last executing test programs: 1m42.795817683s ago: executing program 0 (id=1423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 1m32.28672056s ago: executing program 4 (id=1506): r0 = socket(0x1a, 0x4, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wg1\x00', 0x1d39}) (async) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xa1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "3d0271a9a87071dd21"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4092cd81}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x61, 0x6, "727df704c378c69fc0ba5e0d896f8a76f852f51e5a3570da2091bf357a4fb0c47f4e1117e63b0f6d7c6e18a982070c8004cfabff75417f8a8c14b51ecbc940d2bf672d0471567fd71fdc0cc0a71b9bf76cccd7d82d2e3a995625e7f25a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "f2f99c9755e99a780388b628828999950db301cadde108bad76ff4a355f1192ffc4db49ce0391475e314cc262cbc4c5c66a5d45aade8b633f553f32c595cad04be89abaab9e0fd10157efa48a13453937ee06f5c3f1eeef72c67b187df3f011a828721f4743e72dafed648069af65261971a0be16cc92217f2b305df0a0a5e818075fd4f9c321307593a8c28c08f28f4afcbdbacf7b3f7eaade286203686a49175dc92604b0fa1d4f111ad7d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4048054) (async) connect$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = accept4$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000800)=0x1c, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000940)={{&(0x7f0000000840)=""/174, 0xae}, &(0x7f0000000900), 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000980)={0x0, 0xb9c, 0x10}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={r6, 0x800}, &(0x7f0000000a40)=0x8) (async) sendto$inet(r0, &(0x7f0000000a80)="10eac77d904de1e7eb23983fac3dc34c9ce48db3e2a28adbcf9934b621ef29f8248d4dffd7c55677c15552e7ae72218efe52b59830d536e24ba210648481d656d57baa53137a6502e249be971fb8d8d15756f4e57f453ff4b3742f1990de785c945804be11f87d8dceca3548a714fb314dd6f8256209fa20be8b21043e4dff4922c50435e15788f4893bc0a0dea3a04e70a75bfd3308e22ec350fea7bb3555362f3490f0732c733d84987a7a13fbf1d2b35fab320f2c40e69182b5f759bff0fde1ec7cfbddb76af645626a80d442ef9548", 0xd1, 0x8000, &(0x7f0000000b80)={0x2, 0x4e21, @broadcast}, 0x10) (async) r7 = socket(0x22, 0x0, 0x444) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x1, 0x8, 0x2d, 0x401, 0x7]}, &(0x7f0000000c40)=0x54) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x200, 0xa7e, 0xe12c, 0x7a}, 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/219, 0xdb}], 0x6) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000002000)=@hopopts={0x11, 0xb, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x9, 0x18, "93df687e3d52f0deb2c5fab6b3f286a4c0b47cb35e13b9f5"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x7d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ec}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1203}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) r10 = openat$cgroup_procs(r8, &(0x7f0000002200)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 1m25.969672067s ago: executing program 0 (id=1423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 1m14.929915783s ago: executing program 4 (id=1506): r0 = socket(0x1a, 0x4, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wg1\x00', 0x1d39}) (async) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xa1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "3d0271a9a87071dd21"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4092cd81}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x61, 0x6, "727df704c378c69fc0ba5e0d896f8a76f852f51e5a3570da2091bf357a4fb0c47f4e1117e63b0f6d7c6e18a982070c8004cfabff75417f8a8c14b51ecbc940d2bf672d0471567fd71fdc0cc0a71b9bf76cccd7d82d2e3a995625e7f25a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "f2f99c9755e99a780388b628828999950db301cadde108bad76ff4a355f1192ffc4db49ce0391475e314cc262cbc4c5c66a5d45aade8b633f553f32c595cad04be89abaab9e0fd10157efa48a13453937ee06f5c3f1eeef72c67b187df3f011a828721f4743e72dafed648069af65261971a0be16cc92217f2b305df0a0a5e818075fd4f9c321307593a8c28c08f28f4afcbdbacf7b3f7eaade286203686a49175dc92604b0fa1d4f111ad7d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4048054) (async) connect$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = accept4$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000800)=0x1c, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000940)={{&(0x7f0000000840)=""/174, 0xae}, &(0x7f0000000900), 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000980)={0x0, 0xb9c, 0x10}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={r6, 0x800}, &(0x7f0000000a40)=0x8) (async) sendto$inet(r0, &(0x7f0000000a80)="10eac77d904de1e7eb23983fac3dc34c9ce48db3e2a28adbcf9934b621ef29f8248d4dffd7c55677c15552e7ae72218efe52b59830d536e24ba210648481d656d57baa53137a6502e249be971fb8d8d15756f4e57f453ff4b3742f1990de785c945804be11f87d8dceca3548a714fb314dd6f8256209fa20be8b21043e4dff4922c50435e15788f4893bc0a0dea3a04e70a75bfd3308e22ec350fea7bb3555362f3490f0732c733d84987a7a13fbf1d2b35fab320f2c40e69182b5f759bff0fde1ec7cfbddb76af645626a80d442ef9548", 0xd1, 0x8000, &(0x7f0000000b80)={0x2, 0x4e21, @broadcast}, 0x10) (async) r7 = socket(0x22, 0x0, 0x444) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x1, 0x8, 0x2d, 0x401, 0x7]}, &(0x7f0000000c40)=0x54) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x200, 0xa7e, 0xe12c, 0x7a}, 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/219, 0xdb}], 0x6) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000002000)=@hopopts={0x11, 0xb, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x9, 0x18, "93df687e3d52f0deb2c5fab6b3f286a4c0b47cb35e13b9f5"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x7d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ec}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1203}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) r10 = openat$cgroup_procs(r8, &(0x7f0000002200)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 1m12.154824945s ago: executing program 0 (id=1423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 58.942852182s ago: executing program 4 (id=1506): r0 = socket(0x1a, 0x4, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wg1\x00', 0x1d39}) (async) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xa1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "3d0271a9a87071dd21"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4092cd81}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x61, 0x6, "727df704c378c69fc0ba5e0d896f8a76f852f51e5a3570da2091bf357a4fb0c47f4e1117e63b0f6d7c6e18a982070c8004cfabff75417f8a8c14b51ecbc940d2bf672d0471567fd71fdc0cc0a71b9bf76cccd7d82d2e3a995625e7f25a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "f2f99c9755e99a780388b628828999950db301cadde108bad76ff4a355f1192ffc4db49ce0391475e314cc262cbc4c5c66a5d45aade8b633f553f32c595cad04be89abaab9e0fd10157efa48a13453937ee06f5c3f1eeef72c67b187df3f011a828721f4743e72dafed648069af65261971a0be16cc92217f2b305df0a0a5e818075fd4f9c321307593a8c28c08f28f4afcbdbacf7b3f7eaade286203686a49175dc92604b0fa1d4f111ad7d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4048054) (async) connect$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = accept4$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000800)=0x1c, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000940)={{&(0x7f0000000840)=""/174, 0xae}, &(0x7f0000000900), 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000980)={0x0, 0xb9c, 0x10}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={r6, 0x800}, &(0x7f0000000a40)=0x8) (async) sendto$inet(r0, &(0x7f0000000a80)="10eac77d904de1e7eb23983fac3dc34c9ce48db3e2a28adbcf9934b621ef29f8248d4dffd7c55677c15552e7ae72218efe52b59830d536e24ba210648481d656d57baa53137a6502e249be971fb8d8d15756f4e57f453ff4b3742f1990de785c945804be11f87d8dceca3548a714fb314dd6f8256209fa20be8b21043e4dff4922c50435e15788f4893bc0a0dea3a04e70a75bfd3308e22ec350fea7bb3555362f3490f0732c733d84987a7a13fbf1d2b35fab320f2c40e69182b5f759bff0fde1ec7cfbddb76af645626a80d442ef9548", 0xd1, 0x8000, &(0x7f0000000b80)={0x2, 0x4e21, @broadcast}, 0x10) (async) r7 = socket(0x22, 0x0, 0x444) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x1, 0x8, 0x2d, 0x401, 0x7]}, &(0x7f0000000c40)=0x54) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x200, 0xa7e, 0xe12c, 0x7a}, 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/219, 0xdb}], 0x6) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000002000)=@hopopts={0x11, 0xb, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x9, 0x18, "93df687e3d52f0deb2c5fab6b3f286a4c0b47cb35e13b9f5"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x7d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ec}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1203}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) r10 = openat$cgroup_procs(r8, &(0x7f0000002200)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 57.653717814s ago: executing program 0 (id=1423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 39.736404968s ago: executing program 4 (id=1506): r0 = socket(0x1a, 0x4, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wg1\x00', 0x1d39}) (async) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xa1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "3d0271a9a87071dd21"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4092cd81}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x61, 0x6, "727df704c378c69fc0ba5e0d896f8a76f852f51e5a3570da2091bf357a4fb0c47f4e1117e63b0f6d7c6e18a982070c8004cfabff75417f8a8c14b51ecbc940d2bf672d0471567fd71fdc0cc0a71b9bf76cccd7d82d2e3a995625e7f25a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "f2f99c9755e99a780388b628828999950db301cadde108bad76ff4a355f1192ffc4db49ce0391475e314cc262cbc4c5c66a5d45aade8b633f553f32c595cad04be89abaab9e0fd10157efa48a13453937ee06f5c3f1eeef72c67b187df3f011a828721f4743e72dafed648069af65261971a0be16cc92217f2b305df0a0a5e818075fd4f9c321307593a8c28c08f28f4afcbdbacf7b3f7eaade286203686a49175dc92604b0fa1d4f111ad7d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4048054) (async) connect$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = accept4$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000800)=0x1c, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000940)={{&(0x7f0000000840)=""/174, 0xae}, &(0x7f0000000900), 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000980)={0x0, 0xb9c, 0x10}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={r6, 0x800}, &(0x7f0000000a40)=0x8) (async) sendto$inet(r0, &(0x7f0000000a80)="10eac77d904de1e7eb23983fac3dc34c9ce48db3e2a28adbcf9934b621ef29f8248d4dffd7c55677c15552e7ae72218efe52b59830d536e24ba210648481d656d57baa53137a6502e249be971fb8d8d15756f4e57f453ff4b3742f1990de785c945804be11f87d8dceca3548a714fb314dd6f8256209fa20be8b21043e4dff4922c50435e15788f4893bc0a0dea3a04e70a75bfd3308e22ec350fea7bb3555362f3490f0732c733d84987a7a13fbf1d2b35fab320f2c40e69182b5f759bff0fde1ec7cfbddb76af645626a80d442ef9548", 0xd1, 0x8000, &(0x7f0000000b80)={0x2, 0x4e21, @broadcast}, 0x10) (async) r7 = socket(0x22, 0x0, 0x444) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x1, 0x8, 0x2d, 0x401, 0x7]}, &(0x7f0000000c40)=0x54) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x200, 0xa7e, 0xe12c, 0x7a}, 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/219, 0xdb}], 0x6) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000002000)=@hopopts={0x11, 0xb, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x9, 0x18, "93df687e3d52f0deb2c5fab6b3f286a4c0b47cb35e13b9f5"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x7d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ec}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1203}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) r10 = openat$cgroup_procs(r8, &(0x7f0000002200)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 38.526591845s ago: executing program 0 (id=1423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 22.714714678s ago: executing program 4 (id=1506): r0 = socket(0x1a, 0x4, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wg1\x00', 0x1d39}) (async) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xa1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "3d0271a9a87071dd21"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4092cd81}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x61, 0x6, "727df704c378c69fc0ba5e0d896f8a76f852f51e5a3570da2091bf357a4fb0c47f4e1117e63b0f6d7c6e18a982070c8004cfabff75417f8a8c14b51ecbc940d2bf672d0471567fd71fdc0cc0a71b9bf76cccd7d82d2e3a995625e7f25a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "f2f99c9755e99a780388b628828999950db301cadde108bad76ff4a355f1192ffc4db49ce0391475e314cc262cbc4c5c66a5d45aade8b633f553f32c595cad04be89abaab9e0fd10157efa48a13453937ee06f5c3f1eeef72c67b187df3f011a828721f4743e72dafed648069af65261971a0be16cc92217f2b305df0a0a5e818075fd4f9c321307593a8c28c08f28f4afcbdbacf7b3f7eaade286203686a49175dc92604b0fa1d4f111ad7d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4048054) (async) connect$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = accept4$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000800)=0x1c, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000940)={{&(0x7f0000000840)=""/174, 0xae}, &(0x7f0000000900), 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000980)={0x0, 0xb9c, 0x10}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={r6, 0x800}, &(0x7f0000000a40)=0x8) (async) sendto$inet(r0, &(0x7f0000000a80)="10eac77d904de1e7eb23983fac3dc34c9ce48db3e2a28adbcf9934b621ef29f8248d4dffd7c55677c15552e7ae72218efe52b59830d536e24ba210648481d656d57baa53137a6502e249be971fb8d8d15756f4e57f453ff4b3742f1990de785c945804be11f87d8dceca3548a714fb314dd6f8256209fa20be8b21043e4dff4922c50435e15788f4893bc0a0dea3a04e70a75bfd3308e22ec350fea7bb3555362f3490f0732c733d84987a7a13fbf1d2b35fab320f2c40e69182b5f759bff0fde1ec7cfbddb76af645626a80d442ef9548", 0xd1, 0x8000, &(0x7f0000000b80)={0x2, 0x4e21, @broadcast}, 0x10) (async) r7 = socket(0x22, 0x0, 0x444) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x1, 0x8, 0x2d, 0x401, 0x7]}, &(0x7f0000000c40)=0x54) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x200, 0xa7e, 0xe12c, 0x7a}, 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/219, 0xdb}], 0x6) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000002000)=@hopopts={0x11, 0xb, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x9, 0x18, "93df687e3d52f0deb2c5fab6b3f286a4c0b47cb35e13b9f5"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x7d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ec}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1203}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) r10 = openat$cgroup_procs(r8, &(0x7f0000002200)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 22.011507845s ago: executing program 0 (id=1423): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 4.481895711s ago: executing program 3 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffb9, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000190001000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40048a4}, 0x24000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r10, 0x6, 0x6, 0x0, &(0x7f0000000040)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000001008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r13, @ANYBLOB="000000003d267cc908"], 0x28}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)}], 0x1}}], 0x2, 0x4008001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x991d, 0x1, [0x0]}, 0xa) 4.344357713s ago: executing program 1 (id=2152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0xfffffffffffffffd}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd4, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bdb45cac6dea28f0e1faaf094dcb996943ee7d945cd3635632bf3592522c8c15"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffd}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff22}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3bc97cbc5c9dc664efdb5736b22828ad"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff4a8e}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x1) 4.17761811s ago: executing program 1 (id=2153): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='T'], 0x8) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x400400c0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) socket$key(0xf, 0x3, 0x2) close(r4) (async) accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r6, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) (async) r7 = accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$tun(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="070406000400effb0600c7e8b5a14d1d00000000000088a83900810042000008b83449474164c87639b1ce2d9a2392acc47fb30510a9e758f9ae3fbfa8f8e2a0d229192a42d2042d01d582e83110be900206d52e0d269020a80de654d4eac44536576aaa3134f747eedfcf0f088303340a9c65151d26e2207c62a795541a4256df88b1766a9b4e77802cf6adf658e8ac9f394927799ddeea1e2af22a5edf33c608e7cab74a7f302d1216a491ea5b5254277b89b7b3d5435bf65d810f9ad0fd67a2df681f77a12aaa6c1c3bbd9efb207d02fad0f60d9fc2f7b8bb94a4a8af5df72397c09d8a357f7a9c946993e0e7dc6e37e3971c8343dcd16d2013087d5ab72b74e5dd98ad7e06fea793984b0cacae9ef1e0b5a9ed4ab9ec3b2ab1e0de9e85fec36521e287432cebb8b2c7fc15496208d998460690c4de81d826bae62c4fb822eff61a91df96feb7975f99173e650a16cb328e9618a3bcaa9c8b0c671afe30317023e354f8b117e7df4ca6a45c225f2b3330ae4cec23109e5bf5d1d80725c7b478c49190fc5f671b7a818e361cddcf1d7c09ea2cbaaccbd56a4b197cc52192950c43e8da4bc3f40655335a97365873b2b44533d40f6bb05352df38c3e7b5024cdb46be556a0ff8a00d9b8c2c880f08a6a603af8470055df46a196fd6dd4b084eaa2a984072c508ca4d1bc565250f9aa15801d8a81454de59355e0a818336682bf073013ee4fd603301ed87170a9fc37f3548c6b5c4e1db7d52732e24dc3319c8edab7ba8778b8288f45390ab8cd18930be7dc2de5557165cb4e85792977b66eae1c2ea06a030ba0256a00f6f887a6de0a2ff50ae4fa1b048999820148bd097531e482ab320500e8fb9bb42f29fe9d2c41199977bf6b6194312fa9c67a6e681185f7c77f0b1b49a4a502a236bfc99d28b332bc9a13ae3b861caba41372fff7da24696332dffbfd9cdabec334b8c83b1949be172f600dbe49c133b872f82fb9daa091ff0650906b29e3322ef4047eae90de9415cdb7b4c2f7502b530e147cb66e82f58791a20bf7ddd2061c6652ec6f8a788f35112de51b026f53f45244559d5a28922b922284582f16fdaf0f5dcd68a90a77a2bb4142759569183fc21e80707655e9e683e56ee8b48998e31cc20fdb11cc2bda189473a823a4488f7395be9c9adc77e1b4d13d4d2b3f01e7c387974e99dce79de6d497d0128226aa98dca3fa6e2c68098fe2d559f57dc32e32cc0396f8833d4f118fdd93c49ba6b9c219124e8952a337b1ebe22a2d2f6d9f7b2b008ef5ab1a68208b58f3672710a1050bbb4bcc1824ebda937389b4fc163d17f9d391549d5d52d4cd1bb697559b7544e4abcb522b77e366aa817c3c3e8bae0e451e226d0dab86cdd8819a50d9304fbf6660e9f61d17ad2583ae367aaf791eb4dbe16e9e3f11a8434c7ec94e7293ade8c86c15b04ea71cd9cd5d25706594fd77c7cb90c8ae7bdf7c88dd898d4d1a79ed8aadf2266d666cf95c30dc767f21eaf8531f1adad690e23d944b3e2f56109640f18284c5b465bfd144e4f05cf5509ee1d48f58a21ae9f2730a2f12d0811fa9fff6ee1a0da11cfb8c26baab00315a982b32d8ebedc2a8d355cdf08d3f2cb0a56c060da025c33af7c69a38062309c4a1628f21b54a613ed11d076d57e56bb4d6b8f2d17f3d11c9bad233870918c12807a99ca29955fc1d3fc0c4ae88135e8e1785d4f348d349100884d9ddf4a23319baaf3381c81c7bb4ffa2c21c15bd5be852187cbd2fa864d52a81d922263f537b76ff790389ad28d9a1c0c3bf344326438c81b4d3cb9307a254784f3a1b93fd45d856a103855f7e65c68ce78ba6e6b42e17e5977196316a9d82200cf4077ccf7c0e8e5c394ec0ca732414ae1f282ca1c23fff75197d9dd05e3294498c1910357286e93d611d0d54e976ddc66ff76fa0f9b2d33771e97144468c24f7524e39de302ef7cd6f87148553c84f7d44e23a97a64ef6aba34f41d7a93cb8c4a6b506d81fcd777bd11f6c519d538c4a325baa6b894837112bcc81c252e3a25a548886e753786e40317b4c24afa09f7a03a98b3f6bb0e44d8700b5cdf59d22a62ea3f5d67cb0e3896bebcc10983188527d929048ecebd3b1720b2acfa376eb94fc39351aeb637d290ba2dab2cd05a5dacc895d40048072bac4cfa1d204a445444d743069535b7655463858e05a772183f5d1712f728abcf27c55a0d751cc710e63b7d572523c6d03c9eea3ece15b5aa19744d0bd0f2b64ff462f5be877a8a7c2e499c795b0871be0d3a7bcbf78a17f1302da9bb3d35b5f5553215bb471c3443aebd05cf4ae618aaec84a97fd13b3050280ef9b44481db9a5cf95e47ae24d247d9b22cf4603798fc5c68e25d2b9e6c10402d61b276e50cef9f096c3c2017ea8713a9f510b0a6b2cc679ddd77bc4c5edc16d2509a691437f4c6a4f2c69203bd74a1513eae5d796e3bd3974c36e914b5b13236dd0a68be8c6e13991bf07086ecbb058a0ac64fa5f7af576cc7c6990c08e48ecd1a4e9f1a4564e9848c4947d9f492cd3e55a7557ae1d15442abbbf01d578e3cc60c2be70d920799e298168e8df410f88a8049aea21be3eca98c155d7049e9d241103cdc47ab91a236243890773347cd7d6a85c240ea46878e358359a486c66f737c01b12423befbc76af5f13e0e0b92ea6d7d18c2a0c52dab29fb18afeaadfd1d2848b1c94090c4509a5257f33cff90a0daf0742d669e2e49050679ef6fb43a5c7c4917602ee9933645e84055e205d1d130b8dbe479e30070debbd48df4508789a304acdeda29ebffb122df7e9cd401f96f339c59910dec37ec470316d0a73aa393c5c127e32970c7b5c7c9b5a1001d83a35e073f36497f095e35c6a94a90e1c031c35ad317096c2088ecf4d431ad2d173c8f8525