last executing test programs: 5.670939762s ago: executing program 1 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="716d8f55aa49819ba1bd1f325af8e818944ae8169ba820d35a8c94bd7bd23da18e821258ebc44b25828e5cfa1ff5611b8b9589daee396ae4860796cd6a65f3efbb4bfeb640fc1372fbb424153fa32e20e155c63ad3448d76cead79c78331824df9874bf0409d7fec7a7798a2f502941ed24dc66e3ac2f5da4bbc54882bef363bfa38cf259dbaff5b34311136795c7a9e7002", 0x92) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) sendfile(r0, r5, &(0x7f0000000240)=0x8001, 0x5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="82c10a6f4a43f37d113611b75c7a89", @ANYRES16=r6, @ANYBLOB="010000000000000000000e000000180001801400020067656e65766530000000000000000000"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3.903404581s ago: executing program 0 (id=1291): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x180000000) write(r0, &(0x7f0000000340)="240000001a005f0400f9f4008000000180202000000046bf650000000000000800020000", 0x24) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="835a", 0x2}, {&(0x7f0000000100)="236fec4e3164242d11c6f14437851f0a2db7", 0x12}], 0x2}}], 0x1, 0x4000c000) sendto$inet6(r2, &(0x7f00000002c0)="f6584496", 0x4, 0x0, 0x0, 0x0) 3.902905974s ago: executing program 1 (id=1292): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0x1000000, 0x2}]}]}}, 0x0, 0x32, 0x0, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000040)={0x3}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 3.814574212s ago: executing program 0 (id=1293): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x43, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000380)=ANY=[], 0x42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x20) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000005dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) recvfrom$unix(r9, &(0x7f0000000080)=""/31, 0x1f, 0x2023, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) write(r1, &(0x7f0000000340)="18000000010003", 0x7) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.648581266s ago: executing program 1 (id=1294): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'team0\x00', {}, {}, 0x29, 0x0, 0x44}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0xb46, 0x80, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, 0x1, 0x5, [0x1e, 0x27, 0x38, 0x19, 0x5, 0x32, 0x7, 0x38, 0x5, 0x2a, 0xb, 0x8, 0x16, 0x5, 0x25, 0x24], 0x1, 0x7, 0x8}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x5}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x1, 0x4, 0x6, 0x6], 0x6, 0x7}, {0x0, [0x4, 0x88f101f9c186dbd0, 0x0, 0x6, 0x6, 0x4], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x93, @private1, 0x386}]}, &(0x7f0000000240)=0x10) 3.588163751s ago: executing program 2 (id=1295): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESDEC], 0x50}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000000c0), 0xfffffe12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYBLOB="00000000000000006608000000000000180000008a4fec1bed8060d654c30000000000000000000000009500000000000000360a020000000000180100002020782500000000202020207b1af8ff00000000bfa100000000000005010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7ffffd, @void, @value}, 0x94) 3.586479661s ago: executing program 4 (id=1296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="8457", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x13b00, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="8457", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x13b00, 0x0, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$tipc(r2, 0x0, 0x0) (async) 3.468371289s ago: executing program 1 (id=1297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="c770561b7b84a1b6dfeadc05122892329f3f134b0eae7289e75f4172f0f1583066531cb7d9bd9ee753e4a51c7f40ab59843286d5d555f83cf4d01ea862aaaf6cb0bb363404e5d2ab83e52d28f098ecd331d55958cd4be7", @ANYRESHEX=r0, @ANYRES32=r0], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010400f8ffffffb702000008000000b70300000010000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r8, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="b3756201505e029106f8240c1c6a3340c5f8cd30795965b04da55f4060ec5f2cffd4e71c44ca31ea2262ce7d41057421ff3bf2d37ed5be55d8a6e66deca92e932749003628ec64cdc6f754551ce35d07d0d5f88311b66bb8119867cd83fa4edcd0590cd0f613a763e17e8c892ffb5aac29f0a45bdb083936d7f58e34473bad77e60cf9c089527e2d9359150a509c9d6cd3ba6a430f210c6919c52e47ecc2f21150d6a44e36f5", 0xa6) r9 = accept(r0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="564004c6852da7a2", 0x8}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x1) 3.400277687s ago: executing program 4 (id=1298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800007fd3bcba2b97cda849edf3e6dfc9fb710000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01000090780000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x1d096bba4d5083b7}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000006fe5ffffffffffffbbf40002009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x3e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f00010300000000480000000101008098d2c2"], 0x114}], 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = socket(0x1, 0x80000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x800, 0x20002504, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff}}) socket$netlink(0x10, 0x3, 0x5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01072bbd7000000028f055524cacb1e24239000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 3.160784969s ago: executing program 3 (id=1299): syz_emit_ethernet(0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000413a00fe8000000000000000000000000000bbff020000000000000000000000000001010290780400000067cc8d3b00003301fc01000000000900fffff4000000000000000000000000000000ffff00000000290000000000000003fb5b793ba4e54403"], 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0)=0x80000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x2000c005}, 0x8080) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000180)=0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000400)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r4, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440000000000003a5f000000000000004c37160000200002000a"], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) 3.004901557s ago: executing program 1 (id=1300): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="020000000980ffff", 0x8) 2.868536204s ago: executing program 0 (id=1301): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.828378386s ago: executing program 3 (id=1302): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001ac0)=""/4084, 0xff4, 0x2df) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000100)}, 0x20) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000080)=""/170, &(0x7f0000000140)=0xaa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r2, 0x5) 2.762655964s ago: executing program 1 (id=1303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd7c", 0xb}], 0x2, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x20, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.761168234s ago: executing program 0 (id=1304): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c0015005a"], 0xc4}}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000140001000000000000009530000001020000000000000000000000000000f5b40bc50000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6400000003010000000000000000000000000008000049a80000000900000009000000090400170008000740000000052800170000000001000000030000000600000002000000090000000800001000000000060000000500000000000000000000000037188b176711dfdae1a2e8b77740ea912faa5302af0de4529198b536d73cd187df7b94aff56c3d14ce4be0941e6281a4c4e89eef62555ac9aa4faf5e82bd3891fb0db68e2bcda386cdf7511f9028275c0d446c481ca859f50f61f0ac54a9c69f56253f5d65a06f5a93163a7d46eb705923e43dd956e335223c0df659f5309a5abbf79d4a9627dc6bc31cdd65a689931692cce7d990cbabdf1a554cd043a9d246f30ae63d01d9adc4bbcd1f0a0d869a915e8b91ff3d3ead967ebb918ac7e8442aafb26ea551d76fd96bd9ed66c9a936b519d7037efa90af8cbe4ef4faf0e6a35bddd37976def38e036f16d8b8f3a8054b5c5be324d0e5f6"], 0x64}, 0x1, 0x0, 0x0, 