last executing test programs: 1m10.119971804s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) (async) unshare(0x6a040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 54.259036456s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) (async) unshare(0x6a040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 43.377557865s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) (async) unshare(0x6a040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 31.40715447s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) (async) unshare(0x6a040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 17.697517284s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) (async) unshare(0x6a040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 6.089377796s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) (async) unshare(0x6a040000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 3.700404609s ago: executing program 0 (id=1226): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000017010000c60000187a22ec104b065cf506de8cdc08a6d0fddc0d72778aece33162e224760128908354ebe677afaf0fba4d209101c48a04692828bd124430ce0542ec901330cfd17ecda3ea1ff3d715545d42da58b55978fbbd3cf28bf72800000000000000170100000200000014000008d240a5aaf782aa7e74e12faa551a3e8899099e1542f8ed4490000000000000000000"], 0xa0, 0x200040d4}], 0x1, 0x20008852) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001, 0x0, @void, @value}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="44000000100001040000000000000000efffffff", @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) 3.607093525s ago: executing program 2 (id=1227): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000800)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}, 0xffffffff}], 0x1, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f00000000c0)=0x7, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r7, 0x0, 0x8, 0xf2, 0x6, 0x7ff}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x1e79, 0x4) r8 = socket(0xa, 0x2, 0x0) sendto$inet(r8, 0x0, 0x0, 0x50c0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r9 = socket$inet(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x4, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="0a005c000303030303030000040008010400cc006e722ad748f5a6d11607a46938"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.577951784s ago: executing program 1 (id=1228): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x700, 0x40, 0x8, 0xccf, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x66, 0x0, 0xda, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x16, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ra={0x94, 0x4}, @end, @generic={0x7, 0x10, "ce0275889a54a018ef23fbe66c06"}, @ssrr={0x89, 0x13, 0x53, [@rand_addr=0x64010100, @loopback, @multicast2, @private=0xa010100]}]}}}}}) sendmsg$inet(r4, &(0x7f00000008c0)={&(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000280)="33f9850e49f3aeb24a3766a70344c346fc15206ce3a281c94b7447472a1b94b398664bbe3f608457c0184e5bde183c3277225ddd573945626a0603c39b7293d34a6af299cd574f2d95c5ebe866e996c143dc5263eb866fb3d123d2016871fcf7d0a4b4273d8f30069e9afc3958a228fea87263f6f5c1f040e50be6df4985aaff073e1033e454cc1b349cf9a3ac55533d20ebf46bbbcdc65bbbd0ce9d38462ddb02aeec481cf1e8125555bc2d7d34f4623f79eda5bc36f29efb7eafbe13ed2db17fe21f56", 0xc4}, {&(0x7f00000005c0)="b911802b8891d2e4fffb3fcd16717353bcd4d2af20fa3aa5bae4c6449867e50f0b61286d94b76fef", 0x28}, {&(0x7f0000000600)=' ', 0x1}, {&(0x7f0000000640)="383bd7d75abfe6dbe1cdf04759c3f8dba4854d4ee3b9572ca056498b1a5a98997bdecca15810", 0x26}, {0x0}], 0x5, &(0x7f00000007c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @rand_addr=0x2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0xb0}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r6, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000080)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$tipc(0x1e, 0x5, 0x0) 3.519017707s ago: executing program 3 (id=1229): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) listen(r1, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f00000008c0)="f96be6c391f1f8b23ae44a70a774b3ded5f257e01e82907ab0ab89ee65d16a6c6f5c666d0faf1aef84f0d336be23426e403100db4ab560fcc86cd742469733ff6d8b36f1bd3cea824025c65438f23ed7b8e939a7c0e36bb828963f65eddb2aa2d79bb842f1d2689c74e5eb58554387cb860cfebcde882071e0", 0x79}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2", 0xde}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7b209df8a8bb03d570db805df805dc75e6c3301fa9919904fd70483d7f5a421aec8cffd6bb05e", 0x6f}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933", 0x7c}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59ee", 0x48}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.469115884s ago: executing program 0 (id=1230): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x22, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100900061640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1b40, 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)={0x250, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_PROTO={0x45, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x4}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x3, 0x2, 0x100]}, @CTA_TUPLE_MASTER={0xb4, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x104}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x122}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x52a}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4830}, 0x1) 3.259637319s ago: executing program 3 (id=1231): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 3.21745487s ago: executing program 3 (id=1232): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.668885068s ago: executing program 2 (id=1233): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.583208836s ago: executing program 1 (id=1234): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2b, 0x2, {0xa, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@private, @rand_addr, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x68400404}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=@getlink={0x7c, 0x12, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x110, 0x20}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x660}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_AF_SPEC={0x28, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x4}, {0x8, 0x7, 0x0, 0x0, 0x8001}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000010001000020073797a310008000005000100070000001c000780060001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16], 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000207b1af8ff00000000bfa100000000000007010000f8ffffffb702400008000000b703000000000020850000009400000018040000786c6c25000000005820207b1af8ff00000000bfa100000000004372980e0f0007010000eba20282ff4af8ffffffb702000008000000b70300000000000085000000060098652285c5f837b8ce42453b5b6b208301c899d0330dda07431d17b5df8a4bb3bb6be0b56de2bd3be04e6a8b7bd519f5e73f2c1630865cd14cc1a82f1e52c1a8eb2dd1e359b3e3bfd3e1836ed10b52"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.582603263s ago: executing program 2 (id=1235): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x87, "dd751f503b9880aeb08a9348d4a8b389247441e17310953753918a3896ad73f9b5a8e19a2ed2ac87c3951c0b107065930c3b17f386761a093c0a958c07a52ffea8b1adc0ed2d9949c1016d8345211540aa8f46f33531e80a620eee34c4d630e8d9e4376780d91df179b9bfedaf15b7e2fd0a28a22c15f8ed60fdbcfd617a1d290079365b97dce4"}, &(0x7f00000003c0)=0x8f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x8, 0x10, 0x0, 0x5}, &(0x7f0000000100)=0x18) sendmmsg$inet_sctp(r0, &(0x7f0000001080)=[{&(0x7f0000000140)=@in={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="4ce9029694e15a4ce809b5032f802545563c820262f7cc3f7a9636446b9d1f81dad45f4b41c7164e52465d21", 0x2c}, {&(0x7f0000001000)="bb7ed1416b5c94406a9cd18461d9a6bd1abe0e70f53a29aa292b3d4b2cc59e422a838df1c2a633a34f04901342cdd7fe23d7d2a35caa8a3fa80159afe157d456ae7a70cdbe3a73f3cba9f448", 0x4c}], 0x2, &(0x7f0000001100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x30}, {&(0x7f00000004c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000540)="3ec65c0c5f603b7d41c85e4610b662add1d11623e9c8761dffd90f6786c5a5", 0x1f}, {&(0x7f0000001140)="c2e7c3e3fcf41bb741a3a44a1e8c1df3c4e9c63ac7a8764b36ba48d9d16fdd1ce6adebd65caedfba0599bcfb11c73bda63b5c9966630f0bd2f589a44761e391ce0e67dbfe923a0dfdfab", 0x4a}, {&(0x7f0000000580)}, {&(0x7f0000000b00)="e21003a2ecc92e686d8bd0badc2e3569d6ffc02c637011b255f7b50196a12552408877ec2d8720bda9252d427ac3ff96b32d6f2d5c3c8351aab79601ce263d82d9898b275f67953c69edee602f88aa09", 0x50}, {&(0x7f0000000b80)="d56ada0254a5c95221b594dbe42ac2dc77bcda7e9d2c", 0x16}, {&(0x7f0000000bc0)="b7836ccd57838e82556debccee7c79dd6d709dd9999542649e7791ed031ba041aea149564bab5604914b0d2a2c34d58fc1f115a4f2a9f561f7cf5f9c14464fc5b9922ef7176c606ccbd914cb1989fdbd0910150fcc9dbc222f3ebb310693ea016b9e5869af43ba08a6243cb6b5d28bcc3aab159b37a5bb5ccb96d889e430d70827d7657e05e642ba580c64930c33e9ad8644f53740b8b9201c", 0xb4}, {&(0x7f0000000c80)="88e104b12758f44fff5c81d161263c2133168019bf1291429c60e1fc033d0124bc84f52a8f3b190b70afca4190df32e6bd93294d064488dbd2ec7f36a37fe1ef8c8e51093bac1b9fd0f7dd2baf3dddb48ca4856e0fe0133e516988ca5f8f4e433518dae8590926651dc06f507171825f385a29bb217a1988d968f3f31562a902c075f393e6a97a3365a03b726347283eaef1493a8b70a2b7da90cc6b443cda541d6165be9a230003d8b67f2649d0b3970495206db6334cede4c782174ec8e43c6e469ff6aa690ed10d2e17d94b30b7f28d9d6fce7a7af4a0ee1aef6ba6e5d2a9", 0xe0}, {&(0x7f0000000d80)="e3ec797172a79606f6da0d5f37cff4e639b5f9a97ca2efafb9d858e673fa93f98e25778fb81f039bb615384cee842c2b233e454cb939c6974979d77173db7cef51889d2e78ef88363eabe2f806bd798006f1cb157cc13a453171809d623f57d8a06b3f6069c150ac6959435fc09a8ed4512935fdfdafd49ac9f4dda54a3f5d5e619c4449e93d1295eb3a7042a43beb19708a7f5c66ed94ad9dd8912e2c84659da47e2111ccb64995503099b454ba5677c1ba242c54bcf0c89adaf884922b9c5279c236793697f066", 0xc8}, {&(0x7f0000000e80)="907f1570831b5375082ac6b52e3b00c76de0ee122eb32ac167876f112f4ca5d8f12300a37073d5d8853995d2b8e7230c664743a7674f92b651dc1e0e2ddd1e6fc4d13f4b4400", 0x46}, {&(0x7f0000000f00)="631c9df7fdc639a9737e1fb9a0cce4f0c0e9035b7b92ec24fffdf85002", 0x1d}], 0xa, &(0x7f0000001000), 0x0, 0x4054}], 0x2, 0x14) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0x7, r8}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r8}, 0x4) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r11) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv4_newaddr={0x2c, 0x14, 0x400, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x2c, 0x0, r10}, [@IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x200008c1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.402878665s ago: executing program 0 (id=1236): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.749741773s ago: executing program 1 (id=1237): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000112a608400000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/111]}, 0xe7) socket(0x26, 0x5, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1}, 0x0, &(0x7f0000000600)='%+9llu \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000040000000000000140000000000000000ffff0073797a5774756e000000000000000000080003000000000a"], 0x34}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 1.635646823s ago: executing program 3 (id=1238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge_slave_1\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x2, 0x101, 0x1, 0x7, 0x35f7cecb, 0xfffffff7, 0x3030000, 0x3, 0x2, 0x1, 0xf, 0x3, 0x0, 0xb, 0x2, 0x8, 0xfffffff8, 0x926, 0x8, 0x7ff, 0x6, 0xfffffff7}}) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) recvmmsg(r2, &(0x7f00000034c0), 0x0, 0x2000, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10121, 0x0) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r6 = accept4(r5, 0x0, 0x0, 0x800) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000179a401df50613c8ee16dab58d5a0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.563131593s ago: executing program 2 (id=1239): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), 0x0}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@fwd={0x1}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x1, 0x0, 0x392}]}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5}]}]}, {0x0, [0x61, 0x2e, 0x30]}}, &(0x7f00000009c0)=""/4096, 0x61, 0x1000, 0x1, 0x9, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r10}, 0x38) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x8, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xd4}, @jmp={0x5, 0x1, 0x0, 0x9, 0x1, 0xc, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xffff, 0xaf, &(0x7f0000000500)=""/175, 0x40f00, 0x20, '\x00', r3, @fallback=0x1b, r6, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xa, 0xfffffbff, 0x650}, 0x10, 0x0, r7, 0x0, &(0x7f0000000740)=[r8, r9, r1, r10, r0], 0x0, 0x10, 0x6bc7, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000007c0)=r12, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r13, &(0x7f00000000c0)=ANY=[], 0x138) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2200, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @private}}}}) setsockopt$sock_int(r13, 0x1, 0xb, &(0x7f0000000780)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.559154024s ago: executing program 0 (id=1240): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 1.427473478s ago: executing program 1 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.399758086s ago: executing program 1 (id=1242): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000006c0)={0x87, 0x1d, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x6f, 0x8, [0x7f, 0x27, 0x1, 0x0, 0x3, 0x9]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x4, 0x89, "9a174f8b2d392a24fda505a9bf81375409a37e76e668896848a203cc053b00b4062e2208d8202abe91686bce481d0278774a492a62277fda9629324716da1964f4c716a62eb2fea5a2a83da427f8af623ea7d3d6cd7d498961b29dd0c754ea8bf2bd6309340cc6bd086e79ad8431f46b93156ad98b6f8ea0b1dc7d05df5ca60338d16978d5dc9ed391"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0xf8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f00009b1000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffc000) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delqdisc={0x7c, 0x25, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0xb}, {0x0, 0xc}, {0xc, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xa}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1a3}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x46e}]}}, @qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_mq={0x7}]}, 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x34, 0x28, 0x908, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9, 0x2}, {0x9, 0x9}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x28, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x34}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="adaa000000000000791018000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = accept4(r4, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000a20000000000a03000000000000000000070000000900010073797a300000000030000000090a010400000000000000000700000008000440000000020900020073797a31000000000800054000000021200000000c0a01010000000000000000070000000900020073797a31000000001400eaff1000010000000000000000000084000a"], 0x98}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0x14, 0x0, &(0x7f0000000240)) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000006000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000005000000000000"], 0x50) 1.283693239s ago: executing program 0 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x854}, 0x8014) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f00000003c0)=""/5, &(0x7f0000000400)=0x5) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="09000700f715", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x6e24, 0xf801}}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.155697337s ago: executing program 1 (id=1244): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (fail_nth: 3) 1.062606905s ago: executing program 2 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r1, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) r2 = socket(0x1e, 0x4, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x54}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000d6cb0c506dfa58722767c5ea3d1595365d140ea0055e573e61a481fdd4e4a031298d34c9eb3c1416acf9b78ffc461873dc507bb8170c8c11cb5081c541fdc21f2aa25e524eeb0c8ae4ec1cd80386ff313f1a357c1602dedc7d583b734862bb4dc066c1e7e599580d719bc6e53b04007955fb6f8992becf07ccbb9f1bdf55ddbe3393", @ANYRES16=r8, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="0a0018000303030303030000040008010400cc00"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 624.170215ms ago: executing program 2 