ff497c9e46d64450d095cd66f24c6363bfba425f9e8a15c247b9787c2374f7f54629c656a3a19aa7131ce9218f0e176bdd33049e55874ccb2998ad6593bff214193b4ccfe25108ebd5e00f62526bcec96b979282ac56ce9df8cb9db3791137698978228056709c64574e68aafd65a6c492c78a87b89f18dfc0d0e87b754e6b77997c2eae8e69680c9e5674deababe22a7c5b0124078c81046c9dfdd7d6d751891e3c240f013d73584612337b8c6eee90d9ce15162b25d708d0a30d8d59eeebc488c7ad947f835e10cec5e2faadb4b578f4ed064b7e9a6bd55ea9596697f3fc592340915224e16536c5e12e7e361a44142fd653ec457f4db0305e39d6d1e16a0d9f7ea74998443853b148807db1a6a4bc19c5ed6e65d9da01c572e60b154fc5d29f93528e96889fcb747af055878b33836459c3e1471327866319a6f4e7dfb40f1b359fcb64ef9355b0b866c7b433da387903c0d8192a2afd7ea31e640aa7e6b09bc0d93e3e9d74252c3591aade611fca70235aba97e4fd91744fd9e9f3ab07c2a77e70179d161062c99212f9b7529616083cb353e71ee09b546bd3de646eebcd7104e937a7603007cadc107ad987fb75471a038f04f37c8263d8fda0f9a5308e5607793f1243d5c2b5cdc036d50ab72c544d1748e6d6769a0f5e65bdea22e11b1622360b52f88ada8a9806d6b0af542a43b776d73a6536483b97b35f3712ffbdf7304632a7190c4100b8e8dddb7dc044378a7d586c78c3d527b242efb14eff35ca06fdd9b568efaaa9ff157ad0d677a8fc0f5a0756603d40cc92fe93b48ecb69cce46322160dbd711744d9d7b742b2cb19875528b759c3c502decfa2573a58da81f5a107af5e7bfb924b0a10b06e0ba56add1f78c95360bcdfa4b1b51fd55766f4367afe5b318c11ad5e7069f70b17e5f5ac1dc69eeae239fa76f8a5b9aa66b052550c96a4f009b67b63ce2649323757640486968d76fe29d3678f898b10f185ee6a9a59ffa157d3d0cc82fa069f69c256e18f32df2b2395929e493685418250a983fca5b14fe314f1833d1168cd4c5d7718473e98d3fcf6788870dcae0238726668c67815adbd7c5b6e1240cd25a3d88c0c4671587f22dde40e4541cbc642490be51efcdbca88919a0aacf0a466c6f323d0527c74213e4d530366ac6dcd309be98e627fe8bc960221fa1035aef8a3fa3f20d1a8a163beeed0501babb9214f5249c0d1ed6cf0ad750d825c8048fbf772a06e6406e0895f406d78561f607541aa39bc6cb600681fd437cffa39415358bbc0b718c11283b8ef2a54525749ab1a331a957782b5323f93f1603eacd894e3e0b3132d25c0cfed87599ac7d9cd30e2d2173e42c433019b2a5f65126debabda62a94924323efd32cc22aab576a60d611141c7f82c49ef8dec28a59800891b588a8d5cd6e3c491ea3780c562a17f539abd62604fef9fc8dbc6d388024964aa77808c6af7cb6c912f2155580f0be5feb4f9e0064c59b42e41d8aba5451a4c83f39696222d05d3526597f000c797128682dd1659dca474fffcc8e65ad9165bc1f874535f659ce41e04d199d4594847adb69a2a865279c2aea5bfa6b82ef628796586ddc7193d662fc6d5284f720dcf4831c1799d481a6fcf33094083f327f5d71e3dba93c4c2163ea8eb673563afc70cbc25a023d92fcfcff5cf33042b099afc7634ba70bd2fdb78f74271c00395e6316e64d5541adc833bca80d363ab7848d9d64db037b60b1893be7acf111a31434211ce9823478064ca0ee02a9314ad81bef257bd5e8d97172b298762204a51abefcbabe099f37bd3cd48669b4febacd3b7abffc2e8f6dc659df2ae2e62128d59552f65ea27c4f76cc36400edd85215ab4ec00bdb6f392b84d8c4d476f4dbcb5bced49c1a92c8de54b767561b2d1130645ee4f9f55d97747871f674505636871993345edc1ad87a4aa29b5f3fac14276dea8642a771f7abf8e58c89cdebf9fabd6bc2716bfcc3f508eec161dfd53f1674953c5491cb1abd3bad1d870ca72f60f5267207cb1c12ac7eac40cae6776b11a76a06fc4571cc7b938ebdc5204eafe52ae94ec0f48c5e2a2088ee04c4cd414c91dea40fd33a5bfb66e37c38f929830bed89840f091cedb7733868f549ca4a5b849cfdd286b1e559031cb939347ceb5d599cf10dec35e042c956bf1ae8a1cd22e68ed07fbe0dbfb34ac155a1006329b9dcb68ac23d04ad2ade00c8511341d0fd3934b7d8af0e5a02f49e9086aba34ef9220d6002d2d49b821a11c4ec790ef564e7b45961f9f1758c703fefe81b7ecf9084ff1c465a454c363c5338c9fd53a09a329013c1c9d4e5440c7ac3f0b74eb8fa2522e46649f3caacd93abd372e1306467db0015994980197476d86b261a76c519cf67352ae6d708ebd387603e1e6be8b22ed9ac56731b8f7cb837eda9e3fc0b2be5d05318298ea8f2a384d637d4f45d85e906f2c870dc9c45ae65e165337db1094c29f1dad1c54cacb99edbdbbec5179e30bc73ea2cede04f51c23cf2bad79126841c19df560e0b528f8eced3d6085855ad0d0ab7daa65bbbbc09930dbeb36b45455f3a5d3d9ea43ef15412805acdb7192b2033afaf310c5bd9d7b97622e72133f4b0250fcf68ebecc037fba19c050cfb715641d605f6bb3ae4399270dc460a154b25f39faec6c495ab8a68a38062aa2482ffede2e5122b2d42f02662c10e1f9f061f6fee98dcb5108707bb1c80a646349e62dbfd5821e4f849d0f342c0ade6215514d1ceb5c77564eafc3a2e073d7d1b081f068b046e2e800b3acc75a186ed71f574b76df3fac039966e2bd87b3662d9d449faca37a44e275b6c11b4f774902432102db284b03d2b21c483eeb934e4fa6d01731e9c7d98f78e821fa65eb4c469f5613925ab57a5db135e6094796be207c6f3e070ec2db7343e6"], 0x1020) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r9, @ANYBLOB="140006"], 0x48}}, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f00000001c0)={0xff}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000000440), 0x1) bind$packet(r7, &(0x7f0000000080)={0x11, 0xd, r9, 0x1, 0x4, 0x6, @local}, 0x14) (async) sendmmsg$alg(r3, &(0x7f00000001c0), 0x0, 0x0) 4.095910903s ago: executing program 1 (id=2155): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xf42, 0x8000000000000001, 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ff9, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000287b0587e46f0000000000000000000000000000000000000000000000000000000000000000741162fa9f8e1677948d9726000000000000000000000000000000000016000000000c00150000000000010400000c000800080008000000e000"/161], 0xd8}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @initdev, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=@report={0x130, 0x20, 0x400, 0x70bd2a, 0x25dfdbfc, {0x18, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0x87}}, [@sa={0xe4, 0x6, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x3, 0x4e22, 0x0, 0x2, 0xa0, 0x80, 0x88, r3, r4}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x33}, @in=@loopback, {0x7fffffff, 0x81, 0x0, 0x5, 0x401, 0xfffffffffffffffc, 0x7, 0x51e7bc63}, {0xffffffffffffff80, 0x0, 0x9, 0x80000000}, {0x2, 0x5}, 0x70bd2c, 0x3504, 0x2, 0xa, 0x8, 0xa0}}]}, 0x130}}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) 3.922081716s ago: executing program 2 (id=2156): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x14, 0x4) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x7ff, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x8, r3, 0x6}, 0xc) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}, 0x1c) (async) listen(r1, 0xb) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x3, 0x0, 0x0, 0x9, 0x9}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x1, 0x4, 0x351464da98d67735, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'erspan0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="2a0ff75342e26e109ba4ced5e3280a9f3e840197016562645664c9e4f3b63b259c4620e32fa4c288fadaf3f15024833ef078e671ffaecfda129036c84a97acde8921a4a83bf309984c2e5292483b24f69c057181ef079a55ed943e689621c2985599f4c01eb2ec7f45ba4d7fd36682c38caf644520b4efba6217ec12adb239f85e34dfa27a8e53bfcbe2b99b317eeb84863fb8721e8cd1d135695a8fed61ef97f57f8be70c67c6fed49b189f7946037061d9d0e6fe851e736a735ce23dd8a6858e6fc168bddd1df15a", 0xc9}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)="ab05", 0x2}, {&(0x7f0000000500)="c825f5e75b69fc92827991ff13cb8713a8ee7487a8ef83ce2d3ef7d00170bc6bbc5cf3a719f45a", 0x27}, {&(0x7f0000000540)="2ff25062906e9bb6c6fe6e185f71149fafa045e281b1e110d035aa086ad855098b7691b63dea1123992a9d3e356bfd6ad79b9c6dc599a88d022b446572d1b6dfc3fd791c39dbd533d0bbeda913941ff388fe93d5f275dd966a9ec96452d4f8e53a2b39356466f475ee1bbd4733a4638aba0986e0da08d74b7d512d591e9d08815da1a331cf65f29e2e3355a851f9f20fb0bae94711205cac840df74ccf7a5cb17b91998ebcc2dcce2acd0a1399a73de949d88a89d2f79d5ea32eeb56a74d8a60670fc3efd3c5da056d9a6de32366f5bb452598b79e", 0xd5}, {&(0x7f0000000640)="869d286a71fe1def2fe645d4c51d603e1ebe08708d90e87a7714f7fabaa10eed061f791243cec5073c8b6419701631ca309ba8b536e1829219c6f96d43b6752c5e9c4a916f9327ec3e5d1fbbaa23e08923d0e90df17dbc1114fb52af07a24710b636188f69592c3fb14d540d4761124407e85b1c33ffcd0d7505e0830f372b9f5ee0b340ebf502308e2dcc68b91a7f7cd5ee9f6166b7365d3c9ef41d291ba21912343ba077", 0xa5}], 0x4, &(0x7f0000000780)=[@ip_retopts={{0x120, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0xbd, 0x0}}, {@multicast1, 0x7f}, {@broadcast, 0x10000}, {@broadcast, 0x8}]}, @timestamp={0x44, 0x28, 0xa3, 0x0, 0x6, [0x5, 0x7fff, 0x5, 0x9, 0x7, 0x7, 0x200000, 0x4a9a, 0x4]}, @timestamp_addr={0x44, 0x34, 0x5, 0x1, 0x9, [{@multicast2}, {@remote, 0xd}, {@empty, 0x80000000}, {@multicast2, 0x5}, {@remote, 0xffffffff}, {@multicast1, 0x1ff}]}, @timestamp_prespec={0x44, 0x34, 0x15, 0x3, 0x1, [{@multicast2, 0x16612d85}, {@broadcast, 0x9}, {@empty, 0x5}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010100, 0x8}]}, @cipso={0x86, 0x28, 0x0, [{0x7, 0x2}, {0x2, 0xd, "083b3f3b43af72710c7442"}, {0x5, 0x11, "8c8f41815aa9700fac30e00d0a1048"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x64, 0x1, 0x4, [{@private=0xa010100, 0xedf}, {@multicast2, 0x800000}, {@multicast1, 0x81}]}, @lsrr={0x83, 0xb, 0x7d, [@dev={0xac, 0x14, 0x14, 0x3f}, @broadcast]}, @ssrr={0x89, 0xb, 0x39, [@loopback, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @local}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x94, 0x8, "96ad9b295448"}, @lsrr={0x83, 0x23, 0xf8, [@dev={0xac, 0x14, 0x14, 0xa}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @multicast1, @empty, @multicast2]}, @noop, @end, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x86, [@empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @end, @end, @cipso={0x86, 0x21, 0x1, [{0xe, 0xb, "d40ff090bb71fa234d"}, {0x7, 0x10, "d5bc267d5dd44f4bf5715b3fdccb"}]}, @lsrr={0x83, 0x7, 0xb8, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @cipso={0x86, 0x2a, 0x3, [{0x0, 0x12, "33c7b855576c1871eab99d9173548884"}, {0x5, 0x12, "0a3266a7cb8283ced4825be4c32d15fe"}]}, @timestamp_prespec={0x44, 0x4c, 0x13, 0x3, 0x5, [{@private=0xa010100, 0x7110}, {@multicast2, 0x10000}, {@local, 0x1000}, {@rand_addr=0x64010101, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x90c6}, {@broadcast, 0xae2a}, {@multicast1}, {@local, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x71, 0x1, 0xf, [{@remote, 0x7ff}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x298}}], 0x2, 0x8055) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24000804) (rerun: 64) socket$inet(0x2, 0x80000, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'pimreg0\x00', 0x0}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001d40)={r7, &(0x7f0000000c80)="2865308fa3fa077d767b067a3ec18ae3f82dbd00226246f33a2cd084c654830f45cc63390b6d1696e031f29d8cc5dc680c883ae84d0d7f4fe7af65ef12c71e4f4c7b237d0023bac30124996e2d181c8e2da5e267fe28ad611d1d5caaa3472551c856c50db2ee117e1db3f6da481aeacf3a9682ef761c668c9187402f1462315846b5df23", &(0x7f0000000d40)=""/4096}, 0x20) (async) r8 = socket(0x1f, 0x80000, 0xd) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000001d80)={0x0, 0x6, [0x2, 0x1da, 0x0, 0x5, 0x1, 0x2]}) recvfrom$inet6(r2, &(0x7f0000001dc0)=""/78, 0x4e, 0x20, &(0x7f0000001e40)={0xa, 0x4e21, 0x0, @mcast1, 0x2}, 0x1c) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r9 = socket$inet(0x2, 0x5, 0xb1) getsockopt$inet_int(r9, 0x0, 0x21, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000001f00)=0x13, 0x4) (async) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000001f80)={"8d420e8327b040922cafb6ea2445a7ed", 0x0, 0x0, {0x9}, {0xc, 0x9}, 0x5, [0x9, 0x9, 0x7ff, 0x0, 0xfff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x8, 0x5, 0x0, 0x8000000000000001, 0x800, 0xe6]}) 3.691521329s ago: executing program 2 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001340)=[r3], &(0x7f0000001380)=[{0x5, 0x5, 0x5, 0x6}, {0x0, 0x4, 0x0, 0x4}, {0x4, 0x5, 0xa, 0xc}, {0x3, 0x1, 0xa, 0x4}], 0x10, 0x8, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6, '\x00', r2, r3, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001600)=0x0, &(0x7f0000001640)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000001740)={'sit0\x00', &(0x7f0000001680)={'syztnl2\x00', r2, 0x10, 0x80, 0x0, 0x1, {{0x21, 0x4, 0x0, 0x8, 0x84, 0x67, 0x0, 0xc9, 0x2f, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0xf, 0xc6, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @remote]}, @ssrr={0x89, 0x7, 0x1d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0xb, 0x2, [{0x1, 0x5, "0b7ab5"}]}, @end, @timestamp_prespec={0x44, 0x4c, 0xfe, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x63}, {@broadcast}, {@local, 0xffffffff}, {@local}, {@rand_addr, 0x10000}, {@multicast1, 0xa845}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x8001}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xfe}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001840)={'gre0\x00', &(0x7f0000001780)={'gretap0\x00', r2, 0x10, 0x10, 0x8, 0x2, {{0x1b, 0x4, 0x2, 0x1d, 0x6c, 0x67, 0x0, 0x81, 0x29, 0x0, @broadcast, @private=0xa010102, {[@end, @lsrr={0x83, 0x7, 0x47, [@private=0xa010102]}, @noop, @timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x0, [{@rand_addr=0x64010100, 0x9}, {@multicast1, 0x6}, {@loopback, 0x6}, {@local, 0x3}, {@broadcast, 0x80000001}]}, @lsrr={0x83, 0xf, 0xc9, [@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback]}, @rr={0x7, 0x13, 0x52, [@remote, @loopback, @local, @rand_addr=0x64010100]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001880)={@initdev, @multicast2, 0x0}, &(0x7f00000018c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001d80)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001900)={0x404, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8e4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x716}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a4d7058}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x404}}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001dc0)={'wlan0\x00'}) r11 = accept4(r0, &(0x7f0000001e00)=@qipcrtr, &(0x7f0000001e80)=0x80, 0xc0800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001ec0)={0x0, 0x34, "497e49842b1f14b06b895601779faab6bba9d34da5250063bff3ed167286aabf9c88806301456989ee38fbd189fc9057cad9def6"}, &(0x7f0000001f00)=0x3c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000001f40)={r12, 0x2300000}, 0x8) listen(r11, 0x9a) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) unshare(0x800) recvfrom$rose(r11, &(0x7f0000002000)=""/4096, 0x1000, 0x103, &(0x7f0000003000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000003080), r11) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r11, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x34, r13, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003480)={r4, 0xe0, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000031c0)=[0x0], &(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000003240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000032c0), &(0x7f0000003300), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000003340)}}, 0x10) socket(0x18, 0xc, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000034c0)={0x0, r11, 0x1, 0x8, 0x100000001, 0x5}) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000003500)={r12, 0x9, 0x2, 0x401, 0xffc0, 0x3, 0x776, 0x7fffffff, {r12, @in6={{0xa, 0x4e23, 0x180, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}}, 0x5, 0x2, 0x97bc, 0x4, 0x5}}, &(0x7f00000035c0)=0xb0) writev(r0, &(0x7f0000004780)=[{&(0x7f0000003600)="b5092b3aa3461b20d8a3464b64c59c0cd737fe16d78b18f8eaf8e479ede8f636baf6c6bd9c14d862b67144a53db2be73d86a8402523350c3f3447a743c7d2506d4b49aa65b3338eb9d981956054484240bd599316ccfb4ac26a17b3462c0f712ed6d5abb7b8be02a27cd0daec137b1febb3ade0fb1c57c4c9ceeb4f2e8a7ce217dc4bc7b8b3544e9eb9aebb5a68fa9b4dedbe82b2a4fa40da4f6bdbcd2327ab3215b46e27b02809686ffba3741f13d81553e7af461a208de0bdd5ac2a4b276829a2bd87476e4e6a9cac63a7b6ffd38b313f578a6cfa85fcd3b9f9dc0acfe30f63a96c2d886b8b656b3cc39c80e849091bb333eb946de2e5d90", 0xf9}, {&(0x7f0000003700)="d7ea06e1d29536dea7e897a8a4932c9f2ff69372", 0x14}, {&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="1092e44ff53ae6a5f108ea464ed467535b9f922f2102c1ef17075757dc7338fcb74aec475e5bc0b178511a320702a3d9f4c79895", 0x34}], 0x4) 3.519627284s ago: executing program 3 (id=2158): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7a}]}, 0x10) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311e78ea6dce2f7034f7998430f21880804822ef849", 0x2a}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="e8b46c", 0x3}], 0x1}}], 0x2, 0x8008801) (async) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="18843af2b3d320ccbb90335e6e507de19ffda267adb59232316b84199adaeadf35e9c9fb7b6d3ab4", 0x28}], 0x1}}], 0x1, 0x80) 3.508460394s ago: executing program 2 (id=2159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004f40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004f40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) (async) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000000c0)={r14}, &(0x7f0000000100)=0x8) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381", 0xb}, {&(0x7f00000005c0)="c2c10b270d21", 0x6}], 0x2) (async) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381", 0xb}, {&(0x7f00000005c0)="c2c10b270d21", 0x6}], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 3.374396507s ago: executing program 3 (id=2160): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_REORDER={0xc}, @TCA_NETEM_CORR={0x10}]}}}]}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r5) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000007"], 0xd) 3.214453374s ago: executing program 3 (id=2161): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xfffffffffffffcc6}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7fff}, {0xffffffff, 0x2, 0x4, 0x4, 0x4, 0x1, 0x2}}}]}]}]}}]}, 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 3.143059483s ago: executing program 1 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) (fail_nth: 28) 2.622099311s ago: executing program 1 (id=2163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x0, 0x28, 0x67, 0x0, 0xe5, 0x21, 0x0, @remote, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x83}, @noop]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x5, "3b3b1c", 0x2, "45d179"}}}}}}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1}}], 0x1, 0x2143, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000408010800000000f5ff0000000000000600024000000000050003002f000000"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0xe72, 0x10, 0x0, &(0x7f0000000200)="63eced8e46dc3fad77b7b3f7b986edf7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2.244897665s ago: executing program 4 (id=1506): r0 = socket(0x1a, 0x4, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wg1\x00', 0x1d39}) (async) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120301}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5c}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xa1) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd, 0x6, "3d0271a9a87071dd21"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4092cd81}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x61, 0x6, "727df704c378c69fc0ba5e0d896f8a76f852f51e5a3570da2091bf357a4fb0c47f4e1117e63b0f6d7c6e18a982070c8004cfabff75417f8a8c14b51ecbc940d2bf672d0471567fd71fdc0cc0a71b9bf76cccd7d82d2e3a995625e7f25a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "f2f99c9755e99a780388b628828999950db301cadde108bad76ff4a355f1192ffc4db49ce0391475e314cc262cbc4c5c66a5d45aade8b633f553f32c595cad04be89abaab9e0fd10157efa48a13453937ee06f5c3f1eeef72c67b187df3f011a828721f4743e72dafed648069af65261971a0be16cc92217f2b305df0a0a5e818075fd4f9c321307593a8c28c08f28f4afcbdbacf7b3f7eaade286203686a49175dc92604b0fa1d4f111ad7d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4048054) (async) connect$unix(r0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = accept4$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000800)=0x1c, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000940)={{&(0x7f0000000840)=""/174, 0xae}, &(0x7f0000000900), 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000980)={0x0, 0xb9c, 0x10}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={r6, 0x800}, &(0x7f0000000a40)=0x8) (async) sendto$inet(r0, &(0x7f0000000a80)="10eac77d904de1e7eb23983fac3dc34c9ce48db3e2a28adbcf9934b621ef29f8248d4dffd7c55677c15552e7ae72218efe52b59830d536e24ba210648481d656d57baa53137a6502e249be971fb8d8d15756f4e57f453ff4b3742f1990de785c945804be11f87d8dceca3548a714fb314dd6f8256209fa20be8b21043e4dff4922c50435e15788f4893bc0a0dea3a04e70a75bfd3308e22ec350fea7bb3555362f3490f0732c733d84987a7a13fbf1d2b35fab320f2c40e69182b5f759bff0fde1ec7cfbddb76af645626a80d442ef9548", 0xd1, 0x8000, &(0x7f0000000b80)={0x2, 0x4e21, @broadcast}, 0x10) (async) r7 = socket(0x22, 0x0, 0x444) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x1, 0x8, 0x2d, 0x401, 0x7]}, &(0x7f0000000c40)=0x54) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000c80)={0x200, 0xa7e, 0xe12c, 0x7a}, 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/100, 0x64}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/30, 0x1e}, {&(0x7f0000001e80)=""/219, 0xdb}], 0x6) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000002000)=@hopopts={0x11, 0xb, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x9, 