0x40c0804}, 0x11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000880)=ANY=[], 0x20}}, 0x4) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtaction={0x84, 0x30, 0x200, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x3ffe, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000088701cb9775fc3c293f0370400ba2e1a"], 0x18}, 0x404f444) sendmsg$NFT_BATCH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4044010) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9f912202eb0100180000000000000000010009000000000e030000000000000000615f5f0000000200000000000000008ac881cc778106fb996adb21d3136459378912c159346f7baa37f801ee22265499ac61d376e28ecccea1d21a17bd45a59b7aeaa128645dcc29a62eebecc16f087a7d5d0a2ec7db89f8e04a7b77841406bbd78e406dfded815faba6261eded2c43d97d6328fb96d50e87aa61afc4cf2bcbe7bf67e48e3c774001aedd40f406b5e22ae3db035994ef9d9f5add6e1de85376f7a628ac85291499a6ceaf18fb828a19a7d5df5"], 0x0, 0x2d, 0x0, 0x1, 0xcdd6, 0x0, @void, @value}, 0x28) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) setsockopt(r8, 0x84, 0x82, &(0x7f0000000000)="de4db5a89d957e2e", 0x8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x2, 0x5a0, 0x4d0, 0x1e0, 0xffffffff, 0x0, 0xf0, 0x4d0, 0x4d0, 0xffffffff, 0x4d0, 0x4d0, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @port, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key=0xd, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0xe}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x600) 2.204608384s ago: executing program 0 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000230000000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000280)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fbfffffffcdbdf251c00e0ff170001801400020065727370616e30000000000000000000"], 0x2c}}, 0x4000000) unshare(0x400) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r9, 0x58, &(0x7f0000000500)}, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000300)=@req={0x28, &(0x7f00000002c0)={'veth0\x00', @ifru_addrs=@nl=@unspec}}) sendto$inet(r1, &(0x7f0000000140)="332b0a0a3524dcc68bf54e074e08abddcf633c3ea0eee1ceecd74c28fb05c4ad4c8f7a3ce58c503d1cc2b44b0117f9e7daea40846c6db91b9c4bad046e03366cd7bf883044a453d8e4c517a111195de152c0421e0670281b210442f3f8ba7e2c24fd2dcb290b29cdefed1eb61fb7f898afb746897ac2d82e0e8902923d975af9dfc1e7c99b5afad475e3f6cd321a7370686358e3cc8be56b2676498e376758dcf411ff37fea7382de875493bdaa77c873ba42d19de0e9d84c4c26ca06b7ac8432d4059c2847d5d2f", 0xc8, 0x10, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, r10, 0xcffa970eec9ccd23, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@crypto_settings, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x6d, 0x115, "5823d0df6dc21cddee30a95547c26c6b70a13461767ffe3b907916f4d32e7ac08c9850980a2a7068bbdcd5c9db15cd840113c0f48e7cbec402486802f237cda18cc080cd13a5fc667cf880f976d15dc9474de8ed02641f3b0170ea2d396cd36b1da9c9b10aeb847e6b"}, @NL80211_ATTR_SAE_PASSWORD={0x30, 0x115, "9e301538379e68ca4e286d2b821e3bec76ec3c5820936b9724cc98772d7106ebdbc419342da8e1c231ec96f6"}, @NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac03, 0xfac08, 0xfac03, 0xfac06, 0x1e, 0xfb389cfdc477ca89, 0xfac11]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x40) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r12], 0x50}}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000"], 0x15c}}, 0x0) 2.180488945s ago: executing program 2 (id=1306): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0xfd35, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x40}}, 0x0) 2.179865174s ago: executing program 3 (id=1307): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xfc, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x8a7cccb5ed637258}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4056d35d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1258dd1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dec8657}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c313414}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x676dc91a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3baa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x290b76e8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3412}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ee0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1d2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68cc}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e7813c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6796300a}]}]}]}, 0xfc}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x1ff, 0x8, 0x1}, {0x4, 0x6, 0x7, 0x9}, {0x2, 0x9, 0x2, 0x6}]}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.048018978s ago: executing program 4 (id=1308): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x1, 0xfffff032}, {0x45}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x48001) 1.892319497s ago: executing program 4 (id=1309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) write(r1, &(0x7f0000000340)="18000000010003", 0x7) (fail_nth: 3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.840430976s ago: executing program 3 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4004010, &(0x7f0000000a80)={0x11, 0x5, r3, 0x1, 0x80, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001000000090000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c0cbba2384779c881ee7a4f9dec53d93545619a347a846d511857c6adee7d2ab68ac29aa74f7959778315c982e5fb5194d6c41fb48908ff007551fc33a0b8824b2d7b7f1248d5c699f83b47a9d590de0174304a7074c1f50194653b5ebe5dd3cee9503b41daa9fd6e0d63f2ba2a368d0ed08a932c833517779f4a308ac28f9942b6b95d8c1300f6e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r5, &(0x7f0000000800)="90000335c2235c466e86fc46cdd1ac00000000000000817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c2ac0000c5b068d0bf46d323456536016466fcb788caaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b00151df32c1739d7fbee9a9bbd731ae9e0b39000"/156, 0x9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000440)={r2}) socket$inet6(0xa, 0x2, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000001200), 0x0, 0x4040800) 1.362452438s ago: executing program 3 (id=1311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00edffffffffffffff00000003000000000000000000040040000000"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010101}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)="7d9c", 0x2}], 0x1}}], 0x3, 0x40080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r8, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) write(r1, &(0x7f0000000340)="18000000010003", 0x7) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 928.440492ms ago: executing program 4 (id=1312): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000100)=0x80, 0x40000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x20, "e63b3bb139eb8f8da522a39f8835f00bcdfbb3b6c08c7adbbd1b09ccfae332aa"}, &(0x7f0000000180)=0x28) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x800, 0x200, 0x10000, 0x7fff, 0x3}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002021, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x22, &(0x7f0000000540)=ANY=[@ANYBLOB="aa00146f0d00000716907800800000ac1414aa873ea77990e6997df86080eb55e41a4ad5686cf653f2554e2749f9c80696fa88c9e13cff070000bbcecf163b29d9f0b3351471f5a7808ea39eea246f3fe0ced442728ceb0b8627c62d48b55c671f2d68460620f6dab8cc3782fe713055704e15fa832db84028eb21b3c8befa3aa4764f4585256ef825b3b7f0eb6f7ffad1f2463a56ddab84c2f094cdbf4143e837e6d0db8290328fcec834831223d5de2834c81f82aae0cd7d5cb1d46490a339293be97b998486a9bdb121254a871fe1d075"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9}, 0x10) sendmsg$802154_raw(r2, &(0x7f0000000080)={0x0, 0x26, &(0x7f00000000c0)={&(0x7f0000000400)="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", 0x3}, 0x1, 0x0, 0x0, 0x4000081}, 0x448a0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c"], 0x90}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000280)={0xffffe98f, 0x7, 0xa, 0x5}, 0x10) 584.038906ms ago: executing program 0 (id=1313): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) r1 = socket(0x8, 0x6, 0xfffffffd) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000300)={{0x0, 