last executing test programs: 9.000127917s ago: executing program 4 (id=140): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 8.672113619s ago: executing program 4 (id=144): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000040)="9a8ab6da24c92f0f424effccfbc7e8801aaa48c6", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40408c0}, 0x48084) 8.616236095s ago: executing program 2 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendto$x25(r1, 0x0, 0x0, 0x800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040810) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x800) sendto$inet6(r5, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, r6) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x600, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb"], &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063014000000000009500000000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 8.44763615s ago: executing program 4 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x703d28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x419ea810}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5066}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3540000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc23c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffc01}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 8.271954957s ago: executing program 0 (id=149): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0xfa3, 0x4) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket(0xf, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000380)=0x3d70, 0x4) bind$inet6(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0360000000500000180012800e00010069703665727370616e000000fffc028008000500", @ANYRES32=0x0, @ANYBLOB="d4ff8beaaebd00dbc881f35a9ef9f7061d9a414c400f938e39bd7b5a7e76a4700000a17565c30a3cc82bc80b5ff8d2634d1bc715c250f595098b423a52978516cea5c714ca4f3caae89c96cba4f2c7a6cd591f7b3f60b06dbb718e60458934fc9bad6f0a6cbaf5b59993862d41c6194fdf584030e8c34db6ff4539efc945515a484c54e4be8dd259a54f3d39f8ff8df711", @ANYRES32=0x0, @ANYBLOB="08002800d5750000"], 0x95}}, 0x10000800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socket$alg(0x26, 0x5, 0x0) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x1}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x40a, 0x2, 0x0, 0x20007e}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) 8.101151238s ago: executing program 4 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) (fail_nth: 11) 7.744045969s ago: executing program 4 (id=152): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x68, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x68, &(0x7f0000000000)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 6.935301427s ago: executing program 0 (id=154): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 6.70895334s ago: executing program 0 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x40018c7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[{0x0, 0x40, 0x7f, 0x5}, {0x81, 0x8, 0x6, 0x79}, {0x2, 0x3, 0x9, 0x800}, {0x100, 0xc, 0x0, 0x8001}, {0x5, 0x10, 0x0, 0x8}, {0x4, 0x0, 0x3, 0x3ff}, {0x3, 0x6, 0x0, 0x1}, {0x0, 0xd, 0x2, 0x5}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32=r3, @ANYBLOB="4fa7567c094ac5080df08b94f0d333826b4ac4c46cf5e662572c427884228c5201777711781f0b7424332e75ad26a8277278d7eca8b1b3391594731bdeac92322437d562ab71915f9f38d8a65fd882135612c9fd6070465518ebe7845163520bd871f1465eac30ff7560a105000000000000008e", @ANYRES32], 0x20) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$key(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="02080b090400000027bd7000ffdbdf2502001300fa00000026bd700000000000e862f8eeedeb9512192118219b44bfbdfa4ef02e80fa9e000f0bc1ac6f3b5cb635cdf86cefea99d70834a4fd86149ca3dd40c97e7f5b510e889f9192f9cbc6e6df7fdbf9b7ba17e3cd9b19f5d57caff6c3b3eb859f3f3cbc582fa1314261565414ad3147e8e712"], 0x20}}, 0x20040001) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.539923223s ago: executing program 3 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendto$x25(r1, 0x0, 0x0, 0x800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040810) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x800) sendto$inet6(r5, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x600, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb"], &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063014000000000009500000000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.482840093s ago: executing program 0 (id=157): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x100, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1}, 0xff}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, r3, 0x2, 0x0, 0x4000, @void, @value}, 0x10) sendto(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 6.364240273s ago: executing program 0 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791192000000000063004800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000000201010200000000000000000000000706001240000200"], 0x94}, 0x1, 0x0, 0x0, 0x4040}, 0x40800) 6.143716415s ago: executing program 0 (id=159): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="fb00060b0a000200aaaaaaaaaabb00000c000e8005"], 0x34}}, 0x0) 3.50336398s ago: executing program 1 (id=163): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000100)="240000001e005f0214fffffffffffff807002389d33ee703af7900401d00000000000000", 0x24) 3.35998906s ago: executing program 1 (id=164): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0xfa3, 0x4) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket(0xf, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000380)=0x3d70, 0x4) bind$inet6(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0360000000500000180012800e00010069703665727370616e000000fffc028008000500", @ANYRES32=0x0, @ANYBLOB="d4ff8beaaebd00dbc881f35a9ef9f7061d9a414c400f938e39bd7b5a7e76a4700000a17565c30a3cc82bc80b5ff8d2634d1bc715c250f595098b423a52978516cea5c714ca4f3caae89c96cba4f2c7a6cd591f7b3f60b06dbb718e60458934fc9bad6f0a6cbaf5b59993862d41c6194fdf584030e8c34db6ff4539efc945515a484c54e4be8dd259a54f3d39f8ff8df711", @ANYRES32=0x0, @ANYBLOB="08002800d5750000"], 0x95}}, 0x10000800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socket$alg(0x26, 0x5, 0x0) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x1}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x40a, 0x2, 0x0, 0x20007e}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) 3.282553397s ago: executing program 4 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendto$x25(r1, 0x0, 0x0, 0x800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040810) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x800) sendto$inet6(r5, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x600, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb"], &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063014000000000009500000000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.023198799s ago: executing program 3 (id=166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)={@map, r0, 0x7, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois\x00', 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x14000005) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) shutdown(r1, 0x1) 2.892263489s ago: executing program 2 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newlink={0x60, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x812}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) (fail_nth: 1) 2.804019871s ago: executing program 3 (id=168): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newlink={0x60, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x812}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x61}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 2.519611612s ago: executing program 2 (id=169): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}}, 0x4010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @mcast2, 0xa}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000480)="761f2b4b3d93caf6b8265b474555f1b1751823fca7d452923f", 0x19}, {&(0x7f0000000580)="e30c74e85ecea5ebfd986e8b0057193b81369eeb81394d2a758ccc16c1ab2657997a99c3c117e7d37cf0a1b424e914fa9ef794f2cd16d34d333830740b6aa49b823c7c9a54a623d94274ab3846e49dcc30b968c9f20fa5ee608f115d88d83f6bf3b0279e054a89c184e31887d9f05cf64450cfa399db2aa4fabb9d309a143d04827e13bf3234fa9f87900731fb1561c0d6cde72e24692b5a61c9fb0840eae6a90ee8c0be4e0ed9e990d1fac5489767ca8726d11fe37a828da05e655889d0d6201ff1e670f069a374c3", 0xc9}], 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0xa0}, 0x48090) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffd9, 0x38}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "da90b076ec32a5bae15664a81d7d9ed8cb68b9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000055}, 0x20004000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x5, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000e8ffffffffffffff00"/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0x67, 0x0, &(0x7f00000002c0)="035a95e24550e0748674a95588a814000d0000465cfcc1f50f4ba186eda8f87cb5e2540ca4c0572ba057ee91854692a03eb45b5b44412ad8431406658f493be00865ba1284703c627d54ba50026097cd73e9478c6ef79eaa126f3ee6555630899c1105b831985a", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2.350613159s ago: executing program 1 (id=170): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x1ffe2}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x50) 2.279944154s ago: executing program 3 (id=171): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)=ANY=[@ANYBLOB="3c0f0000", @ANYRES16=r2, @ANYBLOB="08002cbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1000002, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=ANY=[@ANYRES64=r1], 0x2c}}, 0x44890) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x5a, &(0x7f0000000540)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="4000000010000305000000000000000000000000f137ccbd799415a0af94f607a8ff5c711f75e32c40cafaaf9fd65be64ab86f7a2e2cdd6611e70e0e99bf3ae3e463f2874a308697b89b0a269c0719cbd1246c8bffc0bc0ccb31ece442519baefd0b34b499a04a0fc26ddd189143f2cca48affad66", @ANYRES64=r1, @ANYBLOB="003f00000000000018006970697000001d0f0800028004001307b4000a000000000000005ae7b47e77a08615c5393f1ad9e3d57f22a50ed07e1f0c70fe1edfb4603236f078a4c3850049ca83d131c71fff858c55235c0ce98ea28eed0824d84b66296e4f", @ANYRESDEC, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_devices(r3, 0x0, 