1 UID: 0 PID: 7333 Comm: syz.4.365 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 140.414937][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 140.425034][ T7333] Call Trace: [ 140.428350][ T7333] [ 140.431299][ T7333] dump_stack_lvl+0x99/0x250 [ 140.435924][ T7333] ? __asan_memcpy+0x40/0x70 [ 140.440541][ T7333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.445771][ T7333] ? __pfx__printk+0x10/0x10 [ 140.450405][ T7333] panic+0x2db/0x790 [ 140.454325][ T7333] ? __pfx_panic+0x10/0x10 [ 140.458785][ T7333] __warn+0x31b/0x4b0 [ 140.462793][ T7333] ? nla_get_range_unsigned+0xc8/0x4b0 [ 140.468280][ T7333] ? nla_get_range_unsigned+0xc8/0x4b0 [ 140.473786][ T7333] report_bug+0x2be/0x4f0 [ 140.478140][ T7333] ? nla_get_range_unsigned+0xc8/0x4b0 [ 140.483625][ T7333] ? nla_get_range_unsigned+0xc8/0x4b0 [ 140.489100][ T7333] ? nla_get_range_unsigned+0xca/0x4b0 [ 140.494573][ T7333] handle_bug+0x84/0x160 [ 140.498826][ T7333] exc_invalid_op+0x1a/0x50 [ 140.503337][ T7333] asm_exc_invalid_op+0x1a/0x20 [ 140.508194][ T7333] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 140.514276][ T7333] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 140.534066][ T7333] RSP: 0018:ffffc9000b96f3d0 EFLAGS: 00010287 [ 140.540147][ T7333] RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: 0000000000080000 [ 140.548217][ T7333] RDX: ffffc9000f791000 RSI: 0000000000006e17 RDI: 0000000000006e18 [ 140.556312][ T7333] RBP: 0000000000008a3e R08: ffff88805ce88000 R09: 0000000000000004 [ 140.564293][ T7333] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c808eba [ 140.572278][ T7333] R13: ffffc9000b96f5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6 [ 140.580291][ T7333] ? nla_get_range_unsigned+0x39f/0x4b0 [ 140.585868][ T7333] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 140.592152][ T7333] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 140.598952][ T7333] ? stack_trace_save+0x9c/0xe0 [ 140.603820][ T7333] ? stack_depot_save_flags+0x40/0x910 [ 140.609317][ T7333] ? __asan_memset+0x22/0x50 [ 140.613938][ T7333] ? __nla_put+0x85/0xd0 [ 140.618197][ T7333] ? __asan_memcpy+0x40/0x70 [ 140.622820][ T7333] ? nla_put+0xd0/0x150 [ 140.627020][ T7333] netlink_policy_dump_write+0x1e1/0x6e0 [ 140.632731][ T7333] ctrl_dumppolicy+0x6f4/0xb90 [ 140.637543][ T7333] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 140.642876][ T7333] ? genl_dumpit+0xdb/0x1b0 [ 140.647399][ T7333] ? __pfx___mutex_lock+0x10/0x10 [ 140.652461][ T7333] ? __build_skb_around+0x257/0x3e0 [ 140.657678][ T7333] genl_dumpit+0x108/0x1b0 [ 140.662114][ T7333] netlink_dump+0x64e/0xe70 [ 140.666641][ T7333] ? __pfx_netlink_dump+0x10/0x10 [ 140.671691][ T7333] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.676912][ T7333] ? kmem_cache_free+0x192/0x3f0 [ 140.681872][ T7333] netlink_recvmsg+0x67b/0xe00 [ 140.686653][ T7333] ? __lock_acquire+0xaac/0xd20 [ 140.691531][ T7333] ? __pfx_netlink_recvmsg+0x10/0x10 [ 140.696840][ T7333] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.701702][ T7333] ? aa_sock_msg_perm+0x94/0x160 [ 140.706651][ T7333] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 140.711945][ T7333] ? security_socket_recvmsg+0x7e/0x2e0 [ 140.717510][ T7333] ? __pfx_netlink_recvmsg+0x10/0x10 [ 140.722809][ T7333] sock_recvmsg+0x229/0x270 [ 140.727326][ T7333] __sys_recvfrom+0x1f6/0x340 [ 140.732026][ T7333] ? __pfx___sys_recvfrom+0x10/0x10 [ 140.737232][ T7333] ? count_memcg_event_mm+0x92/0x3b0 [ 140.742554][ T7333] ? rcu_is_watching+0x15/0xb0 [ 140.747359][ T7333] __x64_sys_recvfrom+0xde/0x100 [ 140.752312][ T7333] do_syscall_64+0xf6/0x210 [ 140.756910][ T7333] ? clear_bhb_loop+0x45/0xa0 [ 140.761598][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.767501][ T7333] RIP: 0033:0x7f846bd90734 [ 140.771923][ T7333] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 140.791551][ T7333] RSP: 002b:00007f846cbf4f30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 140.799980][ T7333] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f846bd90734 [ 140.807961][ T7333] RDX: 0000000000001000 RSI: 00007f846cbf5010 RDI: 0000000000000005 [ 140.815939][ T7333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.823917][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 140.831980][ T7333] R13: 00007f846cbf4fc0 R14: 000000000000000d R15: 0000000000000000 [ 140.840066][ T7333] [ 140.843348][ T7333] Kernel Offset: disabled [ 140.847684][ T7333] Rebooting in 86400 seconds..