last executing test programs: 2.801165378s ago: executing program 2 (id=3): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1e1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.665029251s ago: executing program 2 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) 1.648069378s ago: executing program 2 (id=6): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1.580976039s ago: executing program 2 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="564c245aba31be", 0x7}, {0x0}], 0x2) 1.349506615s ago: executing program 3 (id=4): unshare(0x6a040000) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002000010026bd7000fbdbdf25020014100900000506000100080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 975.901955ms ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x3, 0x80000001, 0x81, 0x8000, 0x7fff, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 899.389547ms ago: executing program 1 (id=2): socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x5961, 0x0, 0x0, 0x4e}, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 617.340184ms ago: executing program 3 (id=9): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c0007800800"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 399.75735ms ago: executing program 1 (id=10): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x140, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x238, 0x3a8, 0x3a8, 0x238, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x140, 0x700, {}, [@common=@eui64={{0x28}}, @common=@unspec=@cgroup0={{0x28}, {0x1, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x5, &(0x7f0000000640)=@string={0x5, 0x3, "da7995"}}, {0x71, &(0x7f00000006c0)=@string={0x71, 0x3, "f985de4e6c570918c0431310a5130c3b0bc8e409d3f48586e4b57936d941ec6dc6425fadf2d3c4423ea3c234023767f2c059c1736f99b1fedec54b4560a6514d093204ed9140f4d50e081e743f69b437f210a3b9cd12ddc674d1acf33953a899e4a690f737f749661b4fe0ec0ce5c8"}}]}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 288.380453ms ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 179.840445ms ago: executing program 0 (id=11): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x803c0, 0x0) socket$netlink(0x10, 0x3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xfffffdd4) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8000, 0x700, 0x2, 0x4, {{0xa, 0x4, 0x3, 0x24, 0x28, 0x68, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x56, [@multicast1, @rand_addr=0x64010101, @local]}]}}}}}) r3 = fsmount(r1, 0x0, 0x75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000001c0)='GPL\x00', 0xf, 0x4c, &(0x7f0000000240)=""/76, 0x41100, 0x4, '\x00', r2, 0x0, r1, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r3], &(0x7f0000000440)=[{0x4, 0x2, 0xc, 0xa}], 0x10, 0x5}, 0x94) 0s ago: executing program 2 (id=12): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) connect$x25(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 66.701855][ T5756] cgroup: Unknown subsys name 'net' [ 66.842089][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.238790][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.767363][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.775373][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.783950][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.791273][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.791981][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.807193][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.807330][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.823505][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.826171][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.831242][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.845401][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.847418][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.872703][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.880992][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.891198][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.898547][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.905298][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.906500][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.920269][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.921066][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.933397][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.935466][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.942155][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.950306][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.370019][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.389432][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 70.489873][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 70.558492][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.599501][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.606725][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.614029][ T5769] bridge_slave_0: entered allmulticast mode [ 70.623094][ T5769] bridge_slave_0: entered promiscuous mode [ 70.665308][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.672596][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.679888][ T5769] bridge_slave_1: entered allmulticast mode [ 70.687137][ T5769] bridge_slave_1: entered promiscuous mode [ 70.694227][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.701786][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.709064][ T5768] bridge_slave_0: entered allmulticast mode [ 70.716619][ T5768] bridge_slave_0: entered promiscuous mode [ 70.754947][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.763693][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.772135][ T5770] bridge_slave_0: entered allmulticast mode [ 70.780095][ T5770] bridge_slave_0: entered promiscuous mode [ 70.788024][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.795159][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.802563][ T5768] bridge_slave_1: entered allmulticast mode [ 70.809350][ T5768] bridge_slave_1: entered promiscuous mode [ 70.842872][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.850102][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.857431][ T5770] bridge_slave_1: entered allmulticast mode [ 70.864054][ T5770] bridge_slave_1: entered promiscuous mode [ 