0x18, "93df687e3d52f0deb2c5fab6b3f286a4c0b47cb35e13b9f5"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000001}]}, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x7d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ec}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1203}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) r10 = openat$cgroup_procs(r8, &(0x7f0000002200)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 499.856933ms ago: executing program 1 (id=2164): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ff9, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) 494.017683ms ago: executing program 2 (id=2165): r0 = socket$inet(0x2, 0x5, 0x6) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in=@loopback}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x216f}]}}]}, 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x8, 0x2, 0x7, 0xfffffffffffffffe, 0x2, 0x3, 0x2, 0x4, 0xdf, 0x8, 0x0, 0x2, 0x3, 0x8, 0x6]}, &(0x7f0000000040)=0x100) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x8, 0x4) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xda00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) sendmmsg$unix(r6, &(0x7f0000003440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x8001, 0x8, 0x5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x170, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}}, @common=@dst={{0x48}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 323.536019ms ago: executing program 3 (id=2166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x48100}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 162.463696ms ago: executing program 2 (id=2167): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 108.916868ms ago: executing program 2 (id=2168): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) r1 = socket(0x2a, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010f31eff000000fa0400000000000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0800040000000000"], 0x48}}, 0x45001) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0xfff, 0x7}, 0x4) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0xfffffffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="28d9ed0700"/14], 0x14}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b2d0806a6bd7c4958cb680b37d335dd5272f740375ed08a562af5745e17b8c119418f01000000d6e74703c48f93b8fa0ab97a7427bd1a652b2f0565053acdb4ba1a0fb31da0cbf200406ff3264897dc1b23a3b2", 0x75}], 0x100000a5}, 0x20004001) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)}, 0x0) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000100)=0xfe, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@delchain={0x4dc, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x7, 0x7}, {0xd, 0xc}, {0x10, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x49c, 0x2, [@TCA_CGROUP_POLICE={0x498, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x41cc, 0x0, 0x2, 0x4f, 0x3, 0x8001, 0x4, 0xfff, 0x3, 0x1, 0x9189, 0x401, 0x8, 0xfffffffb, 0x9, 0x6, 0x7620, 0x7, 0x7, 0x1000, 0x8, 0x4, 0x0, 0x81, 0x0, 0x20, 0x9, 0x7fffffff, 0x4, 0x4, 0x2, 0x0, 0x5, 0x40, 0x7, 0x5, 0x1, 0x9, 0x2, 0x7, 0xfffffffc, 0x401, 0x5, 0x0, 0x3, 0xffff, 0x0, 0x400, 0x5, 0x0, 0x4, 0x5, 0x28, 0x5, 0x7, 0x1, 0xa, 0x40, 0x6, 0x6, 0x1, 0x4, 0x1, 0xffffffff, 0xf3b, 0x9, 0xdac6, 0x8, 0x9, 0x5, 0x6, 0x5, 0xfe, 0x2, 0x63bd, 0x0, 0x36, 0x40000, 0x7, 0xbc1, 0x4, 0x0, 0x0, 0x7, 0x1, 0x8, 0x8, 0x9, 0x5, 0x4, 0x40, 0x7a723d1f, 0x5, 0x9, 0x2, 0x6, 0xccb, 0xfffffff9, 0x7, 0x9, 0x9, 0x2, 0x9, 0xf5e, 0x4, 0x1, 0xffffff9c, 0x0, 0x800, 0x9, 0x1000, 0x10001, 0x3, 0x9, 0x6, 0x630, 0x6, 0x7, 0x80, 0x781, 0xa, 0x9, 0x1, 0x6, 0x9, 0x1, 0x5, 0x8, 0x469f, 0x9, 0x0, 0x7, 0x8, 0x7, 0x55f, 0x4, 0x1000, 0x6, 0x6, 0x80000000, 0x400, 0xff, 0x0, 0x0, 0x5, 0x7fff, 0xc6e, 0x7, 0x6, 0x7, 0x0, 0x80000000, 0x313a, 0x6, 0x80000001, 0x80000001, 0x9, 0x98, 0x80000001, 0x0, 0x6, 0x39, 0x9, 0xf0, 0x7, 0xf, 0xb79, 0x8000, 0xffffffff, 0x878, 0x5, 0x6, 0x6, 0x8, 0x400, 0x7, 0xb84, 0x8, 0x2, 0x6, 0x38e, 0x5, 0x6, 0x8, 0xb80e, 0x8, 0xe49d, 0x10000, 0x5, 0x0, 0x7, 0x9, 0xa, 0x5, 0x1, 0x4, 0xff, 0x10000, 0x5, 0x6, 0x3ce6, 0xa, 0x8001, 0x0, 0x8, 0x8, 0x4, 0x0, 0x200, 0x6, 0x6, 0x0, 0x7, 0x0, 0x6, 0x10001, 0x400, 0x10001, 0x6, 0x200, 0x8, 0xb0f, 0x7, 0x7, 0x2, 0x6, 0x400, 0x3, 0x8b, 0x100, 0x400, 0x5, 0x2, 0x9, 0xac7b, 0x392e, 0xf34cefb2, 0x1, 0xffffffff, 0x4, 0xfffffff7, 0x8, 0x1000, 0x10000, 0x1, 0x67, 0x6, 0x1, 0x2, 0x7, 0x4, 0x7fffffff, 0x7034, 0x8, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x0, 0x5, 0x6, {0x3, 0x1, 0x1, 0x4, 0xa54, 0x471}, {0x23, 0x2, 0x72, 0x180, 0x5461, 0x40}, 0x600000, 0xe, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0x10001, 0x0, 0x5, {0xf9, 0x0, 0x3, 0x2, 0x5, 0x8001}, {0x8, 0x1, 0x1, 0xa, 0x6ff}, 0x9, 0x7, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x24040080}, 0x20040880) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=2169): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002025252700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x100010, r2, 0xe43a5000) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90224fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071101b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ppoll(&(0x7f0000000300)=[{r6, 0x8102}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000100)=0x1) close(r8) (async) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f00000002c0)) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="340002001800dd8d00000000000000000200000000000006000000143b2c7c1e2c2375b957a160826d4e000e0015000200040010438c42abaac004663f09096d485f5b0f3903eeb9c9fa548b680f51ee04"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): [T11228] bridge_slave_1: entered allmulticast mode [ 246.019555][T11228] bridge_slave_1: entered promiscuous mode [ 246.156097][T11228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.203621][T11228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.351264][T11228] team0: Port device team_slave_0 added [ 246.361998][ T5246] Bluetooth: hci2: command tx timeout [ 246.369404][T11228] team0: Port device team_slave_1 added [ 246.720567][T11228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.738900][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.778872][T11228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.792969][T11228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.800526][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.834951][T11228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.851278][T11147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.884854][ T11] hsr_slave_0: left promiscuous mode [ 246.901670][ T11] hsr_slave_1: left promiscuous mode [ 246.920086][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.942275][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.962547][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.970032][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.040385][ T11] veth1_macvtap: left promiscuous mode [ 247.051236][ T11] veth0_macvtap: left promiscuous mode [ 247.059576][ T11] veth1_vlan: left promiscuous mode [ 247.069968][ T11] veth0_vlan: left promiscuous mode [ 247.161862][ T5246] Bluetooth: hci0: command tx timeout [ 247.176824][T11369] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.1796'. [ 247.341360][T11374] netlink: 'syz.3.1798': attribute type 4 has an invalid length. [ 247.351431][T11374] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1798'. [ 247.825386][ T11] team0 (unregistering): Port device team_slave_1 removed [ 247.878408][ T11] team0 (unregistering): Port device team_slave_0 removed [ 248.451993][ T5246] Bluetooth: hci2: command tx timeout [ 248.476721][T11147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.523848][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 248.561924][T11147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.592883][T11147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.688554][T11228] hsr_slave_0: entered promiscuous mode [ 248.718241][T11228] hsr_slave_1: entered promiscuous mode [ 248.739357][T11228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.761999][T11228] Cannot create hsr debugfs directory [ 249.371414][T11410] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.1807'. [ 249.446345][T11147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.491161][T11418] netlink: 'syz.1.1809': attribute type 3 has an invalid length. [ 249.530824][T11418] netlink: 'syz.1.1809': attribute type 3 has an invalid length. [ 249.563924][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 249.594008][T11418] bond5: entered promiscuous mode [ 249.614515][T11147] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.638976][T11418] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.662656][T11418] bond5: (slave lo): Enslaving as an active interface with an up link [ 249.678171][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.685466][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.744935][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.752132][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.939099][T11228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.954899][T11228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.972644][T11228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.985541][T11228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.145044][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.205040][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.229098][T11228] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.260739][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.268093][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.310725][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.318060][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.447040][T11228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.523603][ T5246] Bluetooth: hci2: command tx timeout [ 250.821270][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 250.910617][T11147] veth0_vlan: entered promiscuous mode [ 250.949393][T11228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.999666][T11147] veth1_vlan: entered promiscuous mode [ 251.147089][T11147] veth0_macvtap: entered promiscuous mode [ 251.191237][T11147] veth1_macvtap: entered promiscuous mode [ 251.269727][T11228] veth0_vlan: entered promiscuous mode [ 251.300457][T11228] veth1_vlan: entered promiscuous mode [ 251.396605][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.428469][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.461601][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.477774][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.492160][T11147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.539918][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.562021][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.578324][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.589292][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.615207][T11147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.767252][T11147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.776842][T11147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.786381][T11147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.795518][T11147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.828321][T11228] veth0_macvtap: entered promiscuous mode [ 251.914925][T11228] veth1_macvtap: entered promiscuous mode [ 252.054675][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.081717][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.100503][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.112299][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.122510][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.133132][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.151477][T11228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.242464][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.254746][T11485] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 252.257941][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.263463][T11485] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 252.288364][T11483] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 252.291708][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.302888][T11483] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 252.322541][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.336048][T11228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.346671][T11228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.358148][T11228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.385846][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.386581][T11228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.407610][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.418015][T11228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.427128][T11228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.447576][T11228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.506845][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.515968][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.674609][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.697155][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.710490][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1823'. [ 252.810245][T11494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.814978][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.844415][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.298712][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1826'. [ 253.546880][T11511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.948356][T11534] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1835'. [ 254.120064][ T7725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.993529][ T7725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.140185][ T7725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.181486][T11564] sctp: [Deprecated]: syz.2.1840 (pid 11564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.181486][T11564] Use struct sctp_sack_info instead [ 255.366018][ T7725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.484928][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.499738][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.509530][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.524959][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.535475][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.548288][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.671977][T11572] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1842'. [ 255.728698][ T7725] bridge_slave_1: left allmulticast mode [ 255.737647][ T7725] bridge_slave_1: left promiscuous mode [ 255.747868][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.760511][ T7725] bridge_slave_0: left allmulticast mode [ 255.766806][ T7725] bridge_slave_0: left promiscuous mode [ 255.773583][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.048049][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.060151][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.431848][ T7725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.456508][ T7725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.470148][ T7725] bond0 (unregistering): Released all slaves [ 256.751947][T11597] sctp: [Deprecated]: syz.3.1848 (pid 11597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.751947][T11597] Use struct sctp_sack_info instead [ 256.849637][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.864990][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.896730][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.907958][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.938304][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.950948][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.215802][T11611] tipc: Enabling of bearer rejected, media not registered [ 257.470706][T11621] bridge: RTM_NEWNEIGH with invalid ether address [ 257.480578][T11623] Bluetooth: MGMT ver 1.23 [ 257.554512][ T7725] hsr_slave_0: left promiscuous mode [ 257.579882][ T7725] hsr_slave_1: left promiscuous mode [ 257.603411][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.610893][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.637332][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.651806][ T5245] Bluetooth: hci0: command tx timeout [ 257.658545][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.710119][ T7725] veth1_macvtap: left promiscuous mode [ 257.720740][ T7725] veth0_macvtap: left promiscuous mode [ 257.727298][ T7725] veth1_vlan: left promiscuous mode [ 257.733039][ T7725] veth0_vlan: left promiscuous mode [ 257.857406][T11636] ipt_rpfilter: unknown options [ 258.408935][ T7725] team0 (unregistering): Port device team_slave_1 removed [ 258.462323][ T7725] team0 (unregistering): Port device team_slave_0 removed [ 259.002628][ T5245] Bluetooth: hci2: command tx timeout [ 259.264332][T11651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.288525][T11650] netlink: set zone limit has 4 unknown bytes [ 259.311822][T11573] chnl_net:caif_netlink_parms(): no params data found [ 259.420361][T11654] netlink: 'syz.3.1864': attribute type 4 has an invalid length. [ 259.430157][T11654] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1864'. [ 259.722377][ T5245] Bluetooth: hci0: command 0x041b tx timeout [ 259.740511][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.802250][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.832634][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.862615][T11573] bridge_slave_0: entered allmulticast mode [ 259.880178][T11573] bridge_slave_0: entered promiscuous mode [ 259.951008][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.959006][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.966352][T11573] bridge_slave_1: entered allmulticast mode [ 259.974709][T11573] bridge_slave_1: entered promiscuous mode [ 260.095844][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.118927][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.412150][ T7725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.459870][T11573] team0: Port device team_slave_0 added [ 260.468791][T11573] team0: Port device team_slave_1 added [ 260.480209][T11601] chnl_net:caif_netlink_parms(): no params data found [ 260.493380][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 260.507440][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1877'. [ 260.516781][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1877'. [ 260.706475][ T7725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.733609][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.740636][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.773823][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.774034][T11724] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1881'. [ 260.790794][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.810482][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.842931][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.861362][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 260.944379][ T7725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.082005][ T5245] Bluetooth: hci2: command tx timeout [ 261.146198][ T7725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.271848][T11743] sctp: [Deprecated]: syz.3.1885 (pid 11743) Use of int in max_burst socket option deprecated. [ 261.271848][T11743] Use struct sctp_assoc_value instead [ 261.290972][T11741] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.334558][T11573] hsr_slave_0: entered promiscuous mode [ 261.344590][T11573] hsr_slave_1: entered promiscuous mode [ 261.363312][T11601] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.374096][T11601] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.386031][T11601] bridge_slave_0: entered allmulticast mode [ 261.396655][T11749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.402675][T11601] bridge_slave_0: entered promiscuous mode [ 261.424377][T11601] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.442124][T11601] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.461929][T11601] bridge_slave_1: entered allmulticast mode [ 261.492513][T11601] bridge_slave_1: entered promiscuous mode [ 261.605576][T11758] FAULT_INJECTION: forcing a failure. [ 261.605576][T11758] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 261.619214][T11758] CPU: 1 UID: 0 PID: 11758 Comm: syz.1.1888 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 261.629759][T11758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 