0x10000, 0x40, 0x3, 0x80000001, 0x10001, 0x469, 0x101, 0xb7, 0x8, 0x10001, 0x2, 0x5, 0x0, 0x2}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000780)={{r4, 0x4, 0x10008, 0x100000000, 0xcb, 0x200ffff, 0xfffffffffffffff8, 0x7fffffff, 0x5, 0x4, 0x2, 0x4, 0xa, 0x8000002, 0x9}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000020000000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ed9c739050d0c1445ef879b37299", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={r9, 0x1ff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r9, 0x2, 0x9, 0x7c78c3cc, 0x8, 0x7}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=@newtaction={0x3a0, 0x30, 0x20, 0x0, 0x25dfdbff, {}, [{0x114, 0x1, [@m_vlan={0x110, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0xe4, 0x6, "c3e89fb22a910ca68a4aa20f5ec39bcbc4eed7ce4f457675833b2820b783e75a8ba6649b4705afd42260e119dc26ff4e1a10ff9e93a2a71647440849c05c0db0c99944c12202c366ea52ab177f3f61229ec721cba9f2f30272b408d2d6b6f321f5d4a6d8f8d1f713afc92d3a4d875c1ba8259aebbe551993b4edce0d68aa3290491c5b716c4b7dc3f4b99226e591de0fffaa59a2be964c1e3caf2abad2dafa02d8873f9f39276b9c37ac60588aafcd17706381a875e50e4ccafa9de0b22211d0d4e6eeacf4ee7450fda3b61e5c0453c1ea31ea2bb60c11272b7c2e26265475b9"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, {0x278, 0x1, [@m_mirred={0x144, 0x5, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x7, 0x7, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1ff, 0x3, 0x7fffffff, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x3, 0x5, 0x8b94, 0xba8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x4, 0x4, 0x3}, 0x5}}]}, {0x98, 0x6, "54750374b6d16d3d6dade51eb7e5a5ecaa9e2679d9d6bada9b8eba42b7a9260e12605ac4808c1591e0020ae384b207221ebd921cd7d09ccf3284e1dcaa4c6713352e1075acc65cfdd9e31c1643164d0692915d1724bc7e062cd21ea9a19908d1f2e3120aa73ec2c33b286a477edb2ee4b57d44ac0157d6816657864dcfe2180125b8339677da083618472c730dc4701bf8a0d33e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x130, 0xa, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x5, 0x7, 0x739, 0x8}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x9, 0x9}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffb6e, 0xf, 0x4, 0x3, 0x9}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x6, 0x40, 0x6c131bf5}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x37, 0x3, 0x101, 0x8}, 0x17}}]}, {0x75, 0x6, "8fab20c456ba2b29dd3c6acc7ed5b3964728581e5382d8262b10695f3ec9ada0ff06b06782373b687df5850b235a4af3d3b8b5964dc5c28ab0ae1b03e1bdba85743d584fdbd76ffa0f6b5ce0a5abcb12c283268d03e514e08382f13adbd9602a97edc72399e84bd7c9efd0a061257e342a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x3a0}}, 0x10) r10 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x891a, &(0x7f0000000180)) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r2, 0x0, 0x0, 0x10160, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=@delqdisc={0xfc, 0x25, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0x8, 0xb}, {0xd, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x5, 0x4, 0x0, 0x514, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x1, 0x7, 0xd, 0x2, 0x0, 0x5, 0x6}}, {0x10, 0x2, [0x3ff, 0x9, 0x64, 0x74d, 0x6, 0x80]}}, {{0x1c, 0x1, {0x0, 0x81, 0x81, 0x3712, 0x1, 0x786, 0x2, 0xa}}, {0x18, 0x2, [0x7, 0x1, 0x3, 0x9, 0x5, 0x4, 0x0, 0xfe02, 0x6, 0x0]}}, {{0x1c, 0x1, {0xb9, 0x4, 0x4, 0x6, 0x0, 0xffffef55, 0xfffffff9, 0x5}}, {0xe, 0x2, [0xf68, 0xfff, 0x101, 0x2, 0x11e1]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@default, @bcast, 0x2, 0x20}) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0x0, 0x20}]}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) 565.571222ms ago: executing program 2 (id=1314): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}, {{@arp={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 0x5, 0x3, {@mac=@local, {[0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x1, 0x401, 0x0, 'ip_vti0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x41}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast1, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x29, "af867105d2027f1e738dbd57e08554af37ab6332a5233abb06899e584382514217875ca2927f31178e"}, &(0x7f0000000500)=0x31) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x358, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfc000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x51c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f00000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa60, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10, @empty, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "31f7571c2f2bcf084c7757df2592f2ff4501040a83"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "70b3ea46a6d6eb2a1d0e908bbb397b2c090d9f5028548f574b37"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x64e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa5c0000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2639}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x40}, 0x54) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000b00)={'nat\x00', 0x0, 0x4, 0xda, [0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0xfffffffffffffff7], 0x1, &(0x7f00000009c0)=[{}], &(0x7f0000000a00)=""/218}, &(0x7f0000000b80)=0x78) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(r4, &(0x7f0000000c00)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa8, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "414e5f1f9fe63e0685925200871a897d96c80f0440592421"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6faa5c8d11b5bf1619e92390222a62905bfdff62912b703c"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000000e40), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0xff, 0xff000000, 0xffffff00], 'nr0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x3c, 0x8, 0x1, 0x9}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@mh={{0x28}, {"81bc", 0x1}}, @common=@srh1={{0x90}, {0x87, 0x5, 0x8, 0x2d, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0x1455fa0156b93ee6, 0xff000000], 0xa02, 0x2810}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) sendto$inet6(r8, &(0x7f0000001300)="bca8caeb0470766ddd48e3828e4e9ca28b66d16d9af0613ecd927cb83f7cc71f07d387354f4c80f9eed2f48264e74da02b767c7cd2f3a97f61c7312739591b9246e373ec16cc8d5a9471a8ca66e29d510e3dfb9cde38cea9a39b63ec9bacb9ff5b730e7222ee39dffb51c1b2fff9a047e56a5f4c75da78b837652fed0d1d9dbcd9960174e2d508ddf3eec012684b01d1fb9129a6e90c1d9b0df10a352debec7377efd758422a0488fc7af19f933b7239e06e9a", 0xb3, 0xc8ac51f31ecbf32e, &(0x7f00000013c0)={0xa, 0x4e24, 0x47, @mcast2, 0xf553}, 0x1c) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000890) sendmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)="fed566b35813f0483dfd14bf301fbd6001b06b80a6706cb857abfaec8982e73bdc1fe9b7138d7622f72a75388dbfd9d31bf0632cd42a748edf914338eaed42b3a952408cbc9a4296aac5dae9d78dca65f1ed6e12c680ab77f05250a55815732bef3dd407cc6b6ee44a0726de", 0x6c}], 0x1}, 0x41) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000016c0)=@req3={0xa4ee, 0x5, 0x1, 0x5, 0x8ac, 0x9, 0x1ef}, 0x1c) (async) r10 = socket$inet6(0xa, 0x2, 0x35cf4553) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'tunl0\x00'}) (async) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000001740)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r1, 0x47) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000017c0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x54, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000001900)=[{r3, 0x4100}, {r4, 0x88}, {r8}, {r12, 0x6121}, {r8, 0x400}, {r5, 0x1060}, {r10, 0x800c}, {r8, 0x2200}, {r0, 0x4000}], 0x9, &(0x7f0000001980)={0x77359400}, &(0x7f00000019c0)={[0x3ff]}, 0x8) socket(0x22, 0x1, 0x7) 388.356133ms ago: executing program 3 (id=1315): unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xad356f19b320d40b) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="b2140000000e060300000000000000000002000005"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0b0000000600000000400000", @ANYRES32, @ANYBLOB="61e470823afd23b97637fdb9390330d81c28706bde4bfc12160244d0c1e4320d243d42f6753f164fe60034ac5459c2e24bf178229dcca2c335600e7bfb9aa8622da52788c6143d9c9d0e923b363ce13b77e05ee4637ee24ab477edb4a4b61160ab2b8135010ca9ff1ebe2456b364eae99611b0638beb8521e537f2afd873", @ANYRES64=0x0], 