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x240480c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000240)=0x8) (async) unshare(0x26020480) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) (async) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c010000020601082dbd7000fcdbdf2501000001100034800400818008000f00", @ANYRES32=r0, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) (async) socket$rds(0x15, 0x5, 0x0) 457.420036ms ago: executing program 3 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0005000000000000000000dd0f4bf578cd0e0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r3, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="180100009b455351f45e73e6e8d7bb2a9471534336c68923acbbe2bc87728e4476a825195bde8803b46f6b3ba44f4eff761dafd951b029b72b860f9ee0277bbf9cfc5ed210c2bdc8f1952cffe084f3b301d3066bbd8fb6b3e713725d3713aec8c8a8a60edd05316c8d539a1ef80d4bb7734615e1291f08fc7235e7c7ac6a9636acd8642472c8bee9cad335ea918e7e7e8359aa940064de33b3aa67b957872c2151af372849ae78c863f695ef8d07623ce81c6f1c306b892f85f7cae0eb474baa39be3fe402ac3f82767519036f822fa623cfd2c62c1876d99046768bb6df36183bcb5e59187e547962f7725af9e0a9747ce6fb57ff", @ANYRES16=r4, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11000000000000000480000005"], 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x4b0, 0x0, 0xe0, 0x2c4, 0x3d0, 0x3d0, 0x3d0, 0x4, &(0x7f0000000200), {[{{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:xen_device_t:s0\x00'}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @loopback, @multicast1, 0x4, 0xffffffff}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x500) unshare(0x20000400) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a0102"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) 155.48795ms ago: executing program 3 (id=1248): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0xfffd, 0x2, 0x81, 0x3ff}, {0x101, 0xe, 0x8, 0x6f06}, {0x3, 0x5, 0x61, 0x4a}, {0x3, 0xc3, 0xfb, 0x6}, {0x6, 0x3, 0xf0, 0x6}, {0x1, 0xd, 0x2, 0xfffffffb}, {0xbb, 0x6, 0xc, 0x1}, {0x7, 0x3, 0x0, 0x5}]}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='svcsock_marker\x00', r1, 0x0, 0x3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='svcsock_marker\x00', r1, 0x0, 0x3}, 0x18) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f0000010000000010000000000000000000ff"], 0x30}}], 0x1, 0xa884) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 0 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x520, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4f8, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, {0x4ac, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4a0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_DATA={0x488, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x102, 0x1, "da6a20ac30040cdaa451944902bf68270a0f5b1d081682bc4b3b7915cfb547101932d5f11fdc261fc9e08e2e929b4e78a7af2ef5bce47744528bc0490bfeb444d83372374748710ecbb2a567790908b3e750d5286f55a91df531bfb80aa498f69b3e821cadf2f3acbe5e315062c82d6ce1003387a7c4c4166c0e9e1edddeca9551b5961d0c9c70dde59440189ed25a3dd2f10a2eee32355f785fe26b622f52785dbf2e2c9e9ead696179427ebb83218be9db72e2d505631d14f2cf3013fa225f8986c4c7683986ffd51ae94c200d678cbef6834073958eb3af181c9946551b65c8aa3d327ecf55f0f418b67ef0016b664efcfb3d2ac8e4ace423b7b42f03"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "2cd258e9f8b8554a376c12896a01c9f67d72ff0aa86ac4c1acf6a7bc2b7ee825d51d7990cd0b5055ff945fe9c7758f94bbcf12809d81763e5f0518c6118943c87cdc60dac003fe8340d69408176b7c13706f1a97995b3853e227e2ebeed759e88fe60dd2aa3ed337b9f0f81df17d31c8061de80b753c6a6ded9d20030e5845ab"}, @NFTA_DATA_VALUE={0x50, 0x1, "0fe9b30977804f5914dfcbd067301d3c7a78bdd4af34c703e9c621c150432f35529f3e1a49cbc431e6f778107b0ab1bf8df678d9e479385deb1b207b0a73d608055b6408d3c3203f03dfe361"}, @NFTA_DATA_VALUE={0xfd, 0x1, "99260a54211198122d8cbca0e226812abb758f58673321dc8dc9b8bc43759fe9a639816b76a093c299adbd2de5bb74f6b3134f8ac121f95986108b8f91d13d56b58bc4e50e4e4fc4fce7c806bc27304f08e6ab8566099ea1c6b0918ce3a0e6b14c9d222be7a1dfb040ebd31f5b42d30a8861c581ee1b989ee684f2e3960c3f7798108cdb19319d51048f4b40b6633cc68275c23164968788dd4bca8417fcca9480c5efad61cab1a3ff4e665a1940ef0fd466a729b7f6a81bd3f8c6e9fb907dcfa2beae0f76ea9796fb78c25adcdc9aacc8209cdda0a8041d4dc98614599b43f0bd1cf9136015e77c1585adece89653ce0f17ac3fb70a4ff649"}, @NFTA_DATA_VALUE={0x6b, 0x1, "e7c6c638263c7dff320b82ffe26896e1bc7854aa2bdf0bec0bf403921fbdf718505acf6fb2b8f0bae6a4f5023fbb198f8835c646e8f8349717030c434be194d4918ff9686af08acb378c04e0e08086e9f4d4a58c2f4b5c4a4b0127b0acb3a14be80337e944be5a"}, @NFTA_DATA_VALUE={0x87, 0x1, "cde2e38b461e7319a22cc3201b832152a9a0e6cdd382962fea9c9bc5713f6deb9bec5677e4ab9af6dde3271ac4049af4aa7b24e8bd2932edaf4cbb5da556dc98906752c928dfaeb622f15e6c7312cf03dc907f4e15ed2db8b2fabe24f734d287edfa13bea537c6c57af3fe080515105cb615307dd3ab0b8bb5fa9193035b9c30532cd3"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x594}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x37, 0x300, 0x70bd27, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r5, @ANYBLOB="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"], 0x2ac}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x45b, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e22, 0x0, @empty, 0x7}}}, 0x84) kernel console output (not intermixed with test programs): 411] hsr_slave_1: entered promiscuous mode [ 171.915853][ T8411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.923739][ T8411] Cannot create hsr debugfs directory [ 171.957685][ T5832] Bluetooth: hci4: command tx timeout [ 171.999198][ T8575] netlink: 'syz.3.664': attribute type 39 has an invalid length. [ 172.295305][ T8581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.665'. [ 172.332597][ T8578] siw: device registration error -23 [ 172.346253][ T8578] siw: device registration error -23 [ 172.359225][ T8578] siw: device registration error -23 [ 172.381960][ T8578] siw: device registration error -23 [ 172.393517][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 172.453994][ T8589] xt_ecn: cannot match TCP bits for non-tcp packets [ 172.646567][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 172.676866][ T8592] lo speed is unknown, defaulting to 1000 [ 172.749571][ T8592] wg1 speed is unknown, defaulting to 1000 [ 172.761251][ T8593] lo speed is unknown, defaulting to 1000 [ 172.817449][ T8593] wg1 speed is unknown, defaulting to 1000 [ 172.833907][ T8598] lo speed is unknown, defaulting to 1000 [ 172.834661][ T8411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.855061][ T8598] wg1 speed is unknown, defaulting to 1000 [ 172.855683][ T8411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.890499][ T8411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.955863][ T8411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.980219][ T8611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.674'. [ 173.363974][ T8622] netlink: 'syz.3.677': attribute type 6 has an invalid length. [ 173.372542][ T8622] netlink: 'syz.3.677': attribute type 12 has an invalid length. [ 173.708039][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.769420][ T8411] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.793811][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.801056][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.823529][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.830982][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.037670][ T5832] Bluetooth: hci4: command tx timeout [ 174.251190][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.685'. [ 174.553689][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.584836][ T8658] lo speed is unknown, defaulting to 1000 [ 174.615529][ T8658] wg1 speed is unknown, defaulting to 1000 [ 175.152319][ T8671] team0: No ports can be present during mode change [ 175.203544][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 175.285091][ T8671] bridge0: port 3(team0) entered disabled state [ 176.615836][ T8671] bridge0: port 3(team0) entered disabled state [ 176.631498][ T8671] team_slave_0: left promiscuous mode [ 176.641856][ T8671] team_slave_0: left allmulticast mode [ 176.664744][ T8671] team0 (unregistering): Port device team_slave_0 removed [ 176.674092][ T8671] team_slave_1: left promiscuous mode [ 176.683506][ T8671] team_slave_1: left allmulticast mode [ 176.694742][ T8671] team0 (unregistering): Port device team_slave_1 removed [ 176.730848][ T8686] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 176.741218][ T8686] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 176.763104][ T8687] vxcan3: entered allmulticast mode [ 176.929996][ T8411] veth0_vlan: entered promiscuous mode [ 176.954616][ T8694] lo speed is unknown, defaulting to 1000 [ 176.982014][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 177.010682][ T8694] wg1 speed is unknown, defaulting to 1000 [ 177.014208][ T8411] veth1_vlan: entered promiscuous mode [ 177.035851][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.696'. [ 177.083282][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 177.152147][ T8707] lo speed is unknown, defaulting to 1000 [ 177.206781][ T8707] wg1 speed is unknown, defaulting to 1000 [ 177.329928][ T8411] veth0_macvtap: entered promiscuous mode [ 177.351309][ T8712] dvmrp0: entered allmulticast mode [ 177.366723][ T8712] dvmrp0: left allmulticast mode [ 177.470625][ T8718] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.699'. [ 177.502339][ T8718] netlink: zone id is out of range [ 177.520926][ T8718] netlink: zone id is out of range [ 177.526102][ T8718] netlink: zone id is out of range [ 177.538679][ T8718] netlink: zone id is out of range [ 177.543869][ T8718] netlink: zone id is out of range [ 177.558855][ T8718] netlink: zone id is out of range [ 177.564044][ T8718] netlink: zone id is out of range [ 177.587922][ T8718] netlink: zone id is out of range [ 177.593208][ T8718] netlink: zone id is out of range [ 177.607980][ T8718] netlink: zone id is out of range [ 178.235034][ T8411] veth1_macvtap: entered promiscuous mode [ 178.320020][ T8727] FAULT_INJECTION: forcing a failure. [ 178.320020][ T8727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.336485][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz.0.702 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 178.336514][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.336527][ T8727] Call Trace: [ 178.336535][ T8727] [ 178.336544][ T8727] dump_stack_lvl+0x189/0x250 [ 178.336576][ T8727] ? __lock_acquire+0xaac/0xd20 [ 178.336607][ T8727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.336635][ T8727] ? __pfx__printk+0x10/0x10 [ 178.336654][ T8727] ? __might_fault+0xb0/0x130 [ 178.336703][ T8727] should_fail_ex+0x414/0x560 [ 178.336729][ T8727] _copy_from_iter+0x1db/0x15a0 [ 178.336763][ T8727] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 178.336785][ T8727] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 178.336812][ T8727] ? __pfx__copy_from_iter+0x10/0x10 [ 178.336838][ T8727] ? __build_skb_around+0x257/0x3e0 [ 178.336868][ T8727] ? netlink_sendmsg+0x642/0xb30 [ 178.336891][ T8727] ? skb_put+0x11b/0x210 [ 178.336921][ T8727] netlink_sendmsg+0x6b2/0xb30 [ 178.336955][ T8727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.336984][ T8727] ? aa_sock_msg_perm+0x94/0x160 [ 178.337008][ T8727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.337030][ T8727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.337060][ T8727] __sock_sendmsg+0x219/0x270 [ 178.337081][ T8727] ____sys_sendmsg+0x505/0x830 [ 178.337115][ T8727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.337152][ T8727] ? import_iovec+0x74/0xa0 [ 178.337181][ T8727] ___sys_sendmsg+0x21f/0x2a0 [ 178.337210][ T8727] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.337277][ T8727] ? __fget_files+0x2a/0x420 [ 178.337301][ T8727] ? __fget_files+0x3a0/0x420 [ 178.337338][ T8727] __x64_sys_sendmsg+0x19b/0x260 [ 178.337369][ T8727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.337414][ T8727] ? do_syscall_64+0xba/0x210 [ 178.337438][ T8727] do_syscall_64+0xf6/0x210 [ 178.337459][ T8727] ? clear_bhb_loop+0x45/0xa0 [ 178.337484][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.337502][ T8727] RIP: 0033:0x7ff7c2d8e969 [ 178.337520][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.337536][ T8727] RSP: 002b:00007ff7c3c0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.337557][ T8727] RAX: ffffffffffffffda RBX: 00007ff7c2fb5fa0 RCX: 00007ff7c2d8e969 [ 178.337571][ T8727] RDX: 0000000000002810 RSI: 0000200000000000 RDI: 0000000000000003 [ 178.337583][ T8727] RBP: 00007ff7c3c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.337594][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.337605][ T8727] R13: 0000000000000000 R14: 00007ff7c2fb5fa0 R15: 00007fffe761e3d8 [ 178.337636][ T8727] [ 178.619841][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.630487][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.641909][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.653425][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.664106][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.675510][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.694748][ T8411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.704236][ T8411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.714168][ T8411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.723462][ T8411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.838606][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.855042][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.927773][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.943112][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.011171][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 179.037420][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 179.057796][ T8736] netlink: 'syz.0.706': attribute type 15 has an invalid length. [ 179.261113][ T8741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.708'. [ 179.377499][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 179.559838][ T8756] FAULT_INJECTION: forcing a failure. [ 179.559838][ T8756] name failslab, interval 1, probability 0, space 0, times 0 [ 179.605185][ T8761] netlink: 52 bytes leftover after parsing attributes in process `syz.3.713'. [ 179.673770][ T8756] CPU: 1 UID: 0 PID: 8756 Comm: syz.2.714 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 179.673799][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.673812][ T8756] Call Trace: [ 179.673819][ T8756] [ 179.673828][ T8756] dump_stack_lvl+0x189/0x250 [ 179.673876][ T8756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.673905][ T8756] ? __pfx__printk+0x10/0x10 [ 179.673932][ T8756] ? ref_tracker_alloc+0x318/0x460 [ 179.673958][ T8756] should_fail_ex+0x414/0x560 [ 179.673983][ T8756] should_failslab+0xa8/0x100 [ 179.674012][ T8756] kmem_cache_alloc_noprof+0x73/0x3c0 [ 179.674036][ T8756] ? skb_clone+0x212/0x3a0 [ 179.674071][ T8756] skb_clone+0x212/0x3a0 [ 179.674104][ T8756] __netlink_deliver_tap+0x404/0x850 [ 179.674144][ T8756] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.674170][ T8756] netlink_deliver_tap+0x19c/0x1b0 [ 179.674196][ T8756] netlink_unicast+0x72f/0x8d0 [ 179.674230][ T8756] netlink_sendmsg+0x805/0xb30 [ 179.674265][ T8756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.674295][ T8756] ? aa_sock_msg_perm+0x94/0x160 [ 179.674319][ T8756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.674341][ T8756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.674368][ T8756] __sock_sendmsg+0x219/0x270 [ 179.674392][ T8756] ____sys_sendmsg+0x505/0x830 [ 179.674427][ T8756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.674471][ T8756] ? import_iovec+0x74/0xa0 [ 179.674503][ T8756] ___sys_sendmsg+0x21f/0x2a0 [ 179.674534][ T8756] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.674603][ T8756] ? __fget_files+0x2a/0x420 [ 179.674629][ T8756] ? __fget_files+0x3a0/0x420 [ 179.674668][ T8756] __x64_sys_sendmsg+0x19b/0x260 [ 179.674699][ T8756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.674746][ T8756] ? do_syscall_64+0xba/0x210 [ 179.674769][ T8756] do_syscall_64+0xf6/0x210 [ 179.674790][ T8756] ? clear_bhb_loop+0x45/0xa0 [ 179.674814][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.674832][ T8756] RIP: 0033:0x7f591318e969 [ 179.674849][ T8756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.674871][ T8756] RSP: 002b:00007f591403f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.674892][ T8756] RAX: ffffffffffffffda RBX: 00007f59133b5fa0 RCX: 00007f591318e969 [ 179.674906][ T8756] RDX: 0000000000002810 RSI: 0000200000000000 RDI: 0000000000000003 [ 179.674917][ T8756] RBP: 00007f591403f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.674929][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.674940][ T8756] R13: 0000000000000000 R14: 00007f59133b5fa0 R15: 00007ffe460ae3a8 [ 179.674972][ T8756] [ 180.039430][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.058427][ T8750] syz.1.712 (8750) used greatest stack depth: 19880 bytes left [ 180.093599][ T8756] netlink: 'syz.2.714': attribute type 6 has an invalid length. [ 180.102291][ T8756] netlink: 'syz.2.714': attribute type 12 has an invalid length. [ 180.110414][ T8763] syz_tun: entered allmulticast mode [ 180.125474][ T8754] dvmrp8: entered allmulticast mode [ 180.310251][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.399190][ T8777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.717'. [ 180.471960][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.529555][ T8783] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 180.625982][ T8783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.672015][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.731104][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.750214][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.766057][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.788150][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.801343][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.854187][ T8788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.873410][ T8788] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.885815][ T8788] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 180.914515][ T8783] ip6erspan0: entered promiscuous mode [ 180.928673][ T8783] bond1: (slave ip6erspan0): making interface the new active one [ 180.937872][ T8783] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 180.960410][ T8794] vlan2: entered allmulticast mode [ 180.965825][ T8794] bond1: entered allmulticast mode [ 180.983567][ T8794] ip6erspan0: entered allmulticast mode [ 180.995678][ T8794] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 181.402553][ T8809] netlink: 'syz.1.726': attribute type 6 has an invalid length. [ 181.420596][ T8809] netlink: 'syz.1.726': attribute type 12 has an invalid length. [ 181.460572][ T8809] FAULT_INJECTION: forcing a failure. [ 181.460572][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 181.507544][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.1.726 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 181.507575][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.507587][ T8809] Call Trace: [ 181.507596][ T8809] [ 181.507604][ T8809] dump_stack_lvl+0x189/0x250 [ 181.507643][ T8809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.507672][ T8809] ? __pfx__printk+0x10/0x10 [ 181.507699][ T8809] ? __pfx___might_resched+0x10/0x10 [ 181.507717][ T8809] ? fs_reclaim_acquire+0x7d/0x100 [ 181.507753][ T8809] should_fail_ex+0x414/0x560 [ 181.507778][ T8809] should_failslab+0xa8/0x100 [ 181.507807][ T8809] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 181.507833][ T8809] ? __alloc_skb+0x112/0x2d0 [ 181.507863][ T8809] __alloc_skb+0x112/0x2d0 [ 181.507892][ T8809] netlink_ack+0x146/0xa50 [ 181.507913][ T8809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.507942][ T8809] ? ref_tracker_free+0x63a/0x7d0 [ 181.507961][ T8809] ? __copy_skb_header+0xa7/0x550 [ 181.508000][ T8809] netlink_rcv_skb+0x2a0/0x490 [ 181.508025][ T8809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.508049][ T8809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.508095][ T8809] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.508118][ T8809] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.508148][ T8809] netlink_unicast+0x758/0x8d0 [ 181.508182][ T8809] netlink_sendmsg+0x805/0xb30 [ 181.508217][ T8809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.508245][ T8809] ? aa_sock_msg_perm+0x94/0x160 [ 181.508269][ T8809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.508291][ T8809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.508317][ T8809] __sock_sendmsg+0x219/0x270 [ 181.508341][ T8809] ____sys_sendmsg+0x505/0x830 [ 181.508375][ T8809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.508412][ T8809] ? import_iovec+0x74/0xa0 [ 181.508444][ T8809] ___sys_sendmsg+0x21f/0x2a0 [ 181.508474][ T8809] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.508548][ T8809] ? __fget_files+0x2a/0x420 [ 181.508572][ T8809] ? __fget_files+0x3a0/0x420 [ 181.508610][ T8809] __x64_sys_sendmsg+0x19b/0x260 [ 181.508640][ T8809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.508685][ T8809] ? do_syscall_64+0xba/0x210 [ 181.508711][ T8809] do_syscall_64+0xf6/0x210 [ 181.508732][ T8809] ? clear_bhb_loop+0x45/0xa0 [ 181.508758][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.508777][ T8809] RIP: 0033:0x7f5da818e969 [ 181.508794][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.508810][ T8809] RSP: 002b:00007f5da8f6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.508831][ T8809] RAX: ffffffffffffffda RBX: 00007f5da83b5fa0 RCX: 00007f5da818e969 [ 181.508845][ T8809] RDX: 0000000000002810 RSI: 0000200000000000 RDI: 0000000000000003 [ 181.508857][ T8809] RBP: 00007f5da8f6c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.508869][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.508880][ T8809] R13: 0000000000000000 R14: 00007f5da83b5fa0 R15: 00007ffdcffa6148 [ 181.508911][ T8809] [ 181.880068][ T8792] lo speed is unknown, defaulting to 1000 [ 181.894579][ T8792] wg1 speed is unknown, defaulting to 1000 [ 181.919193][ T12] bridge_slave_1: left allmulticast mode [ 181.927215][ T12] bridge_slave_1: left promiscuous mode [ 181.936248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.968210][ T12] bridge_slave_0: left allmulticast mode [ 181.973990][ T12] bridge_slave_0: left promiscuous mode [ 181.980757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.511315][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.525444][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.536462][ T12] bond0 (unregistering): Released all slaves [ 182.838180][ T5832] Bluetooth: hci4: command tx timeout [ 183.278984][ T8851] lo speed is unknown, defaulting to 1000 [ 183.303944][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 183.366386][ T12] hsr_slave_0: left promiscuous mode [ 183.375184][ T12] hsr_slave_1: left promiscuous mode [ 183.381721][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.389720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.402354][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.414085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.464086][ T8877] __nla_validate_parse: 2 callbacks suppressed [ 183.464106][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 183.535653][ T12] veth1_macvtap: left promiscuous mode [ 183.557544][ T12] veth0_macvtap: left promiscuous mode [ 183.571547][ T12] veth1_vlan: left promiscuous mode [ 183.576954][ T12] veth0_vlan: left promiscuous mode [ 184.556563][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.601397][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.919357][ T5832] Bluetooth: hci4: command tx timeout [ 184.963135][ T8851] wg1 speed is unknown, defaulting to 1000 [ 185.014188][ T8857] lo speed is unknown, defaulting to 1000 [ 185.114638][ T8857] wg1 speed is unknown, defaulting to 1000 [ 185.122224][ T8881] lo speed is unknown, defaulting to 1000 [ 185.183513][ T8881] wg1 speed is unknown, defaulting to 1000 [ 185.237844][ T8894] erspan0: entered promiscuous mode [ 185.255380][ T8894] batman_adv: batadv0: Adding interface: macvlan5 [ 185.263635][ T8894] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.295193][ T8894] batman_adv: batadv0: Interface activated: macvlan5 [ 185.325024][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.340162][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.348722][ T8792] bridge_slave_0: entered allmulticast mode [ 185.356609][ T8792] bridge_slave_0: entered promiscuous mode [ 185.453556][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.461532][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.469077][ T8792] bridge_slave_1: entered allmulticast mode [ 185.476395][ T8792] bridge_slave_1: entered promiscuous mode [ 185.743503][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.826205][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.930432][ T8792] team0: Port device team_slave_0 added [ 185.962523][ T8792] team0: Port device team_slave_1 added [ 186.054194][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.070109][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.137115][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.171938][ T8922] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 186.194492][ T8922] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 186.226064][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.241090][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.309970][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.448577][ T8792] hsr_slave_0: entered promiscuous mode [ 186.455333][ T8792] hsr_slave_1: entered promiscuous mode [ 186.465346][ T8792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.474064][ T8792] Cannot create hsr debugfs directory [ 186.490601][ T8930] x_tables: duplicate underflow at hook 2 [ 186.566342][ T8930] netlink: 'syz.1.754': attribute type 29 has an invalid length. [ 186.616879][ T8930] netlink: 'syz.1.754': attribute type 10 has an invalid length. [ 186.664155][ T8933] netlink: 'syz.1.754': attribute type 29 has an invalid length. [ 186.905449][ T8946] netlink: 'syz.3.756': attribute type 13 has an invalid length. [ 186.999996][ T5832] Bluetooth: hci4: command tx timeout [ 187.125246][ T8961] x_tables: duplicate underflow at hook 2 [ 187.144441][ T8946] net_ratelimit: 4060 callbacks suppressed [ 187.144455][ T8946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.183831][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 187.313780][ T8960] bridge_slave_1: left allmulticast mode [ 187.320095][ T8960] bridge_slave_1: left promiscuous mode [ 187.326046][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.336574][ T8960] bridge_slave_0: left allmulticast mode [ 187.343094][ T8960] bridge_slave_0: left promiscuous mode [ 187.349566][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.618905][ T8965] !: renamed from veth1_to_batadv (while UP) [ 187.784628][ T8985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.769'. [ 187.817431][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 187.883683][ T8973] lo speed is unknown, defaulting to 1000 [ 187.947952][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.770'. [ 188.025531][ T8973] wg1 speed is unknown, defaulting to 1000 [ 188.366095][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 188.573294][ T8994] lo speed is unknown, defaulting to 1000 [ 188.738679][ T8994] wg1 speed is unknown, defaulting to 1000 [ 188.801430][ T8792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.876772][ T9008] xt_CT: No such helper "snmp" [ 188.882832][ T8792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.896154][ T9012] sctp: [Deprecated]: syz.2.775 (pid 9012) Use of int in max_burst socket option. [ 188.896154][ T9012] Use struct sctp_assoc_value instead [ 188.940357][ T8792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.949510][ T9012] x_tables: duplicate underflow at hook 2 [ 189.078379][ T5832] Bluetooth: hci4: command tx timeout [ 189.245343][ T8792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.342824][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 189.554333][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 189.568957][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 189.621470][ T9041] ªªªªªª: entered promiscuous mode [ 189.632393][ T9041] tunl0: entered promiscuous mode [ 189.673461][ T9041] gre0: entered promiscuous mode [ 189.722736][ T9041] gretap0: entered promiscuous mode [ 189.787022][ T9041] ip_vti0: entered promiscuous mode [ 189.813484][ T9041] ip6_vti0: entered promiscuous mode [ 189.854723][ T9041] sit0: entered promiscuous mode [ 189.890472][ T9041] ip6tnl0: entered promiscuous mode [ 189.903951][ T9041] ip6gre0: entered promiscuous mode [ 189.916384][ T9041] syz_tun: entered promiscuous mode [ 189.940235][ T9041] ip6gretap0: entered promiscuous mode [ 189.952911][ T9041] bond0: entered promiscuous mode [ 189.966821][ T9041] team0: entered promiscuous mode [ 189.983025][ T9041] !: entered promiscuous mode [ 189.995597][ T9041] nlmon0: entered promiscuous mode [ 190.007954][ T9041] caif0: entered promiscuous mode [ 190.014056][ T9041] batadv0: entered promiscuous mode [ 190.035445][ T9041] vxcan0: entered promiscuous mode [ 190.049111][ T9041] vxcan1: entered promiscuous mode [ 190.065518][ T9041] veth1: entered promiscuous mode [ 190.081103][ T9041] wg0: entered promiscuous mode [ 190.092498][ T9041] wg1: entered promiscuous mode [ 190.105175][ T9041] wg2: entered promiscuous mode [ 190.115049][ T9041] veth0_to_bridge: entered promiscuous mode [ 190.141934][ T9041] bridge_slave_0: entered promiscuous mode [ 190.155393][ T9041] veth1_to_bridge: entered promiscuous mode [ 190.171630][ T9041] bridge_slave_1: entered promiscuous mode [ 190.181406][ T9041] veth0_to_bond: entered promiscuous mode [ 190.198903][ T9041] bond_slave_0: entered promiscuous mode [ 190.214032][ T9041] veth1_to_bond: entered promiscuous mode [ 190.224223][ T9041] bond_slave_1: entered promiscuous mode [ 190.234808][ T9041] veth0_to_team: entered promiscuous mode [ 190.245764][ T9041] team_slave_0: entered promiscuous mode [ 190.253568][ T9041] veth1_to_team: entered promiscuous mode [ 190.264019][ T9041] team_slave_1: entered promiscuous mode [ 190.271345][ T9041] veth0_to_batadv: entered promiscuous mode [ 190.282314][ T9041] batadv_slave_0: entered promiscuous mode [ 190.293762][ T9041] veth1_to_batadv: entered promiscuous mode [ 190.307044][ T9041] xfrm0: entered promiscuous mode [ 190.316542][ T9041] veth0_to_hsr: entered promiscuous mode [ 190.328687][ T9041] veth1_to_hsr: entered promiscuous mode [ 190.344796][ T9041] hsr0: entered promiscuous mode [ 190.354455][ T9041] veth1_virt_wifi: entered promiscuous mode [ 190.365439][ T9041] veth0_virt_wifi: entered promiscuous mode [ 190.377574][ T9041] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 190.409513][ T9041] vlan0: entered promiscuous mode [ 190.414919][ T9041] vlan1: entered promiscuous mode [ 190.421163][ T9041] macvlan0: entered promiscuous mode [ 190.433719][ T9041] macvlan1: entered promiscuous mode [ 190.443398][ T9041] ipvlan0: entered promiscuous mode [ 190.449133][ T9041] ipvlan1: entered promiscuous mode [ 190.462635][ T9041] macvtap0: entered promiscuous mode [ 190.471987][ T9041] macsec0: entered promiscuous mode [ 190.481820][ T9041] geneve0: entered promiscuous mode [ 190.491703][ T9041] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.501615][ T9041] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.510917][ T9041] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.521180][ T9041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.532469][ T9041] geneve1: entered promiscuous mode [ 190.541925][ T9041] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 190.556296][ T9041] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 190.566236][ T9041] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 190.576075][ T9041] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 190.611412][ T9041] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 190.626648][ T9041] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 190.635996][ T9041] syztnl0: entered promiscuous mode [ 190.646151][ T9041] vxlan0: entered promiscuous mode [ 190.654007][ T9041] bridge1: entered promiscuous mode [ 190.663362][ T9041] bridge2: entered promiscuous mode [ 190.673361][ T9041] bridge3: entered promiscuous mode [ 190.682712][ T9041] bond1: entered promiscuous mode [ 190.691664][ T9041] syztnl1: entered promiscuous mode [ 190.697466][ T9041] bridge4: entered promiscuous mode [ 190.703643][ T9041] hsr1: entered promiscuous mode [ 190.712147][ T9041] gre1: entered promiscuous mode [ 190.748949][ T9041] bridge5: entered promiscuous mode [ 190.756379][ T9041] vxlan1: entered promiscuous mode [ 190.773311][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 190.792417][ T9053] netlink: 'syz.1.784': attribute type 6 has an invalid length. [ 190.810298][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 190.813314][ T9053] netlink: 'syz.1.784': attribute type 12 has an invalid length. [ 190.828465][ T5840] wg1 speed is unknown, defaulting to 1000 [ 190.834400][ T5840] syz0: Port: 1 Link DOWN [ 190.926467][ T9068] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 191.262464][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.285181][ T9078] pim6reg9: entered allmulticast mode [ 191.363319][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.417810][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.425118][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.451511][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.458859][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.495035][ T9087] batman_adv: batadv0: Adding interface: macvlan6 [ 191.502208][ T9087] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.529129][ T9087] batman_adv: batadv0: Interface activated: macvlan6 [ 191.560532][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 191.706517][ T9095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.798'. [ 191.900295][ T9103] netlink: 'syz.2.799': attribute type 6 has an invalid length. [ 191.922723][ T9103] netlink: 'syz.2.799': attribute type 12 has an invalid length. [ 192.108315][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.133852][ T9111] tipc: Can't bind to reserved service type 2 [ 192.542956][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'. [ 192.882463][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 193.292008][ T8792] veth0_vlan: entered promiscuous mode [ 193.304166][ T9141] lo speed is unknown, defaulting to 1000 [ 193.406278][ T9141] wg1 speed is unknown, defaulting to 1000 [ 193.410686][ T8792] veth1_vlan: entered promiscuous mode [ 193.525443][ T8792] veth0_macvtap: entered promiscuous mode [ 193.575373][ T8792] veth1_macvtap: entered promiscuous mode [ 193.599879][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.610816][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.622377][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.668962][ T9157] erspan0: entered promiscuous mode [ 193.692330][ T9157] batman_adv: batadv0: Adding interface: macvlan2 [ 193.708778][ T9157] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.753731][ T9157] batman_adv: batadv0: Interface activated: macvlan2 [ 193.788337][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.809865][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.831443][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.846003][ T9155] syzkaller0: entered promiscuous mode [ 193.862110][ T9155] syzkaller0: entered allmulticast mode [ 193.889618][ T8792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.902258][ T8792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.914024][ T8792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.924525][ T8792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.974211][ T9167] netlink: 300 bytes leftover after parsing attributes in process `syz.2.816'. [ 194.258161][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.266037][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.289934][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296316][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.408313][ T9190] netlink: 'syz.0.824': attribute type 23 has an invalid length. [ 194.430739][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 194.443239][ T30] audit: type=1800 audit(1746889628.271:3): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.821" name="memory.events" dev="tmpfs" ino=981 res=0 errno=0 [ 194.496080][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.504610][ T9186] bridge_slave_1: left allmulticast mode [ 194.510829][ T9186] bridge_slave_1: left promiscuous mode [ 194.516584][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.525307][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.537379][ T9186] bridge_slave_0: left allmulticast mode [ 194.543081][ T9186] bridge_slave_0: left promiscuous mode [ 194.551299][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.649703][ T9193] ªªªªªª: left promiscuous mode [ 194.660454][ T9193] tunl0: left promiscuous mode [ 194.675058][ T9193] gre0: left promiscuous mode [ 194.694340][ T9193] gretap0: left promiscuous mode [ 194.711685][ T9193] ip_vti0: left promiscuous mode [ 194.721554][ T9193] ip6_vti0: left promiscuous mode [ 194.735250][ T9193] sit0: left promiscuous mode [ 194.752518][ T9193] ip6tnl0: left promiscuous mode [ 194.761489][ T9193] ip6gre0: left promiscuous mode [ 194.771246][ T9193] syz_tun: left promiscuous mode [ 194.778202][ T9193] ip6gretap0: left promiscuous mode [ 194.785925][ T9193] bond0: left promiscuous mode [ 194.792566][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.800358][ T9193] team0: left promiscuous mode [ 194.806250][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.814222][ T9193] !: left promiscuous mode [ 194.822174][ T9193] nlmon0: left promiscuous mode [ 194.830883][ T9193] caif0: left promiscuous mode [ 194.838368][ T9193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.851382][ T9200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.825'. [ 194.889988][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.825'. [ 195.491341][ T1145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.643295][ T1145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.778295][ T9235] dvmrp0: entered allmulticast mode [ 195.807510][ T9235] dvmrp0: left allmulticast mode [ 195.916043][ T1145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.960464][ T9244] x_tables: duplicate underflow at hook 4 [ 195.967026][ T9233] batadv_slave_1: entered promiscuous mode [ 196.019274][ T9233] batadv_slave_1: left promiscuous mode [ 196.125790][ T1145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.162492][ T9248] tipc: Started in network mode [ 196.171363][ T9248] tipc: Node identity 080211000001, cluster identity 4711 [ 196.180427][ T9248] tipc: Enabled bearer , priority 0 [ 196.210612][ T9250] batman_adv: batadv0: Adding interface: macvlan3 [ 196.218924][ T9250] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.249955][ T9250] batman_adv: batadv0: Interface activated: macvlan3 [ 196.279896][ T9248] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 196.291878][ T9248] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 196.300812][ T9248] tipc: Resetting bearer [ 196.396029][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.406129][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.414770][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.423217][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.444068][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.545718][ T9254] lo speed is unknown, defaulting to 1000 [ 196.589296][ T9254] wg1 speed is unknown, defaulting to 1000 [ 196.596617][ T1145] bridge_slave_1: left allmulticast mode [ 196.610100][ T1145] bridge_slave_1: left promiscuous mode [ 196.615929][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.631387][ T1145] bridge_slave_0: left allmulticast mode [ 196.637991][ T1145] bridge_slave_0: left promiscuous mode [ 196.644026][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.831508][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 197.021118][ T9278] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 197.045550][ T9274] xt_hashlimit: max too large, truncated to 1048576 [ 197.068235][ T9274] No such timeout policy "syz1" [ 197.149282][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.166210][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.182198][ T1145] bond0 (unregistering): Released all slaves [ 197.221666][ T9270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.235952][ T9270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.269165][ T9270] batman_adv: batadv0: Removing interface: macvlan4 [ 197.283857][ T977] tipc: Node number set to 134418688 [ 197.291849][ T9270] batman_adv: batadv0: Interface deactivated: macvlan5 [ 197.308374][ T9270] batman_adv: batadv0: Removing interface: macvlan5 [ 197.324726][ T9270] batman_adv: batadv0: Interface deactivated: macvlan6 [ 197.332122][ T9270] batman_adv: batadv0: Removing interface: macvlan6 [ 197.451224][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 197.534550][ T9288] tun0: tun_chr_ioctl cmd 1074025677 [ 197.543294][ T9288] tun0: linktype set to 773 [ 197.550363][ T9288] netlink: 'syz.1.847': attribute type 7 has an invalid length. [ 197.581713][ T9288] : entered promiscuous mode [ 197.619587][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 197.762249][ T1145] hsr_slave_0: left promiscuous mode [ 197.778861][ T1145] hsr_slave_1: left promiscuous mode [ 197.790065][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.800176][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.812081][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.830113][ T9298] netlink: 'syz.0.848': attribute type 7 has an invalid length. [ 197.837307][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.869821][ T1145] veth1_macvtap: left promiscuous mode [ 197.876908][ T1145] veth0_macvtap: left promiscuous mode [ 197.893080][ T1145] veth1_vlan: left promiscuous mode [ 197.898853][ T1145] veth0_vlan: left promiscuous mode [ 198.347998][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 198.391660][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 198.517963][ T5841] Bluetooth: hci4: command tx timeout [ 198.755267][ T9292] tun0: tun_chr_ioctl cmd 1074025677 [ 198.760874][ T9292] tun0: linktype set to 773 [ 198.789072][ T9254] chnl_net:caif_netlink_parms(): no params data found [ 198.816432][ T9298] : entered promiscuous mode [ 198.830960][ T9305] batman_adv: batadv0: Adding interface: macvlan4 [ 198.837939][ T9305] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.863664][ T9305] batman_adv: batadv0: Interface activated: macvlan4 [ 199.268076][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.313816][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.321824][ T9254] bridge_slave_0: entered allmulticast mode [ 199.331342][ T9254] bridge_slave_0: entered promiscuous mode [ 199.389336][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.408019][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.415528][ T9254] bridge_slave_1: entered allmulticast mode [ 199.423969][ T9254] bridge_slave_1: entered promiscuous mode [ 199.627707][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.668638][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.833658][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 199.886498][ T9254] team0: Port device team_slave_0 added [ 199.921044][ T9254] team0: Port device team_slave_1 added [ 200.034077][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.054614][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.085120][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.116265][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.131312][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.192617][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.351719][ T9254] hsr_slave_0: entered promiscuous mode [ 200.368999][ T9254] hsr_slave_1: entered promiscuous mode [ 200.385755][ T9254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.400996][ T9254] Cannot create hsr debugfs directory [ 200.453088][ T9351] batman_adv: batadv0: Adding interface: macvlan5 [ 200.461269][ T9351] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.491359][ T9351] batman_adv: batadv0: Interface activated: macvlan5 [ 200.597268][ T5841] Bluetooth: hci4: command tx timeout [ 200.714714][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 200.832469][ T9367] tun0: tun_chr_ioctl cmd 1074025677 [ 200.843082][ T9367] tun0: linktype set to 773 [ 200.866406][ T9363] netlink: 'syz.3.866': attribute type 7 has an invalid length. [ 201.028813][ T9375] nbd: socks must be embedded in a SOCK_ITEM attr [ 201.036792][ T9375] block nbd0: shutting down sockets [ 201.051683][ T9377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 201.432887][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 201.530564][ T9254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.579956][ T9254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.605652][ T9254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.656753][ T9254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.826431][ T9394] batman_adv: batadv0: Adding interface: macvlan0 [ 201.835042][ T9394] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.865450][ T9394] batman_adv: batadv0: Interface activated: macvlan0 [ 201.933578][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 202.049019][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.132822][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.201573][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.208821][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.272109][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.279385][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.529274][ T9411] lo speed is unknown, defaulting to 1000 [ 202.570941][ T9411] wg1 speed is unknown, defaulting to 1000 [ 202.630128][ T9422] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 202.663755][ T9424] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 202.677249][ T5841] Bluetooth: hci4: command tx timeout [ 202.697473][ T9424] netlink: 'syz.2.884': attribute type 12 has an invalid length. [ 202.802860][ T9422] lo speed is unknown, defaulting to 1000 [ 202.812350][ T9422] wg1 speed is unknown, defaulting to 1000 [ 202.909950][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 203.031545][ T9431] tun0: tun_chr_ioctl cmd 1074025677 [ 203.037036][ T9431] tun0: linktype set to 773 [ 203.078891][ T9437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.887'. [ 203.091825][ T9431] netlink: 'syz.0.886': attribute type 7 has an invalid length. [ 203.192605][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 203.261597][ T9440] batman_adv: batadv0: Adding interface: macvlan1 [ 203.290240][ T9440] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.322208][ T9440] batman_adv: batadv0: Interface activated: macvlan1 [ 203.349529][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.365046][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 203.445549][ T9411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.512288][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 203.533335][ T9450] lo speed is unknown, defaulting to 1000 [ 203.549500][ T9450] wg1 speed is unknown, defaulting to 1000 [ 204.073916][ T12] bond0 (unregistering): Released all slaves [ 204.381454][ T9254] veth0_vlan: entered promiscuous mode [ 204.421125][ T9254] veth1_vlan: entered promiscuous mode [ 204.488753][ T9254] veth0_macvtap: entered promiscuous mode [ 204.528104][ T9479] netlink: 'syz.0.897': attribute type 6 has an invalid length. [ 204.548545][ T9479] netlink: 'syz.0.897': attribute type 12 has an invalid length. [ 204.558209][ T9254] veth1_macvtap: entered promiscuous mode [ 204.608501][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.640126][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.659206][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.672861][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.684413][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.696711][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.757913][ T5841] Bluetooth: hci4: command tx timeout [ 204.774630][ T9254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.791638][ T9254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.801951][ T9254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.811035][ T9254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.866533][ T9499] tipc: Started in network mode [ 204.877687][ T9499] tipc: Node identity 080211000001, cluster identity 4711 [ 204.896094][ T9499] tipc: Enabled bearer , priority 0 [ 204.945154][ T9502] __nla_validate_parse: 2 callbacks suppressed [ 204.945176][ T9502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 204.971003][ T9499] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 204.986084][ T9499] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 204.996111][ T9499] tipc: Resetting bearer [ 205.167919][ T9508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.904'. [ 205.171031][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.221801][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.291648][ T2968] tipc: Resetting bearer [ 205.338869][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.348346][ T9515] FAULT_INJECTION: forcing a failure. [ 205.348346][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 205.359881][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.367154][ T9515] CPU: 1 UID: 0 PID: 9515 Comm: syz.2.905 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 205.367186][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.367198][ T9515] Call Trace: [ 205.367207][ T9515] [ 205.367218][ T9515] dump_stack_lvl+0x189/0x250 [ 205.367259][ T9515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.367291][ T9515] ? __pfx__printk+0x10/0x10 [ 205.367320][ T9515] ? __pfx___might_resched+0x10/0x10 [ 205.367347][ T9515] should_fail_ex+0x414/0x560 [ 205.367375][ T9515] should_failslab+0xa8/0x100 [ 205.367407][ T9515] __kmalloc_cache_noprof+0x70/0x3d0 [ 205.367434][ T9515] ? route4_init+0x4f/0xa0 [ 205.367459][ T9515] route4_init+0x4f/0xa0 [ 205.367480][ T9515] tcf_proto_create+0x245/0x330 [ 205.367518][ T9515] tc_new_tfilter+0x11aa/0x15b0 [ 205.367546][ T9515] ? nlmon_xmit+0xb0/0x100 [ 205.367595][ T9515] ? __local_bh_enable_ip+0x12d/0x1c0 [ 205.367623][ T9515] ? __pfx_tc_new_tfilter+0x10/0x10 [ 205.367694][ T9515] ? __pfx_tc_new_tfilter+0x10/0x10 [ 205.367723][ T9515] rtnetlink_rcv_msg+0x7cc/0xb70 [ 205.367752][ T9515] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 205.367777][ T9515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.367806][ T9515] ? ref_tracker_free+0x63a/0x7d0 [ 205.367837][ T9515] ? __copy_skb_header+0xa7/0x550 [ 205.367879][ T9515] netlink_rcv_skb+0x219/0x490 [ 205.367907][ T9515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.367933][ T9515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.367984][ T9515] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.368009][ T9515] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.368043][ T9515] netlink_unicast+0x758/0x8d0 [ 205.368079][ T9515] netlink_sendmsg+0x805/0xb30 [ 205.368123][ T9515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.368153][ T9515] ? aa_sock_msg_perm+0x94/0x160 [ 205.368180][ T9515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.368205][ T9515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.368232][ T9515] __sock_sendmsg+0x219/0x270 [ 205.368257][ T9515] ____sys_sendmsg+0x505/0x830 [ 205.368290][ T9515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.368329][ T9515] ? import_iovec+0x74/0xa0 [ 205.368362][ T9515] ___sys_sendmsg+0x21f/0x2a0 [ 205.368397][ T9515] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.368472][ T9515] ? __fget_files+0x2a/0x420 [ 205.368500][ T9515] ? __fget_files+0x3a0/0x420 [ 205.368540][ T9515] __x64_sys_sendmsg+0x19b/0x260 [ 205.368573][ T9515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.368624][ T9515] ? do_syscall_64+0xba/0x210 [ 205.368652][ T9515] do_syscall_64+0xf6/0x210 [ 205.368674][ T9515] ? clear_bhb_loop+0x45/0xa0 [ 205.368701][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.368722][ T9515] RIP: 0033:0x7f591318e969 [ 205.368742][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.368760][ T9515] RSP: 002b:00007f591403f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.368784][ T9515] RAX: ffffffffffffffda RBX: 00007f59133b5fa0 RCX: 00007f591318e969 [ 205.368799][ T9515] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 205.368820][ T9515] RBP: 00007f591403f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.368833][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.368846][ T9515] R13: 0000000000000000 R14: 00007f59133b5fa0 R15: 00007ffe460ae3a8 [ 205.368881][ T9515] [ 205.641640][ T9519] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 206.008154][ T977] tipc: Node number set to 134418688 [ 206.262979][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.294847][ T9539] x_tables: duplicate underflow at hook 2 [ 206.328384][ T9539] netlink: 'syz.3.912': attribute type 29 has an invalid length. [ 206.350027][ T9539] netlink: 'syz.3.912': attribute type 29 has an invalid length. [ 206.393483][ T9539] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 206.404272][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.469275][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.537397][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.762584][ T13] bridge_slave_1: left allmulticast mode [ 206.768420][ T13] bridge_slave_1: left promiscuous mode [ 206.774213][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.783691][ T13] bridge_slave_0: left allmulticast mode [ 206.789638][ T13] bridge_slave_0: left promiscuous mode [ 206.795441][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.960537][ T9543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.967890][ T9543] IPv6: NLM_F_CREATE should be set when creating new route [ 206.975176][ T9543] IPv6: NLM_F_CREATE should be set when creating new route [ 206.991030][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'. [ 207.323641][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.338735][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.347467][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.360060][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.376828][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.422856][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.434918][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.445408][ T13] bond0 (unregistering): Released all slaves [ 207.462784][ T9544] hsr0: entered promiscuous mode [ 207.671024][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 207.709665][ T9563] team0: Port device bond0 removed [ 207.724329][ T9563] bond0: (slave bond_slave_0): Releasing backup interface [ 207.782628][ T9563] bond0: (slave bond_slave_1): Releasing backup interface [ 207.808324][ T9563] team0: Port device team_slave_0 removed [ 207.816886][ T9563] team0: Port device team_slave_1 removed [ 207.829814][ T9563] tipc: Resetting bearer [ 207.848889][ T9563] tipc: Resetting bearer [ 207.855757][ T9563] bond1: (slave ip6erspan0): Releasing active interface [ 207.864493][ T9563] ip6erspan0: left allmulticast mode [ 208.003272][ T9554] lo speed is unknown, defaulting to 1000 [ 208.068463][ T9579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.921'. [ 208.097628][ T9554] wg1 speed is unknown, defaulting to 1000 [ 208.184130][ T13] hsr_slave_0: left promiscuous mode [ 208.192551][ T13] hsr_slave_1: left promiscuous mode [ 208.208784][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.226945][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.241588][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.257306][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.381572][ T13] veth1_macvtap: left promiscuous mode [ 208.396366][ T13] veth0_macvtap: left promiscuous mode [ 208.413620][ T13] veth1_vlan: left promiscuous mode [ 208.420719][ T13] veth0_vlan: left promiscuous mode [ 208.501457][ T9602] x_tables: duplicate underflow at hook 2 [ 208.714094][ T9604] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 208.979817][ T13] team0 (unregistering): Port device team_slave_1 removed [ 209.031501][ T13] team0 (unregistering): Port device team_slave_0 removed [ 209.405132][ T9587] netlink: 'syz.1.922': attribute type 6 has an invalid length. [ 209.416228][ T9587] netlink: 'syz.1.922': attribute type 12 has an invalid length. [ 209.451612][ T9602] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 209.477650][ T5832] Bluetooth: hci4: command tx timeout [ 209.872859][ T9554] chnl_net:caif_netlink_parms(): no params data found [ 210.128234][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 210.148174][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 210.174762][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 210.201404][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.934'. [ 210.212093][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 210.341712][ T9622] lo speed is unknown, defaulting to 1000 [ 210.373910][ T9622] wg1 speed is unknown, defaulting to 1000 [ 210.566211][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 210.622336][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.646175][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.675707][ T9554] bridge_slave_0: entered allmulticast mode [ 210.708434][ T9554] bridge_slave_0: entered promiscuous mode [ 210.751146][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.770887][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.779346][ T9554] bridge_slave_1: entered allmulticast mode [ 210.787210][ T9554] bridge_slave_1: entered promiscuous mode [ 210.881992][ T9554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.899584][ T9554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.029025][ T9554] team0: Port device team_slave_0 added [ 211.035094][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 211.044316][ T9663] netlink: 'syz.2.942': attribute type 6 has an invalid length. [ 211.053458][ T9663] netlink: 'syz.2.942': attribute type 12 has an invalid length. [ 211.066249][ T9554] team0: Port device team_slave_1 added [ 211.155756][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.171679][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.198156][ T9554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.212088][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.227512][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.261550][ T9554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.478834][ T9554] hsr_slave_0: entered promiscuous mode [ 211.498582][ T9554] hsr_slave_1: entered promiscuous mode [ 211.520626][ T9554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.547102][ T9554] Cannot create hsr debugfs directory [ 211.557889][ T5834] Bluetooth: hci4: command tx timeout [ 211.664232][ T9668] ip6tnl1: entered promiscuous mode [ 211.673593][ T9668] ip6tnl1: entered allmulticast mode [ 211.727577][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 211.733695][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.739889][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 211.742668][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 211.891916][ T9685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.948'. [ 211.925656][ T9688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.949'. [ 212.157355][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 212.446546][ T9707] lo speed is unknown, defaulting to 1000 [ 212.623820][ T9707] wg1 speed is unknown, defaulting to 1000 [ 212.804667][ T9725] netlink: 'syz.3.960': attribute type 3 has an invalid length. [ 212.893805][ T9731] syz.3.960: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.920724][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.3.960 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 212.920756][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.920769][ T9731] Call Trace: [ 212.920777][ T9731] [ 212.920786][ T9731] dump_stack_lvl+0x189/0x250 [ 212.920823][ T9731] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 212.920850][ T9731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.920882][ T9731] ? __pfx__printk+0x10/0x10 [ 212.920903][ T9731] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.920924][ T9731] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.920953][ T9731] warn_alloc+0x214/0x310 [ 212.920984][ T9731] ? bpf_trace_run2+0x186/0x4b0 [ 212.921010][ T9731] ? __pfx_warn_alloc+0x10/0x10 [ 212.921038][ T9731] ? kasan_save_track+0x4f/0x80 [ 212.921061][ T9731] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 212.921085][ T9731] ? xskq_create+0x56/0x170 [ 212.921117][ T9731] ? __x64_sys_setsockopt+0x18b/0x220 [ 212.921143][ T9731] ? do_syscall_64+0xf6/0x210 [ 212.921162][ T9731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.921193][ T9731] __vmalloc_node_range_noprof+0x125/0x12c0 [ 212.921256][ T9731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.921289][ T9731] ? __kasan_kmalloc+0x93/0xb0 [ 212.921320][ T9731] vmalloc_user_noprof+0x74/0x80 [ 212.921349][ T9731] ? xskq_create+0xbf/0x170 [ 212.921378][ T9731] xskq_create+0xbf/0x170 [ 212.921413][ T9731] xsk_init_queue+0xb0/0x110 [ 212.921446][ T9731] xsk_setsockopt+0x43f/0x710 [ 212.921480][ T9731] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.921522][ T9731] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 212.921545][ T9731] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.921576][ T9731] do_sock_setsockopt+0x257/0x3e0 [ 212.921607][ T9731] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.921630][ T9731] ? __fget_files+0x2a/0x420 [ 212.921667][ T9731] ? __fget_files+0x3a0/0x420 [ 212.921688][ T9731] ? __fget_files+0x2a/0x420 [ 212.921722][ T9731] __x64_sys_setsockopt+0x18b/0x220 [ 212.921758][ T9731] do_syscall_64+0xf6/0x210 [ 212.921779][ T9731] ? clear_bhb_loop+0x45/0xa0 [ 212.921804][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.921823][ T9731] RIP: 0033:0x7fab5518e969 [ 212.921841][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.921860][ T9731] RSP: 002b:00007fab56031038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.921881][ T9731] RAX: ffffffffffffffda RBX: 00007fab553b6080 RCX: 00007fab5518e969 [ 212.921896][ T9731] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 212.921908][ T9731] RBP: 00007fab55210ab1 R08: 0000000000000004 R09: 0000000000000000 [ 212.921921][ T9731] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.921934][ T9731] R13: 0000000000000000 R14: 00007fab553b6080 R15: 00007ffc557b71b8 [ 212.921966][ T9731] [ 212.939323][ T9731] Mem-Info: [ 213.221611][ T9731] active_anon:6905 inactive_anon:0 isolated_anon:0 [ 213.221611][ T9731] active_file:1530 inactive_file:39883 isolated_file:0 [ 213.221611][ T9731] unevictable:768 dirty:39 writeback:25 [ 213.221611][ T9731] slab_reclaimable:11038 slab_unreclaimable:124978 [ 213.221611][ T9731] mapped:30081 shmem:1368 pagetables:654 [ 213.221611][ T9731] sec_pagetables:0 bounce:0 [ 213.221611][ T9731] kernel_misc_reclaimable:0 [ 213.221611][ T9731] free:1312563 free_pcp:506 free_cma:0 [ 213.267172][ T9731] Node 0 active_anon:27620kB inactive_anon:0kB active_file:6120kB inactive_file:159328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120324kB dirty:152kB writeback:100kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11068kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.316068][ T9731] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.385745][ T9731] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.479188][ T9731] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 213.537443][ T9731] Node 0 DMA32 free:1325824kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:27512kB inactive_anon:0kB active_file:6120kB inactive_file:159236kB unevictable:1536kB writepending:248kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:2112kB local_pcp:1508kB free_cma:0kB [ 213.596724][ T9731] lowmem_reserve[]: 0 0 0 0 0 [ 213.601998][ T9731] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 213.643035][ T5140] Bluetooth: hci4: command tx timeout [ 213.674303][ T9731] lowmem_reserve[]: 0 0 0 0 0 [ 213.691106][ T9731] Node 1 Normal free:3909752kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.741345][ T9731] lowmem_reserve[]: 0 0 0 0 0 [ 213.751376][ T9731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.769728][ T9731] Node 0 DMA32: 1*4kB (U) 20*8kB (UE) 212*16kB (UME) 275*32kB (UME) 210*64kB (UME) 144*128kB (UME) 30*256kB (UME) 29*512kB (UME) 23*1024kB (UME) 7*2048kB (UME) 297*4096kB (M) = 1321156kB [ 213.782524][ T9740] lo speed is unknown, defaulting to 1000 [ 213.796713][ T9731] Node 0 [ 213.804915][ T9554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.815532][ T9731] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.841631][ T9554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.859536][ T9731] Node 1 Normal: 232*4kB (UM) 53*8kB (UME) 45*16kB (UME) 209*32kB (UME) 95*64kB (UME) 29*128kB (UME) 20*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3909752kB [ 213.882728][ T9731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.896219][ T9554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.940972][ T9740] wg1 speed is unknown, defaulting to 1000 [ 213.946981][ T9731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.950482][ T9554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.007540][ T9731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.037230][ T9731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.050216][ T9731] 45061 total pagecache pages [ 214.054966][ T9731] 0 pages in swap cache [ 214.097311][ T9731] Free swap = 124996kB [ 214.101532][ T9731] Total swap = 124996kB [ 214.105715][ T9731] 2097051 pages RAM [ 214.147475][ T9731] 0 pages HighMem/MovableOnly [ 214.152216][ T9731] 424379 pages reserved [ 214.156401][ T9731] 0 pages cma reserved [ 214.337563][ T9757] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20002 [ 214.416113][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.472876][ T9554] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.510772][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.518044][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.573134][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.580410][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.971783][ T9792] tipc: Resetting bearer [ 215.054721][ T9793] SET target dimension over the limit! [ 215.189887][ T9792] can: request_module (can-proto-5) failed. [ 215.270017][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.398984][ T9811] syz.0.979 (9811) used obsolete PPPIOCDETACH ioctl [ 215.706783][ T9823] xt_socket: unknown flags 0xfc [ 215.717236][ T5140] Bluetooth: hci4: command tx timeout [ 215.750651][ T9826] __nla_validate_parse: 6 callbacks suppressed [ 215.750671][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 215.965474][ T9554] veth0_vlan: entered promiscuous