70.873231][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.897042][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.917553][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.954021][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.970394][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.977982][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.985130][ T5771] bridge_slave_0: entered allmulticast mode [ 70.992174][ T5771] bridge_slave_0: entered promiscuous mode [ 71.002972][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.022886][ T5768] team0: Port device team_slave_0 added [ 71.037009][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.044463][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.051870][ T5771] bridge_slave_1: entered allmulticast mode [ 71.058697][ T5771] bridge_slave_1: entered promiscuous mode [ 71.069457][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.080648][ T5768] team0: Port device team_slave_1 added [ 71.100225][ T5769] team0: Port device team_slave_0 added [ 71.143453][ T5769] team0: Port device team_slave_1 added [ 71.161033][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.168104][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.194300][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.208388][ T5770] team0: Port device team_slave_0 added [ 71.214896][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.221984][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.248723][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.279115][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.291452][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.301893][ T5770] team0: Port device team_slave_1 added [ 71.316275][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.323225][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.349803][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.397455][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.404428][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.430702][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.452576][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.459773][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.476753][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.492125][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498838][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.512130][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.519234][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.545343][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.584836][ T5771] team0: Port device team_slave_0 added [ 71.604019][ T5768] hsr_slave_0: entered promiscuous mode [ 71.610696][ T5768] hsr_slave_1: entered promiscuous mode [ 71.620019][ T5771] team0: Port device team_slave_1 added [ 71.684857][ T5769] hsr_slave_0: entered promiscuous mode [ 71.692855][ T5769] hsr_slave_1: entered promiscuous mode [ 71.699713][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.708181][ T5769] Cannot create hsr debugfs directory [ 71.733309][ T5770] hsr_slave_0: entered promiscuous mode [ 71.739532][ T5770] hsr_slave_1: entered promiscuous mode [ 71.745533][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.753360][ T5770] Cannot create hsr debugfs directory [ 71.759486][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.766704][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.792697][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.828117][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.835080][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.861211][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.876113][ T51] Bluetooth: hci0: command tx timeout [ 72.004923][ T5771] hsr_slave_0: entered promiscuous mode [ 72.011655][ T5771] hsr_slave_1: entered promiscuous mode [ 72.018424][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.026120][ T51] Bluetooth: hci3: command tx timeout [ 72.031617][ T5771] Cannot create hsr debugfs directory [ 72.037619][ T5780] Bluetooth: hci2: command tx timeout [ 72.043340][ T51] Bluetooth: hci1: command tx timeout [ 72.345013][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.371364][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.382178][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.393495][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.402977][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.415642][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.424828][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.437136][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.521092][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.542029][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.581283][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.591427][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.648810][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.660861][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.671240][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.691999][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.727876][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.809677][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.830014][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.837346][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.863632][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.870752][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.902840][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.960838][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.971452][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.981518][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.003934][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.018500][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.025645][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.049716][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.056922][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.098805][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.121830][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.146685][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.153834][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.190375][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.197552][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.218565][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.225706][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.246042][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.253191][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.379552][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.479211][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.522510][ T5768] veth0_vlan: entered promiscuous mode [ 73.559551][ T5768] veth1_vlan: entered promiscuous mode [ 73.640041][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.684260][ T5768] veth0_macvtap: entered promiscuous mode [ 73.702839][ T5768] veth1_macvtap: entered promiscuous mode [ 73.778232][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.814021][ T5771] veth0_vlan: entered promiscuous mode [ 73.824326][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.854442][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.865484][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.875227][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.887818][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.912517][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.928400][ T5771] veth1_vlan: entered promiscuous mode [ 73.957041][ T51] Bluetooth: hci0: command tx timeout [ 74.048539][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.057838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.062537][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.083089][ T5771] veth0_macvtap: entered promiscuous mode [ 74.108804][ T51] Bluetooth: hci1: command tx timeout [ 74.108861][ T5780] Bluetooth: hci2: command tx timeout [ 74.114542][ T5779] Bluetooth: hci3: command tx timeout [ 74.142000][ T5771] veth1_macvtap: entered promiscuous mode [ 74.164701][ T5769] veth0_vlan: entered promiscuous mode [ 74.185305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.200399][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.200825][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.212611][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.230733][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.239232][ T5769] veth1_vlan: entered promiscuous mode [ 74.249220][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.260226][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.271970][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.307653][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.319388][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.328465][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.339500][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.383187][ T5770] veth0_vlan: entered promiscuous mode [ 74.410785][ T5769] veth0_macvtap: entered promiscuous mode [ 74.437338][ T5769] veth1_macvtap: entered promiscuous mode [ 74.448566][ T5770] veth1_vlan: entered promiscuous mode [ 74.527216][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.543740][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.554234][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.577905][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.599488][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.610759][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.621399][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.632110][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.642780][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.654639][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.724541][ T5770] veth0_macvtap: entered promiscuous mode [ 74.753074][ T5770] veth1_macvtap: entered promiscuous mode [ 74.763469][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.773553][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.805251][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.813271][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822320][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.832315][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.401190][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508069][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.518759][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.538559][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.556047][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.571199][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.598899][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.619596][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.633559][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.692132][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.719642][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.734927][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.746102][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.760902][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.771881][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.789629][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.844473][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.859591][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882342][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.892780][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.906789][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.915588][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.036672][ T5779] Bluetooth: hci0: command tx timeout [ 76.055332][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.077867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.100501][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.186911][ T51] Bluetooth: hci2: command tx timeout [ 76.192427][ T5779] Bluetooth: hci3: command tx timeout [ 76.196126][ T5780] Bluetooth: hci1: command tx timeout [ 76.444363][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.485669][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.685818][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.760058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.967518][ T5864] syz.1.10[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.034409][ T5864] loop1: detected capacity change from 0 to 8 [ 77.244510][ T5868] ------------[ cut here ]------------ [ 77.251244][ T5868] WARNING: CPU: 0 PID: 5868 at mm/page_alloc.c:4477 __alloc_pages+0x2e4/0x460 [ 77.260718][ T5868] Modules linked in: [ 77.264657][ T5868] CPU: 0 PID: 5868 Comm: syz.0.11 Not tainted syzkaller #0 [ 77.272268][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.282810][ T5868] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 77.288446][ T5868] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 a2 14 a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 77.308327][ T5868] RSP: 0018:ffffc90002e6fa20 