0xffdd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001700)=ANY=[@ANYBLOB="539ab0a3c360fb8a7f24e4ca78b9420f7557782f422e5fbbacf3873c88e840fa261324c3fd7ec0f8b32b6cba927fe529dbadb9ddbb0be44b0edef8cc222e952d33d6423b6e4ff5edde0f55e3b2f4e44391e3b5676be729b5b00509f51743d5afe0bb76f55b748f1fede7b43b3764579908af8c53e579f40a767382297aa8d4d4254f609bc840b54f0dc2dcda9548b7609999ab900b20d00334bed4a7009b0d6abd2179eee0410117594b2c6985abdd33edb55e", @ANYRES64=r7, @ANYBLOB="7ba57208cb52d49fa3441ad939b33ea8350ee40c4ec50ccf3a4c9158b5f9f46334d7d7848705f67bf1ed9a6567f154b9cefbccaba6d597ff13acfee22d7233890956429696971ba4dc104f672f98b39a50620756e171f20e76a7903973849a7abe7fcc7ef731e2958b1db26e5c0842902c162c4b58675f06971243a3b1def32fa4a4107d17802ff45e7feba4da0a6ad8630254d90cbc38bc21df6713b9b61e5c2d8f9101ab7e37405e5b193ef061437c2a25c1f2bf28399e95bd3bf8506b362715d801951afab6648899ddb5921d5a67a3b92144535da06af4", @ANYRES32=r8, @ANYBLOB="a4027536d29a752329ea05b6898579a3ef1fde749d68e3feabb2698e", @ANYRES32=r3, @ANYRES8=r6, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6e2", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r11, 0x1) getsockopt$bt_hci(r11, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1, &(0x7f00000012c0)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x5, 0x67, &(0x7f0000001900)=""/103, 0x41000, 0x68, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x17, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x6, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001600)=[r10], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000001280)='writeback_pages_written\x00', r12}, 0x18) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="6400000010000305fc0300f9fdffffff00000000", @ANYBLOB="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", @ANYBLOB="1546010020200000340012800b0001006d6163736563000024000280050007000800000005000b000600000005000a000300000005000d000600000008000500", @ANYRES8=r0, @ANYRESHEX=r9], 0x64}}, 0x0) 1.584097463s ago: executing program 2 (id=172): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000e00), 0x12) bind$x25(r3, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) close(0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2203, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0xd3, 0x14, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x8, 0x6, 0x8}}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setlink={0x44, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, 0x2006, 0x300}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x7fffffff}]}, 0x44}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000180)) 1.075910977s ago: executing program 3 (id=173): pipe(&(0x7f0000000480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="8399", 0x2, 0x4000, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000040)=""/19, 0x13, 0x40000041, 0x0, 0x0) 823.819883ms ago: executing program 1 (id=174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x703d28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5066}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3540000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc23c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffc01}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 565.488084ms ago: executing program 2 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e17fef183509cbc17beefea53cee900002304000000080000100f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv4_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0x3, {0x2, 0x0, 0x1, 0x0, 0xc}}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000640), &(0x7f0000000540)=0x68) write(r2, &(0x7f0000000480)="f5c6a1d635fbf21f3763e886ecb9499fc34297259233271562e80ea2d4b508a74cac0887b6dd23ff0423ac2b91dc71ddf8d928f7a2d891d167eabf4f4f140817f9652142fd9d38d1d27455d76faddc7cf1d6cd72b492746fa4378d90447a017a88810b3571245d453e7e01bf6a5d1dc034cb3ae681742f8a89436fe327799e80cc092a9484ce2d69a64e4b8804e55739a21cc15ff84dfc781390e5f0b6958f75ebb611ab35d203", 0xa7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x41d6, 0x1, 0xffffffff, 0x9, 0x48, 0x2, 0x5}, 0x9c) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001040)=""/4089, 0xff9}, {&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f0000002040)=""/4092, 0xffc}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000c80)=""/173, 0xad}], 0x6}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40008002) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000500040000000000090002c06175c92c16d509903dd17add0073797a30000000000500010007000000050005000a0000000c000780080012400000ffff16000300686173683a6e65"], 0x5c}}, 0x0) 564.831166ms ago: executing program 1 (id=176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r2, 0xba87317d461c07c9, 0xfffffffd, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_POLICY]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}}], {0x14}}, 0x84}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 'tunl0\x00'}}, 0x1e) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 372.580514ms ago: executing program 1 (id=177): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00082b0000000000000000000000000000000000fe8000000000000000000000000000aa0000f63a00089078"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) syz_init_net_socket$ax25(0x3, 0x5, 0xca) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3fc, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 43.977249ms ago: executing program 3 (id=178): unshare(0x60600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000000000000000400008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0xffffffffffffff9f, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x7ff}], 0x3c) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) readv(r8, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) 0s ago: executing program 2 (id=179): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58f", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 81.747569][ T5814] cgroup: Unknown subsys name 'net' [ 81.882777][ T5814] cgroup: Unknown subsys name 'cpuset' [ 81.891691][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.510648][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.451991][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.460549][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.468320][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.476677][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.484698][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.498490][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.508004][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.518253][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.526642][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.535194][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.565813][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.573942][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.593919][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.594097][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.606245][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.616929][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.617685][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.625911][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.632394][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.643437][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.654171][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.657240][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.663027][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.685480][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.709936][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.259754][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.303493][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.562079][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.574709][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.648819][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.683652][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.691204][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.699074][ T5837] bridge_slave_0: entered allmulticast mode [ 88.706356][ T5837] bridge_slave_0: entered promiscuous mode [ 88.714904][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.722292][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.729606][ T5824] bridge_slave_0: entered allmulticast mode [ 88.736765][ T5824] bridge_slave_0: entered promiscuous mode [ 88.744836][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.752031][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.759479][ T5824] bridge_slave_1: entered allmulticast mode [ 88.766818][ T5824] bridge_slave_1: entered promiscuous mode [ 88.813600][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.823286][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.830892][ T5837] bridge_slave_1: entered allmulticast mode [ 88.838244][ T5837] bridge_slave_1: entered promiscuous mode [ 88.946187][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.992430][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.010083][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.066526][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.154819][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.162193][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.169853][ T5825] bridge_slave_0: entered allmulticast mode [ 89.177404][ T5825] bridge_slave_0: entered promiscuous mode [ 89.187865][ T5824] team0: Port device team_slave_0 added [ 89.196767][ T5824] team0: Port device team_slave_1 added [ 89.205431][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.212978][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.222833][ T5832] bridge_slave_0: entered allmulticast mode [ 89.230289][ T5832] bridge_slave_0: entered promiscuous mode [ 89.239889][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.247119][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.254412][ T5832] bridge_slave_1: entered allmulticast mode [ 89.262422][ T5832] bridge_slave_1: entered promiscuous mode [ 89.281793][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.289136][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.296335][ T5834] bridge_slave_0: entered allmulticast mode [ 89.303905][ T5834] bridge_slave_0: entered promiscuous mode [ 89.312366][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.319755][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.326929][ T5825] bridge_slave_1: entered allmulticast mode [ 89.334702][ T5825] bridge_slave_1: entered promiscuous mode [ 89.388598][ T5837] team0: Port device team_slave_0 added [ 89.394746][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.402639][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.409981][ T5834] bridge_slave_1: entered allmulticast mode [ 89.417154][ T5834] bridge_slave_1: entered promiscuous mode [ 89.437053][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.446729][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.473186][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.500561][ T5837] team0: Port device team_slave_1 added [ 89.508950][ T5828] Bluetooth: hci0: command tx timeout [ 89.516111][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.551858][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.559189][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.586112][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.596845][ T5828] Bluetooth: hci1: command tx timeout [ 89.610192][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.649186][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.661290][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.670539][ T5828] Bluetooth: hci2: command tx timeout [ 89.718303][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.749429][ T5830] Bluetooth: hci4: command tx timeout [ 89.755199][ T5828] Bluetooth: hci3: command tx timeout [ 89.765602][ T5832] team0: Port device team_slave_0 added [ 89.775271][ T5832] team0: Port device team_slave_1 added [ 89.782108][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.789943][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.816262][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.831458][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.879451][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.886446][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.915492][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.945850][ T5824] hsr_slave_0: entered promiscuous mode [ 89.953243][ T5824] hsr_slave_1: entered promiscuous mode [ 89.963166][ T5825] team0: Port device team_slave_0 added [ 90.010115][ T5825] team0: Port device team_slave_1 added [ 90.017274][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.024384][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.050543][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.063574][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.071304][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.097838][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.125372][ T5834] team0: Port device team_slave_0 added [ 90.165627][ T5834] team0: Port device team_slave_1 added [ 90.197287][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.204359][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.233236][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.298435][ T5837] hsr_slave_0: entered promiscuous mode [ 90.304792][ T5837] hsr_slave_1: entered promiscuous mode [ 90.312031][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.320555][ T5837] Cannot create hsr debugfs directory [ 90.326825][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.333910][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.360298][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.443346][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.453152][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.479966][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.511336][ T5832] hsr_slave_0: entered promiscuous mode [ 90.517715][ T5832] hsr_slave_1: entered promiscuous mode [ 90.523954][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.531896][ T5832] Cannot create hsr debugfs directory [ 90.563969][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.571172][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.597475][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.678802][ T5825] hsr_slave_0: entered promiscuous mode [ 90.685216][ T5825] hsr_slave_1: entered promiscuous mode [ 90.692316][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.699985][ T5825] Cannot create hsr debugfs directory [ 90.889010][ T5834] hsr_slave_0: entered promiscuous mode [ 90.895371][ T5834] hsr_slave_1: entered promiscuous mode [ 90.902390][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.910082][ T5834] Cannot create hsr debugfs directory [ 91.126756][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.145087][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.192488][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.236785][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.346214][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.373214][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.384735][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.396015][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.486889][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.522913][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.549703][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.581169][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.592618][ T5828] Bluetooth: hci0: command tx timeout [ 91.668416][ T5828] Bluetooth: hci1: command tx timeout [ 91.675153][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.682628][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.694308][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.706777][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.742734][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.749642][ T5828] Bluetooth: hci2: command tx timeout [ 91.794005][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.828301][ T5830] Bluetooth: hci4: command tx timeout [ 91.833789][ T5828] Bluetooth: hci3: command tx timeout [ 91.860438][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.870111][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.877420][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.907414][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.916675][ T9] cfg80211: failed to load regulatory.db [ 91.933979][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.941152][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.967446][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.982386][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.994240][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.089044][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.136478][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.143694][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.155002][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.162211][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.291789][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.341934][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.387556][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.460271][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.467492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.486390][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.493553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.514200][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.581761][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.601781][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.608926][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.652412][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.659593][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.724917][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.752665][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.800976][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.835518][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.842761][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.881952][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.889193][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.927380][ T5824] veth0_vlan: entered promiscuous mode [ 93.016513][ T5824] veth1_vlan: entered promiscuous mode [ 93.062933][ T5837] veth0_vlan: entered promiscuous mode [ 93.081858][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.144839][ T5837] veth1_vlan: entered promiscuous mode [ 93.199222][ T5824] veth0_macvtap: entered promiscuous mode [ 93.234221][ T5824] veth1_macvtap: entered promiscuous mode [ 93.311159][ T5837] veth0_macvtap: entered promiscuous mode [ 93.361734][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.374916][ T5837] veth1_macvtap: entered promiscuous mode [ 93.392749][ T5832] veth0_vlan: entered promiscuous mode [ 93.402589][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.415484][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.443440][ T5832] veth1_vlan: entered promiscuous mode [ 93.465988][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.475709][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.486743][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.496311][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.526211][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.537078][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.552400][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.564650][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.575447][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.587167][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.607217][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.631204][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.644648][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.655113][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.672265][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673951][ T5828] Bluetooth: hci0: command tx timeout [ 93.730627][ T5832] veth0_macvtap: entered promiscuous mode [ 93.748451][ T5828] Bluetooth: hci1: command tx timeout [ 93.780220][ T5832] veth1_macvtap: entered promiscuous mode [ 93.828336][ T5828] Bluetooth: hci2: command tx timeout [ 93.874878][ T5825] veth0_vlan: entered promiscuous mode [ 93.909102][ T5828] Bluetooth: hci3: command tx timeout [ 93.909282][ T5830] Bluetooth: hci4: command tx timeout [ 93.941768][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.968095][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.983158][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.996777][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.008201][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.017521][ T5825] veth1_vlan: entered promiscuous mode [ 94.031034][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.035021][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.051187][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.062440][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.063872][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.073918][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.075637][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.141961][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151657][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.160877][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.170984][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.240510][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.257309][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.271502][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.280468][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.335296][ T5825] veth0_macvtap: entered promiscuous mode [ 94.375679][ T5825] veth1_macvtap: entered promiscuous mode [ 94.387232][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.409684][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.454238][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.470522][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.486528][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.498548][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.512281][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.522903][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.534229][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.544830][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.557770][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.572268][ T5834] veth0_vlan: entered promiscuous mode [ 94.599675][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.612662][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.632254][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.648325][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.658842][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.669105][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.680100][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.691704][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.734660][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.745776][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.756555][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.767680][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786477][ T5834] veth1_vlan: entered promiscuous mode [ 94.874343][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.896755][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.967287][ T5914] bridge0: entered promiscuous mode [ 94.996364][ T5914] macvlan2: entered promiscuous mode [ 95.007438][ T5914] bridge0: port 3(macvlan2) entered blocking state [ 95.014785][ T5914] bridge0: port 3(macvlan2) entered disabled state [ 95.024036][ T5914] macvlan2: entered allmulticast mode [ 95.030184][ T5914] bridge0: entered allmulticast mode [ 95.057869][ T5919] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 95.065786][ T5919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.069485][ T5914] macvlan2: left allmulticast mode [ 95.082308][ T5914] bridge0: left allmulticast mode [ 95.092708][ T5914] bridge0: left promiscuous mode [ 95.141605][ T5919] batadv0: entered promiscuous mode [ 95.149162][ T5919] batadv0: entered allmulticast mode [ 95.166409][ T5919] bridge0: port 3(batadv0) entered blocking state [ 95.184085][ T5919] bridge0: port 3(batadv0) entered disabled state [ 95.201402][ T5919] bridge0: port 3(batadv0) entered blocking state [ 95.208178][ T5919] bridge0: port 3(batadv0) entered forwarding state [ 95.276360][ T5834] veth0_macvtap: entered promiscuous mode [ 95.321831][ T5834] veth1_macvtap: entered promiscuous mode [ 95.375803][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.404447][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.527314][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.546024][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.562198][ T1307] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 95.565989][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.571663][ T1307] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.593969][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.606355][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.626217][ T5937] nft_compat: unsupported protocol 0 [ 95.632308][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.642369][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.653092][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.705198][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.744093][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.753414][ T5830] Bluetooth: hci0: command tx timeout [ 95.766025][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.808989][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.828157][ T5830] Bluetooth: hci1: command tx timeout [ 95.835941][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.852342][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.865956][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.878833][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.889277][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.900410][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.912070][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.919726][ T5830] Bluetooth: hci2: command tx timeout [ 95.943141][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.946623][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.955290][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.969138][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978065][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.986812][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.996893][ T5830] Bluetooth: hci4: command tx timeout [ 95.998790][ T5828] Bluetooth: hci3: command tx timeout [ 96.249743][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.265139][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.397261][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.418967][ T5959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.443350][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.446980][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.693294][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.801002][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.920319][ T5974] Zero length message leads to an empty skb [ 96.927097][ T5969] syzkaller0: entered allmulticast mode [ 96.938874][ T5969] syzkaller0 (unregistering): left allmulticast mode [ 97.226475][ T5980] FAULT_INJECTION: forcing a failure. [ 97.226475][ T5980] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.291717][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.3.18 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 97.291746][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.291763][ T5980] Call Trace: [ 97.291775][ T5980] [ 97.291783][ T5980] dump_stack_lvl+0x189/0x250 [ 97.291827][ T5980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.291856][ T5980] ? __pfx__printk+0x10/0x10 [ 97.291888][ T5980] should_fail_ex+0x414/0x560 [ 97.291925][ T5980] _copy_to_user+0x31/0xb0 [ 97.291954][ T5980] simple_read_from_buffer+0xe1/0x170 [ 97.291984][ T5980] proc_fail_nth_read+0x1df/0x250 [ 97.292015][ T5980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.292045][ T5980] ? rw_verify_area+0x258/0x650 [ 97.292066][ T5980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.292094][ T5980] vfs_read+0x1fd/0x980 [ 97.292122][ T5980] ? __pfx___mutex_lock+0x10/0x10 [ 97.292149][ T5980] ? __pfx_vfs_read+0x10/0x10 [ 97.292172][ T5980] ? __fget_files+0x2a/0x420 [ 97.292202][ T5980] ? __fget_files+0x3a0/0x420 [ 97.292226][ T5980] ? __fget_files+0x2a/0x420 [ 97.292260][ T5980] ksys_read+0x145/0x250 [ 97.292281][ T5980] ? rcu_is_watching+0x15/0xb0 [ 97.292312][ T5980] ? __pfx_ksys_read+0x10/0x10 [ 97.292338][ T5980] ? do_syscall_64+0xba/0x210 [ 97.292368][ T5980] do_syscall_64+0xf6/0x210 [ 97.292395][ T5980] ? clear_bhb_loop+0x45/0xa0 [ 97.292419][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.292438][ T5980] RIP: 0033:0x7fc67018d37c [ 97.292462][ T5980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.292478][ T5980] RSP: 002b:00007fc670f58030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.292499][ T5980] RAX: ffffffffffffffda RBX: 00007fc6703b5fa0 RCX: 00007fc67018d37c [ 97.292514][ T5980] RDX: 000000000000000f RSI: 00007fc670f580a0 RDI: 0000000000000004 [ 97.292526][ T5980] RBP: 00007fc670f58090 R08: 0000000000000000 R09: 0000000000000000 [ 97.292538][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.292549][ T5980] R13: 0000000000000000 R14: 00007fc6703b5fa0 R15: 00007ffe61197d68 [ 97.292580][ T5980] [ 97.584897][ T5983] bridge: RTM_NEWNEIGH with invalid ether address [ 97.593988][ T5985] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 97.605609][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.642014][ T5985] netlink: 'syz.4.20': attribute type 29 has an invalid length. [ 97.655427][ T5985] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 97.664503][ T5985] netlink: 596 bytes leftover after parsing attributes in process `syz.4.20'. [ 97.747415][ T5983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.755015][ T5983] IPv6: NLM_F_CREATE should be set when creating new route [ 97.947671][ T5998] netlink: 'syz.2.23': attribute type 4 has an invalid length. [ 98.210377][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 98.241781][ T6006] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.250852][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 98.322120][ T6002] xt_socket: unknown flags 0x4 [ 98.445533][ T6016] netlink: 256 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.634795][ T6055] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 99.673280][ T6055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.680695][ T6055] IPv6: NLM_F_CREATE should be set when creating new route [ 99.884972][ T6065] FAULT_INJECTION: forcing a failure. [ 99.884972][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.952752][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.1.44 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 99.952781][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.952792][ T6065] Call Trace: [ 99.952799][ T6065] [ 99.952806][ T6065] dump_stack_lvl+0x189/0x250 [ 99.952834][ T6065] ? __lock_acquire+0xaac/0xd20 [ 99.952861][ T6065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.952905][ T6065] ? __pfx__printk+0x10/0x10 [ 99.952924][ T6065] ? __might_fault+0xb0/0x130 [ 99.952961][ T6065] should_fail_ex+0x414/0x560 [ 99.952997][ T6065] _copy_from_iter+0x1db/0x15a0 [ 99.953030][ T6065] ? policy_nodemask+0x27c/0x720 [ 99.953054][ T6065] ? __pfx__copy_from_iter+0x10/0x10 [ 99.953083][ T6065] ? set_page_refcounted+0xa0/0x1e0 [ 99.953110][ T6065] ? page_copy_sane+0x4e/0x280 [ 99.953133][ T6065] copy_page_from_iter+0x7b/0x100 [ 99.953158][ T6065] tun_get_user+0x1b13/0x3c20 [ 99.953188][ T6065] ? tun_get_user+0x687/0x3c20 [ 99.953228][ T6065] ? __pfx_tun_get_user+0x10/0x10 [ 99.953251][ T6065] ? aa_file_perm+0x11f/0xed0 [ 99.953270][ T6065] ? aa_file_perm+0x3e7/0xed0 [ 99.953301][ T6065] ? ref_tracker_alloc+0x318/0x460 [ 99.953323][ T6065] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 99.953346][ T6065] ? tun_get+0x1c/0x2f0 [ 99.953381][ T6065] ? tun_get+0x1c/0x2f0 [ 99.953403][ T6065] ? tun_get+0x1c/0x2f0 [ 99.953430][ T6065] tun_chr_write_iter+0x113/0x200 [ 99.953457][ T6065] vfs_write+0x548/0xa90 [ 99.953482][ T6065] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 99.953506][ T6065] ? __pfx_vfs_write+0x10/0x10 [ 99.953535][ T6065] ? __fget_files+0x2a/0x420 [ 99.953570][ T6065] ksys_write+0x145/0x250 [ 99.953594][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 99.953619][ T6065] ? do_syscall_64+0xba/0x210 [ 99.953650][ T6065] do_syscall_64+0xf6/0x210 [ 99.953676][ T6065] ? clear_bhb_loop+0x45/0xa0 [ 99.953700][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.953717][ T6065] RIP: 0033:0x7f3d35f8d41f [ 99.953734][ T6065] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 99.953749][ T6065] RSP: 002b:00007f3d36d40000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 99.953769][ T6065] RAX: ffffffffffffffda RBX: 00007f3d361b5fa0 RCX: 00007f3d35f8d41f [ 99.953787][ T6065] RDX: 000000000000002a RSI: 0000200000001180 RDI: 00000000000000c8 [ 99.953799][ T6065] RBP: 00007f3d36d40090 R08: 0000000000000000 R09: 0000000000000000 [ 99.953809][ T6065] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 99.953820][ T6065] R13: 0000000000000001 R14: 00007f3d361b5fa0 R15: 00007ffd5a0ec208 [ 99.953849][ T6065] [ 100.710496][ T6083] __nla_validate_parse: 3 callbacks suppressed [ 100.710517][ T6083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.49'. [ 100.757712][ T6081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.763565][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 100.794628][ T6088] netlink: 'syz.0.49': attribute type 30 has an invalid length. [ 100.827997][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 100.833192][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.848471][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 100.855515][ T6089] netlink: 'syz.4.50': attribute type 30 has an invalid length. [ 100.884402][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.916650][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 100.933252][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 101.020989][ T6088] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.032564][ T6088] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.042685][ T6088] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.052539][ T6088] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.092106][ T6089] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.101070][ T6089] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.110950][ T6089] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.120140][ T6089] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.131819][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 101.168936][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 101.584158][ T6115] FAULT_INJECTION: forcing a failure. [ 101.584158][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 101.628172][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.3.57 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 101.628202][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.628214][ T6115] Call Trace: [ 101.628222][ T6115] [ 101.628231][ T6115] dump_stack_lvl+0x189/0x250 [ 101.628268][ T6115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.628297][ T6115] ? __pfx__printk+0x10/0x10 [ 101.628324][ T6115] ? __pfx___might_resched+0x10/0x10 [ 101.628342][ T6115] ? fs_reclaim_acquire+0x7d/0x100 [ 101.628377][ T6115] should_fail_ex+0x414/0x560 [ 101.628414][ T6115] should_failslab+0xa8/0x100 [ 101.628442][ T6115] __kmalloc_noprof+0xcb/0x4f0 [ 101.628466][ T6115] ? iter_file_splice_write+0x1cb/0x1000 [ 101.628495][ T6115] iter_file_splice_write+0x1cb/0x1000 [ 101.628547][ T6115] ? __pfx_iter_file_splice_write+0x10/0x10 [ 101.628575][ T6115] ? rcu_read_lock_any_held+0xb3/0x120 [ 101.628594][ T6115] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 101.628617][ T6115] ? direct_splice_actor+0x10c/0x160 [ 101.628645][ T6115] ? __pfx_iter_file_splice_write+0x10/0x10 [ 101.628670][ T6115] direct_splice_actor+0xfe/0x160 [ 101.628697][ T6115] splice_direct_to_actor+0x5a5/0xcc0 [ 101.628742][ T6115] ? __pfx_direct_splice_actor+0x10/0x10 [ 101.628764][ T6115] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 101.628788][ T6115] ? __pfx_aa_file_perm+0x10/0x10 [ 101.628817][ T6115] do_splice_direct+0x181/0x270 [ 101.628843][ T6115] ? __pfx_do_splice_direct+0x10/0x10 [ 101.628867][ T6115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 101.628900][ T6115] ? rw_verify_area+0x258/0x650 [ 101.628926][ T6115] do_sendfile+0x4da/0x7d0 [ 101.628954][ T6115] ? __pfx_vfs_write+0x10/0x10 [ 101.628982][ T6115] ? __pfx_do_sendfile+0x10/0x10 [ 101.629019][ T6115] ? __fget_files+0x3a0/0x420 [ 101.629054][ T6115] __se_sys_sendfile64+0x13e/0x190 [ 101.629080][ T6115] ? rcu_is_watching+0x15/0xb0 [ 101.629110][ T6115] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 101.629141][ T6115] ? do_syscall_64+0xba/0x210 [ 101.629172][ T6115] do_syscall_64+0xf6/0x210 [ 101.629198][ T6115] ? clear_bhb_loop+0x45/0xa0 [ 101.629222][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.629241][ T6115] RIP: 0033:0x7fc67018e969 [ 101.629259][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.629275][ T6115] RSP: 002b:00007fc670f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 101.629296][ T6115] RAX: ffffffffffffffda RBX: 00007fc6703b6080 RCX: 00007fc67018e969 [ 101.629310][ T6115] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000d [ 101.629322][ T6115] RBP: 00007fc670f37090 R08: 0000000000000000 R09: 0000000000000000 [ 101.629333][ T6115] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 101.629344][ T6115] R13: 0000000000000000 R14: 00007fc6703b6080 R15: 00007ffe61197d68 [ 101.629375][ T6115] [ 102.277278][ T6132] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 102.384292][ T6135] sit0: entered promiscuous mode [ 102.401133][ T6135] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 102.421356][ T6135] netlink: 1 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.490569][ T6137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 102.885499][ T6152] netlink: 'syz.3.69': attribute type 7 has an invalid length. [ 102.938019][ T6152] netlink: 'syz.3.69': attribute type 8 has an invalid length. [ 103.167877][ T6165] FAULT_INJECTION: forcing a failure. [ 103.167877][ T6165] name failslab, interval 1, probability 0, space 0, times 0 [ 103.180870][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.4.77 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 103.180897][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.180909][ T6165] Call Trace: [ 103.180917][ T6165] [ 103.180925][ T6165] dump_stack_lvl+0x189/0x250 [ 103.180963][ T6165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.180993][ T6165] ? __pfx__printk+0x10/0x10 [ 103.181027][ T6165] should_fail_ex+0x414/0x560 [ 103.181064][ T6165] should_failslab+0xa8/0x100 [ 103.181093][ T6165] __kmalloc_cache_noprof+0x70/0x3d0 [ 103.181125][ T6165] ? tipc_nametbl_lookup_mcast_sockets+0x6bd/0xd10 [ 103.181164][ T6165] tipc_nametbl_lookup_mcast_sockets+0x6bd/0xd10 [ 103.181196][ T6165] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd10 [ 103.181240][ T6165] tipc_sk_mcast_rcv+0x558/0xeb0 [ 103.181268][ T6165] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 103.181290][ T6165] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 103.181331][ T6165] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 103.181387][ T6165] ? tipc_mcast_xmit+0x10a4/0x1850 [ 103.181412][ T6165] ? tipc_mcast_xmit+0x10a4/0x1850 [ 103.181432][ T6165] tipc_mcast_xmit+0x123a/0x1850 [ 103.181468][ T6165] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 103.181495][ T6165] ? _copy_from_iter+0x308/0x15a0 [ 103.181527][ T6165] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 103.181548][ T6165] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 103.181576][ T6165] ? __pfx__copy_from_iter+0x10/0x10 [ 103.181601][ T6165] ? __build_skb_around+0x257/0x3e0 [ 103.181625][ T6165] ? tipc_msg_build+0x400/0xcf0 [ 103.181665][ T6165] ? net_generic+0x1e/0x240 [ 103.181698][ T6165] ? net_generic+0x1e/0x240 [ 103.181716][ T6165] ? net_generic+0x1e/0x240 [ 103.181739][ T6165] ? tipc_group_bc_cong+0x15f/0x210 [ 103.181772][ T6165] tipc_send_group_bcast+0x79e/0xa70 [ 103.181819][ T6165] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 103.181870][ T6165] ? __pfx_woken_wake_function+0x10/0x10 [ 103.181929][ T6165] __tipc_sendmsg+0x2d7/0x2960 [ 103.181973][ T6165] ? process_measurement+0x72d/0x1a40 [ 103.182011][ T6165] ? __pfx___tipc_sendmsg+0x10/0x10 [ 103.182039][ T6165] ? process_measurement+0x1640/0x1a40 [ 103.182063][ T6165] ? aa_label_sk_perm+0x413/0x560 [ 103.182106][ T6165] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 103.182173][ T6165] ? __lock_acquire+0xaac/0xd20 [ 103.182216][ T6165] ? __local_bh_enable_ip+0x12d/0x1c0 [ 103.182247][ T6165] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.182273][ T6165] ? __local_bh_enable_ip+0x12d/0x1c0 [ 103.182303][ T6165] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 103.182346][ T6165] tipc_sendmsg+0x55/0x70 [ 103.182369][ T6165] ? __pfx_tipc_sendmsg+0x10/0x10 [ 103.182393][ T6165] __sock_sendmsg+0x219/0x270 [ 103.182424][ T6165] ____sys_sendmsg+0x52d/0x830 [ 103.182453][ T6165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.182486][ T6165] ? import_iovec+0x74/0xa0 [ 103.182516][ T6165] ___sys_sendmsg+0x21f/0x2a0 [ 103.182541][ T6165] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.182605][ T6165] ? __fget_files+0x2a/0x420 [ 103.182630][ T6165] ? __fget_files+0x3a0/0x420 [ 103.182667][ T6165] __sys_sendmmsg+0x227/0x430 [ 103.182697][ T6165] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.182730][ T6165] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.182777][ T6165] ? ksys_write+0x1f0/0x250 [ 103.182798][ T6165] ? rcu_is_watching+0x15/0xb0 [ 103.182840][ T6165] __x64_sys_sendmmsg+0xa0/0xc0 [ 103.182865][ T6165] do_syscall_64+0xf6/0x210 [ 103.182893][ T6165] ? clear_bhb_loop+0x45/0xa0 [ 103.182917][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.182937][ T6165] RIP: 0033:0x7f2dfe78e969 [ 103.182955][ T6165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.182971][ T6165] RSP: 002b:00007f2dff553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.182992][ T6165] RAX: ffffffffffffffda RBX: 00007f2dfe9b5fa0 RCX: 00007f2dfe78e969 [ 103.183006][ T6165] RDX: 0000000000000001 RSI: 00002000000030c0 RDI: 0000000000000006 [ 103.183018][ T6165] RBP: 00007f2dff553090 R08: 0000000000000000 R09: 