261.639856][T11758] Call Trace: [ 261.643144][T11758] [ 261.646084][T11758] dump_stack_lvl+0x241/0x360 [ 261.650790][T11758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.656094][T11758] ? __pfx__printk+0x10/0x10 [ 261.660705][T11758] ? __pfx_lock_release+0x10/0x10 [ 261.665755][T11758] should_fail_ex+0x3b0/0x4e0 [ 261.670456][T11758] _copy_from_iter+0x1f6/0x1960 [ 261.675353][T11758] ? __virt_addr_valid+0x183/0x530 [ 261.680483][T11758] ? __pfx_lock_release+0x10/0x10 [ 261.685535][T11758] ? __pfx__copy_from_iter+0x10/0x10 [ 261.690860][T11758] ? __virt_addr_valid+0x183/0x530 [ 261.696157][T11758] ? __virt_addr_valid+0x183/0x530 [ 261.701278][T11758] ? __virt_addr_valid+0x45f/0x530 [ 261.706424][T11758] ? __check_object_size+0x49c/0x900 [ 261.711731][T11758] netlink_sendmsg+0x73d/0xcb0 [ 261.716526][T11758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.721840][T11758] ? __import_iovec+0x536/0x820 [ 261.726716][T11758] ? aa_sock_msg_perm+0x91/0x160 [ 261.731678][T11758] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 261.736993][T11758] ? security_socket_sendmsg+0x87/0xb0 [ 261.742473][T11758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.747780][T11758] __sock_sendmsg+0x221/0x270 [ 261.752481][T11758] ____sys_sendmsg+0x525/0x7d0 [ 261.757265][T11758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.762578][T11758] __sys_sendmsg+0x2b0/0x3a0 [ 261.767197][T11758] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.772320][T11758] ? vfs_write+0x7c4/0xc90 [ 261.776798][T11758] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.783148][T11758] ? do_syscall_64+0x100/0x230 [ 261.787934][T11758] ? do_syscall_64+0xb6/0x230 [ 261.792635][T11758] do_syscall_64+0xf3/0x230 [ 261.797160][T11758] ? clear_bhb_loop+0x35/0x90 [ 261.801856][T11758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.807767][T11758] RIP: 0033:0x7f498917def9 [ 261.812196][T11758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.831831][T11758] RSP: 002b:00007f4989eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.840280][T11758] RAX: ffffffffffffffda RBX: 00007f4989335f80 RCX: 00007f498917def9 [ 261.848267][T11758] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 261.856251][T11758] RBP: 00007f4989eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.864232][T11758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.872219][T11758] R13: 0000000000000000 R14: 00007f4989335f80 R15: 00007ffd799df7f8 [ 261.880223][T11758] [ 261.893283][ T5245] Bluetooth: hci0: command 0x041b tx timeout [ 261.899493][ T5246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 261.943679][T11759] netlink: 'syz.2.1887': attribute type 12 has an invalid length. [ 261.953182][T11760] netlink: 'syz.2.1887': attribute type 12 has an invalid length. [ 261.972864][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.999990][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.213927][T11601] team0: Port device team_slave_0 added [ 262.265273][T11601] team0: Port device team_slave_1 added [ 262.345128][ T7725] bridge_slave_1: left allmulticast mode [ 262.350852][ T7725] bridge_slave_1: left promiscuous mode [ 262.363205][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.376306][ T7725] bridge_slave_0: left allmulticast mode [ 262.382640][ T7725] bridge_slave_0: left promiscuous mode [ 262.388809][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.658142][T11793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1894'. [ 262.977348][ T7725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.989594][ T7725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.002481][ T7725] bond0 (unregistering): Released all slaves [ 263.055304][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.093208][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.129351][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.172035][ T5246] Bluetooth: hci2: command tx timeout [ 263.199789][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.221654][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.251763][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.297564][T11799] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1896'. [ 263.494008][T11805] netlink: set zone limit has 4 unknown bytes [ 263.560270][T11808] FAULT_INJECTION: forcing a failure. [ 263.560270][T11808] name failslab, interval 1, probability 0, space 0, times 0 [ 263.579306][T11808] CPU: 0 UID: 0 PID: 11808 Comm: syz.2.1899 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 263.589776][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 263.599907][T11808] Call Trace: [ 263.603214][T11808] [ 263.606182][T11808] dump_stack_lvl+0x241/0x360 [ 263.610904][T11808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.616161][T11808] ? __pfx__printk+0x10/0x10 [ 263.620776][T11808] ? ref_tracker_alloc+0x332/0x490 [ 263.625945][T11808] should_fail_ex+0x3b0/0x4e0 [ 263.630654][T11808] ? skb_clone+0x20c/0x390 [ 263.635085][T11808] should_failslab+0xac/0x100 [ 263.639802][T11808] ? skb_clone+0x20c/0x390 [ 263.644351][T11808] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 263.649763][T11808] skb_clone+0x20c/0x390 [ 263.654025][T11808] __netlink_deliver_tap+0x3cc/0x7c0 [ 263.659373][T11808] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.664616][T11808] netlink_deliver_tap+0x19d/0x1b0 [ 263.669770][T11808] netlink_unicast+0x7c4/0x990 [ 263.674568][T11808] ? __pfx_netlink_unicast+0x10/0x10 [ 263.679871][T11808] ? __virt_addr_valid+0x183/0x530 [ 263.685009][T11808] ? __check_object_size+0x49c/0x900 [ 263.690353][T11808] ? bpf_lsm_netlink_send+0x9/0x10 [ 263.695535][T11808] netlink_sendmsg+0x8e4/0xcb0 [ 263.700363][T11808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.705693][T11808] ? __import_iovec+0x536/0x820 [ 263.710691][T11808] ? aa_sock_msg_perm+0x91/0x160 [ 263.715650][T11808] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 263.720976][T11808] ? security_socket_sendmsg+0x87/0xb0 [ 263.726574][T11808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.731919][T11808] __sock_sendmsg+0x221/0x270 [ 263.736643][T11808] ____sys_sendmsg+0x525/0x7d0 [ 263.741459][T11808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.746795][T11808] __sys_sendmsg+0x2b0/0x3a0 [ 263.751420][T11808] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.756546][T11808] ? vfs_write+0x7c4/0xc90 [ 263.761220][T11808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.767581][T11808] ? do_syscall_64+0x100/0x230 [ 263.772387][T11808] ? do_syscall_64+0xb6/0x230 [ 263.777104][T11808] do_syscall_64+0xf3/0x230 [ 263.781642][T11808] ? clear_bhb_loop+0x35/0x90 [ 263.786367][T11808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.792444][T11808] RIP: 0033:0x7f92c997def9 [ 263.796887][T11808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.816511][T11808] RSP: 002b:00007f92ca6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.825041][T11808] RAX: ffffffffffffffda RBX: 00007f92c9b35f80 RCX: 00007f92c997def9 [ 263.833085][T11808] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 263.841185][T11808] RBP: 00007f92ca6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.849256][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.857352][T11808] R13: 0000000000000000 R14: 00007f92c9b35f80 R15: 00007ffe1452ea78 [ 263.865377][T11808] [ 263.888029][T11808] netlink: set zone limit has 4 unknown bytes [ 263.906431][T11601] hsr_slave_0: entered promiscuous mode [ 263.925844][T11601] hsr_slave_1: entered promiscuous mode [ 263.945728][T11601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.958719][T11601] Cannot create hsr debugfs directory [ 263.964479][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 263.975967][T11813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'. [ 264.223031][T11818] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 264.230834][T11818] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.1902'. [ 264.295673][T11818] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 264.433353][ T7725] hsr_slave_0: left promiscuous mode [ 264.469822][ T7725] hsr_slave_1: left promiscuous mode [ 264.488888][T11825] netlink: zone id is out of range [ 264.496081][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.505687][T11825] netlink: set zone limit has 4 unknown bytes [ 264.515174][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.543763][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.558321][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.611478][ T7725] veth1_macvtap: left promiscuous mode [ 264.625619][ T7725] veth0_macvtap: left promiscuous mode [ 264.631280][ T7725] veth1_vlan: left promiscuous mode [ 264.640640][ T7725] veth0_vlan: left promiscuous mode [ 264.701332][T11835] openvswitch: netlink: Key type 15889 is out of range max 32 [ 264.717515][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 265.250965][ T5246] Bluetooth: hci2: command tx timeout [ 265.270315][ T7725] team0 (unregistering): Port device team_slave_1 removed [ 265.330769][ T7725] team0 (unregistering): Port device team_slave_0 removed [ 265.929545][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1905'. [ 266.044371][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 266.132523][T11839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1908'. [ 266.177610][T11848] FAULT_INJECTION: forcing a failure. [ 266.177610][T11848] name failslab, interval 1, probability 0, space 0, times 0 [ 266.200075][T11839] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1908'. [ 266.200885][T11848] CPU: 0 UID: 0 PID: 11848 Comm: syz.2.1910 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 266.220052][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 266.230246][T11848] Call Trace: [ 266.233574][T11848] [ 266.236617][T11848] dump_stack_lvl+0x241/0x360 [ 266.241326][T11848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.246553][T11848] ? __pfx__printk+0x10/0x10 [ 266.251254][T11848] ? __kmalloc_noprof+0xb0/0x400 [ 266.256385][T11848] ? __pfx___might_resched+0x10/0x10 [ 266.261697][T11848] should_fail_ex+0x3b0/0x4e0 [ 266.266517][T11848] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 266.272861][T11848] should_failslab+0xac/0x100 [ 266.277597][T11848] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 266.283879][T11848] __kmalloc_noprof+0xd8/0x400 [ 266.288675][T11848] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 266.294958][T11848] genl_rcv_msg+0x802/0xec0 [ 266.299495][T11848] ? mark_lock+0x9a/0x350 [ 266.303879][T11848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.308966][T11848] ? __pfx_lock_acquire+0x10/0x10 [ 266.314071][T11848] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 266.320202][T11848] ? __pfx___might_resched+0x10/0x10 [ 266.325531][T11848] netlink_rcv_skb+0x1e3/0x430 [ 266.330418][T11848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.335489][T11848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.340811][T11848] ? __netlink_deliver_tap+0x77e/0x7c0 [ 266.346319][T11848] genl_rcv+0x28/0x40 [ 266.350341][T11848] netlink_unicast+0x7f6/0x990 [ 266.355221][T11848] ? __pfx_netlink_unicast+0x10/0x10 [ 266.360526][T11848] ? __virt_addr_valid+0x183/0x530 [ 266.365663][T11848] ? __check_object_size+0x49c/0x900 [ 266.371088][T11848] ? bpf_lsm_netlink_send+0x9/0x10 [ 266.376250][T11848] netlink_sendmsg+0x8e4/0xcb0 [ 266.381068][T11848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.386410][T11848] ? __import_iovec+0x536/0x820 [ 266.391282][T11848] ? aa_sock_msg_perm+0x91/0x160 [ 266.396236][T11848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 266.401567][T11848] ? security_socket_sendmsg+0x87/0xb0 [ 266.407086][T11848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.412404][T11848] __sock_sendmsg+0x221/0x270 [ 266.417127][T11848] ____sys_sendmsg+0x525/0x7d0 [ 266.421945][T11848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.427270][T11848] __sys_sendmsg+0x2b0/0x3a0 [ 266.432060][T11848] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.437203][T11848] ? vfs_write+0x7c4/0xc90 [ 266.441718][T11848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.448113][T11848] ? do_syscall_64+0x100/0x230 [ 266.452947][T11848] ? do_syscall_64+0xb6/0x230 [ 266.457697][T11848] do_syscall_64+0xf3/0x230 [ 266.462250][T11848] ? clear_bhb_loop+0x35/0x90 [ 266.466956][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.472867][T11848] RIP: 0033:0x7f92c997def9 [ 266.477320][T11848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.497201][T11848] RSP: 002b:00007f92ca6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.505655][T11848] RAX: ffffffffffffffda RBX: 00007f92c9b35f80 RCX: 00007f92c997def9 [ 266.513662][T11848] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 266.521646][T11848] RBP: 00007f92ca6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 266.529636][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.537622][T11848] R13: 0000000000000000 R14: 00007f92c9b35f80 R15: 00007ffe1452ea78 [ 266.545651][T11848] [ 266.671896][T11839] openvswitch: netlink: Message has 3074 unknown bytes. [ 266.835820][T11573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.844640][T11855] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1911'. [ 266.860419][T11855] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 266.889101][T11573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.904707][T11573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.941382][T11573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.322735][ T5246] Bluetooth: hci2: command tx timeout [ 267.435839][T11875] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 267.452077][T11875] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1919'. [ 267.468728][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.517232][T11878] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1920'. [ 267.618799][T11573] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.740259][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.747653][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.765099][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.772411][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.788945][T11601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.818665][T11601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.830173][T11883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1921'. [ 267.851703][T11885] FAULT_INJECTION: forcing a failure. [ 267.851703][T11885] name failslab, interval 1, probability 0, space 0, times 0 [ 267.855526][T11601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.874847][T11885] CPU: 1 UID: 0 PID: 11885 Comm: syz.2.1922 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 267.885355][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 267.895447][T11885] Call Trace: [ 267.898784][T11885] [ 267.901757][T11885] dump_stack_lvl+0x241/0x360 [ 267.906462][T11885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.911708][T11885] ? __pfx__printk+0x10/0x10 [ 267.916377][T11885] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 267.922424][T11885] ? __pfx___might_resched+0x10/0x10 [ 267.927767][T11885] should_fail_ex+0x3b0/0x4e0 [ 267.932481][T11885] should_failslab+0xac/0x100 [ 267.937226][T11885] ? __alloc_skb+0x1c3/0x440 [ 267.941866][T11885] kmem_cache_alloc_node_noprof+0x71/0x320 [ 267.947717][T11885] __alloc_skb+0x1c3/0x440 [ 267.952186][T11885] ? __pfx___alloc_skb+0x10/0x10 [ 267.957197][T11885] ? net_generic+0x1f/0x240 [ 267.961735][T11885] ovs_ct_limit_cmd_set+0x105/0xaf0 [ 267.966965][T11885] ? __nla_parse+0x40/0x60 [ 267.971425][T11885] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 267.977806][T11885] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 267.984370][T11885] genl_rcv_msg+0xb14/0xec0 [ 267.988916][T11885] ? mark_lock+0x9a/0x350 [ 267.993476][T11885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.998732][T11885] ? __pfx_lock_acquire+0x10/0x10 [ 268.003839][T11885] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 268.009590][T11885] ? __pfx___might_resched+0x10/0x10 [ 268.014942][T11885] netlink_rcv_skb+0x1e3/0x430 [ 268.019895][T11885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.025078][T11885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.030445][T11885] ? __netlink_deliver_tap+0x77e/0x7c0 [ 268.035948][T11885] genl_rcv+0x28/0x40 [ 268.039953][T11885] netlink_unicast+0x7f6/0x990 [ 268.044810][T11885] ? __pfx_netlink_unicast+0x10/0x10 [ 268.050215][T11885] ? __virt_addr_valid+0x183/0x530 [ 268.055376][T11885] ? __check_object_size+0x49c/0x900 [ 268.060706][T11885] ? bpf_lsm_netlink_send+0x9/0x10 [ 268.065849][T11885] netlink_sendmsg+0x8e4/0xcb0 [ 268.070782][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.076100][T11885] ? __import_iovec+0x536/0x820 [ 268.080998][T11885] ? aa_sock_msg_perm+0x91/0x160 [ 268.085962][T11885] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 268.091271][T11885] ? security_socket_sendmsg+0x87/0xb0 [ 268.096759][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.102077][T11885] __sock_sendmsg+0x221/0x270 [ 268.106779][T11885] ____sys_sendmsg+0x525/0x7d0 [ 268.111595][T11885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.117045][T11885] __sys_sendmsg+0x2b0/0x3a0 [ 268.121705][T11885] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.126871][T11885] ? vfs_write+0x7c4/0xc90 [ 268.131349][T11885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.137703][T11885] ? do_syscall_64+0x100/0x230 [ 268.142530][T11885] ? do_syscall_64+0xb6/0x230 [ 268.147233][T11885] do_syscall_64+0xf3/0x230 [ 268.151760][T11885] ? clear_bhb_loop+0x35/0x90 [ 268.156458][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.162367][T11885] RIP: 0033:0x7f92c997def9 [ 268.166797][T11885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.186421][T11885] RSP: 002b:00007f92ca6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.194876][T11885] RAX: ffffffffffffffda RBX: 00007f92c9b35f80 RCX: 00007f92c997def9 [ 268.202873][T11885] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 268.210853][T11885] RBP: 00007f92ca6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 268.218923][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.226924][T11885] R13: 0000000000000000 R14: 00007f92c9b35f80 R15: 00007ffe1452ea78 [ 268.234926][T11885] [ 268.252913][ T5246] Bluetooth: hci0: command 0x041b tx timeout [ 268.285123][T11601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.649628][T11601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.718282][T11900] netlink: 'syz.3.1926': attribute type 3 has an invalid length. [ 268.745956][T11900] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1926'. [ 268.794967][T11601] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.811096][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.855582][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.862836][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.902599][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.909769][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.234495][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 269.552804][T11573] veth0_vlan: entered promiscuous mode [ 269.580234][T11573] veth1_vlan: entered promiscuous mode [ 269.608246][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.675402][T11573] veth0_macvtap: entered promiscuous mode [ 269.698415][T11573] veth1_macvtap: entered promiscuous mode [ 269.775352][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.797886][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.827827][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.842780][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.856117][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.865399][T11601] veth0_vlan: entered promiscuous mode [ 269.888709][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.910561][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.921378][T11573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.932781][T11573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.949840][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.968412][T11601] veth1_vlan: entered promiscuous mode [ 269.984524][T11573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.996194][T11573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.997883][T11941] x_tables: duplicate underflow at hook 1 [ 270.028777][T11573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.070552][T11573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.104877][T11943] __nla_validate_parse: 2 callbacks suppressed [ 270.104901][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1938'. [ 270.279580][T11601] veth0_macvtap: entered promiscuous mode [ 270.308247][T11949] netlink: set zone limit has 4 unknown bytes [ 270.312092][T11601] veth1_macvtap: entered promiscuous mode [ 270.421007][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.461933][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.478874][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.489735][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.512215][T11961] FAULT_INJECTION: forcing a failure. [ 270.512215][T11961] name failslab, interval 1, probability 0, space 0, times 0 [ 270.516815][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.525986][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.2.1944 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 270.545442][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.545714][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 270.562947][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.565556][T11961] Call Trace: [ 270.565569][T11961] [ 270.579082][T11961] dump_stack_lvl+0x241/0x360 [ 270.583864][T11961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.589111][T11961] ? __pfx__printk+0x10/0x10 [ 270.592476][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.593786][T11961] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 270.604549][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.609639][T11961] ? __pfx___might_resched+0x10/0x10 [ 270.619469][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.624705][T11961] should_fail_ex+0x3b0/0x4e0 [ 270.624741][T11961] should_failslab+0xac/0x100 [ 270.644662][T11961] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 270.645023][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.650059][T11961] __kmalloc_cache_noprof+0x6c/0x2c0 [ 270.659925][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.665132][T11961] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 270.675576][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.680759][T11961] ? __nla_parse+0x40/0x60 [ 270.695064][T11961] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 270.701448][T11961] genl_rcv_msg+0xb14/0xec0 [ 270.705998][T11961] ? mark_lock+0x9a/0x350 [ 270.710387][T11961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.710894][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.715435][T11961] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 270.715493][T11961] ? __pfx_lock_acquire+0x10/0x10 [ 270.733747][T11961] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 270.739532][T11961] ? __pfx___might_resched+0x10/0x10 [ 270.744885][T11961] netlink_rcv_skb+0x1e3/0x430 [ 270.749709][T11961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.754788][T11961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.760146][T11961] ? __netlink_deliver_tap+0x77e/0x7c0 [ 270.765662][T11961] genl_rcv+0x28/0x40 [ 270.765696][T11961] netlink_unicast+0x7f6/0x990 [ 270.770810][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.774452][T11961] ? __pfx_netlink_unicast+0x10/0x10 [ 270.774487][T11961] ? __virt_addr_valid+0x183/0x530 [ 270.792748][T11961] ? __check_object_size+0x49c/0x900 [ 270.798082][T11961] ? bpf_lsm_netlink_send+0x9/0x10 [ 270.803246][T11961] netlink_sendmsg+0x8e4/0xcb0 [ 270.803851][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.808051][T11961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.820631][T11961] ? __import_iovec+0x536/0x820 [ 270.825536][T11961] ? aa_sock_msg_perm+0x91/0x160 [ 270.825558][T11601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.830499][T11961] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.830533][T11961] ? security_socket_sendmsg+0x87/0xb0 [ 270.849989][T11961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.855334][T11961] __sock_sendmsg+0x221/0x270 [ 270.860066][T11961] ____sys_sendmsg+0x525/0x7d0 [ 270.864844][T11601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.864880][T11961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.878362][T11601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.878835][T11961] __sys_sendmsg+0x2b0/0x3a0 [ 270.892120][T11961] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.897261][T11961] ? vfs_write+0x7c4/0xc90 [ 270.901767][T11961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.904296][T11601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.908119][T11961] ? do_syscall_64+0x100/0x230 [ 270.921588][T11961] ? do_syscall_64+0xb6/0x230 [ 270.926328][T11961] do_syscall_64+0xf3/0x230 [ 270.930881][T11961] ? clear_bhb_loop+0x35/0x90 [ 270.935607][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.941546][T11961] RIP: 0033:0x7f92c997def9 [ 270.946010][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.965665][T11961] RSP: 002b:00007f92ca6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.974214][T11961] RAX: ffffffffffffffda RBX: 00007f92c9b35f80 RCX: 00007f92c997def9 [ 270.982233][T11961] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 270.990248][T11961] RBP: 00007f92ca6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 270.998225][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.006218][T11961] R13: 0000000000000000 R14: 00007f92c9b35f80 R15: 00007ffe1452ea78 [ 271.014211][T11961] [ 271.052703][ T7725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.067974][ T7725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.095591][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.341936][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.360117][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.426583][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.446302][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.947089][T11994] netlink: set zone limit has 4 unknown bytes [ 272.005401][T11996] tap0: tun_chr_ioctl cmd 2147767521 [ 272.168066][T12004] FAULT_INJECTION: forcing a failure. [ 272.168066][T12004] name failslab, interval 1, probability 0, space 0, times 0 [ 272.182934][T12004] CPU: 1 UID: 0 PID: 12004 Comm: syz.3.1957 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 272.193406][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 272.203508][T12004] Call Trace: [ 272.206813][T12004] [ 272.209763][T12004] dump_stack_lvl+0x241/0x360 [ 272.214466][T12004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.219682][T12004] ? __pfx__printk+0x10/0x10 [ 272.224287][T12004] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 272.229753][T12004] ? __pfx___might_resched+0x10/0x10 [ 272.235054][T12004] should_fail_ex+0x3b0/0x4e0 [ 272.239741][T12004] should_failslab+0xac/0x100 [ 272.244449][T12004] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 272.249875][T12004] __kmalloc_cache_noprof+0x6c/0x2c0 [ 272.255217][T12004] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 272.260463][T12004] ? __nla_parse+0x40/0x60 [ 272.264937][T12004] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 272.271307][T12004] genl_rcv_msg+0xb14/0xec0 [ 272.275830][T12004] ? mark_lock+0x9a/0x350 [ 272.280187][T12004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.285265][T12004] ? __pfx_lock_acquire+0x10/0x10 [ 272.290311][T12004] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 272.296059][T12004] ? __pfx___might_resched+0x10/0x10 [ 272.301402][T12004] netlink_rcv_skb+0x1e3/0x430 [ 272.306220][T12004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.311282][T12004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.316595][T12004] ? __netlink_deliver_tap+0x77e/0x7c0 [ 272.322083][T12004] genl_rcv+0x28/0x40 [ 272.326077][T12004] netlink_unicast+0x7f6/0x990 [ 272.330865][T12004] ? __pfx_netlink_unicast+0x10/0x10 [ 272.336163][T12004] ? __virt_addr_valid+0x183/0x530 [ 272.341282][T12004] ? __check_object_size+0x49c/0x900 [ 272.346590][T12004] ? bpf_lsm_netlink_send+0x9/0x10 [ 272.351729][T12004] netlink_sendmsg+0x8e4/0xcb0 [ 272.356535][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.361844][T12004] ? __import_iovec+0x536/0x820 [ 272.366707][T12004] ? aa_sock_msg_perm+0x91/0x160 [ 272.371666][T12004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.376973][T12004] ? security_socket_sendmsg+0x87/0xb0 [ 272.382453][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.387759][T12004] __sock_sendmsg+0x221/0x270 [ 272.392460][T12004] ____sys_sendmsg+0x525/0x7d0 [ 272.397245][T12004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.402561][T12004] __sys_sendmsg+0x2b0/0x3a0 [ 272.407169][T12004] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.412288][T12004] ? vfs_write+0x7c4/0xc90 [ 272.416760][T12004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.423128][T12004] ? do_syscall_64+0x100/0x230 [ 272.427932][T12004] ? do_syscall_64+0xb6/0x230 [ 272.432641][T12004] do_syscall_64+0xf3/0x230 [ 272.437170][T12004] ? clear_bhb_loop+0x35/0x90 [ 272.441887][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.447810][T12004] RIP: 0033:0x7f957917def9 [ 272.452237][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.471878][T12004] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.480423][T12004] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 272.488499][T12004] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 272.496499][T12004] RBP: 00007f9579ee2090 R08: 0000000000000000 R09: 0000000000000000 [ 272.504499][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.512485][T12004] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 272.520495][T12004] [ 272.780634][T12021] team0: Port device vlan2 added [ 272.952053][T12030] netlink: 'syz.1.1963': attribute type 8 has an invalid length. [ 272.993367][T12030] ɶƣ0G0w: entered promiscuous mode [ 273.041014][T12032] netlink: set zone limit has 4 unknown bytes [ 273.322730][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.001163][T12047] FAULT_INJECTION: forcing a failure. [ 274.001163][T12047] name failslab, interval 1, probability 0, space 0, times 0 [ 274.050310][T12047] CPU: 0 UID: 0 PID: 12047 Comm: syz.3.1971 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 274.060807][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 274.070906][T12047] Call Trace: [ 274.074216][T12047] [ 274.077174][T12047] dump_stack_lvl+0x241/0x360 [ 274.081905][T12047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.087154][T12047] ? __pfx__printk+0x10/0x10 [ 274.091793][T12047] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 274.098764][T12047] ? __pfx___might_resched+0x10/0x10 [ 274.104102][T12047] should_fail_ex+0x3b0/0x4e0 [ 274.108830][T12047] should_failslab+0xac/0x100 [ 274.113645][T12047] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 274.119047][T12047] __kmalloc_cache_noprof+0x6c/0x2c0 [ 274.124446][T12047] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 274.129679][T12047] genl_rcv_msg+0xb14/0xec0 [ 274.134196][T12047] ? mark_lock+0x9a/0x350 [ 274.138550][T12047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.143784][T12047] ? __pfx_lock_acquire+0x10/0x10 [ 274.148824][T12047] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 274.154567][T12047] ? __pfx___might_resched+0x10/0x10 [ 274.159880][T12047] netlink_rcv_skb+0x1e3/0x430 [ 274.164671][T12047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.169797][T12047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.175113][T12047] ? __netlink_deliver_tap+0x77e/0x7c0 [ 274.180775][T12047] genl_rcv+0x28/0x40 [ 274.184770][T12047] netlink_unicast+0x7f6/0x990 [ 274.189563][T12047] ? __pfx_netlink_unicast+0x10/0x10 [ 274.194949][T12047] ? __virt_addr_valid+0x183/0x530 [ 274.200159][T12047] ? __check_object_size+0x49c/0x900 [ 274.205473][T12047] ? bpf_lsm_netlink_send+0x9/0x10 [ 274.210606][T12047] netlink_sendmsg+0x8e4/0xcb0 [ 274.215408][T12047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.220716][T12047] ? __import_iovec+0x536/0x820 [ 274.225584][T12047] ? aa_sock_msg_perm+0x91/0x160 [ 274.230543][T12047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.235846][T12047] ? security_socket_sendmsg+0x87/0xb0 [ 274.241323][T12047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.246626][T12047] __sock_sendmsg+0x221/0x270 [ 274.251328][T12047] ____sys_sendmsg+0x525/0x7d0 [ 274.256111][T12047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.261424][T12047] __sys_sendmsg+0x2b0/0x3a0 [ 274.266026][T12047] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.271148][T12047] ? vfs_write+0x7c4/0xc90 [ 274.275638][T12047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.281989][T12047] ? do_syscall_64+0x100/0x230 [ 274.286774][T12047] ? do_syscall_64+0xb6/0x230 [ 274.291468][T12047] do_syscall_64+0xf3/0x230 [ 274.295994][T12047] ? clear_bhb_loop+0x35/0x90 [ 274.300702][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.306608][T12047] RIP: 0033:0x7f957917def9 [ 274.311040][T12047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.330666][T12047] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.339096][T12047] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 274.347076][T12047] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 274.355058][T12047] RBP: 00007f9579ee2090 R08: 0000000000000000 R09: 0000000000000000 [ 274.363036][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.371010][T12047] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 274.379003][T12047] [ 274.420392][T12057] x_tables: duplicate underflow at hook 3 [ 274.506160][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.682852][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.692426][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.704527][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.715079][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.725731][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.743565][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.753019][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.821739][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.977786][ T53] bridge_slave_1: left allmulticast mode [ 274.983712][ T53] bridge_slave_1: left promiscuous mode [ 274.989786][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.006985][ T53] bridge_slave_0: left allmulticast mode [ 275.016391][ T53] bridge_slave_0: left promiscuous mode [ 275.024737][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.672713][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.692813][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.710623][ T53] bond0 (unregistering): Released all slaves [ 275.912968][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.928593][T12077] netlink: set zone limit has 4 unknown bytes [ 275.947908][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.956885][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.970439][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.982218][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.998391][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.427233][T12058] chnl_net:caif_netlink_parms(): no params data found [ 276.684085][ T53] hsr_slave_0: left promiscuous mode [ 276.704484][ T53] hsr_slave_1: left promiscuous mode [ 276.730779][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.735654][T12098] netlink: 'syz.3.1981': attribute type 3 has an invalid length. [ 276.740555][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.758591][T12098] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 276.770420][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.787827][T12098] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1981'. [ 276.799275][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.841701][ T5245] Bluetooth: hci0: command tx timeout [ 276.870331][ T53] veth1_macvtap: left promiscuous mode [ 276.889607][ T53] veth0_macvtap: left promiscuous mode [ 276.899755][ T53] veth1_vlan: left promiscuous mode [ 276.907269][ T53] veth0_vlan: left promiscuous mode [ 277.581224][ T53] team0 (unregistering): Port device team_slave_1 removed [ 277.640961][ T53] team0 (unregistering): Port device team_slave_0 removed [ 278.047285][ T5245] Bluetooth: hci2: command tx timeout [ 278.221004][T12103] netlink: 'syz.2.1982': attribute type 10 has an invalid length. [ 278.230807][T12103] bond0: (slave bond_slave_0): Releasing backup interface [ 278.273376][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1984'. [ 278.535550][T12119] netlink: 'syz.3.1986': attribute type 1 has an invalid length. [ 278.545035][T12119] netlink: 'syz.3.1986': attribute type 3 has an invalid length. [ 278.572504][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.579811][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.591889][T12119] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1986'. [ 278.612436][T12058] bridge_slave_0: entered allmulticast mode [ 278.628124][T12058] bridge_slave_0: entered promiscuous mode [ 278.634730][T12119] NCSI netlink: No device for ifindex 0 [ 278.666950][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.700470][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.712041][T12058] bridge_slave_1: entered allmulticast mode [ 278.719631][T12058] bridge_slave_1: entered promiscuous mode [ 278.757366][T12126] netlink: set zone limit has 4 unknown bytes [ 278.803017][T12129] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.1989'. [ 278.819692][T12129] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 278.828172][T12129] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1989'. [ 278.882354][T12129] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1989'. [ 278.911593][T12129] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1989'. [ 278.922794][ T5245] Bluetooth: hci0: command tx timeout [ 278.987335][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.048267][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.127498][T12058] team0: Port device team_slave_0 added [ 279.195941][T12058] team0: Port device team_slave_1 added [ 279.299247][T12147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.320955][T12147] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1993'. [ 279.330275][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1992'. [ 279.366280][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.373517][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.403775][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.453305][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'. [ 279.477741][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.485286][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.515540][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.553482][T12147] bridge_slave_1: left allmulticast mode [ 279.559354][T12147] bridge_slave_1: left promiscuous mode [ 279.572972][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.591138][T12160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.607622][T12147] bridge3: port 1(bridge_slave_1) entered blocking state [ 279.615090][T12147] bridge3: port 1(bridge_slave_1) entered disabled state [ 279.633613][T12147] bridge_slave_1: entered allmulticast mode [ 279.660700][T12147] bridge_slave_1: entered promiscuous mode [ 279.821147][T12078] chnl_net:caif_netlink_parms(): no params data found [ 279.848565][T12058] hsr_slave_0: entered promiscuous mode [ 279.859513][T12058] hsr_slave_1: entered promiscuous mode [ 280.023640][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.121718][ T5245] Bluetooth: hci2: command tx timeout [ 280.179240][T12180] netlink: set zone limit has 4 unknown bytes [ 280.182458][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.308256][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.327773][T12184] syz.2.2002[12184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.327945][T12184] syz.2.2002[12184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.494116][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.625580][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.648292][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.660943][T12078] bridge_slave_0: entered allmulticast mode [ 280.669078][T12078] bridge_slave_0: entered promiscuous mode [ 280.690315][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.706324][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.716141][T12078] bridge_slave_1: entered allmulticast mode [ 280.730696][T12078] bridge_slave_1: entered promiscuous mode [ 280.839971][T12078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.860871][T12078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.989274][T12078] team0: Port device team_slave_0 added [ 281.013898][ T5245] Bluetooth: hci0: command tx timeout [ 281.025172][T12078] team0: Port device team_slave_1 added [ 281.063294][T12208] FAULT_INJECTION: forcing a failure. [ 281.063294][T12208] name failslab, interval 1, probability 