EFLAGS: 00010246 [ 77.314407][ T5868] RAX: ffffc90002e6fa00 RBX: 1ffff920005cdf48 RCX: 0000000000000000 [ 77.322613][ T5868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002e6fa88 [ 77.330741][ T5868] RBP: ffffc90002e6fb10 R08: ffffc90002e6fa87 R09: 0000000000000000 [ 77.338811][ T5868] R10: ffffc90002e6fa60 R11: fffff520005cdf51 R12: 0000000000000013 [ 77.346857][ T5868] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 77.355787][ T5868] FS: 00007f613bfc76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 77.365013][ T5868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.372048][ T5868] CR2: 000000110c38bbd9 CR3: 000000002c69d000 CR4: 00000000003506f0 [ 77.380143][ T5868] Call Trace: [ 77.383450][ T5868] [ 77.386510][ T5868] ? zone_statistics+0x170/0x170 [ 77.391487][ T5868] ? mtree_load+0x109/0x840 [ 77.396065][ T5868] __kmalloc_large_node+0x8c/0x1f0 [ 77.401335][ T5868] ? bitmap_parse_user+0x23/0x70 [ 77.406379][ T5868] __kmalloc_node_track_caller+0x110/0x230 [ 77.412231][ T5868] memdup_user_nul+0x2c/0xf0 [ 77.416899][ T5868] bitmap_parse_user+0x23/0x70 [ 77.421696][ T5868] irq_affinity_proc_write+0x13c/0x230 [ 77.427276][ T5868] ? irq_affinity_proc_open+0x50/0x50 [ 77.432685][ T5868] ? rcu_read_lock_any_held+0xb4/0x140 [ 77.438237][ T5868] ? rcu_read_lock_bh_held+0x100/0x100 [ 77.443741][ T5868] ? irq_affinity_proc_open+0x50/0x50 [ 77.449219][ T5868] proc_reg_write+0x1e4/0x2d0 [ 77.454754][ T5868] ? proc_reg_llseek+0x280/0x280 [ 77.459935][ T5868] vfs_write+0x299/0x9a0 [ 77.464224][ T5868] ? file_end_write+0x250/0x250 [ 77.469178][ T5868] ? __fget_files+0x28/0x460 [ 77.473807][ T5868] ? __fget_files+0x3fc/0x460 [ 77.478583][ T5868] ? __fdget_pos+0x2a3/0x330 [ 77.483209][ T5868] ? ksys_write+0x74/0x260 [ 77.487737][ T5868] ksys_write+0x151/0x260 [ 77.492111][ T5868] ? __ia32_sys_read+0x90/0x90 [ 77.496962][ T5868] ? lockdep_hardirqs_on+0x98/0x150 [ 77.502201][ T5868] do_syscall_64+0x55/0xb0 [ 77.506719][ T5868] ? clear_bhb_loop+0x40/0x90 [ 77.511427][ T5868] ? clear_bhb_loop+0x40/0x90 [ 77.516172][ T5868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.522098][ T5868] RIP: 0033:0x7f613b19e159 [ 77.526633][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.546962][ T5868] RSP: 002b:00007f613bfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.556510][ T5868] RAX: ffffffffffffffda RBX: 00007f613b425fa0 RCX: 00007f613b19e159 [ 77.564526][ T5868] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000004 [ 77.572812][ T5868] RBP: 00007f613b23503b R08: 0000000000000000 R09: 0000000000000000 [ 77.580864][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.588914][ T5868] R13: 00007f613b426038 R14: 00007f613b425fa0 R15: 00007ffffc557a88 [ 77.596971][ T5868] [ 77.600020][ T5868] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.607321][ T5868] CPU: 0 PID: 5868 Comm: syz.0.11 Not tainted syzkaller #0 [ 77.614515][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.624562][ T5868] Call Trace: [ 77.627834][ T5868] [ 77.630757][ T5868] dump_stack_lvl+0x18c/0x250 [ 77.635435][ T5868] ? show_regs_print_info+0x20/0x20 [ 77.640628][ T5868] ? load_image+0x420/0x420 [ 77.645131][ T5868] panic+0x2ca/0x720 [ 77.649028][ T5868] ? bpf_jit_dump+0xd0/0xd0 [ 77.653539][ T5868] __warn+0x2e0/0x470 [ 77.657520][ T5868] ? __alloc_pages+0x2e4/0x460 [ 77.662287][ T5868] ? __alloc_pages+0x2e4/0x460 [ 77.667049][ T5868] report_bug+0x2be/0x4f0 [ 77.671373][ T5868] ? __alloc_pages+0x2e4/0x460 [ 77.676130][ T5868] ? __alloc_pages+0x2e4/0x460 [ 77.680884][ T5868] ? __alloc_pages+0x2e6/0x460 [ 77.685639][ T5868] handle_bug+0xcf/0x120 [ 77.689880][ T5868] exc_invalid_op+0x1a/0x50 [ 77.694379][ T5868] asm_exc_invalid_op+0x1a/0x20 [ 77.699243][ T5868] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 77.704607][ T5868] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 a2 14 a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 77.724208][ T5868] RSP: 0018:ffffc90002e6fa20 EFLAGS: 00010246 [ 77.730272][ T5868] RAX: ffffc90002e6fa00 RBX: 1ffff920005cdf48 RCX: 0000000000000000 [ 77.738237][ T5868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002e6fa88 [ 77.746200][ T5868] RBP: ffffc90002e6fb10 R08: ffffc90002e6fa87 R09: 0000000000000000 [ 77.754166][ T5868] R10: ffffc90002e6fa60 R11: fffff520005cdf51 R12: 0000000000000013 [ 77.762131][ T5868] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 77.770111][ T5868] ? zone_statistics+0x170/0x170 [ 77.775050][ T5868] ? mtree_load+0x109/0x840 [ 77.779552][ T5868] __kmalloc_large_node+0x8c/0x1f0 [ 77.784669][ T5868] ? bitmap_parse_user+0x23/0x70 [ 77.789612][ T5868] __kmalloc_node_track_caller+0x110/0x230 [ 77.795424][ T5868] memdup_user_nul+0x2c/0xf0 [ 77.800015][ T5868] bitmap_parse_user+0x23/0x70 [ 77.804777][ T5868] irq_affinity_proc_write+0x13c/0x230 [ 77.810235][ T5868] ? irq_affinity_proc_open+0x50/0x50 [ 77.815601][ T5868] ? rcu_read_lock_any_held+0xb4/0x140 [ 77.821053][ T5868] ? rcu_read_lock_bh_held+0x100/0x100 [ 77.826509][ T5868] ? irq_affinity_proc_open+0x50/0x50 [ 77.831875][ T5868] proc_reg_write+0x1e4/0x2d0 [ 77.836546][ T5868] ? proc_reg_llseek+0x280/0x280 [ 77.841483][ T5868] vfs_write+0x299/0x9a0 [ 77.845726][ T5868] ? file_end_write+0x250/0x250 [ 77.850574][ T5868] ? __fget_files+0x28/0x460 [ 77.855158][ T5868] ? __fget_files+0x3fc/0x460 [ 77.859836][ T5868] ? __fdget_pos+0x2a3/0x330 [ 77.864422][ T5868] ? ksys_write+0x74/0x260 [ 77.868844][ T5868] ksys_write+0x151/0x260 [ 77.873180][ T5868] ? __ia32_sys_read+0x90/0x90 [ 77.877944][ T5868] ? lockdep_hardirqs_on+0x98/0x150 [ 77.883144][ T5868] do_syscall_64+0x55/0xb0 [ 77.887554][ T5868] ? clear_bhb_loop+0x40/0x90 [ 77.892223][ T5868] ? clear_bhb_loop+0x40/0x90 [ 77.896892][ T5868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.902777][ T5868] RIP: 0033:0x7f613b19e159 [ 77.907185][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.926787][ T5868] RSP: 002b:00007f613bfc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.935197][ T5868] RAX: ffffffffffffffda RBX: 00007f613b425fa0 RCX: 00007f613b19e159 [ 77.943170][ T5868] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000004 [ 77.951132][ T5868] RBP: 00007f613b23503b R08: 0000000000000000 R09: 0000000000000000 [ 77.959097][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.967063][ T5868] R13: 00007f613b426038 R14: 00007f613b425fa0 R15: 00007ffffc557a88 [ 77.975037][ T5868] [ 77.978283][ T5868] Kernel Offset: disabled [ 77.982632][ T5868] Rebooting in 86400 seconds..