0000000000000000 [ 103.183030][ T6165] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.183042][ T6165] R13: 0000000000000000 R14: 00007f2dfe9b5fa0 R15: 00007fff32a8b788 [ 103.183074][ T6165] [ 103.754290][ T6178] bridge_slave_0: left allmulticast mode [ 103.800489][ T6178] bridge_slave_0: left promiscuous mode [ 103.807139][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.875681][ T6178] bridge_slave_1: left allmulticast mode [ 103.882104][ T6178] bridge_slave_1: left promiscuous mode [ 103.887961][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.908967][ T6178] bond0: (slave bond_slave_0): Releasing backup interface [ 103.920937][ T6178] bond0: (slave bond_slave_1): Releasing backup interface [ 103.946287][ T6178] team0: Port device team_slave_0 removed [ 103.960789][ T6178] team0: Port device team_slave_1 removed [ 103.969015][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.976461][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.986620][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.995237][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.324928][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.434491][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.542082][ T6207] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551609) [ 104.572965][ T6207] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 104.629504][ T6213] netlink: zone id is out of range [ 104.634821][ T6213] netlink: zone id is out of range [ 104.640209][ T6213] netlink: zone id is out of range [ 104.646224][ T6213] netlink: zone id is out of range [ 104.668857][ T6213] netlink: zone id is out of range [ 104.701005][ T6213] netlink: zone id is out of range [ 104.716337][ T6214] Bluetooth: MGMT ver 1.23 [ 104.727155][ T6213] netlink: zone id is out of range [ 104.763382][ T6213] netlink: zone id is out of range [ 104.795780][ T6213] netlink: zone id is out of range [ 105.254321][ T6235] FAULT_INJECTION: forcing a failure. [ 105.254321][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 105.293175][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.3.97 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 105.293202][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.293213][ T6235] Call Trace: [ 105.293220][ T6235] [ 105.293229][ T6235] dump_stack_lvl+0x189/0x250 [ 105.293265][ T6235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.293294][ T6235] ? __pfx__printk+0x10/0x10 [ 105.293319][ T6235] ? ref_tracker_alloc+0x318/0x460 [ 105.293342][ T6235] should_fail_ex+0x414/0x560 [ 105.293377][ T6235] should_failslab+0xa8/0x100 [ 105.293405][ T6235] kmem_cache_alloc_noprof+0x73/0x3c0 [ 105.293428][ T6235] ? skb_clone+0x212/0x3a0 [ 105.293455][ T6235] skb_clone+0x212/0x3a0 [ 105.293481][ T6235] __netlink_deliver_tap+0x404/0x850 [ 105.293524][ T6235] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.293555][ T6235] netlink_deliver_tap+0x19c/0x1b0 [ 105.293586][ T6235] netlink_unicast+0x72f/0x8d0 [ 105.293625][ T6235] netlink_sendmsg+0x805/0xb30 [ 105.293653][ T6235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.293675][ T6235] ? aa_sock_msg_perm+0x94/0x160 [ 105.293696][ T6235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.293717][ T6235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.293737][ T6235] __sock_sendmsg+0x219/0x270 [ 105.293767][ T6235] ____sys_sendmsg+0x505/0x830 [ 105.293794][ T6235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.293832][ T6235] ? import_iovec+0x74/0xa0 [ 105.293861][ T6235] ___sys_sendmsg+0x21f/0x2a0 [ 105.293895][ T6235] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.293952][ T6235] ? __fget_files+0x2a/0x420 [ 105.293974][ T6235] ? __fget_files+0x3a0/0x420 [ 105.294025][ T6235] __x64_sys_sendmsg+0x19b/0x260 [ 105.294044][ T6235] ? __might_fault+0xb0/0x130 [ 105.294070][ T6235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.294104][ T6235] ? rcu_is_watching+0x15/0xb0 [ 105.294143][ T6235] do_syscall_64+0xf6/0x210 [ 105.294170][ T6235] ? clear_bhb_loop+0x45/0xa0 [ 105.294194][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.294212][ T6235] RIP: 0033:0x7fc67018e969 [ 105.294230][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.294246][ T6235] RSP: 002b:00007fc670f58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.294267][ T6235] RAX: ffffffffffffffda RBX: 00007fc6703b5fa0 RCX: 00007fc67018e969 [ 105.294281][ T6235] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000016 [ 105.294293][ T6235] RBP: 00007fc670f58090 R08: 0000000000000000 R09: 0000000000000000 [ 105.294304][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.294315][ T6235] R13: 0000000000000000 R14: 00007fc6703b5fa0 R15: 00007ffe61197d68 [ 105.294346][ T6235] [ 105.360918][ T6239] bridge_slave_0: left allmulticast mode [ 105.574395][ T6239] bridge_slave_0: left promiscuous mode [ 105.580365][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.610087][ T6239] bridge_slave_1: left allmulticast mode [ 105.639691][ T6239] bridge_slave_1: left promiscuous mode [ 105.645662][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.723444][ T6239] bond0: (slave bond_slave_0): Releasing backup interface [ 105.753743][ T6239] bond0: (slave bond_slave_1): Releasing backup interface [ 105.780717][ T6239] team0: Port device team_slave_0 removed [ 105.798634][ T6239] team0: Port device team_slave_1 removed [ 105.805581][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.815062][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.826062][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.834547][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.877548][ T6241] tipc: Started in network mode [ 105.928114][ T6241] tipc: Node identity ac14140f, cluster identity 4711 [ 105.935697][ T6241] tipc: New replicast peer: 255.255.255.255 [ 105.950077][ T6241] tipc: Enabled bearer , priority 10 [ 106.030487][ T6254] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551609) [ 106.069991][ T6254] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 106.240789][ T6261] __nla_validate_parse: 6 callbacks suppressed [ 106.240810][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.514843][ T6276] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 106.526461][ T6278] Cannot find del_set index 1 as target [ 106.568553][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.684648][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 106.713718][ T6285] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 106.729066][ T6285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.736357][ T6285] IPv6: NLM_F_CREATE should be set when creating new route [ 106.744436][ T6285] FAULT_INJECTION: forcing a failure. [ 106.744436][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 106.757107][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.4.110 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 106.757135][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.757147][ T6285] Call Trace: [ 106.757155][ T6285] [ 106.757163][ T6285] dump_stack_lvl+0x189/0x250 [ 106.757213][ T6285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.757242][ T6285] ? __pfx__printk+0x10/0x10 [ 106.757258][ T6285] ? lwtunnel_get_encap_size+0x76/0x350 [ 106.757286][ T6285] ? __pfx_seg6_local_get_encap_size+0x10/0x10 [ 106.757322][ T6285] should_fail_ex+0x414/0x560 [ 106.757357][ T6285] should_failslab+0xa8/0x100 [ 106.757384][ T6285] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 106.757410][ T6285] ? __alloc_skb+0x112/0x2d0 [ 106.757433][ T6285] __alloc_skb+0x112/0x2d0 [ 106.757456][ T6285] inet6_rt_notify+0xb6/0x240 [ 106.757475][ T6285] ? atomic_notifier_call_chain+0x16e/0x180 [ 106.757501][ T6285] fib6_add_rt2node+0x15eb/0x3040 [ 106.757535][ T6285] ? rcu_is_watching+0x15/0xb0 [ 106.757584][ T6285] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 106.757614][ T6285] ? fib6_add_1+0x1167/0x1460 [ 106.757642][ T6285] ? __pfx__printk+0x10/0x10 [ 106.757675][ T6285] fib6_add+0x8da/0x18a0 [ 106.757720][ T6285] ? do_raw_spin_lock+0x121/0x290 [ 106.757742][ T6285] ? __pfx_fib6_add+0x10/0x10 [ 106.757775][ T6285] ? ip6_route_info_create+0x629/0xa70 [ 106.757795][ T6285] ? ip6_route_add+0x172/0x2f0 [ 106.757816][ T6285] ip6_route_add+0x187/0x2f0 [ 106.757833][ T6285] ? ip6_route_add+0x4d/0x2f0 [ 106.757853][ T6285] inet6_rtm_newroute+0x201/0x1c70 [ 106.757884][ T6285] ? kasan_quarantine_put+0xdd/0x220 [ 106.757910][ T6285] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.757937][ T6285] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 106.757982][ T6285] ? nlmon_xmit+0xb0/0x100 [ 106.758005][ T6285] ? kmem_cache_free+0x192/0x3f0 [ 106.758037][ T6285] ? __local_bh_enable_ip+0x12d/0x1c0 [ 106.758066][ T6285] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.758092][ T6285] ? __local_bh_enable_ip+0x12d/0x1c0 [ 106.758121][ T6285] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 106.758159][ T6285] ? aa_get_newest_label+0xf7/0x5d0 [ 106.758209][ T6285] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 106.758238][ T6285] rtnetlink_rcv_msg+0x7cc/0xb70 [ 106.758289][ T6285] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 106.758317][ T6285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.758351][ T6285] ? ref_tracker_free+0x63a/0x7d0 [ 106.758369][ T6285] ? __copy_skb_header+0xa7/0x550 [ 106.758401][ T6285] netlink_rcv_skb+0x219/0x490 [ 106.758434][ T6285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.758467][ T6285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.758519][ T6285] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.758549][ T6285] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.758587][ T6285] netlink_unicast+0x758/0x8d0 [ 106.758626][ T6285] netlink_sendmsg+0x805/0xb30 [ 106.758655][ T6285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.758676][ T6285] ? aa_sock_msg_perm+0x94/0x160 [ 106.758704][ T6285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.758725][ T6285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.758745][ T6285] __sock_sendmsg+0x219/0x270 [ 106.758775][ T6285] ____sys_sendmsg+0x505/0x830 [ 106.758801][ T6285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.758831][ T6285] ? import_iovec+0x74/0xa0 [ 106.758859][ T6285] ___sys_sendmsg+0x21f/0x2a0 [ 106.758884][ T6285] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.758943][ T6285] ? __fget_files+0x2a/0x420 [ 106.758968][ T6285] ? __fget_files+0x3a0/0x420 [ 106.759003][ T6285] __x64_sys_sendmsg+0x19b/0x260 [ 106.759026][ T6285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.759065][ T6285] ? do_syscall_64+0xba/0x210 [ 106.759096][ T6285] do_syscall_64+0xf6/0x210 [ 106.759122][ T6285] ? clear_bhb_loop+0x45/0xa0 [ 106.759146][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.759165][ T6285] RIP: 0033:0x7f2dfe78e969 [ 106.759183][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.759199][ T6285] RSP: 002b:00007f2dff553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.759220][ T6285] RAX: ffffffffffffffda RBX: 00007f2dfe9b5fa0 RCX: 00007f2dfe78e969 [ 106.759235][ T6285] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 106.759247][ T6285] RBP: 00007f2dff553090 R08: 0000000000000000 R09: 0000000000000000 [ 106.759259][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.759270][ T6285] R13: 0000000000000000 R14: 00007f2dfe9b5fa0 R15: 00007fff32a8b788 [ 106.759302][ T6285] [ 107.224895][ T5878] tipc: Node number set to 2886997007 [ 107.311361][ T6288] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 107.559171][ T5901] IPVS: starting estimator thread 0... [ 107.593819][ T6295] FAULT_INJECTION: forcing a failure. [ 107.593819][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 107.610033][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.4.114 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 107.610061][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.610073][ T6295] Call Trace: [ 107.610081][ T6295] [ 107.610103][ T6295] dump_stack_lvl+0x189/0x250 [ 107.610139][ T6295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.610167][ T6295] ? __pfx__printk+0x10/0x10 [ 107.610202][ T6295] should_fail_ex+0x414/0x560 [ 107.610238][ T6295] should_failslab+0xa8/0x100 [ 107.610265][ T6295] __kmalloc_cache_noprof+0x70/0x3d0 [ 107.610289][ T6295] ? sctp_add_bind_addr+0x8c/0x370 [ 107.610320][ T6295] sctp_add_bind_addr+0x8c/0x370 [ 107.610351][ T6295] sctp_copy_local_addr_list+0x30b/0x4e0 [ 107.610380][ T6295] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 107.610425][ T6295] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 107.610456][ T6295] ? sctp_v4_is_any+0x35/0x60 [ 107.610483][ T6295] ? sctp_copy_one_addr+0x93/0x360 [ 107.610513][ T6295] sctp_bind_addr_copy+0xb3/0x3c0 [ 107.610541][ T6295] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 107.610568][ T6295] sctp_connect_new_asoc+0x2e0/0x690 [ 107.610593][ T6295] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 107.610614][ T6295] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 107.610641][ T6295] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 107.610659][ T6295] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 107.610679][ T6295] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 107.610703][ T6295] ? security_sctp_bind_connect+0x7e/0x2e0 [ 107.610735][ T6295] sctp_sendmsg+0x155c/0x2810 [ 107.610768][ T6295] ? __pfx_sctp_sendmsg+0x10/0x10 [ 107.610792][ T6295] ? aa_sk_perm+0x81e/0x950 [ 107.610828][ T6295] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.610862][ T6295] ? sock_rps_record_flow+0x19/0x410 [ 107.610891][ T6295] ? inet_sendmsg+0x2f4/0x370 [ 107.610914][ T6295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.610940][ T6295] __sock_sendmsg+0x19c/0x270 [ 107.610971][ T6295] __sys_sendto+0x3bd/0x520 [ 107.610993][ T6295] ? __pfx___sys_sendto+0x10/0x10 [ 107.611009][ T6295] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 107.611050][ T6295] ? __fget_files+0x3a0/0x420 [ 107.611089][ T6295] ? ksys_write+0x1f0/0x250 [ 107.611123][ T6295] __x64_sys_sendto+0xde/0x100 [ 107.611146][ T6295] do_syscall_64+0xf6/0x210 [ 107.611174][ T6295] ? clear_bhb_loop+0x45/0xa0 [ 107.611200][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.611220][ T6295] RIP: 0033:0x7f2dfe78e969 [ 107.611238][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.611254][ T6295] RSP: 002b:00007f2dff532038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.611275][ T6295] RAX: ffffffffffffffda RBX: 00007f2dfe9b6080 RCX: 00007f2dfe78e969 [ 107.611290][ T6295] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 107.611302][ T6295] RBP: 00007f2dff532090 R08: 0000200000000000 R09: 0000000000000010 [ 107.611315][ T6295] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 107.611328][ T6295] R13: 0000000000000001 R14: 00007f2dfe9b6080 R15: 00007fff32a8b788 [ 107.611358][ T6295] [ 107.955110][ T6297] IPVS: using max 32 ests per chain, 76800 per kthread [ 108.013315][ T6292] bridge0: port 3(batadv0) entered disabled state [ 108.020193][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.028030][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.232946][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.248925][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.315111][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.1.119'. [ 108.599347][ T6292] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.650324][ T6292] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.693835][ T6292] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.728067][ T6292] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.851636][ T6292] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.860857][ T6292] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.871217][ T6292] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.881140][ T6292] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.901750][ T6294] bond0: option min_links: invalid value (18446744073709551609) [ 108.910685][ T6294] bond0: option min_links: allowed values 0 - 2147483647 [ 109.240745][ T6323] bridge_slave_0: left allmulticast mode [ 109.285092][ T6323] bridge_slave_0: left promiscuous mode [ 109.321475][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.365024][ T6323] bridge_slave_1: left allmulticast mode [ 109.385737][ T6323] bridge_slave_1: left promiscuous mode [ 109.401590][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.546145][ T6317] infiniband syz1: set active [ 109.553240][ T6317] infiniband syz1: added macvlan1 [ 109.594099][ T6323] bond0: (slave bond_slave_0): Releasing backup interface [ 109.675431][ T6323] bond0: (slave bond_slave_1): Releasing backup interface [ 109.698440][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 109.704746][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.730765][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.741584][ T6317] RDS/IB: syz1: added [ 109.746223][ T6317] smc: adding ib device syz1 with port count 1 [ 109.765922][ T6317] smc: ib device syz1 port 1 has pnetid [ 109.932867][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.978461][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 109.999178][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 110.050851][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.071169][ T6336] batadv0 (unregistering): left allmulticast mode [ 110.077736][ T6336] batadv0 (unregistering): left promiscuous mode [ 110.089530][ T6336] bridge0: port 3(batadv0) entered disabled state [ 110.390944][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 110.481672][ T6359] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 110.513118][ T6359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.805644][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.811400][ T6372] bond0: option min_links: invalid value (18446744073709551609) [ 110.855485][ T6372] bond0: option min_links: allowed values 0 - 2147483647 [ 111.175629][ T6383] tipc: Started in network mode [ 111.193673][ T6383] tipc: Node identity ac1414aa, cluster identity 4711 [ 111.241544][ T6383] tipc: Enabled bearer , priority 10 [ 111.494801][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 111.514562][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 111.662937][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 111.798989][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 111.829976][ T6410] netlink: 152 bytes leftover after parsing attributes in process `syz.3.150'. [ 111.842142][ T6412] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 111.874260][ T6412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.884384][ T6410] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 111.898886][ T6412] FAULT_INJECTION: forcing a failure. [ 111.898886][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 111.913821][ T6410] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 111.918911][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 111.923429][ T6410] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 111.944490][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.4.151 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 111.944518][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.944530][ T6412] Call Trace: [ 111.944538][ T6412] [ 111.944547][ T6412] dump_stack_lvl+0x189/0x250 [ 111.944584][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.944613][ T6412] ? __pfx__printk+0x10/0x10 [ 111.944629][ T6412] ? __lock_acquire+0xaac/0xd20 [ 111.944685][ T6412] should_fail_ex+0x414/0x560 [ 111.944721][ T6412] should_failslab+0xa8/0x100 [ 111.944748][ T6412] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.944771][ T6412] ? skb_clone+0x212/0x3a0 [ 111.944798][ T6412] skb_clone+0x212/0x3a0 [ 111.944824][ T6412] __netlink_deliver_tap+0x404/0x850 [ 111.944867][ T6412] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.944899][ T6412] netlink_deliver_tap+0x19c/0x1b0 [ 111.944929][ T6412] netlink_sendskb+0x68/0x140 [ 111.944959][ T6412] netlink_rcv_skb+0x2a0/0x490 [ 111.944989][ T6412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.945020][ T6412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.945070][ T6412] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.945098][ T6412] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.945134][ T6412] netlink_unicast+0x758/0x8d0 [ 111.945172][ T6412] netlink_sendmsg+0x805/0xb30 [ 111.945206][ T6412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.945229][ T6412] ? aa_sock_msg_perm+0x94/0x160 [ 111.945250][ T6412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.945271][ T6412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.945290][ T6412] __sock_sendmsg+0x219/0x270 [ 111.945320][ T6412] ____sys_sendmsg+0x505/0x830 [ 111.945347][ T6412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.945378][ T6412] ? import_iovec+0x74/0xa0 [ 111.945406][ T6412] ___sys_sendmsg+0x21f/0x2a0 [ 111.945430][ T6412] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.945494][ T6412] ? __fget_files+0x2a/0x420 [ 111.945517][ T6412] ? __fget_files+0x3a0/0x420 [ 111.945553][ T6412] __x64_sys_sendmsg+0x19b/0x260 [ 111.945577][ T6412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.945616][ T6412] ? do_syscall_64+0xba/0x210 [ 111.945646][ T6412] do_syscall_64+0xf6/0x210 [ 111.945672][ T6412] ? clear_bhb_loop+0x45/0xa0 [ 111.945695][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.945714][ T6412] RIP: 0033:0x7f2dfe78e969 [ 111.945730][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.945746][ T6412] RSP: 002b:00007f2dff553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.945766][ T6412] RAX: ffffffffffffffda RBX: 00007f2dfe9b5fa0 RCX: 00007f2dfe78e969 [ 111.945798][ T6412] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 111.945810][ T6412] RBP: 00007f2dff553090 R08: 0000000000000000 R09: 0000000000000000 [ 111.945822][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.945833][ T6412] R13: 0000000000000000 R14: 00007f2dfe9b5fa0 R15: 00007fff32a8b788 [ 111.945872][ T6412] [ 111.993732][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 112.252995][ T6410] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 112.296567][ T6410] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 112.366181][ T5876] tipc: Node number set to 2886997162 [ 112.967571][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 114.379882][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.390754][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.408913][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.418200][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.426005][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.057706][ T6317] syz.1.124 (6317) used greatest stack depth: 19776 bytes left [ 116.172642][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 116.286842][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.294457][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.302912][ T6448] bridge_slave_0: entered allmulticast mode [ 116.311135][ T6448] bridge_slave_0: entered promiscuous mode [ 116.352288][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.359686][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.367027][ T6448] bridge_slave_1: entered allmulticast mode [ 116.375786][ T6448] bridge_slave_1: entered promiscuous mode [ 116.469886][ T5830] Bluetooth: hci4: command tx timeout [ 116.542322][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 116.563417][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.576498][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.836214][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 116.864301][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 116.885930][ T6448] team0: Port device team_slave_0 added [ 116.950672][ T6448] team0: Port device team_slave_1 added [ 117.050212][ T6487] FAULT_INJECTION: forcing a failure. [ 117.050212][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.109081][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.2.167 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 117.109110][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.109122][ T6487] Call Trace: [ 117.109129][ T6487] [ 117.109138][ T6487] dump_stack_lvl+0x189/0x250 [ 117.109170][ T6487] ? __lock_acquire+0xaac/0xd20 [ 117.109201][ T6487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.109229][ T6487] ? __pfx__printk+0x10/0x10 [ 117.109249][ T6487] ? __might_fault+0xb0/0x130 [ 117.109285][ T6487] should_fail_ex+0x414/0x560 [ 117.109321][ T6487] _copy_from_user+0x2d/0xb0 [ 117.109348][ T6487] ___sys_sendmsg+0x158/0x2a0 [ 117.109374][ T6487] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.109442][ T6487] ? __fget_files+0x2a/0x420 [ 117.109467][ T6487] ? __fget_files+0x3a0/0x420 [ 117.109504][ T6487] __x64_sys_sendmsg+0x19b/0x260 [ 117.109530][ T6487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.109571][ T6487] ? do_syscall_64+0xba/0x210 [ 117.109603][ T6487] do_syscall_64+0xf6/0x210 [ 117.109641][ T6487] ? clear_bhb_loop+0x45/0xa0 [ 117.109665][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.109691][ T6487] RIP: 0033:0x7f0639d8e969 [ 117.109710][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.109726][ T6487] RSP: 002b:00007f063aba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.109746][ T6487] RAX: ffffffffffffffda RBX: 00007f0639fb5fa0 RCX: 00007f0639d8e969 [ 117.109760][ T6487] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 117.109772][ T6487] RBP: 00007f063aba9090 R08: 0000000000000000 R09: 0000000000000000 [ 117.109783][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.109794][ T6487] R13: 0000000000000000 R14: 00007f0639fb5fa0 R15: 00007fff432bb498 [ 117.109824][ T6487] [ 117.360391][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.370866][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.425599][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.477527][ T6486] netlink: 'syz.3.168': attribute type 3 has an invalid length. [ 117.584628][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.603519][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.655340][ T6499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.171'. [ 117.661998][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.734872][ T6493] warning: `syz.2.169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.835441][ T6496] netlink: 68 bytes leftover after parsing attributes in process `syz.3.171'. [ 117.845983][ T6502] netlink: 'syz.1.170': attribute type 13 has an invalid length. [ 117.857869][ T6502] netlink: 'syz.1.170': attribute type 17 has an invalid length. [ 117.886725][ T1138] bridge_slave_1: left allmulticast mode [ 117.896138][ T1138] bridge_slave_1: left promiscuous mode [ 117.907513][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.943438][ T1138] bridge_slave_0: left allmulticast mode [ 117.966376][ T1138] bridge_slave_0: left promiscuous mode [ 117.980522][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.548336][ T5830] Bluetooth: hci4: command tx timeout [ 118.614973][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.625549][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.635844][ T1138] bond0 (unregistering): Released all slaves [ 118.889703][ T6448] hsr_slave_0: entered promiscuous mode [ 118.896962][ T6448] hsr_slave_1: entered promiscuous mode [ 118.905163][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.913437][ T6448] Cannot create hsr debugfs directory [ 118.954018][ T6526] net_ratelimit: 4062 callbacks suppressed [ 118.954038][ T6526] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 118.982979][ T6522] syzkaller1: entered promiscuous mode [ 118.990370][ T6522] syzkaller1: entered allmulticast mode [ 119.463112][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.175'. [ 119.589991][ T6544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.175'. [ 119.665170][ T6547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.175'. [ 119.908854][ T1307] wlan1: Trigger new scan to find an IBSS to join [ 119.917217][ T1307] ------------[ cut here ]------------ [ 119.944459][ T1307] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.968483][ T1307] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 120.019791][ T1307] CPU: 1 UID: 0 PID: 1307 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 120.019818][ T1307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.019831][ T1307] Workqueue: events_unbound cfg80211_wiphy_work [ 120.019878][ T1307] Call Trace: [ 120.019886][ T1307] [ 120.019894][ T1307] dump_stack_lvl+0x189/0x250 [ 120.019933][ T1307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.019962][ T1307] ? __pfx__printk+0x10/0x10 [ 120.019997][ T1307] ubsan_epilogue+0xa/0x40 [ 120.020017][ T1307] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 120.020050][ T1307] ieee80211_request_ibss_scan+0x600/0x8b0 [ 120.020100][ T1307] ieee80211_ibss_work+0xde7/0x1060 [ 120.020134][ T1307] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 120.020168][ T1307] ? ieee80211_iface_work+0xf39/0xfe0 [ 120.020196][ T1307] ? rcu_is_watching+0x15/0xb0 [ 120.020231][ T1307] cfg80211_wiphy_work+0x2dc/0x460 [ 120.020262][ T1307] ? process_scheduled_works+0x9ec/0x17a0 [ 120.020295][ T1307] process_scheduled_works+0xadb/0x17a0 [ 120.020355][ T1307] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.020403][ T1307] worker_thread+0x8a0/0xda0 [ 120.020437][ T1307] ? __kthread_parkme+0x7b/0x200 [ 120.020468][ T1307] kthread+0x70e/0x8a0 [ 120.020496][ T1307] ? __pfx_worker_thread+0x10/0x10 [ 120.020515][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.020538][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.020558][ T1307] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.020579][ T1307] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.020604][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.020626][ T1307] ret_from_fork+0x4b/0x80 [ 120.020645][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.020668][ T1307] ret_from_fork_asm+0x1a/0x30 [ 120.020703][ T1307] [ 120.020711][ T1307] ---[ end trace ]--- [ 120.350085][ T1307] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 120.357359][ T1307] CPU: 1 UID: 0 PID: 1307 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 120.369543][ T1307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.379619][ T1307] Workqueue: events_unbound cfg80211_wiphy_work [ 120.385886][ T1307] Call Trace: [ 120.389221][ T1307] [ 120.392159][ T1307] dump_stack_lvl+0x99/0x250 [ 120.396763][ T1307] ? __asan_memcpy+0x40/0x70 [ 120.401364][ T1307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.406577][ T1307] ? __pfx__printk+0x10/0x10 [ 120.411187][ T1307] panic+0x2db/0x790 [ 120.415099][ T1307] ? __pfx_panic+0x10/0x10 [ 120.419526][ T1307] ? _printk+0xcf/0x120 [ 120.423689][ T1307] ? __pfx__printk+0x10/0x10 [ 120.428298][ T1307] check_panic_on_warn+0x89/0xb0 [ 120.433290][ T1307] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 120.439029][ T1307] ieee80211_request_ibss_scan+0x600/0x8b0 [ 120.444866][ T1307] ieee80211_ibss_work+0xde7/0x1060 [ 120.450089][ T1307] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 120.455741][ T1307] ? ieee80211_iface_work+0xf39/0xfe0 [ 120.461126][ T1307] ? rcu_is_watching+0x15/0xb0 [ 120.465911][ T1307] cfg80211_wiphy_work+0x2dc/0x460 [ 120.471043][ T1307] ? process_scheduled_works+0x9ec/0x17a0 [ 120.476800][ T1307] process_scheduled_works+0xadb/0x17a0 [ 120.482397][ T1307] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.488407][ T1307] worker_thread+0x8a0/0xda0 [ 120.493013][ T1307] ? __kthread_parkme+0x7b/0x200 [ 120.497977][ T1307] kthread+0x70e/0x8a0 [ 120.502074][ T1307] ? __pfx_worker_thread+0x10/0x10 [ 120.507191][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.511821][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.516420][ T1307] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.521625][ T1307] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.526831][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.531431][ T1307] ret_from_fork+0x4b/0x80 [ 120.535851][ T1307] ? __pfx_kthread+0x10/0x10 [ 120.540538][ T1307] ret_from_fork_asm+0x1a/0x30 [ 120.545333][ T1307] [ 120.548695][ T1307] Kernel Offset: disabled [ 120.553075][ T1307] Rebooting in 86400 seconds..