0, space 0, times 0 [ 281.076636][T12208] CPU: 1 UID: 0 PID: 12208 Comm: syz.2.2008 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 281.087120][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 281.097219][T12208] Call Trace: [ 281.100530][T12208] [ 281.103481][T12208] dump_stack_lvl+0x241/0x360 [ 281.108223][T12208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.113447][T12208] ? __pfx__printk+0x10/0x10 [ 281.118071][T12208] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 281.123585][T12208] ? __pfx___might_resched+0x10/0x10 [ 281.128911][T12208] should_fail_ex+0x3b0/0x4e0 [ 281.133608][T12208] should_failslab+0xac/0x100 [ 281.138307][T12208] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 281.143703][T12208] __kmalloc_cache_noprof+0x6c/0x2c0 [ 281.149020][T12208] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 281.154258][T12208] genl_rcv_msg+0xb14/0xec0 [ 281.158775][T12208] ? mark_lock+0x9a/0x350 [ 281.163144][T12208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.168208][T12208] ? __pfx_lock_acquire+0x10/0x10 [ 281.173250][T12208] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 281.178990][T12208] ? __pfx___might_resched+0x10/0x10 [ 281.184337][T12208] netlink_rcv_skb+0x1e3/0x430 [ 281.189147][T12208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.194191][T12208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.199508][T12208] ? __netlink_deliver_tap+0x77e/0x7c0 [ 281.205003][T12208] genl_rcv+0x28/0x40 [ 281.209022][T12208] netlink_unicast+0x7f6/0x990 [ 281.213936][T12208] ? __pfx_netlink_unicast+0x10/0x10 [ 281.219236][T12208] ? __virt_addr_valid+0x183/0x530 [ 281.224367][T12208] ? __check_object_size+0x49c/0x900 [ 281.229696][T12208] ? bpf_lsm_netlink_send+0x9/0x10 [ 281.234843][T12208] netlink_sendmsg+0x8e4/0xcb0 [ 281.239655][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.245028][T12208] ? __import_iovec+0x536/0x820 [ 281.249930][T12208] ? aa_sock_msg_perm+0x91/0x160 [ 281.254905][T12208] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.260225][T12208] ? security_socket_sendmsg+0x87/0xb0 [ 281.265746][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.271160][T12208] __sock_sendmsg+0x221/0x270 [ 281.275928][T12208] ____sys_sendmsg+0x525/0x7d0 [ 281.280746][T12208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.286543][T12208] __sys_sendmsg+0x2b0/0x3a0 [ 281.291155][T12208] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.296276][T12208] ? vfs_write+0x7c4/0xc90 [ 281.300745][T12208] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.307186][T12208] ? do_syscall_64+0x100/0x230 [ 281.312063][T12208] ? do_syscall_64+0xb6/0x230 [ 281.316859][T12208] do_syscall_64+0xf3/0x230 [ 281.321484][T12208] ? clear_bhb_loop+0x35/0x90 [ 281.326207][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.332201][T12208] RIP: 0033:0x7f92c997def9 [ 281.336629][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.356250][T12208] RSP: 002b:00007f92ca6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.364790][T12208] RAX: ffffffffffffffda RBX: 00007f92c9b35f80 RCX: 00007f92c997def9 [ 281.372771][T12208] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 281.380752][T12208] RBP: 00007f92ca6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 281.388734][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.396723][T12208] R13: 0000000000000000 R14: 00007f92c9b35f80 R15: 00007ffe1452ea78 [ 281.404833][T12208] [ 281.478526][T12202] netlink: 'syz.1.2006': attribute type 2 has an invalid length. [ 281.626625][T12215] x_tables: duplicate underflow at hook 2 [ 281.640902][T12078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.661556][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.703315][T12078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.718920][ T53] bridge_slave_1: left allmulticast mode [ 281.726388][ T53] bridge_slave_1: left promiscuous mode [ 281.733064][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.745047][ T53] bridge_slave_0: left allmulticast mode [ 281.750738][ T53] bridge_slave_0: left promiscuous mode [ 281.756908][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.211934][ T5245] Bluetooth: hci2: command tx timeout [ 282.233835][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.246340][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.257956][ T53] bond0 (unregistering): Released all slaves [ 282.289763][T12078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.298338][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.326720][T12078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.549106][T12078] hsr_slave_0: entered promiscuous mode [ 282.563181][T12078] hsr_slave_1: entered promiscuous mode [ 282.569534][T12078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.582955][T12078] Cannot create hsr debugfs directory [ 282.749209][T12236] netlink: zone id is out of range [ 282.768089][T12236] netlink: set zone limit has 4 unknown bytes [ 282.827191][T12238] netlink: 'syz.1.2015': attribute type 2 has an invalid length. [ 283.083491][ T5245] Bluetooth: hci0: command tx timeout [ 283.137284][T12242] __nla_validate_parse: 7 callbacks suppressed [ 283.137307][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 283.212859][ T53] hsr_slave_0: left promiscuous mode [ 283.262077][ T53] hsr_slave_1: left promiscuous mode [ 283.298774][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.315710][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.326456][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.338777][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.371230][ T53] veth1_macvtap: left promiscuous mode [ 283.381814][ T53] veth0_macvtap: left promiscuous mode [ 283.387518][ T53] veth1_vlan: left promiscuous mode [ 283.396935][ T53] veth0_vlan: left promiscuous mode [ 284.027806][ T53] team0 (unregistering): Port device team_slave_1 removed [ 284.078633][ T53] team0 (unregistering): Port device team_slave_0 removed [ 284.287285][ T5245] Bluetooth: hci2: command tx timeout [ 284.618863][T12058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.658033][T12058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.704358][T12258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2020'. [ 284.749226][T12058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.813449][T12058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.129853][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2025'. [ 285.157305][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2025'. [ 285.262035][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.274636][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 285.334856][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.366610][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.373840][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.390647][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.397902][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.526954][T12078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.539913][T12078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.553489][T12078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.573016][T12078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.777672][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 285.786910][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 285.797755][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 285.829379][T12078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.844108][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.895158][T12078] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.927659][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.934934][ T7725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.976894][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.984196][ T7725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.034220][T12298] netlink: 4088 bytes leftover after parsing attributes in process `syz.2.2029'. [ 286.074865][T12298] openvswitch: netlink: Actions may not be safe on all matching packets [ 286.153055][T12301] netlink: 203452 bytes leftover after parsing attributes in process `syz.2.2029'. [ 286.223012][T12301] netlink: 'syz.2.2029': attribute type 2 has an invalid length. [ 286.569872][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.627260][T12058] veth0_vlan: entered promiscuous mode [ 286.654428][T12058] veth1_vlan: entered promiscuous mode [ 286.748912][T12078] veth0_vlan: entered promiscuous mode [ 286.760423][T12329] netlink: 'syz.2.2035': attribute type 11 has an invalid length. [ 286.776591][T12058] veth0_macvtap: entered promiscuous mode [ 286.788335][T12078] veth1_vlan: entered promiscuous mode [ 286.815087][T12058] veth1_macvtap: entered promiscuous mode [ 286.876651][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.888953][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.899004][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.911062][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.924284][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.948669][T12078] veth0_macvtap: entered promiscuous mode [ 286.960077][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.982907][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.995498][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.006983][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.019585][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.058804][T12058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.084841][T12058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.111601][T12058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.131790][T12058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.148815][T12078] veth1_macvtap: entered promiscuous mode [ 287.198077][T12078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.210427][T12078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.221790][T12078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.234909][T12078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.245622][T12078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.256689][T12078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.268768][T12078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.299606][T12078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.315957][T12078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.326593][T12078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.337316][T12078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.348138][T12078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.358997][T12078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.371085][T12078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.401329][T12078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.410869][T12078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.420656][T12078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.431706][T12078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.544816][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.577875][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.658877][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.677370][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.707557][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.721760][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.807705][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.824071][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.260803][T12368] FAULT_INJECTION: forcing a failure. [ 288.260803][T12368] name failslab, interval 1, probability 0, space 0, times 0 [ 288.274269][T12368] CPU: 0 UID: 0 PID: 12368 Comm: syz.1.2046 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 288.284738][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 288.294816][T12368] Call Trace: [ 288.298137][T12368] [ 288.301032][T12370] netlink: 'syz.3.2047': attribute type 4 has an invalid length. [ 288.301082][T12368] dump_stack_lvl+0x241/0x360 [ 288.313696][T12368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.319046][T12368] ? __pfx__printk+0x10/0x10 [ 288.323700][T12368] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 288.329195][T12368] ? __pfx___might_resched+0x10/0x10 [ 288.334521][T12368] should_fail_ex+0x3b0/0x4e0 [ 288.339236][T12368] should_failslab+0xac/0x100 [ 288.344027][T12368] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 288.349426][T12368] __kmalloc_cache_noprof+0x6c/0x2c0 [ 288.354755][T12368] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 288.359991][T12368] genl_rcv_msg+0xb14/0xec0 [ 288.364506][T12368] ? mark_lock+0x9a/0x350 [ 288.368858][T12368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.373913][T12368] ? __pfx_lock_acquire+0x10/0x10 [ 288.378961][T12368] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 288.384906][T12368] ? __pfx___might_resched+0x10/0x10 [ 288.390239][T12368] netlink_rcv_skb+0x1e3/0x430 [ 288.395039][T12368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.400083][T12368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.405407][T12368] ? __netlink_deliver_tap+0x77e/0x7c0 [ 288.410917][T12368] genl_rcv+0x28/0x40 [ 288.414946][T12368] netlink_unicast+0x7f6/0x990 [ 288.419768][T12368] ? __pfx_netlink_unicast+0x10/0x10 [ 288.425075][T12368] ? __virt_addr_valid+0x183/0x530 [ 288.430240][T12368] ? __check_object_size+0x49c/0x900 [ 288.435905][T12368] ? bpf_lsm_netlink_send+0x9/0x10 [ 288.441074][T12368] netlink_sendmsg+0x8e4/0xcb0 [ 288.445871][T12368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.451199][T12368] ? __import_iovec+0x536/0x820 [ 288.456074][T12368] ? aa_sock_msg_perm+0x91/0x160 [ 288.461144][T12368] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.466453][T12368] ? security_socket_sendmsg+0x87/0xb0 [ 288.471933][T12368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.477330][T12368] __sock_sendmsg+0x221/0x270 [ 288.482024][T12368] ____sys_sendmsg+0x525/0x7d0 [ 288.486819][T12368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.492127][T12368] __sys_sendmsg+0x2b0/0x3a0 [ 288.496777][T12368] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.501906][T12368] ? vfs_write+0x7c4/0xc90 [ 288.506389][T12368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.512743][T12368] ? do_syscall_64+0x100/0x230 [ 288.517530][T12368] ? do_syscall_64+0xb6/0x230 [ 288.522241][T12368] do_syscall_64+0xf3/0x230 [ 288.526783][T12368] ? clear_bhb_loop+0x35/0x90 [ 288.531474][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.537399][T12368] RIP: 0033:0x7f498917def9 [ 288.541862][T12368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.561574][T12368] RSP: 002b:00007f4989eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.570015][T12368] RAX: ffffffffffffffda RBX: 00007f4989335f80 RCX: 00007f498917def9 [ 288.577995][T12368] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 288.585976][T12368] RBP: 00007f4989eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 288.593955][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.601934][T12368] R13: 0000000000000000 R14: 00007f4989335f80 R15: 00007ffd799df7f8 [ 288.609946][T12368] [ 288.752004][T12378] netlink: 'syz.1.2048': attribute type 33 has an invalid length. [ 288.837811][T12386] __nla_validate_parse: 6 callbacks suppressed [ 288.837837][T12386] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2049'. [ 288.864830][T12386] IPv6: sit3: Disabled Multicast RS [ 289.106346][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 289.116901][T12395] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2054'. [ 289.706279][T12420] netlink: zone id is out of range [ 289.722701][T12420] netlink: zone id is out of range [ 289.728453][T12420] netlink: zone id is out of range [ 289.734362][T12420] netlink: zone id is out of range [ 289.739638][T12420] netlink: zone id is out of range [ 289.762363][T12420] netlink: zone id is out of range [ 289.767643][T12420] netlink: zone id is out of range [ 289.781334][T12420] netlink: zone id is out of range [ 289.788162][T12420] netlink: zone id is out of range [ 289.794451][T12420] netlink: zone id is out of range [ 290.187320][T12433] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 290.325517][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.104259][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.114137][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.122782][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.133077][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.140911][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.150544][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.439277][T12435] chnl_net:caif_netlink_parms(): no params data found [ 291.480123][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.558403][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.603818][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.611171][T12435] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.619178][T12435] bridge_slave_0: entered allmulticast mode [ 291.629968][T12435] bridge_slave_0: entered promiscuous mode [ 291.640979][T12435] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.648964][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.656568][T12435] bridge_slave_1: entered allmulticast mode [ 291.664226][T12435] bridge_slave_1: entered promiscuous mode [ 291.723944][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.826360][T12451] gtp0: entered promiscuous mode [ 291.840811][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 291.843317][T12451] gtp0: entered allmulticast mode [ 291.873136][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 291.925267][T12448] macsec0: entered promiscuous mode [ 291.956788][T12435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.996311][T12435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.179708][T12435] team0: Port device team_slave_0 added [ 292.254145][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.268138][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.275077][T12435] team0: Port device team_slave_1 added [ 292.301773][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.320663][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.338231][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.346036][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.394304][T12467] netlink: 'syz.1.2074': attribute type 12 has an invalid length. [ 292.419878][T12467] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2074'. [ 292.494517][T12435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.516800][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.554250][T12435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.580997][T12460] Bluetooth: MGMT ver 1.23 [ 292.614727][T12435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.632610][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.664135][T12435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.686236][ T11] bridge_slave_1: left allmulticast mode [ 292.702284][ T11] bridge_slave_1: left promiscuous mode [ 292.717526][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.729334][ T11] bridge_slave_0: left allmulticast mode [ 292.735737][ T11] bridge_slave_0: left promiscuous mode [ 292.743004][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.193746][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.205962][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.218186][ T11] bond0 (unregistering): Released all slaves [ 293.230299][T12464] tipc: Enabling of bearer rejected, failed to enable media [ 293.242053][ T5245] Bluetooth: hci0: command tx timeout [ 293.654430][T12435] hsr_slave_0: entered promiscuous mode [ 293.706766][T12435] hsr_slave_1: entered promiscuous mode [ 293.719552][T12435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.728555][T12435] Cannot create hsr debugfs directory [ 293.835085][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 293.846510][T12493] netlink: 'syz.3.2083': attribute type 13 has an invalid length. [ 293.855926][T12493] netlink: 'syz.3.2083': attribute type 14 has an invalid length. [ 294.105491][T12500] netlink: 'syz.1.2086': attribute type 6 has an invalid length. [ 294.229187][ T11] hsr_slave_0: left promiscuous mode [ 294.241332][ T11] hsr_slave_1: left promiscuous mode [ 294.256371][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.267654][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.280626][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.302242][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.328411][ T11] veth1_macvtap: left promiscuous mode [ 294.334335][ T11] veth0_macvtap: left promiscuous mode [ 294.340021][ T11] veth1_vlan: left promiscuous mode [ 294.346666][ T11] veth0_vlan: left promiscuous mode [ 294.452519][ T5245] Bluetooth: hci2: command tx timeout [ 294.856707][T12523] FAULT_INJECTION: forcing a failure. [ 294.856707][T12523] name failslab, interval 1, probability 0, space 0, times 0 [ 294.879417][T12523] CPU: 0 UID: 0 PID: 12523 Comm: syz.3.2091 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 294.889923][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.900085][T12523] Call Trace: [ 294.903396][T12523] [ 294.906364][T12523] dump_stack_lvl+0x241/0x360 [ 294.911073][T12523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.916328][T12523] ? __pfx__printk+0x10/0x10 [ 294.920939][T12523] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 294.926414][T12523] ? __pfx___might_resched+0x10/0x10 [ 294.931749][T12523] should_fail_ex+0x3b0/0x4e0 [ 294.936441][T12523] should_failslab+0xac/0x100 [ 294.941134][T12523] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 294.946525][T12523] __kmalloc_cache_noprof+0x6c/0x2c0 [ 294.951831][T12523] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 294.957063][T12523] genl_rcv_msg+0xb14/0xec0 [ 294.961585][T12523] ? mark_lock+0x9a/0x350 [ 294.965954][T12523] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.971114][T12523] ? __pfx_lock_acquire+0x10/0x10 [ 294.976263][T12523] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 294.982002][T12523] ? __pfx___might_resched+0x10/0x10 [ 294.987310][T12523] netlink_rcv_skb+0x1e3/0x430 [ 294.992095][T12523] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.997130][T12523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.002452][T12523] ? __netlink_deliver_tap+0x77e/0x7c0 [ 295.007947][T12523] genl_rcv+0x28/0x40 [ 295.011944][T12523] netlink_unicast+0x7f6/0x990 [ 295.016733][T12523] ? __pfx_netlink_unicast+0x10/0x10 [ 295.022031][T12523] ? __virt_addr_valid+0x183/0x530 [ 295.027155][T12523] ? __check_object_size+0x49c/0x900 [ 295.032454][T12523] ? bpf_lsm_netlink_send+0x9/0x10 [ 295.037579][T12523] netlink_sendmsg+0x8e4/0xcb0 [ 295.042373][T12523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.047678][T12523] ? __import_iovec+0x536/0x820 [ 295.052552][T12523] ? aa_sock_msg_perm+0x91/0x160 [ 295.057505][T12523] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 295.062811][T12523] ? security_socket_sendmsg+0x87/0xb0 [ 295.068290][T12523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.073593][T12523] __sock_sendmsg+0x221/0x270 [ 295.078288][T12523] ____sys_sendmsg+0x525/0x7d0 [ 295.083073][T12523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.088383][T12523] __sys_sendmsg+0x2b0/0x3a0 [ 295.092989][T12523] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.098107][T12523] ? vfs_write+0x7c4/0xc90 [ 295.102583][T12523] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.108932][T12523] ? do_syscall_64+0x100/0x230 [ 295.113725][T12523] ? do_syscall_64+0xb6/0x230 [ 295.118428][T12523] do_syscall_64+0xf3/0x230 [ 295.123041][T12523] ? clear_bhb_loop+0x35/0x90 [ 295.127741][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.133657][T12523] RIP: 0033:0x7f957917def9 [ 295.138083][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.157800][T12523] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.166336][T12523] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 295.174319][T12523] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 295.182316][T12523] RBP: 00007f9579ee2090 R08: 0000000000000000 R09: 0000000000000000 [ 295.190293][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.198274][T12523] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 295.206274][T12523] [ 295.332223][ T5245] Bluetooth: hci0: command tx timeout [ 295.492555][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 295.501967][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 295.511392][T12527] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 295.520461][T12527] nbd: error processing sock list [ 295.699964][ T11] team0 (unregistering): Port device team_slave_1 removed [ 295.786695][ T11] team0 (unregistering): Port device team_slave_0 removed [ 296.526784][ T5245] Bluetooth: hci2: command tx timeout [ 296.659091][T12500] netlink: 'syz.1.2086': attribute type 12 has an invalid length. [ 296.926514][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 297.093652][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 297.282570][T12461] chnl_net:caif_netlink_parms(): no params data found [ 297.374031][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.412034][ T5245] Bluetooth: hci0: command tx timeout [ 297.548852][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.767709][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.034226][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.083920][T12461] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.091310][T12461] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.105992][T12461] bridge_slave_0: entered allmulticast mode [ 298.124747][T12461] bridge_slave_0: entered promiscuous mode [ 298.608248][ T5245] Bluetooth: hci2: command tx timeout [ 299.492077][ T5245] Bluetooth: hci0: command tx timeout [ 300.700057][ T5245] Bluetooth: hci2: command tx timeout [ 300.720340][T12563] FAULT_INJECTION: forcing a failure. [ 300.720340][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 300.733801][T12563] CPU: 0 UID: 0 PID: 12563 Comm: syz.3.2102 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 300.744305][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 300.754390][T12563] Call Trace: [ 300.757719][T12563] [ 300.760665][T12563] dump_stack_lvl+0x241/0x360 [ 300.765369][T12563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.770582][T12563] ? __pfx__printk+0x10/0x10 [ 300.775199][T12563] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 300.780687][T12563] ? __pfx___might_resched+0x10/0x10 [ 300.785990][T12563] should_fail_ex+0x3b0/0x4e0 [ 300.790682][T12563] should_failslab+0xac/0x100 [ 300.795384][T12563] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 300.800785][T12563] __kmalloc_cache_noprof+0x6c/0x2c0 [ 300.806084][T12563] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 300.811323][T12563] genl_rcv_msg+0xb14/0xec0 [ 300.815841][T12563] ? mark_lock+0x9a/0x350 [ 300.820217][T12563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.825295][T12563] ? __pfx_lock_acquire+0x10/0x10 [ 300.830335][T12563] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 300.836079][T12563] ? __pfx___might_resched+0x10/0x10 [ 300.841403][T12563] netlink_rcv_skb+0x1e3/0x430 [ 300.846191][T12563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.851235][T12563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.856550][T12563] ? __netlink_deliver_tap+0x77e/0x7c0 [ 300.862056][T12563] genl_rcv+0x28/0x40 [ 300.866054][T12563] netlink_unicast+0x7f6/0x990 [ 300.870842][T12563] ? __pfx_netlink_unicast+0x10/0x10 [ 300.876141][T12563] ? __virt_addr_valid+0x183/0x530 [ 300.881265][T12563] ? __check_object_size+0x49c/0x900 [ 300.886565][T12563] ? bpf_lsm_netlink_send+0x9/0x10 [ 300.891704][T12563] netlink_sendmsg+0x8e4/0xcb0 [ 300.896497][T12563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.901799][T12563] ? __import_iovec+0x536/0x820 [ 300.906662][T12563] ? aa_sock_msg_perm+0x91/0x160 [ 300.911615][T12563] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 300.916911][T12563] ? security_socket_sendmsg+0x87/0xb0 [ 300.922388][T12563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.927688][T12563] __sock_sendmsg+0x221/0x270 [ 300.932389][T12563] ____sys_sendmsg+0x525/0x7d0 [ 300.937173][T12563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.942483][T12563] __sys_sendmsg+0x2b0/0x3a0 [ 300.947087][T12563] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.952210][T12563] ? vfs_write+0x7c4/0xc90 [ 300.956682][T12563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.963044][T12563] ? do_syscall_64+0x100/0x230 [ 300.967832][T12563] ? do_syscall_64+0xb6/0x230 [ 300.972531][T12563] do_syscall_64+0xf3/0x230 [ 300.977052][T12563] ? clear_bhb_loop+0x35/0x90 [ 300.981742][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.987763][T12563] RIP: 0033:0x7f957917def9 [ 300.992191][T12563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.011892][T12563] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.020314][T12563] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 301.028296][T12563] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 301.036302][T12563] RBP: 00007f9579ee2090 R08: 0000000000000000 R09: 0000000000000000 [ 301.044293][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.052290][T12563] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 301.060287][T12563] [ 301.548029][T12461] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.560197][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.567543][ T5245] Bluetooth: hci0: command tx timeout [ 301.585461][T12461] bridge_slave_1: entered allmulticast mode [ 301.599017][T12461] bridge_slave_1: entered promiscuous mode [ 301.608514][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2104'. [ 301.750514][T12577] syzkaller1: entered promiscuous mode [ 301.763088][T12577] syzkaller1: entered allmulticast mode [ 301.783377][T12435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.835947][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.911997][T12435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.929640][T12435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.970022][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.048697][T12435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 302.168073][ T11] bridge_slave_1: left allmulticast mode [ 302.188974][ T11] bridge_slave_1: left promiscuous mode [ 302.202824][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.233635][ T11] bridge_slave_0: left allmulticast mode [ 302.239338][ T11] bridge_slave_0: left promiscuous mode [ 302.252264][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.438420][T12611] xt_CONNSECMARK: invalid mode: 0 [ 302.762305][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.777942][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.790203][ T11] bond0 (unregistering): Released all slaves [ 302.819109][T12461] team0: Port device team_slave_0 added [ 302.838195][T12613] netlink: 'syz.3.2111': attribute type 10 has an invalid length. [ 302.870419][T12613] bond0: (slave netdevsim0): no link monitoring support [ 302.879768][T12613] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 302.904423][T12613] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.912453][T12613] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 302.958954][T12461] team0: Port device team_slave_1 added [ 303.065065][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.073537][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.110072][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.180928][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.212311][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.250520][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.438366][T12461] hsr_slave_0: entered promiscuous mode [ 303.490436][T12461] hsr_slave_1: entered promiscuous mode [ 303.734669][T12639] FAULT_INJECTION: forcing a failure. [ 303.734669][T12639] name failslab, interval 1, probability 0, space 0, times 0 [ 303.766334][T12639] CPU: 0 UID: 0 PID: 12639 Comm: syz.3.2121 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 303.776819][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.786935][T12639] Call Trace: [ 303.790264][T12639] [ 303.793219][T12639] dump_stack_lvl+0x241/0x360 [ 303.797956][T12639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.803298][T12639] ? __pfx__printk+0x10/0x10 [ 303.807939][T12639] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 303.813463][T12639] ? __pfx___might_resched+0x10/0x10 [ 303.818898][T12639] should_fail_ex+0x3b0/0x4e0 [ 303.820405][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 303.823640][T12639] should_failslab+0xac/0x100 [ 303.823684][T12639] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 303.823717][T12639] __kmalloc_cache_noprof+0x6c/0x2c0 [ 303.823749][T12639] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 303.853480][T12639] genl_rcv_msg+0xb14/0xec0 [ 303.858024][T12639] ? mark_lock+0x9a/0x350 [ 303.858689][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 303.862395][T12639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.862454][T12639] ? __pfx_lock_acquire+0x10/0x10 [ 303.862487][T12639] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 303.862520][T12639] ? __pfx___might_resched+0x10/0x10 [ 303.892866][T12639] netlink_rcv_skb+0x1e3/0x430 [ 303.897691][T12639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.902738][T12639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.908060][T12639] ? __netlink_deliver_tap+0x77e/0x7c0 [ 303.913558][T12639] genl_rcv+0x28/0x40 [ 303.917587][T12639] netlink_unicast+0x7f6/0x990 [ 303.922418][T12639] ? __pfx_netlink_unicast+0x10/0x10 [ 303.927787][T12639] ? __virt_addr_valid+0x183/0x530 [ 303.932929][T12639] ? __check_object_size+0x49c/0x900 [ 303.938261][T12639] ? bpf_lsm_netlink_send+0x9/0x10 [ 303.943402][T12639] netlink_sendmsg+0x8e4/0xcb0 [ 303.948220][T12639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.953529][T12639] ? __import_iovec+0x536/0x820 [ 303.958420][T12639] ? aa_sock_msg_perm+0x91/0x160 [ 303.963371][T12639] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 303.968689][T12639] ? security_socket_sendmsg+0x87/0xb0 [ 303.974173][T12639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.979474][T12639] __sock_sendmsg+0x221/0x270 [ 303.984190][T12639] ____sys_sendmsg+0x525/0x7d0 [ 303.989327][T12639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.995069][T12639] __sys_sendmsg+0x2b0/0x3a0 [ 303.999683][T12639] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.004812][T12639] ? vfs_write+0x7c4/0xc90 [ 304.009278][T12639] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.015625][T12639] ? do_syscall_64+0x100/0x230 [ 304.020413][T12639] ? do_syscall_64+0xb6/0x230 [ 304.025111][T12639] do_syscall_64+0xf3/0x230 [ 304.029631][T12639] ? clear_bhb_loop+0x35/0x90 [ 304.034365][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.040315][T12639] RIP: 0033:0x7f957917def9 [ 304.044782][T12639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.064421][T12639] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.072860][T12639] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 304.080859][T12639] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 304.088840][T12639] RBP: 00007f9579ee2090 R08: 0000000000000000 R09: 0000000000000000 [ 304.096818][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.104816][T12639] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 304.112820][T12639] [ 304.211164][ T11] hsr_slave_0: left promiscuous mode [ 304.220524][ T11] hsr_slave_1: left promiscuous mode [ 304.245879][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.258100][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.266650][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.283010][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.312103][ T11] veth1_macvtap: left promiscuous mode [ 304.318148][ T11] veth0_macvtap: left promiscuous mode [ 304.324316][ T11] veth1_vlan: left promiscuous mode [ 304.331660][ T11] veth0_vlan: left promiscuous mode [ 304.958295][ T11] team0 (unregistering): Port device team_slave_1 removed [ 305.009022][ T11] team0 (unregistering): Port device team_slave_0 removed [ 305.556977][T12652] netlink: 'syz.3.2126': attribute type 3 has an invalid length. [ 305.569518][T12652] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2126'. [ 305.743542][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.758596][T12435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.768341][T12658] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 305.786395][T12662] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 305.865516][T12435] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.924897][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.932157][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.042471][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.049785][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.161303][T12671] xt_TCPMSS: Only works on TCP SYN packets [ 306.617222][T12435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.649660][T12461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.653293][T12691] FAULT_INJECTION: forcing a failure. [ 306.653293][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 306.686441][T12461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.708367][T12461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.713662][T12691] CPU: 0 UID: 0 PID: 12691 Comm: syz.2.2137 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 306.725534][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 306.735624][T12691] Call Trace: [ 306.738931][T12691] [ 306.741891][T12691] dump_stack_lvl+0x241/0x360 [ 306.746652][T12691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.751900][T12691] ? __pfx__printk+0x10/0x10 [ 306.756547][T12691] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 306.762039][T12691] ? __pfx___might_resched+0x10/0x10 [ 306.767444][T12691] should_fail_ex+0x3b0/0x4e0 [ 306.772137][T12691] should_failslab+0xac/0x100 [ 306.776833][T12691] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 306.782218][T12691] __kmalloc_cache_noprof+0x6c/0x2c0 [ 306.787518][T12691] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 306.792745][T12691] genl_rcv_msg+0xb14/0xec0 [ 306.797261][T12691] ? mark_lock+0x9a/0x350 [ 306.801617][T12691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.806677][T12691] ? __pfx_lock_acquire+0x10/0x10 [ 306.811722][T12691] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 306.817454][T12691] ? __pfx___might_resched+0x10/0x10 [ 306.822768][T12691] netlink_rcv_skb+0x1e3/0x430 [ 306.827554][T12691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.832591][T12691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.838074][T12691] ? __netlink_deliver_tap+0x77e/0x7c0 [ 306.843562][T12691] genl_rcv+0x28/0x40 [ 306.847555][T12691] netlink_unicast+0x7f6/0x990 [ 306.852363][T12691] ? __pfx_netlink_unicast+0x10/0x10 [ 306.857659][T12691] ? __virt_addr_valid+0x183/0x530 [ 306.862793][T12691] ? __check_object_size+0x49c/0x900 [ 306.868094][T12691] ? bpf_lsm_netlink_send+0x9/0x10 [ 306.873219][T12691] netlink_sendmsg+0x8e4/0xcb0 [ 306.878039][T12691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.883344][T12691] ? __import_iovec+0x536/0x820 [ 306.888237][T12691] ? aa_sock_msg_perm+0x91/0x160 [ 306.893188][T12691] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 306.898484][T12691] ? security_socket_sendmsg+0x87/0xb0 [ 306.903962][T12691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.909263][T12691] __sock_sendmsg+0x221/0x270 [ 306.913964][T12691] ____sys_sendmsg+0x525/0x7d0 [ 306.918834][T12691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.924151][T12691] __sys_sendmsg+0x2b0/0x3a0 [ 306.928762][T12691] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.933887][T12691] ? vfs_write+0x7c4/0xc90 [ 306.938352][T12691] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.944695][T12691] ? do_syscall_64+0x100/0x230 [ 306.949486][T12691] ? do_syscall_64+0xb6/0x230 [ 306.954184][T12691] do_syscall_64+0xf3/0x230 [ 306.958706][T12691] ? clear_bhb_loop+0x35/0x90 [ 306.963401][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.969304][T12691] RIP: 0033:0x7f92c997def9 [ 306.973726][T12691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.993348][T12691] RSP: 002b:00007f92ca6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.001778][T12691] RAX: ffffffffffffffda RBX: 00007f92c9b35f80 RCX: 00007f92c997def9 [ 307.009760][T12691] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 307.017828][T12691] RBP: 00007f92ca6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 307.025804][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.033785][T12691] R13: 0000000000000000 R14: 00007f92c9b35f80 R15: 00007ffe1452ea78 [ 307.041790][T12691] [ 307.051153][T12461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.423154][T12461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.497644][T12461] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.561606][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.568887][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.577762][T12718] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.594941][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.602189][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.786134][T12461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.828199][T12725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2146'. [ 