0x20) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x0, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) syz_emit_ethernet(0x6f, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffff1b0180c2000d000800450000610000000000889078ac1e0001ac1414aa00004e23004d9078f2eee374dc40c8c74aded76eadb89719eacf6745b300c9b9d432299ffff94a2067a1d75f0e1d15ad2153ffdcf3466c08885446eb60f86db32de1c92c01d33a732592bb1f9758a8427b5e61661a21e774755c36636d08fda888961cbbfd87811967bc950c34a30ba3"], 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x12) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8345050001000000180012800b00010067656e65766500000800028004000600"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, {0x306, @random="d33f4a872cb9"}, 0x0, {0x2, 0x4e21, @multicast1}, 'wlan1\x00'}) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0xd, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 387.733649ms ago: executing program 2 (id=1316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffd, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="d88e0670", 0x4}], 0x1}}], 0x2, 0x2004c040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0xf4240}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 228.487486ms ago: executing program 2 (id=1317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 49.82754ms ago: executing program 2 (id=1318): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 4 (id=1319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240f058991a52d090f1000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000997671fbcd1fda1a2e000030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x408c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty, 0x0, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4ef82a5a, @dev={0xfe, 0x80, '\x00', 0x23}, 0x5}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x800) accept4$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0}}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x10018115, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x983a}, 0x1c) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="971401000000000034001280090001007866726d0000000024000280080001000000"], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) kernel console output (not intermixed with test programs): ommended to keep mac addresses unique to avoid problems! [ 91.443568][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.477948][ T5842] Bluetooth: hci3: command tx timeout [ 91.483992][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.488828][ T5842] Bluetooth: hci2: command tx timeout [ 91.495758][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.514151][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.527201][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.540633][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.551179][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.565458][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.576739][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.590666][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.599709][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.609297][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.618112][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.632129][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.643698][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.653671][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.664310][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.675789][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.732971][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.742443][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752303][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.761369][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777120][ T5839] veth0_vlan: entered promiscuous mode [ 91.834266][ T5839] veth1_vlan: entered promiscuous mode [ 91.883343][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.883842][ T5837] veth0_macvtap: entered promiscuous mode [ 91.902305][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.934494][ T5837] veth1_macvtap: entered promiscuous mode [ 91.991759][ T241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.999773][ T241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.042883][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.053690][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.065971][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.080148][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.090839][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.105379][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.121725][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.130973][ T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.151454][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.162220][ T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.177004][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.190993][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.210670][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.224331][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.235293][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.247409][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.297358][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.311411][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.325328][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.334430][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.357675][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.377753][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.410839][ T5839] veth0_macvtap: entered promiscuous mode [ 92.431979][ T5839] veth1_macvtap: entered promiscuous mode [ 92.490486][ T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.505368][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.520339][ T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.530157][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.545535][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.557222][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.573027][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.583551][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.594371][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.605814][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.617046][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.631206][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.656547][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.664637][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.705534][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.716267][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.726297][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.738700][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.748652][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.760448][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.770833][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.781405][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.793753][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.895050][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.917334][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.931477][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.942288][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985120][ T5929] dummy0: entered promiscuous mode [ 92.998357][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.006227][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.134321][ T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.144916][ T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.190582][ T5928] dummy0: left promiscuous mode [ 93.266773][ T5933] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 93.303160][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.320291][ T5933] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 93.328905][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.363292][ T5933] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.403581][ T5937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.457474][ T5943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.482577][ T5842] Bluetooth: hci1: command tx timeout [ 93.488936][ T5842] Bluetooth: hci0: command tx timeout [ 93.494878][ T5842] Bluetooth: hci4: command tx timeout [ 93.494917][ T5944] Bluetooth: MGMT ver 1.23 [ 93.532936][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.558683][ T5853] Bluetooth: hci2: command tx timeout [ 93.561030][ T5842] Bluetooth: hci3: command tx timeout [ 93.593501][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.615465][ T5948] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 94.534898][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.554837][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.693372][ T5973] wireguard0: entered promiscuous mode [ 94.721989][ T5973] wireguard0: entered allmulticast mode [ 95.021142][ T5981] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 95.048617][ T5981] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 95.075426][ T5981] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11'. [ 95.140818][ T5981] NCSI netlink: No device for ifindex 458760 [ 95.182817][ T5979] tipc: MTU too low for tipc bearer [ 95.270840][ T5995] netlink: 71 bytes leftover after parsing attributes in process `syz.3.13'. [ 95.897537][ T6009] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.764098][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.992244][ T6027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.014364][ T6027] ªªªªªª: renamed from lo (while UP) [ 97.188129][ T977] cfg80211: failed to load regulatory.db [ 97.263035][ T6032] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.764139][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 97.780907][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19'. [ 97.789941][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 97.797870][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 97.807493][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 97.816833][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 97.825137][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 97.833062][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 97.840811][ T47] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 97.856586][ T47] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 97.931771][ T6036] IPv6: syztnl0: Disabled Multicast RS [ 98.037604][ T6043] Zero length message leads to an empty skb [ 98.139798][ T6048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.26'. [ 98.995519][ T6063] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 99.022097][ T6063] veth1_vlan: entered allmulticast mode [ 99.054644][ T6063] team0: Device veth1_vlan failed to register rx_handler [ 99.323386][ T6075] __nla_validate_parse: 1 callbacks suppressed [ 99.323408][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34'. [ 99.444227][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 99.467335][ T6079] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 99.540265][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 99.589578][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 100.772978][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 101.285845][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.295134][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.418514][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.438147][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.605202][ T6125] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.616323][ T6125] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.630767][ T6125] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.687321][ T6125] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.842381][ T6125] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 101.891268][ T6143] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 101.915169][ T6144] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 101.962513][ T6146] netlink: 'syz.1.55': attribute type 31 has an invalid length. [ 102.203408][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 102.312085][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 102.359705][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.371039][ T6173] netlink: 104 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.540184][ T6181] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 102.575898][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 102.615504][ T6181] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 102.667242][ T6185] block nbd0: not configured, cannot reconfigure [ 102.677635][ T6181] bond1 (unregistering): Released all slaves [ 102.832439][ T6185] raw_sendmsg: syz.2.64 forgot to set AF_INET. Fix it! [ 102.925976][ T6194] netlink: 'syz.1.67': attribute type 11 has an invalid length. [ 103.860433][ T6260] IPVS: Unknown mcast interface: lo [ 104.137746][ T6276] Bluetooth: MGMT ver 1.23 [ 104.327350][ T6285] lo speed is unknown, defaulting to 1000 [ 104.358230][ T6285] lo speed is unknown, defaulting to 1000 [ 104.423321][ T6285] lo speed is unknown, defaulting to 1000 [ 104.474388][ T6285] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.535820][ T6285] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.642801][ T6296] __nla_validate_parse: 6 callbacks suppressed [ 104.642823][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 104.717150][ T6285] lo speed is unknown, defaulting to 1000 [ 104.781764][ T6301] vlan2: entered allmulticast mode [ 104.797239][ T6301] bond0: entered allmulticast mode [ 104.804702][ T6304] x_tables: duplicate underflow at hook 2 [ 104.814852][ T6301] bond_slave_0: entered allmulticast mode [ 104.841666][ T6301] bond_slave_1: entered allmulticast mode [ 104.860596][ T6301] bridge0: port 3(vlan2) entered blocking state [ 104.886819][ T6301] bridge0: port 3(vlan2) entered disabled state [ 104.926354][ T6301] vlan2: entered promiscuous mode [ 104.941881][ T6301] bond0: entered promiscuous mode [ 104.946977][ T6301] bond_slave_0: entered promiscuous mode [ 104.962334][ T6301] bond_slave_1: entered promiscuous mode [ 104.972099][ T6301] bridge0: port 3(vlan2) entered blocking state [ 104.979259][ T6301] bridge0: port 3(vlan2) entered forwarding state [ 105.038984][ T6285] lo speed is unknown, defaulting to 1000 [ 105.052251][ T6285] lo speed is unknown, defaulting to 1000 [ 105.076145][ T6285] lo speed is unknown, defaulting to 1000 [ 105.095976][ T6285] lo speed is unknown, defaulting to 1000 [ 105.383141][ T6338] sctp: [Deprecated]: syz.3.103 (pid 6338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.383141][ T6338] Use struct sctp_sack_info instead [ 105.456503][ T6331] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 105.606520][ T6344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.640931][ T6348] netlink: 'syz.0.106': attribute type 9 has an invalid length. [ 105.658542][ T6348] netlink: 'syz.0.106': attribute type 6 has an invalid length. [ 105.680761][ T6348] netlink: 'syz.0.106': attribute type 7 has an invalid length. [ 105.699909][ T6348] netlink: 'syz.0.106': attribute type 8 has an invalid length. [ 105.751806][ T6354] FAULT_INJECTION: forcing a failure. [ 105.751806][ T6354] name failslab, interval 1, probability 0, space 0, times 1 [ 105.764784][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.2.108 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 105.764811][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.764844][ T6354] Call Trace: [ 105.764867][ T6354] [ 105.764876][ T6354] dump_stack_lvl+0x241/0x360 [ 105.764925][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.764955][ T6354] ? __pfx__printk+0x10/0x10 [ 105.764999][ T6354] should_fail_ex+0x424/0x570 [ 105.765027][ T6354] should_failslab+0xac/0x100 [ 105.765058][ T6354] kmem_cache_alloc_noprof+0x78/0x390 [ 105.765086][ T6354] ? __inet_hash_connect+0xf03/0x25e0 [ 105.765122][ T6354] __inet_hash_connect+0xf03/0x25e0 [ 105.765154][ T6354] ? __pfx___inet6_check_established+0x10/0x10 [ 105.765200][ T6354] ? __inet_hash_connect+0x5e6/0x25e0 [ 105.765235][ T6354] ? __pfx___inet_hash_connect+0x10/0x10 [ 105.765267][ T6354] ? rcu_is_watching+0x15/0xb0 [ 105.765298][ T6354] ? inet6_hash_connect+0xe3/0x160 [ 105.765329][ T6354] dccp_v6_connect+0xcf8/0x14f0 [ 105.765366][ T6354] ? __pfx_dccp_v6_connect+0x10/0x10 [ 105.765392][ T6354] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 105.765448][ T6354] __inet_stream_connect+0x2a7/0xfb0 [ 105.765485][ T6354] ? __local_bh_enable_ip+0x168/0x200 [ 105.765504][ T6354] ? lockdep_hardirqs_on+0x9d/0x150 [ 105.765531][ T6354] ? __pfx___inet_stream_connect+0x10/0x10 [ 105.765553][ T6354] ? __local_bh_enable_ip+0x168/0x200 [ 105.765574][ T6354] ? inet_stream_connect+0x50/0xa0 [ 105.765597][ T6354] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 105.765631][ T6354] inet_stream_connect+0x65/0xa0 [ 105.765660][ T6354] __sys_connect+0x28c/0x2d0 [ 105.765693][ T6354] ? __fget_files+0x2a/0x420 [ 105.765711][ T6354] ? __pfx___sys_connect+0x10/0x10 [ 105.765770][ T6354] __x64_sys_connect+0x7a/0x90 [ 105.765803][ T6354] do_syscall_64+0xf3/0x230 [ 105.765830][ T6354] ? clear_bhb_loop+0x45/0xa0 [ 105.765862][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.765886][ T6354] RIP: 0033:0x7f466b18d169 [ 105.765908][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.765925][ T6354] RSP: 002b:00007f466c095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 105.765947][ T6354] RAX: ffffffffffffffda RBX: 00007f466b3a5fa0 RCX: 00007f466b18d169 [ 105.765961][ T6354] RDX: 0000000000000062 RSI: 0000200000000000 RDI: 0000000000000003 [ 105.765974][ T6354] RBP: 00007f466c095090 R08: 0000000000000000 R09: 0000000000000000 [ 105.765987][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.765999][ T6354] R13: 0000000000000000 R14: 00007f466b3a5fa0 R15: 00007ffefd6909e8 [ 105.766032][ T6354] [ 106.554296][ T6381] bridge1: entered promiscuous mode [ 106.888295][ T6395] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 106.942542][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 106.962160][ T6395] netlink: 68 bytes leftover after parsing attributes in process `syz.4.120'. [ 106.975316][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.101269][ T6400] netlink: 56 bytes leftover after parsing attributes in process `syz.0.121'. [ 107.138247][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'. [ 107.214723][ T6403] FAULT_INJECTION: forcing a failure. [ 107.214723][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 107.227718][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.1.122 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 107.227746][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.227758][ T6403] Call Trace: [ 107.227770][ T6403] [ 107.227778][ T6403] dump_stack_lvl+0x241/0x360 [ 107.227817][ T6403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.227848][ T6403] ? __pfx__printk+0x10/0x10 [ 107.227882][ T6403] ? __lock_acquire+0xad5/0xd80 [ 107.227911][ T6403] should_fail_ex+0x424/0x570 [ 107.227939][ T6403] should_failslab+0xac/0x100 [ 107.227972][ T6403] kmem_cache_alloc_noprof+0x78/0x390 [ 107.228001][ T6403] ? __inet_hash_connect+0x1688/0x25e0 [ 107.228037][ T6403] __inet_hash_connect+0x1688/0x25e0 [ 107.228090][ T6403] ? __inet_hash_connect+0x5e6/0x25e0 [ 107.228126][ T6403] ? __pfx___inet_hash_connect+0x10/0x10 [ 107.228158][ T6403] ? rcu_is_watching+0x15/0xb0 [ 107.228190][ T6403] ? inet6_hash_connect+0xe3/0x160 [ 107.228222][ T6403] dccp_v6_connect+0xcf8/0x14f0 [ 107.228261][ T6403] ? __pfx_dccp_v6_connect+0x10/0x10 [ 107.228288][ T6403] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 107.228342][ T6403] __inet_stream_connect+0x2a7/0xfb0 [ 107.228380][ T6403] ? __local_bh_enable_ip+0x168/0x200 [ 107.228399][ T6403] ? lockdep_hardirqs_on+0x9d/0x150 [ 107.228426][ T6403] ? __pfx___inet_stream_connect+0x10/0x10 [ 107.228448][ T6403] ? __local_bh_enable_ip+0x168/0x200 [ 107.228469][ T6403] ? inet_stream_connect+0x50/0xa0 [ 107.228492][ T6403] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 107.228527][ T6403] inet_stream_connect+0x65/0xa0 [ 107.228564][ T6403] __sys_connect+0x28c/0x2d0 [ 107.228598][ T6403] ? __fget_files+0x2a/0x420 [ 107.228616][ T6403] ? __pfx___sys_connect+0x10/0x10 [ 107.228676][ T6403] __x64_sys_connect+0x7a/0x90 [ 107.228710][ T6403] do_syscall_64+0xf3/0x230 [ 107.228738][ T6403] ? clear_bhb_loop+0x45/0xa0 [ 107.228764][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.228784][ T6403] RIP: 0033:0x7f324138d169 [ 107.228803][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.228819][ T6403] RSP: 002b:00007f324221c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.228841][ T6403] RAX: ffffffffffffffda RBX: 00007f32415a5fa0 RCX: 00007f324138d169 [ 107.228856][ T6403] RDX: 0000000000000062 RSI: 0000200000000000 RDI: 0000000000000003 [ 107.228869][ T6403] RBP: 00007f324221c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.228881][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.228893][ T6403] R13: 0000000000000000 R14: 00007f32415a5fa0 R15: 00007ffff15fa778 [ 107.228926][ T6403] [ 107.821025][ T6421] lo speed is unknown, defaulting to 1000 [ 107.862482][ T6417] lo speed is unknown, defaulting to 1000 [ 107.919125][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 107.933687][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.019182][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 108.330526][ T6437] lo speed is unknown, defaulting to 1000 [ 108.442949][ T6436] lo speed is unknown, defaulting to 1000 [ 109.060248][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 109.086068][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.112266][ T6460] FAULT_INJECTION: forcing a failure. [ 109.112266][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 109.132838][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.1.137 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 109.132868][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.132881][ T6460] Call Trace: [ 109.132888][ T6460] [ 109.132897][ T6460] dump_stack_lvl+0x241/0x360 [ 109.132935][ T6460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.132964][ T6460] ? __pfx__printk+0x10/0x10 [ 109.132998][ T6460] ? __pfx___might_resched+0x10/0x10 [ 109.133029][ T6460] should_fail_ex+0x424/0x570 [ 109.133055][ T6460] should_failslab+0xac/0x100 [ 109.133086][ T6460] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 109.133117][ T6460] ? __alloc_skb+0x1c2/0x480 [ 109.133142][ T6460] __alloc_skb+0x1c2/0x480 [ 109.133162][ T6460] ? dccp_feat_finalise_settings+0x34f/0x3e0 [ 109.133199][ T6460] ? __pfx___alloc_skb+0x10/0x10 [ 109.133222][ T6460] ? ip6_mtu+0x81/0x3f0 [ 109.133254][ T6460] dccp_connect+0x3d9/0x870 [ 109.133281][ T6460] dccp_v6_connect+0xd91/0x14f0 [ 109.133317][ T6460] ? __pfx_dccp_v6_connect+0x10/0x10 [ 109.133344][ T6460] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 109.133407][ T6460] __inet_stream_connect+0x2a7/0xfb0 [ 109.133446][ T6460] ? __local_bh_enable_ip+0x168/0x200 [ 109.133466][ T6460] ? lockdep_hardirqs_on+0x9d/0x150 [ 109.133494][ T6460] ? __pfx___inet_stream_connect+0x10/0x10 [ 109.133516][ T6460] ? __local_bh_enable_ip+0x168/0x200 [ 109.133538][ T6460] ? inet_stream_connect+0x50/0xa0 [ 109.133561][ T6460] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 109.133595][ T6460] inet_stream_connect+0x65/0xa0 [ 109.133623][ T6460] __sys_connect+0x28c/0x2d0 [ 109.133656][ T6460] ? __fget_files+0x2a/0x420 [ 109.133675][ T6460] ? __pfx___sys_connect+0x10/0x10 [ 109.133732][ T6460] __x64_sys_connect+0x7a/0x90 [ 109.133764][ T6460] do_syscall_64+0xf3/0x230 [ 109.133790][ T6460] ? clear_bhb_loop+0x45/0xa0 [ 109.133815][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.133834][ T6460] RIP: 0033:0x7f324138d169 [ 109.133853][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.133868][ T6460] RSP: 002b:00007f324221c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 109.133890][ T6460] RAX: ffffffffffffffda RBX: 00007f32415a5fa0 RCX: 