mode [ 216.056811][ T9554] veth1_vlan: entered promiscuous mode [ 216.325977][ T9554] veth0_macvtap: entered promiscuous mode [ 216.361738][ T9554] veth1_macvtap: entered promiscuous mode [ 216.415962][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.449253][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.472331][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.494328][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 216.564694][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.581101][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.612965][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.652846][ T9554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.664453][ T9554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.676519][ T9554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.690178][ T9554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.146348][ T9871] FAULT_INJECTION: forcing a failure. [ 217.146348][ T9871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.161771][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.167278][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.1.994 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 217.167312][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.167325][ T9871] Call Trace: [ 217.167334][ T9871] [ 217.167344][ T9871] dump_stack_lvl+0x189/0x250 [ 217.167379][ T9871] ? __lock_acquire+0xaac/0xd20 [ 217.167413][ T9871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.167446][ T9871] ? __pfx__printk+0x10/0x10 [ 217.167468][ T9871] ? __might_fault+0xb0/0x130 [ 217.167510][ T9871] should_fail_ex+0x414/0x560 [ 217.167540][ T9871] _copy_from_iter+0x1db/0x15a0 [ 217.167576][ T9871] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 217.167600][ T9871] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 217.167629][ T9871] ? __pfx__copy_from_iter+0x10/0x10 [ 217.167658][ T9871] ? __build_skb_around+0x257/0x3e0 [ 217.167690][ T9871] ? netlink_sendmsg+0x642/0xb30 [ 217.167715][ T9871] ? skb_put+0x11b/0x210 [ 217.167747][ T9871] netlink_sendmsg+0x6b2/0xb30 [ 217.167785][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.167816][ T9871] ? aa_sock_msg_perm+0x94/0x160 [ 217.167842][ T9871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.167865][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.167894][ T9871] __sock_sendmsg+0x219/0x270 [ 217.167940][ T9871] ____sys_sendmsg+0x505/0x830 [ 217.167981][ T9871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.168021][ T9871] ? import_iovec+0x74/0xa0 [ 217.168054][ T9871] ___sys_sendmsg+0x21f/0x2a0 [ 217.168086][ T9871] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.168158][ T9871] ? __fget_files+0x2a/0x420 [ 217.168184][ T9871] ? __fget_files+0x3a0/0x420 [ 217.168224][ T9871] __x64_sys_sendmsg+0x19b/0x260 [ 217.168264][ T9871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.168315][ T9871] ? do_syscall_64+0xba/0x210 [ 217.168341][ T9871] do_syscall_64+0xf6/0x210 [ 217.168364][ T9871] ? clear_bhb_loop+0x45/0xa0 [ 217.168390][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.168411][ T9871] RIP: 0033:0x7f5da818e969 [ 217.168430][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.168450][ T9871] RSP: 002b:00007f5da8f6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.168473][ T9871] RAX: ffffffffffffffda RBX: 00007f5da83b5fa0 RCX: 00007f5da818e969 [ 217.168489][ T9871] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 217.168501][ T9871] RBP: 00007f5da8f6c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.168515][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.168528][ T9871] R13: 0000000000000000 R14: 00007f5da83b5fa0 R15: 00007ffdcffa6148 [ 217.168561][ T9871] [ 217.250121][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.361390][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.486582][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.816362][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 218.032425][ T9905] batman_adv: batadv0: Adding interface: macvlan4 [ 218.056504][ T9905] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.088168][ T9905] batman_adv: batadv0: Interface activated: macvlan4 [ 218.258152][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.311217][ T9910] netlink: 'syz.3.1006': attribute type 4 has an invalid length. [ 218.324653][ T9911] netlink: 'syz.1.1007': attribute type 8 has an invalid length. [ 218.405499][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.859555][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.033602][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.192218][ T13] bridge_slave_1: left allmulticast mode [ 219.207156][ T13] bridge_slave_1: left promiscuous mode [ 219.213002][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.230263][ T13] bridge_slave_0: left allmulticast mode [ 219.235979][ T13] bridge_slave_0: left promiscuous mode [ 219.242229][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.587156][ T30] audit: type=1800 audit(1746889653.411:4): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1010" name="memory.events" dev="tmpfs" ino=1039 res=0 errno=0 [ 219.652912][ T30] audit: type=1804 audit(1746889653.471:5): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1010" name="memory.events" dev="tmpfs" ino=1039 res=1 errno=0 [ 220.002421][ T9928] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1011'. [ 220.084427][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 220.130366][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.141978][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.168425][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.190733][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.206225][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.295433][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.324372][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.362538][ T13] bond0 (unregistering): Released all slaves [ 220.492807][ T9930] lo speed is unknown, defaulting to 1000 [ 220.544798][ T9938] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1014'. [ 220.588327][ T9930] wg1 speed is unknown, defaulting to 1000 [ 220.822152][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 220.926301][ T13] hsr_slave_0: left promiscuous mode [ 220.953699][ T13] hsr_slave_1: left promiscuous mode [ 220.974149][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.993158][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.004168][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.013973][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.052198][ T9958] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 221.052324][ T13] veth1_macvtap: left promiscuous mode [ 221.065778][ T13] veth0_macvtap: left promiscuous mode [ 221.071943][ T13] veth1_vlan: left promiscuous mode [ 221.078323][ T13] veth0_vlan: left promiscuous mode [ 221.687988][ T9967] FAULT_INJECTION: forcing a failure. [ 221.687988][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 221.742014][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz.2.1019 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 221.742047][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.742060][ T9967] Call Trace: [ 221.742068][ T9967] [ 221.742078][ T9967] dump_stack_lvl+0x189/0x250 [ 221.742117][ T9967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.742147][ T9967] ? __pfx__printk+0x10/0x10 [ 221.742170][ T9967] ? __pfx___might_resched+0x10/0x10 [ 221.742188][ T9967] ? fs_reclaim_acquire+0x7d/0x100 [ 221.742223][ T9967] should_fail_ex+0x414/0x560 [ 221.742249][ T9967] should_failslab+0xa8/0x100 [ 221.742278][ T9967] __kmalloc_noprof+0xcb/0x4f0 [ 221.742301][ T9967] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.742330][ T9967] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 221.742369][ T9967] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 221.742410][ T9967] genl_family_rcv_msg_doit+0xb8/0x300 [ 221.742448][ T9967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.742482][ T9967] ? rcu_is_watching+0x15/0xb0 [ 221.742515][ T9967] ? apparmor_capable+0x137/0x1b0 [ 221.742545][ T9967] ? bpf_lsm_capable+0x9/0x20 [ 221.742572][ T9967] ? security_capable+0x7e/0x2e0 [ 221.742601][ T9967] genl_rcv_msg+0x60e/0x790 [ 221.742639][ T9967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.742667][ T9967] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 221.742695][ T9967] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 221.742717][ T9967] ? __pfx_nl80211_post_doit+0x10/0x10 [ 221.742749][ T9967] ? ref_tracker_free+0x63a/0x7d0 [ 221.742768][ T9967] ? __copy_skb_header+0xa7/0x550 [ 221.742808][ T9967] netlink_rcv_skb+0x219/0x490 [ 221.742834][ T9967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.742865][ T9967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.742917][ T9967] ? down_read+0x1ad/0x2e0 [ 221.742941][ T9967] genl_rcv+0x28/0x40 [ 221.742980][ T9967] netlink_unicast+0x758/0x8d0 [ 221.743015][ T9967] netlink_sendmsg+0x805/0xb30 [ 221.743055][ T9967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.743084][ T9967] ? aa_sock_msg_perm+0x94/0x160 [ 221.743108][ T9967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.743130][ T9967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.743156][ T9967] __sock_sendmsg+0x219/0x270 [ 221.743181][ T9967] ____sys_sendmsg+0x505/0x830 [ 221.743216][ T9967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.743255][ T9967] ? import_iovec+0x74/0xa0 [ 221.743286][ T9967] ___sys_sendmsg+0x21f/0x2a0 [ 221.743315][ T9967] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.743381][ T9967] ? __fget_files+0x2a/0x420 [ 221.743406][ T9967] ? __fget_files+0x3a0/0x420 [ 221.743444][ T9967] __x64_sys_sendmsg+0x19b/0x260 [ 221.743474][ T9967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.743522][ T9967] ? do_syscall_64+0xba/0x210 [ 221.743546][ T9967] do_syscall_64+0xf6/0x210 [ 221.743567][ T9967] ? clear_bhb_loop+0x45/0xa0 [ 221.743592][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.743611][ T9967] RIP: 0033:0x7f591318e969 [ 221.743629][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.743646][ T9967] RSP: 002b:00007f591403f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.743667][ T9967] RAX: ffffffffffffffda RBX: 00007f59133b5fa0 RCX: 00007f591318e969 [ 221.743681][ T9967] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 221.743694][ T9967] RBP: 00007f591403f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.743706][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.743718][ T9967] R13: 0000000000000000 R14: 00007f59133b5fa0 R15: 00007ffe460ae3a8 [ 221.743751][ T9967] [ 222.277518][ T5140] Bluetooth: hci4: command tx timeout [ 222.386242][ T13] team0 (unregistering): Port device team_slave_1 removed [ 222.530003][ T13] team0 (unregistering): Port device team_slave_0 removed [ 223.202209][ T9953] tun0: tun_chr_ioctl cmd 1074025677 [ 223.209412][ T9953] tun0: linktype set to 773 [ 223.269802][ T9963] batman_adv: batadv0: Adding interface: macvlan5 [ 223.276287][ T9963] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.302143][ T9963] batman_adv: batadv0: Interface activated: macvlan5 [ 223.484307][ T9983] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 223.535220][ T9982] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1023'. [ 223.620497][ T9983] bond1: entered promiscuous mode [ 223.625060][ T9993] ipt_ECN: cannot use operation on non-tcp rule [ 223.626555][ T9983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.676801][ T9982] batadv1: entered promiscuous mode [ 223.700345][ T9982] batadv1: entered allmulticast mode [ 223.710573][ T9982] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.731175][ T9982] bond1: (slave batadv1): making interface the new active one [ 223.759045][ T9982] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 223.951469][ T9930] chnl_net:caif_netlink_parms(): no params data found [ 224.133906][T10011] FAULT_INJECTION: forcing a failure. [ 224.133906][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 224.177241][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.0.1031 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 224.177272][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.177286][T10011] Call Trace: [ 224.177294][T10011] [ 224.177303][T10011] dump_stack_lvl+0x189/0x250 [ 224.177341][T10011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.177371][T10011] ? __pfx__printk+0x10/0x10 [ 224.177398][T10011] ? __pfx___might_resched+0x10/0x10 [ 224.177415][T10011] ? fs_reclaim_acquire+0x7d/0x100 [ 224.177450][T10011] should_fail_ex+0x414/0x560 [ 224.177476][T10011] should_failslab+0xa8/0x100 [ 224.177504][T10011] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 224.177538][T10011] ? __alloc_skb+0x112/0x2d0 [ 224.177568][T10011] __alloc_skb+0x112/0x2d0 [ 224.177598][T10011] netlink_ack+0x146/0xa50 [ 224.177620][T10011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.177648][T10011] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 224.177678][T10011] ? __pfx_nl80211_post_doit+0x10/0x10 [ 224.177709][T10011] ? ref_tracker_free+0x63a/0x7d0 [ 224.177729][T10011] ? __copy_skb_header+0xa7/0x550 [ 224.177768][T10011] netlink_rcv_skb+0x2a0/0x490 [ 224.177793][T10011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.177826][T10011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.177877][T10011] ? down_read+0x1ad/0x2e0 [ 224.177903][T10011] genl_rcv+0x28/0x40 [ 224.177930][T10011] netlink_unicast+0x758/0x8d0 [ 224.177965][T10011] netlink_sendmsg+0x805/0xb30 [ 224.178001][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.178031][T10011] ? aa_sock_msg_perm+0x94/0x160 [ 224.178055][T10011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.178078][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.178105][T10011] __sock_sendmsg+0x219/0x270 [ 224.178129][T10011] ____sys_sendmsg+0x505/0x830 [ 224.178164][T10011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.178203][T10011] ? import_iovec+0x74/0xa0 [ 224.178236][T10011] ___sys_sendmsg+0x21f/0x2a0 [ 224.178267][T10011] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.178336][T10011] ? __fget_files+0x2a/0x420 [ 224.178362][T10011] ? __fget_files+0x3a0/0x420 [ 224.178400][T10011] __x64_sys_sendmsg+0x19b/0x260 [ 224.178432][T10011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.178478][T10011] ? do_syscall_64+0xba/0x210 [ 224.178503][T10011] do_syscall_64+0xf6/0x210 [ 224.178533][T10011] ? clear_bhb_loop+0x45/0xa0 [ 224.178558][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.178578][T10011] RIP: 0033:0x7ff7c2d8e969 [ 224.178596][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.178614][T10011] RSP: 002b:00007ff7c3c0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.178635][T10011] RAX: ffffffffffffffda RBX: 00007ff7c2fb5fa0 RCX: 00007ff7c2d8e969 [ 224.178650][T10011] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 224.178663][T10011] RBP: 00007ff7c3c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 224.178675][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.178687][T10011] R13: 0000000000000000 R14: 00007ff7c2fb5fa0 R15: 00007fffe761e3d8 [ 224.178720][T10011] [ 224.499525][ T5140] Bluetooth: hci4: command tx timeout [ 224.618529][T10009] lo speed is unknown, defaulting to 1000 [ 224.696477][ T9930] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.723991][ T9930] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.742131][ T9930] bridge_slave_0: entered allmulticast mode [ 224.768212][ T9930] bridge_slave_0: entered promiscuous mode [ 224.846142][T10009] wg1 speed is unknown, defaulting to 1000 [ 224.857516][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.875195][ T9930] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.896437][ T9930] bridge_slave_1: entered allmulticast mode [ 224.930659][ T9930] bridge_slave_1: entered promiscuous mode [ 224.977483][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 225.098226][T10036] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1037'. [ 225.143583][T10020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.249844][ T9930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.296018][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 225.314335][ T9930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.469539][ T9930] team0: Port device team_slave_0 added [ 225.510544][ T9930] team0: Port device team_slave_1 added [ 225.735909][T10056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'. [ 225.792503][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.805536][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.812315][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 225.840050][ T9930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.978906][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.985904][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.032155][ T9930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.244757][ T9930] hsr_slave_0: entered promiscuous mode [ 226.273873][ T9930] hsr_slave_1: entered promiscuous mode [ 226.294800][ T9930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.309655][ T9930] Cannot create hsr debugfs directory [ 226.326780][T10085] netlink: 'syz.3.1050': attribute type 10 has an invalid length. [ 226.357496][T10085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1050'. [ 226.398353][T10073] lo speed is unknown, defaulting to 1000 [ 226.463733][T10073] wg1 speed is unknown, defaulting to 1000 [ 226.517429][ T5140] Bluetooth: hci4: command tx timeout [ 226.652506][T10093] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 226.661691][T10093] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 226.676370][T10096] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1053'. [ 226.693134][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 226.744056][T10096] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.756334][T10096] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.772435][T10096] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.782664][T10096] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.951451][T10100] lo speed is unknown, defaulting to 1000 [ 227.001452][T10105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.217558][T10100] wg1 speed is unknown, defaulting to 1000 [ 227.323213][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 227.545839][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 227.770875][T10119] tipc: Resetting bearer [ 227.960605][T10127] batman_adv: batadv0: Adding interface: macvlan6 [ 227.967267][T10127] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.002444][T10127] batman_adv: batadv0: Interface activated: macvlan6 [ 228.141199][ T9930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.174425][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 228.180241][ T9930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.209764][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1066'. [ 228.243692][ T9930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.272760][ T9930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.452982][T10145] lo speed is unknown, defaulting to 1000 [ 228.488412][T10145] wg1 speed is unknown, defaulting to 1000 [ 228.597573][ T5140] Bluetooth: hci4: command tx timeout [ 228.612330][ T9930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.710305][ T9930] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.744339][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.751625][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.773983][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.781213][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.901257][T10159] lo speed is unknown, defaulting to 1000 [ 228.922774][T10159] wg1 speed is unknown, defaulting to 1000 [ 229.346866][ T9930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.383424][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 229.408149][T10180] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.524182][T10183] IPVS: Unknown mcast interface: wg0 [ 229.575897][T10194] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 229.598902][T10191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1081'. [ 229.617297][T10190] wg2: Master is either lo or non-ether device [ 229.643116][T10188] wg2: Master is either lo or non-ether device [ 229.760720][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 229.825992][T10202] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 229.848458][ T7198] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.920790][T10200] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 229.952468][T10204] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 230.188848][ T9930] veth0_vlan: entered promiscuous mode [ 230.234460][ T9930] veth1_vlan: entered promiscuous mode [ 230.312277][ T9930] veth0_macvtap: entered promiscuous mode [ 230.342770][ T9930] veth1_macvtap: entered promiscuous mode [ 230.393096][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.427501][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.453428][ T9930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.467909][T10222] sctp: [Deprecated]: syz.3.1086 (pid 10222) Use of int in max_burst socket option. [ 230.467909][T10222] Use struct sctp_assoc_value instead [ 230.473812][T10231] x_tables: duplicate underflow at hook 2 [ 230.496235][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.515292][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.555375][ T9930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.590669][ T9930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.610187][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.627932][ T9930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.636898][ T9930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.664870][ T9930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.677934][ T5140] Bluetooth: hci4: command tx timeout [ 230.721736][T10236] tipc: Resetting bearer [ 230.732925][T10236] tipc: Resetting bearer [ 230.756432][T10238] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 230.944925][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.963030][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.053625][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.065152][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.972470][T10309] sctp: [Deprecated]: syz.1.1113 (pid 10309) Use of int in max_burst socket option. [ 231.972470][T10309] Use struct sctp_assoc_value instead [ 232.093795][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.232454][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.513147][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.596339][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.685804][ T12] bridge_slave_1: left allmulticast mode [ 232.691899][ T12] bridge_slave_1: left promiscuous mode [ 232.698183][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.707993][ T12] bridge_slave_0: left allmulticast mode [ 232.713656][ T12] bridge_slave_0: left promiscuous mode [ 232.719595][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.265847][T10339] netlink: 'syz.0.1115': attribute type 7 has an invalid length. [ 233.373934][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.384447][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.393498][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.403332][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.411889][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.590741][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.603752][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.614435][ T12] bond0 (unregistering): Released all slaves [ 233.641625][T10326] __nla_validate_parse: 2 callbacks suppressed [ 233.641644][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 233.710954][T10335] tun0: tun_chr_ioctl cmd 1074025677 [ 233.716498][T10335] tun0: linktype set to 773 [ 233.831517][T10348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.955323][T10354] ªªªªªª: renamed from lo (while UP) [ 234.104038][T10341] lo speed is unknown, defaulting to 1000 [ 234.133789][T10341] wg1 speed is unknown, defaulting to 1000 [ 234.482386][ T12] hsr_slave_0: left promiscuous mode [ 234.525415][ T12] hsr_slave_1: left promiscuous mode [ 234.535047][T10391] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 234.559673][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.568296][T10391] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1133'. [ 234.582395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.598244][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 234.618020][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.625507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.677885][ T12] veth1_macvtap: left promiscuous mode [ 234.683550][ T12] veth0_macvtap: left promiscuous mode [ 234.692182][ T12] veth1_vlan: left promiscuous mode [ 234.702510][ T12] veth0_vlan: left promiscuous mode [ 234.948080][T10404] netlink: 'syz.3.1134': attribute type 7 has an invalid length. [ 235.174182][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.219172][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.477888][ T5140] Bluetooth: hci4: command tx timeout [ 235.683347][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1136'. [ 235.694193][T10407] netlink: 'syz.1.1136': attribute type 3 has an invalid length. [ 235.702285][T10407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1136'. [ 235.716332][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 235.751293][T10402] tun0: tun_chr_ioctl cmd 1074025677 [ 235.768309][T10402] tun0: linktype set to 773 [ 235.895559][T10412] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1138'. [ 235.942854][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 236.083368][T10425] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 236.148257][T10425] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 236.226955][T10341] chnl_net:caif_netlink_parms(): no params data found [ 236.654493][T10458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1147'. [ 236.696189][T10453] syzkaller1: entered promiscuous mode [ 236.714334][T10453] syzkaller1: entered allmulticast mode [ 236.736728][T10463] x_tables: duplicate underflow at hook 2 [ 236.740922][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 236.751980][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.763335][T10341] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.774580][T10341] bridge_slave_0: entered allmulticast mode [ 236.783593][T10341] bridge_slave_0: entered promiscuous mode [ 236.794176][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.801627][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.812804][T10341] bridge_slave_1: entered allmulticast mode [ 236.821288][T10341] bridge_slave_1: entered promiscuous mode [ 236.833239][T10460] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 236.876347][T10460] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 236.901033][T10463] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 236.962467][T10341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.975934][T10341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.033998][T10471] tun0: tun_chr_ioctl cmd 1074025677 [ 237.042701][T10471] tun0: linktype set to 773 [ 237.058490][T10471] netlink: 'syz.2.1152': attribute type 7 has an invalid length. [ 237.110018][T10341] team0: Port device team_slave_0 added [ 237.140205][T10341] team0: Port device team_slave_1 added [ 237.248950][T10341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.255958][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.290244][T10341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.367611][T10341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.381949][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.413385][T10341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.558062][ T5140] Bluetooth: hci4: command tx timeout [ 237.592000][T10341] hsr_slave_0: entered promiscuous mode [ 237.619273][T10341] hsr_slave_1: entered promiscuous mode [ 237.625706][T10341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.657345][T10341] Cannot create hsr debugfs directory [ 237.736866][T10486] lo speed is unknown, defaulting to 1000 [ 237.790949][T10486] wg1 speed is unknown, defaulting to 1000 [ 238.536833][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.634892][T10519] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 238.700869][T10516] netlink: 'syz.3.1162': attribute type 10 has an invalid length. [ 238.849897][T10525] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 238.904575][T10530] bridge0: entered promiscuous mode [ 238.915000][T10530] bridge0: entered allmulticast mode [ 238.981441][T10531] __nla_validate_parse: 3 callbacks suppressed [ 238.981460][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 239.406974][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 239.458193][T10547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1173'. [ 239.482955][T10542] tun0: tun_chr_ioctl cmd 1074025677 [ 239.494045][T10542] tun0: linktype set to 773 [ 239.500627][T10544] lo speed is unknown, defaulting to 1000 [ 239.516326][T10341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.517720][T10542] netlink: 'syz.1.1170': attribute type 7 has an invalid length. [ 239.547583][T10341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.593812][T10544] wg1 speed is unknown, defaulting to 1000 [ 239.601742][T10341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.639105][ T5140] Bluetooth: hci4: command tx timeout [ 239.648544][T10341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.996033][T10341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.030202][T10341] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.148114][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 240.215040][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.222322][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.300936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.308191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.923129][T10341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.033959][T10606] netlink: 'syz.3.1186': attribute type 2 has an invalid length. [ 241.157892][T10606] wireguard0: entered promiscuous mode [ 241.163431][T10606] wireguard0: entered allmulticast mode [ 241.189792][T10611] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 241.383541][T10611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.393381][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 241.463313][T10613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.470827][T10613] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.491600][T10613] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 241.499882][T10621] netlink: 'syz.1.1189': attribute type 7 has an invalid length. [ 241.531705][T10601] lo speed is unknown, defaulting to 1000 [ 241.542944][T10612] tun0: tun_chr_ioctl cmd 1074025677 [ 241.549123][T10612] tun0: linktype set to 773 [ 241.605538][T10611] vlan3: entered allmulticast mode [ 241.617227][T10611] bond3: entered allmulticast mode [ 241.678533][T10601] wg1 speed is unknown, defaulting to 1000 [ 241.718165][ T5140] Bluetooth: hci4: command tx timeout [ 242.062796][T10341] veth0_vlan: entered promiscuous mode [ 242.091843][T10341] veth1_vlan: entered promiscuous mode [ 242.169300][T10341] veth0_macvtap: entered promiscuous mode [ 242.185037][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 242.208191][T10341] veth1_macvtap: entered promiscuous mode [ 242.221923][T10638] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1196'. [ 242.274382][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 242.280492][T10341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.305049][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 242.310938][T10341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.340708][T10638] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1196'. [ 242.351294][T10341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.374994][T10341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.389960][T10341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.402022][T10341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.455477][T10341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.467925][T10341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.487231][T10341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.496012][T10341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.783823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.813863][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.885805][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.898854][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.210464][T10678] tun0: tun_chr_ioctl cmd 1074025677 [ 243.220795][T10678] tun0: linktype set to 773 [ 243.234005][T10678] netlink: 'syz.3.1208': attribute type 7 has an invalid length. [ 243.447567][T10341] syz-executor (10341) used greatest stack depth: 19744 bytes left [ 243.581989][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.331597][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.398035][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.614048][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.969628][T10712] __nla_validate_parse: 9 callbacks suppressed [ 244.969649][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 244.988000][ T36] bridge_slave_1: left allmulticast mode [ 244.996460][ T36] bridge_slave_1: left promiscuous mode [ 245.013607][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.038706][ T36] bridge_slave_0: left allmulticast