307.841887][T12725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.849205][T12725] IPv6: NLM_F_CREATE should be set when creating new route [ 307.907581][T12435] veth0_vlan: entered promiscuous mode [ 307.966597][T12435] veth1_vlan: entered promiscuous mode [ 308.057089][T12742] FAULT_INJECTION: forcing a failure. [ 308.057089][T12742] name failslab, interval 1, probability 0, space 0, times 0 [ 308.084095][T12742] CPU: 0 UID: 0 PID: 12742 Comm: syz.1.2150 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 308.094573][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 308.104640][T12742] Call Trace: [ 308.107923][T12742] [ 308.110860][T12742] dump_stack_lvl+0x241/0x360 [ 308.115578][T12742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.120799][T12742] ? __pfx__printk+0x10/0x10 [ 308.125423][T12742] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 308.130903][T12742] ? __pfx___might_resched+0x10/0x10 [ 308.136211][T12742] should_fail_ex+0x3b0/0x4e0 [ 308.140935][T12742] should_failslab+0xac/0x100 [ 308.145633][T12742] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 308.151105][T12742] __kmalloc_cache_noprof+0x6c/0x2c0 [ 308.156420][T12742] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 308.161656][T12742] genl_rcv_msg+0xb14/0xec0 [ 308.166170][T12742] ? mark_lock+0x9a/0x350 [ 308.170521][T12742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.175587][T12742] ? __pfx_lock_acquire+0x10/0x10 [ 308.180624][T12742] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 308.186361][T12742] ? __pfx___might_resched+0x10/0x10 [ 308.191667][T12742] netlink_rcv_skb+0x1e3/0x430 [ 308.196452][T12742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.201494][T12742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.206822][T12742] ? __netlink_deliver_tap+0x77e/0x7c0 [ 308.212313][T12742] genl_rcv+0x28/0x40 [ 308.216308][T12742] netlink_unicast+0x7f6/0x990 [ 308.221098][T12742] ? __pfx_netlink_unicast+0x10/0x10 [ 308.226397][T12742] ? __virt_addr_valid+0x183/0x530 [ 308.231528][T12742] ? __check_object_size+0x49c/0x900 [ 308.236831][T12742] ? bpf_lsm_netlink_send+0x9/0x10 [ 308.241960][T12742] netlink_sendmsg+0x8e4/0xcb0 [ 308.246755][T12742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.252149][T12742] ? __import_iovec+0x536/0x820 [ 308.257218][T12742] ? aa_sock_msg_perm+0x91/0x160 [ 308.262186][T12742] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 308.267488][T12742] ? security_socket_sendmsg+0x87/0xb0 [ 308.272968][T12742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.278268][T12742] __sock_sendmsg+0x221/0x270 [ 308.282994][T12742] ____sys_sendmsg+0x525/0x7d0 [ 308.287782][T12742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.293091][T12742] __sys_sendmsg+0x2b0/0x3a0 [ 308.297693][T12742] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.302822][T12742] ? vfs_write+0x7c4/0xc90 [ 308.307296][T12742] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.313647][T12742] ? do_syscall_64+0x100/0x230 [ 308.318445][T12742] ? do_syscall_64+0xb6/0x230 [ 308.323151][T12742] do_syscall_64+0xf3/0x230 [ 308.327675][T12742] ? clear_bhb_loop+0x35/0x90 [ 308.332483][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.338391][T12742] RIP: 0033:0x7f498917def9 [ 308.342819][T12742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.362440][T12742] RSP: 002b:00007f4989eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.370866][T12742] RAX: ffffffffffffffda RBX: 00007f4989335f80 RCX: 00007f498917def9 [ 308.378852][T12742] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 308.386926][T12742] RBP: 00007f4989eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.394994][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.402970][T12742] R13: 0000000000000000 R14: 00007f4989335f80 R15: 00007ffd799df7f8 [ 308.410961][T12742] [ 308.432271][T12435] veth0_macvtap: entered promiscuous mode [ 308.477391][T12435] veth1_macvtap: entered promiscuous mode [ 308.536550][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.566317][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.586974][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.611730][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.646780][T12435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.719431][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.731860][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.745892][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.774886][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.800388][T12435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.843587][T12435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.861353][T12435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.873729][T12435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.882712][T12435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.910795][T12763] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 308.964160][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.059346][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.068145][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.183376][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.195660][T12461] veth0_vlan: entered promiscuous mode [ 309.215350][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.267699][T12461] veth1_vlan: entered promiscuous mode [ 309.350241][T12461] veth0_macvtap: entered promiscuous mode [ 309.462206][T12461] veth1_macvtap: entered promiscuous mode [ 309.518055][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.538804][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.550963][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.566402][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.577369][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.588457][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.600438][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.837756][T12794] FAULT_INJECTION: forcing a failure. [ 309.837756][T12794] name failslab, interval 1, probability 0, space 0, times 0 [ 309.851335][T12794] CPU: 0 UID: 0 PID: 12794 Comm: syz.1.2162 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 309.861810][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 309.871906][T12794] Call Trace: [ 309.875201][T12794] [ 309.878147][T12794] dump_stack_lvl+0x241/0x360 [ 309.882854][T12794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.888087][T12794] ? __pfx__printk+0x10/0x10 [ 309.892704][T12794] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 309.898204][T12794] ? __pfx___might_resched+0x10/0x10 [ 309.903544][T12794] should_fail_ex+0x3b0/0x4e0 [ 309.908249][T12794] should_failslab+0xac/0x100 [ 309.912951][T12794] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 309.918364][T12794] __kmalloc_cache_noprof+0x6c/0x2c0 [ 309.923679][T12794] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 309.929012][T12794] genl_rcv_msg+0xb14/0xec0 [ 309.933534][T12794] ? mark_lock+0x9a/0x350 [ 309.937900][T12794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.942978][T12794] ? __pfx_lock_acquire+0x10/0x10 [ 309.948055][T12794] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 309.953883][T12794] ? __pfx___might_resched+0x10/0x10 [ 309.959225][T12794] netlink_rcv_skb+0x1e3/0x430 [ 309.964015][T12794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.969084][T12794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.974412][T12794] ? __netlink_deliver_tap+0x77e/0x7c0 [ 309.979989][T12794] genl_rcv+0x28/0x40 [ 309.984010][T12794] netlink_unicast+0x7f6/0x990 [ 309.989604][T12794] ? __pfx_netlink_unicast+0x10/0x10 [ 309.994996][T12794] ? __virt_addr_valid+0x183/0x530 [ 310.000124][T12794] ? __check_object_size+0x49c/0x900 [ 310.005425][T12794] ? bpf_lsm_netlink_send+0x9/0x10 [ 310.010552][T12794] netlink_sendmsg+0x8e4/0xcb0 [ 310.015350][T12794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.020653][T12794] ? __import_iovec+0x536/0x820 [ 310.025516][T12794] ? aa_sock_msg_perm+0x91/0x160 [ 310.030466][T12794] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.035762][T12794] ? security_socket_sendmsg+0x87/0xb0 [ 310.041238][T12794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.046540][T12794] __sock_sendmsg+0x221/0x270 [ 310.051237][T12794] ____sys_sendmsg+0x525/0x7d0 [ 310.056020][T12794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.061360][T12794] __sys_sendmsg+0x2b0/0x3a0 [ 310.065965][T12794] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.071080][T12794] ? vfs_write+0x7c4/0xc90 [ 310.075544][T12794] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.081905][T12794] ? do_syscall_64+0x100/0x230 [ 310.086686][T12794] ? do_syscall_64+0xb6/0x230 [ 310.091384][T12794] do_syscall_64+0xf3/0x230 [ 310.095904][T12794] ? clear_bhb_loop+0x35/0x90 [ 310.100593][T12794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.106495][T12794] RIP: 0033:0x7f498917def9 [ 310.110920][T12794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.130533][T12794] RSP: 002b:00007f4989eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.138961][T12794] RAX: ffffffffffffffda RBX: 00007f4989335f80 RCX: 00007f498917def9 [ 310.146939][T12794] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 310.154916][T12794] RBP: 00007f4989eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.162895][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.170872][T12794] R13: 0000000000000000 R14: 00007f4989335f80 R15: 00007ffd799df7f8 [ 310.178867][T12794] [ 311.910710][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.936518][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.952774][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.985358][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.996889][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.011261][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.338903][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2161'. [ 312.360368][T12799] netlink: 'syz.1.2163': attribute type 5 has an invalid length. [ 312.369731][T12799] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2163'. [ 312.398732][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.427490][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.451883][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.462985][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.478014][T12461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.489128][T12461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.503350][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.520611][T12461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.537155][T12461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.546229][T12461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.556706][T12461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.652594][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.688381][T12813] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 312.739281][T12813] bond1: entered promiscuous mode [ 312.779335][T12815] lo: entered promiscuous mode [ 312.789963][T12815] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.833792][T12815] bond1: (slave lo): making interface the new active one [ 312.854712][T12815] bond1: (slave lo): Enslaving as an active interface with an up link [ 312.898735][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.982091][T12822] bond1: Unknown bonding mode 6 for xdp xmit [ 312.988896][T12822] ------------[ cut here ]------------ [ 312.994433][T12822] WARNING: CPU: 0 PID: 12822 at drivers/net/bonding/bond_main.c:5615 bond_xdp_get_xmit_slave+0x519/0x690 [ 313.005721][T12822] Modules linked in: [ 313.009651][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.3.2169 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 313.020137][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 313.030260][T12822] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 313.036592][T12822] Code: be da 13 00 00 48 c7 c2 40 5f 96 8c e8 d0 f8 12 fb eb 98 e8 39 57 36 fb 4c 89 e7 48 c7 c6 60 7e 96 8c 89 da e8 08 5e 5c 05 90 <0f> 0b 90 eb a6 e8 1d 57 36 fb 48 85 db 74 0a e8 13 57 36 fb e9 72 [ 313.056273][T12822] RSP: 0018:ffffc90004917648 EFLAGS: 00010246 [ 313.062450][T12822] RAX: dd38523eb58ac800 RBX: 0000000000000006 RCX: dd38523eb58ac800 [ 313.070454][T12822] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 313.078509][T12822] RBP: ffff888027af2038 R08: ffffffff817401bc R09: fffffbfff1cfa0e0 [ 313.086561][T12822] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffff888035338000 [ 313.094593][T12822] R13: ffff888035338000 R14: ffff888035338cc0 R15: dffffc0000000000 [ 313.102651][T12822] FS: 00007f9579ee26c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 313.111642][T12822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.118256][T12822] CR2: 0000000020001988 CR3: 00000000347d4000 CR4: 00000000003506f0 [ 313.126380][T12822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.134420][T12822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.142454][T12822] Call Trace: [ 313.145760][T12822] [ 313.148715][T12822] ? __warn+0x163/0x4e0 [ 313.152960][T12822] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 313.158646][T12822] ? report_bug+0x2b3/0x500 [ 313.163242][T12822] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 313.168926][T12822] ? handle_bug+0x3e/0x70 [ 313.173323][T12822] ? exc_invalid_op+0x1a/0x50 [ 313.178030][T12822] ? asm_exc_invalid_op+0x1a/0x20 [ 313.183137][T12822] ? __wake_up_klogd+0xcc/0x110 [ 313.188026][T12822] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 313.193743][T12822] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 313.199422][T12822] xdp_master_redirect+0x143/0x2d0 [ 313.204611][T12822] bpf_test_run_xdp_live+0x17aa/0x2160 [ 313.210119][T12822] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 313.216108][T12822] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 313.221731][T12822] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 313.227576][T12822] ? synchronize_rcu+0x11b/0x360 [ 313.232593][T12822] ? __pfx_synchronize_rcu+0x10/0x10 [ 313.238034][T12822] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 313.244366][T12822] ? 0xffffffffa0001d94 [ 313.248553][T12822] ? 0xffffffffa0001e68 [ 313.252796][T12822] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 313.258758][T12822] ? _copy_from_user+0xa6/0xe0 [ 313.263634][T12822] ? bpf_test_init+0x15a/0x180 [ 313.268436][T12822] ? xdp_convert_md_to_buff+0x5b/0x330 [ 313.273976][T12822] bpf_prog_test_run_xdp+0x805/0x11e0 [ 313.279402][T12822] ? __pfx_lock_release+0x10/0x10 [ 313.284520][T12822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.290384][T12822] ? __fget_files+0x29/0x470 [ 313.295081][T12822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.300943][T12822] bpf_prog_test_run+0x33a/0x3b0 [ 313.305969][T12822] __sys_bpf+0x48d/0x810 [ 313.310259][T12822] ? __pfx___sys_bpf+0x10/0x10 [ 313.315098][T12822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.321140][T12822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.327209][T12822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.333621][T12822] ? do_syscall_64+0x100/0x230 [ 313.338443][T12822] __x64_sys_bpf+0x7c/0x90 [ 313.342938][T12822] do_syscall_64+0xf3/0x230 [ 313.347494][T12822] ? clear_bhb_loop+0x35/0x90 [ 313.352255][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.358205][T12822] RIP: 0033:0x7f957917def9 [ 313.362696][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.382389][T12822] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.390833][T12822] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 313.398859][T12822] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 313.406899][T12822] RBP: 00007f95791f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 313.414938][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.422966][T12822] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 313.430999][T12822] [ 313.434090][T12822] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.441398][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.3.2169 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 313.451847][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 313.461938][T12822] Call Trace: [ 313.465242][T12822] [ 313.468282][T12822] dump_stack_lvl+0x241/0x360 [ 313.473008][T12822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.478252][T12822] ? __pfx__printk+0x10/0x10 [ 313.483165][T12822] ? vscnprintf+0x5d/0x90 [ 313.487531][T12822] panic+0x349/0x860 [ 313.491472][T12822] ? __warn+0x172/0x4e0 [ 313.495665][T12822] ? __pfx_panic+0x10/0x10 [ 313.500149][T12822] __warn+0x346/0x4e0 [ 313.504210][T12822] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 313.509902][T12822] report_bug+0x2b3/0x500 [ 313.514272][T12822] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 313.519979][T12822] handle_bug+0x3e/0x70 [ 313.524170][T12822] exc_invalid_op+0x1a/0x50 [ 313.528719][T12822] asm_exc_invalid_op+0x1a/0x20 [ 313.533595][T12822] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 313.539855][T12822] Code: be da 13 00 00 48 c7 c2 40 5f 96 8c e8 d0 f8 12 fb eb 98 e8 39 57 36 fb 4c 89 e7 48 c7 c6 60 7e 96 8c 89 da e8 08 5e 5c 05 90 <0f> 0b 90 eb a6 e8 1d 57 36 fb 48 85 db 74 0a e8 13 57 36 fb e9 72 [ 313.559473][T12822] RSP: 0018:ffffc90004917648 EFLAGS: 00010246 [ 313.565550][T12822] RAX: dd38523eb58ac800 RBX: 0000000000000006 RCX: dd38523eb58ac800 [ 313.573525][T12822] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 313.581509][T12822] RBP: ffff888027af2038 R08: ffffffff817401bc R09: fffffbfff1cfa0e0 [ 313.589584][T12822] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffff888035338000 [ 313.597566][T12822] R13: ffff888035338000 R14: ffff888035338cc0 R15: dffffc0000000000 [ 313.605562][T12822] ? __wake_up_klogd+0xcc/0x110 [ 313.610972][T12822] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 313.616635][T12822] xdp_master_redirect+0x143/0x2d0 [ 313.621868][T12822] bpf_test_run_xdp_live+0x17aa/0x2160 [ 313.627423][T12822] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 313.633356][T12822] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 313.639103][T12822] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 313.645101][T12822] ? synchronize_rcu+0x11b/0x360 [ 313.650058][T12822] ? __pfx_synchronize_rcu+0x10/0x10 [ 313.655392][T12822] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 313.661641][T12822] ? 0xffffffffa0001d94 [ 313.665801][T12822] ? 0xffffffffa0001e68 [ 313.669978][T12822] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 313.675904][T12822] ? _copy_from_user+0xa6/0xe0 [ 313.680679][T12822] ? bpf_test_init+0x15a/0x180 [ 313.685453][T12822] ? xdp_convert_md_to_buff+0x5b/0x330 [ 313.690929][T12822] bpf_prog_test_run_xdp+0x805/0x11e0 [ 313.696322][T12822] ? __pfx_lock_release+0x10/0x10 [ 313.701367][T12822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.707217][T12822] ? __fget_files+0x29/0x470 [ 313.711830][T12822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.717649][T12822] bpf_prog_test_run+0x33a/0x3b0 [ 313.722603][T12822] __sys_bpf+0x48d/0x810 [ 313.726856][T12822] ? __pfx___sys_bpf+0x10/0x10 [ 313.731630][T12822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.737645][T12822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.743641][T12822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.749986][T12822] ? do_syscall_64+0x100/0x230 [ 313.754788][T12822] __x64_sys_bpf+0x7c/0x90 [ 313.759213][T12822] do_syscall_64+0xf3/0x230 [ 313.763731][T12822] ? clear_bhb_loop+0x35/0x90 [ 313.768415][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.774313][T12822] RIP: 0033:0x7f957917def9 [ 313.778731][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.798342][T12822] RSP: 002b:00007f9579ee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.806765][T12822] RAX: ffffffffffffffda RBX: 00007f9579335f80 RCX: 00007f957917def9 [ 313.814741][T12822] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 313.822716][T12822] RBP: 00007f95791f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 313.830688][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.838664][T12822] R13: 0000000000000000 R14: 00007f9579335f80 R15: 00007fff3361b298 [ 313.846657][T12822] [ 313.849984][T12822] Kernel Offset: disabled [ 313.854408][T12822] Rebooting in 86400 seconds..