00007f324138d169 [ 109.133904][ T6460] RDX: 0000000000000062 RSI: 0000200000000000 RDI: 0000000000000003 [ 109.133917][ T6460] RBP: 00007f324221c090 R08: 0000000000000000 R09: 0000000000000000 [ 109.133929][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.133940][ T6460] R13: 0000000000000000 R14: 00007f32415a5fa0 R15: 00007ffff15fa778 [ 109.133971][ T6460] [ 109.277415][ T6466] netlink: 'syz.0.138': attribute type 5 has an invalid length. [ 109.401329][ T6456] bridge_slave_1 (unregistering): left allmulticast mode [ 109.430881][ T6456] bridge_slave_1 (unregistering): left promiscuous mode [ 109.439329][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.517148][ T6463] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 109.581947][ T6476] netlink: 'syz.3.141': attribute type 3 has an invalid length. [ 109.919236][ T6495] __nla_validate_parse: 2 callbacks suppressed [ 109.919258][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'. [ 110.105271][ T6495] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 110.122622][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 110.147311][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 110.394394][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 110.647238][ T6527] sctp: [Deprecated]: syz.2.158 (pid 6527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.647238][ T6527] Use struct sctp_sack_info instead [ 110.785339][ T6543] FAULT_INJECTION: forcing a failure. [ 110.785339][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 110.815672][ T6544] Bluetooth: MGMT ver 1.23 [ 110.854411][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.0.161 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 110.854441][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.854454][ T6543] Call Trace: [ 110.854462][ T6543] [ 110.854471][ T6543] dump_stack_lvl+0x241/0x360 [ 110.854509][ T6543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.854538][ T6543] ? __pfx__printk+0x10/0x10 [ 110.854571][ T6543] ? __pfx___might_resched+0x10/0x10 [ 110.854602][ T6543] should_fail_ex+0x424/0x570 [ 110.854629][ T6543] should_failslab+0xac/0x100 [ 110.854660][ T6543] kmem_cache_alloc_noprof+0x78/0x390 [ 110.854689][ T6543] ? skb_clone+0x20c/0x390 [ 110.854717][ T6543] skb_clone+0x20c/0x390 [ 110.854743][ T6543] dccp_connect+0x4f0/0x870 [ 110.854771][ T6543] dccp_v6_connect+0xd91/0x14f0 [ 110.854815][ T6543] ? __pfx_dccp_v6_connect+0x10/0x10 [ 110.854842][ T6543] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 110.854895][ T6543] __inet_stream_connect+0x2a7/0xfb0 [ 110.854934][ T6543] ? __local_bh_enable_ip+0x168/0x200 [ 110.854954][ T6543] ? lockdep_hardirqs_on+0x9d/0x150 [ 110.854980][ T6543] ? __pfx___inet_stream_connect+0x10/0x10 [ 110.855002][ T6543] ? __local_bh_enable_ip+0x168/0x200 [ 110.855023][ T6543] ? inet_stream_connect+0x50/0xa0 [ 110.855046][ T6543] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 110.855080][ T6543] inet_stream_connect+0x65/0xa0 [ 110.855108][ T6543] __sys_connect+0x28c/0x2d0 [ 110.855141][ T6543] ? __fget_files+0x2a/0x420 [ 110.855159][ T6543] ? __pfx___sys_connect+0x10/0x10 [ 110.855248][ T6543] __x64_sys_connect+0x7a/0x90 [ 110.855282][ T6543] do_syscall_64+0xf3/0x230 [ 110.855309][ T6543] ? clear_bhb_loop+0x45/0xa0 [ 110.855335][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.855360][ T6543] RIP: 0033:0x7f8eccf8d169 [ 110.855377][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.855393][ T6543] RSP: 002b:00007f8ecdde6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 110.855415][ T6543] RAX: ffffffffffffffda RBX: 00007f8ecd1a5fa0 RCX: 00007f8eccf8d169 [ 110.855429][ T6543] RDX: 0000000000000062 RSI: 0000200000000000 RDI: 0000000000000003 [ 110.855441][ T6543] RBP: 00007f8ecdde6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.855453][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.855465][ T6543] R13: 0000000000000000 R14: 00007f8ecd1a5fa0 R15: 00007ffdd70f23c8 [ 110.855496][ T6543] [ 111.306049][ T6561] netlink: 'syz.3.165': attribute type 6 has an invalid length. [ 111.582742][ T5897] lo speed is unknown, defaulting to 1000 [ 112.365980][ T6595] pimreg: entered allmulticast mode [ 112.883664][ T6600] pimreg: left allmulticast mode [ 112.906393][ T6625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.175'. [ 112.985243][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'. [ 113.061993][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.178'. [ 113.106247][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.178'. [ 113.207271][ T6642] wireguard0: entered promiscuous mode [ 113.224571][ T6642] wireguard0: entered allmulticast mode [ 113.412704][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 113.607371][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 114.107337][ T5895] IPVS: starting estimator thread 0... [ 114.227083][ T6683] IPVS: using max 27 ests per chain, 64800 per kthread [ 114.377020][ T6696] xt_hashlimit: max too large, truncated to 1048576 [ 114.645953][ T6716] tun0: tun_chr_ioctl cmd 1074025675 [ 114.657204][ T6716] tun0: persist enabled [ 115.114459][ T6732] xt_CT: No such helper "pptp" [ 116.015335][ T6764] lo speed is unknown, defaulting to 1000 [ 116.146118][ T6778] __nla_validate_parse: 4 callbacks suppressed [ 116.146142][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 116.190417][ T6782] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 116.273036][ T6782] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.338942][ T6782] team0: entered promiscuous mode [ 116.344236][ T6782] team_slave_0: entered promiscuous mode [ 116.350720][ T6782] team_slave_1: entered promiscuous mode [ 116.356964][ T6782] team0: entered allmulticast mode [ 116.366135][ T6782] team_slave_0: entered allmulticast mode [ 116.372920][ T6782] team_slave_1: entered allmulticast mode [ 116.386618][ T6782] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.414728][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 116.486328][ T6779] lo speed is unknown, defaulting to 1000 [ 116.708374][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 116.756974][ T6805] x_tables: duplicate underflow at hook 3 [ 116.938998][ T6808] netlink: 'syz.2.227': attribute type 6 has an invalid length. [ 117.007395][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 117.091309][ T6812] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 117.302275][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.385671][ T6825] netlink: 96 bytes leftover after parsing attributes in process `syz.0.231'. [ 117.397072][ T6818] tipc: Failed to remove unknown binding: 66,1,1/0:3260991051/3260991053 [ 117.468807][ T6818] tipc: Failed to remove unknown binding: 66,1,1/0:3260991051/3260991053 [ 117.587601][ T6833] lo speed is unknown, defaulting to 1000 [ 118.632255][ T6870] warning: `syz.2.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.303243][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.424864][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 119.444611][ T6918] netlink: 168 bytes leftover after parsing attributes in process `syz.2.258'. [ 119.533342][ T6925] batadv0: entered promiscuous mode [ 119.545580][ T6925] vlan3: entered promiscuous mode [ 119.646947][ T6929] lo speed is unknown, defaulting to 1000 [ 119.654495][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 119.702687][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 119.734634][ T6938] nbd: illegal input index -381222912 [ 119.773893][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.782412][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.821904][ T6942] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 119.846039][ T6942] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 119.865280][ T6942] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 119.875515][ T6942] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 119.900380][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 119.981038][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.997514][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.003068][ T6952] netlink: 'syz.0.267': attribute type 30 has an invalid