mode [ 245.054677][ T36] bridge_slave_0: left promiscuous mode [ 245.067624][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.096211][T10717] x_tables: duplicate underflow at hook 4 [ 245.137593][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 245.341004][T10727] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 245.430999][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.443008][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.452583][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.463534][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.474666][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.772514][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.784226][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.794607][ T36] bond0 (unregistering): Released all slaves [ 245.866236][T10727] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 245.936147][T10730] lo speed is unknown, defaulting to 1000 [ 246.106495][T10730] wg1 speed is unknown, defaulting to 1000 [ 246.304226][ T36] hsr_slave_0: left promiscuous mode [ 246.315089][ T36] hsr_slave_1: left promiscuous mode [ 246.321907][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.333118][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.341562][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.352057][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.388183][ T36] veth1_macvtap: left promiscuous mode [ 246.393851][ T36] veth0_macvtap: left promiscuous mode [ 246.399910][T10759] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 246.408139][ T36] veth1_vlan: left promiscuous mode [ 246.413449][ T36] veth0_vlan: left promiscuous mode [ 247.018519][T10766] netlink: 'syz.1.1234': attribute type 3 has an invalid length. [ 247.030377][ T36] team0 (unregistering): Port device team_slave_1 removed [ 247.102299][ T36] team0 (unregistering): Port device team_slave_0 removed [ 247.246046][T10778] netlink: 'syz.0.1236': attribute type 13 has an invalid length. [ 247.569109][ T5140] Bluetooth: hci4: command tx timeout [ 247.664770][T10759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.691943][T10760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.699603][T10760] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.711534][T10760] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 247.742728][T10762] vlan2: entered allmulticast mode [ 247.748209][T10762] bond2: entered allmulticast mode [ 247.841491][T10778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.886529][ T977] tipc: Resetting bearer [ 247.889045][T10783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1237'. [ 248.039436][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 248.445740][T10730] chnl_net:caif_netlink_parms(): no params data found [ 248.475505][T10808] FAULT_INJECTION: forcing a failure. [ 248.475505][T10808] name failslab, interval 1, probability 0, space 0, times 0 [ 248.497986][T10808] CPU: 1 UID: 0 PID: 10808 Comm: syz.1.1244 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 248.498016][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.498043][T10808] Call Trace: [ 248.498052][T10808] [ 248.498061][T10808] dump_stack_lvl+0x189/0x250 [ 248.498100][T10808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.498129][T10808] ? __pfx__printk+0x10/0x10 [ 248.498156][T10808] ? __pfx___might_resched+0x10/0x10 [ 248.498173][T10808] ? fs_reclaim_acquire+0x7d/0x100 [ 248.498207][T10808] should_fail_ex+0x414/0x560 [ 248.498233][T10808] should_failslab+0xa8/0x100 [ 248.498262][T10808] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 248.498288][T10808] ? __lock_acquire+0xaac/0xd20 [ 248.498313][T10808] ? __get_vm_area_node+0x131/0x2d0 [ 248.498343][T10808] __get_vm_area_node+0x131/0x2d0 [ 248.498374][T10808] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 248.498404][T10808] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.498463][T10808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.498491][T10808] ? __might_fault+0xb0/0x130 [ 248.498525][T10808] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.498551][T10808] __vmalloc_noprof+0x7a/0x90 [ 248.498578][T10808] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.498606][T10808] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.498637][T10808] bpf_prog_alloc+0x3c/0x1a0 [ 248.498667][T10808] __get_filter+0xff/0x400 [ 248.498698][T10808] sk_reuseport_attach_filter+0x24/0x210 [ 248.498723][T10808] sk_setsockopt+0x1bde/0x2940 [ 248.498756][T10808] ? __pfx_sk_setsockopt+0x10/0x10 [ 248.498790][T10808] ? aa_sk_perm+0x81e/0x950 [ 248.498816][T10808] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.498842][T10808] ? aa_sock_opt_perm+0x74/0x110 [ 248.498874][T10808] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 248.498903][T10808] do_sock_setsockopt+0x201/0x3e0 [ 248.498934][T10808] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 248.498958][T10808] ? __fget_files+0x2a/0x420 [ 248.498990][T10808] ? __fget_files+0x3a0/0x420 [ 248.499015][T10808] ? __fget_files+0x2a/0x420 [ 248.499050][T10808] __x64_sys_setsockopt+0x18b/0x220 [ 248.499084][T10808] do_syscall_64+0xf6/0x210 [ 248.499106][T10808] ? clear_bhb_loop+0x45/0xa0 [ 248.499132][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.499151][T10808] RIP: 0033:0x7f5da818e969 [ 248.499170][T10808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.499188][T10808] RSP: 002b:00007f5da8f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.499209][T10808] RAX: ffffffffffffffda RBX: 00007f5da83b5fa0 RCX: 00007f5da818e969 [ 248.499224][T10808] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 248.499235][T10808] RBP: 00007f5da8f6c090 R08: 0000000000000010 R09: 0000000000000000 [ 248.499248][T10808] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 248.499260][T10808] R13: 0000000000000000 R14: 00007f5da83b5fa0 R15: 00007ffdcffa6148 [ 248.499293][T10808] [ 248.499303][T10808] warn_alloc: 2 callbacks suppressed [ 248.499313][T10808] syz.1.1244: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 248.882382][T10808] CPU: 1 UID: 0 PID: 10808 Comm: syz.1.1244 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 248.882412][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.882424][T10808] Call Trace: [ 248.882432][T10808] [ 248.882440][T10808] dump_stack_lvl+0x189/0x250 [ 248.882478][T10808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.882508][T10808] ? __pfx__printk+0x10/0x10 [ 248.882528][T10808] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 248.882547][T10808] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 248.882571][T10808] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 248.882594][T10808] warn_alloc+0x214/0x310 [ 248.882629][T10808] ? __pfx_warn_alloc+0x10/0x10 [ 248.882659][T10808] ? __lock_acquire+0xaac/0xd20 [ 248.882691][T10808] ? __get_vm_area_node+0x27f/0x2d0 [ 248.882724][T10808] __vmalloc_node_range_noprof+0x316/0x12c0 [ 248.882784][T10808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.882808][T10808] ? __might_fault+0xb0/0x130 [ 248.882841][T10808] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.882865][T10808] __vmalloc_noprof+0x7a/0x90 [ 248.882892][T10808] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.882917][T10808] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 248.882949][T10808] bpf_prog_alloc+0x3c/0x1a0 [ 248.882976][T10808] __get_filter+0xff/0x400 [ 248.883001][T10808] sk_reuseport_attach_filter+0x24/0x210 [ 248.883024][T10808] sk_setsockopt+0x1bde/0x2940 [ 248.883056][T10808] ? __pfx_sk_setsockopt+0x10/0x10 [ 248.883088][T10808] ? aa_sk_perm+0x81e/0x950 [ 248.883114][T10808] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.883139][T10808] ? aa_sock_opt_perm+0x74/0x110 [ 248.883168][T10808] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 248.883194][T10808] do_sock_setsockopt+0x201/0x3e0 [ 248.883222][T10808] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 248.883243][T10808] ? __fget_files+0x2a/0x420 [ 248.883273][T10808] ? __fget_files+0x3a0/0x420 [ 248.883296][T10808] ? __fget_files+0x2a/0x420 [ 248.883330][T10808] __x64_sys_setsockopt+0x18b/0x220 [ 248.883362][T10808] do_syscall_64+0xf6/0x210 [ 248.883383][T10808] ? clear_bhb_loop+0x45/0xa0 [ 248.883406][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.883424][T10808] RIP: 0033:0x7f5da818e969 [ 248.883442][T10808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.883458][T10808] RSP: 002b:00007f5da8f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.883479][T10808] RAX: ffffffffffffffda RBX: 00007f5da83b5fa0 RCX: 00007f5da818e969 [ 248.883493][T10808] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 248.883504][T10808] RBP: 00007f5da8f6c090 R08: 0000000000000010 R09: 0000000000000000 [ 248.883516][T10808] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 248.883528][T10808] R13: 0000000000000000 R14: 00007f5da83b5fa0 R15: 00007ffdcffa6148 [ 248.883561][T10808] [ 248.883575][T10808] Mem-Info: [ 249.177524][T10808] active_anon:6821 inactive_anon:0 isolated_anon:0 [ 249.177524][T10808] active_file:1554 inactive_file:39905 isolated_file:0 [ 249.177524][T10808] unevictable:768 dirty:121 writeback:0 [ 249.177524][T10808] slab_reclaimable:11222 slab_unreclaimable:139306 [ 249.177524][T10808] mapped:29086 shmem:1368 pagetables:701 [ 249.177524][T10808] sec_pagetables:0 bounce:0 [ 249.177524][T10808] kernel_misc_reclaimable:0 [ 249.177524][T10808] free:1297591 free_pcp:525 free_cma:0 [ 249.234374][T10808] Node 0 active_anon:27284kB inactive_anon:0kB active_file:6216kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116344kB dirty:480kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.269893][T10808] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.301777][T10808] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.323858][T10815] IPv6: sit3: Disabled Multicast RS [ 249.330422][T10808] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 249.341175][T10808] Node 0 DMA32 free:1264556kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:27276kB inactive_anon:0kB active_file:6216kB inactive_file:159324kB unevictable:1536kB writepending:476kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:3092kB local_pcp:1960kB free_cma:0kB [ 249.376547][T10808] lowmem_reserve[]: 0 0 0 0 0 [ 249.382794][T10808] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 249.410196][T10808] lowmem_reserve[]: 0 0 0 0 0 [ 249.414973][T10808] Node 1 Normal free:3909780kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.477493][T10808] lowmem_reserve[]: 0 0 0 0 0 [ 249.484928][T10808] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 249.510988][T10808] Node 0 DMA32: 287*4kB (UME) 425*8kB (UME) 162*16kB (UME) 408*32kB (UME) 421*64kB (UME) 285*128kB (UME) 186*256kB (UME) 121*512kB (UME) 86*1024kB (UM) 9*2048kB (UME) 236*4096kB (M) = 1266340kB [ 249.535442][T10808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 249.551272][T10808] Node 1 Normal: 237*4kB (UM) 54*8kB (UME) 45*16kB (UME) 209*32kB (UME) 95*64kB (UME) 29*128kB (UME) 20*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3909780kB [ 249.563327][ T977] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 249.573522][T10808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.581794][ T977] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 249.581825][ T977] CPU: 0 UID: 0 PID: 977 Comm: kworker/0:2 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 249.591414][T10808] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.599776][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.599793][ T977] Workqueue: events l2cap_info_timeout [ 249.611866][T10808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.621112][ T977] [ 249.621122][ T977] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 249.621155][ T977] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 249.621171][ T977] RSP: 0018:ffffc9000394f848 EFLAGS: 00010206 [ 249.621187][ T977] RAX: dffffc0000000000 RBX: ffffffff8937f678 RCX: 4ec9346283e99300 [ 249.621201][ T977] RDX: 0000000000000000 RSI: ffffffff8937f678 RDI: 000000000000004b [ 249.621215][ T977] RBP: ffffffff8a630da5 R08: 0000000000000001 R09: 0000000000000000 [ 249.621227][ T977] R10: dffffc0000000000 R11: ffffffff8a630d60 R12: 0000000000000000 [ 249.621241][ T977] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 249.621253][ T977] FS: 0000000000000000(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 249.621270][ T977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.621283][ T977] CR2: 00007fab5537d2d8 CR3: 000000003190e000 CR4: 00000000003526f0 [ 249.621300][ T977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.621311][ T977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.621324][ T977] Call Trace: [ 249.621332][ T977] [ 249.621339][ T977] __kasan_check_byte+0x12/0x40 [ 249.621367][ T977] lock_acquire+0x8d/0x360 [ 249.621394][ T977] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.621426][ T977] ? __cancel_work+0x254/0x2e0 [ 249.621452][ T977] lock_sock_nested+0x48/0x100 [ 249.621472][ T977] ? l2cap_sock_ready_cb+0x45/0x140 [ 249.621503][ T977] l2cap_sock_ready_cb+0x45/0x140 [ 249.621533][ T977] l2cap_conn_start+0x750/0xe40 [ 249.621560][ T977] ? __pfx_l2cap_conn_start+0x10/0x10 [ 249.621582][ T977] ? l2cap_info_timeout+0x60/0xa0 [ 249.621605][ T977] ? __pfx___mutex_lock+0x10/0x10 [ 249.621628][ T977] ? process_scheduled_works+0x9ec/0x17a0 [ 249.621664][ T977] l2cap_info_timeout+0x68/0xa0 [ 249.621685][ T977] ? process_scheduled_works+0x9ec/0x17a0 [ 249.621716][ T977] process_scheduled_works+0xadb/0x17a0 [ 249.621761][ T977] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.621799][ T977] worker_thread+0x8a0/0xda0 [ 249.853177][ T977] kthread+0x70e/0x8a0 [ 249.857289][ T977] ? __pfx_worker_thread+0x10/0x10 [ 249.862407][ T977] ? __pfx_kthread+0x10/0x10 [ 249.867028][ T977] ? __pfx_kthread+0x10/0x10 [ 249.871632][ T977] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.877016][ T977] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.882235][ T977] ? __pfx_kthread+0x10/0x10 [ 249.886831][ T977] ret_from_fork+0x4b/0x80 [ 249.891253][ T977] ? __pfx_kthread+0x10/0x10 [ 249.895851][ T977] ret_from_fork_asm+0x1a/0x30 [ 249.900630][ T977] [ 249.903655][ T977] Modules linked in: [ 249.908598][ T977] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.922797][T10808] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.932257][ T5140] Bluetooth: hci4: command tx timeout [ 249.932294][T10808] 42824 total pagecache pages [ 249.942753][T10808] 0 pages in swap cache [ 249.950747][T10808] Free swap = 124996kB [ 249.954991][T10808] Total swap = 124996kB [ 249.965475][T10808] 2097051 pages RAM [ 249.969723][T10808] 0 pages HighMem/MovableOnly [ 249.974425][T10808] 424379 pages reserved [ 249.983867][T10808] 0 pages cma reserved [ 250.006260][T10831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1249'. [ 250.036852][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.067246][T10831] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1249'. [ 250.081907][T10730] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.100310][T10730] bridge_slave_0: entered allmulticast mode [ 250.124853][T10833] netlink: 'syz.0.1249': attribute type 3 has an invalid length. [ 250.138249][T10730] bridge_slave_0: entered promiscuous mode [ 250.157698][T10833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1249'. [ 250.198556][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 250.209113][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'. [ 250.225066][ T977] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 250.232849][ T977] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 250.268667][ T977] RSP: 0018:ffffc9000394f848 EFLAGS: 00010206 [ 250.274839][ T977] RAX: dffffc0000000000 RBX: ffffffff8937f678 RCX: 4ec9346283e99300 [ 250.307956][ T977] RDX: 0000000000000000 RSI: ffffffff8937f678 RDI: 000000000000004b [ 250.316005][ T977] RBP: ffffffff8a630da5 R08: 0000000000000001 R09: 0000000000000000 [ 250.337470][ T977] R10: dffffc0000000000 R11: ffffffff8a630d60 R12: 0000000000000000 [ 250.345517][ T977] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 250.386603][T10829] lo speed is unknown, defaulting to 1000 [ 250.392537][ T977] FS: 0000000000000000(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 250.405349][T10829] wg1 speed is unknown, defaulting to 1000 [ 250.437098][ T977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.443759][ T977] CR2: 0000200000019030 CR3: 000000002ae46000 CR4: 00000000003526f0 [ 250.478638][ T977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.486690][ T977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.497844][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.537116][ T977] Kernel panic - not syncing: Fatal exception [ 250.543507][ T977] Kernel Offset: disabled [ 250.547837][ T977] Rebooting in 86400 seconds..