length. [ 120.091768][ T6933] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.101417][ T6933] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.110525][ T6933] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.119741][ T6933] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.179121][ T5897] lo speed is unknown, defaulting to 1000 [ 120.184927][ T5897] s›z0: Port: 1 Link DOWN [ 120.221903][ T6952] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 120.231378][ T6952] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 120.573874][ T6976] syz_tun: entered allmulticast mode [ 120.673673][ T6986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.684161][ T6986] bond0: (slave bond1): Enslaving as an active interface with an up link [ 120.706921][ T6974] syz_tun: left allmulticast mode [ 121.402120][ T7003] can: request_module (can-proto-4) failed. [ 121.644556][ T7016] __nla_validate_parse: 1 callbacks suppressed [ 121.644579][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 121.798546][ T7018] netlink: 168 bytes leftover after parsing attributes in process `syz.4.280'. [ 122.021252][ T7018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.068697][ T7026] netlink: 'syz.2.283': attribute type 6 has an invalid length. [ 122.085288][ T7026] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.283'. [ 122.152104][ T7018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.307335][ T7018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.412007][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.452106][ T7018] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.685028][ T7018] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.740270][ T7018] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.790571][ T7018] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.838979][ T7018] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.154351][ T7039] unsupported nlmsg_type 40 [ 123.491612][ T7079] team0: Device gtp0 is of different type [ 123.620157][ T7085] lo speed is unknown, defaulting to 1000 [ 123.673655][ T7088] netlink: 'syz.1.297': attribute type 8 has an invalid length. [ 124.097141][ T7102] netlink: 52 bytes leftover after parsing attributes in process `syz.2.300'. [ 124.361953][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 124.456351][ T7115] tipc: Started in network mode [ 124.462359][ T7115] tipc: Node identity 724d29d6, cluster identity 4711 [ 124.471059][ T7115] tipc: Node number set to 1917659606 [ 124.509090][ T7115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.304'. [ 124.961388][ T9] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0 [ 124.988854][ T9] hid-multitouch 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 125.030064][ T7130] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 125.047563][ T7130] €: entered promiscuous mode [ 125.208866][ T7135] netlink: 208 bytes leftover after parsing attributes in process `syz.2.309'. [ 125.220826][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 125.249386][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 125.452100][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 125.656613][ T7157] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 126.045432][ C1] Unknown status report in ack skb [ 126.183950][ T7176] netlink: 'syz.1.321': attribute type 21 has an invalid length. [ 126.190706][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 126.435609][ T7190] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 126.563393][ T7193] veth5: entered promiscuous mode [ 126.702875][ T7195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.747296][ T7198] tipc: Started in network mode [ 126.761314][ T7198] tipc: Node identity 4, cluster identity 4711 [ 126.778976][ T7198] tipc: Node number set to 4 [ 126.801254][ T7198] __nla_validate_parse: 2 callbacks suppressed [ 126.801277][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'. [ 126.853806][ T7195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.904605][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 126.950278][ T7195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.066872][ T7195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.204895][ T7195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.231767][ T7195] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.254390][ T7195] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.283381][ T7195] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.352955][ T7216] netlink: 80 bytes leftover after parsing attributes in process `syz.3.336'. [ 127.539969][ T7224] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 127.554901][ T7224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.336'. [ 127.572417][ T7224] batman_adv: batadv0: Adding interface: virt_wifi0 [ 127.610071][ T7224] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.643024][ T7224] batman_adv: batadv0: Interface activated: virt_wifi0 [ 127.663639][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'. [ 127.674238][ T7230] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 127.852774][ T7238] x_tables: duplicate underflow at hook 2 [ 127.870339][ T7238] x_tables: duplicate underflow at hook 1 [ 127.982138][ T7244] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 128.072409][ T7249] netlink: 'syz.0.348': attribute type 2 has an invalid length. [ 128.107289][ T7249] lave_0: entered promiscuous mode [ 128.188840][ T7255] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 128.383884][ T7266] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 128.432737][ T7266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.495561][ T7269] bond1: (slave veth3): Enslaving as an active interface with a down link [ 128.693659][ T7280] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.726079][ T7280] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 128.900629][ T7280] lo speed is unknown, defaulting to 1000 [ 129.083598][ T7300] sctp: [Deprecated]: syz.0.362 (pid 7300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.083598][ T7300] Use struct sctp_sack_info instead [ 130.091115][ T7354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 130.249972][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 130.438556][ T7368] xt_hashlimit: size too large, truncated to 1048576 [ 130.456736][ T7370] lo speed is unknown, defaulting to 1000 [ 130.633564][ T7385] ieee802154 phy0 wpan0: encryption failed: -90 [ 130.918213][ T7397] netlink: 'syz.2.397': attribute type 2 has an invalid length. [ 130.953293][ T7397] netlink: 56 bytes leftover after parsing attributes in process `syz.2.397'. [ 131.353619][ T7421] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 131.390423][ T7421] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 131.863267][ T7442] lo speed is unknown, defaulting to 1000 [ 131.941121][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.410'. [ 131.962964][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 132.188697][ T7465] 8021q: VLANs not supported on vcan0 [ 132.270741][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 132.339588][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 132.344151][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 132.349058][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 132.367530][ T7468] lo speed is unknown, defaulting to 1000 [ 132.398516][ T7474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 132.408213][ T7474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.428038][ T7472] netlink: 312 bytes leftover after parsing attributes in process `syz.2.414'. [ 132.453807][ T7478] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 132.714646][ T7489] netlink: 'syz.0.421': attribute type 21 has an invalid length. [ 132.723321][ T7489] netlink: 128 bytes leftover after parsing attributes in process `syz.0.421'. [ 132.734845][ T7489] netlink: 'syz.0.421': attribute type 5 has an invalid length. [ 132.749257][ T7489] netlink: 3 bytes leftover after parsing attributes in process `syz.0.421'. [ 132.879563][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 133.039652][ T7508] bridge0: port 3(gretap0) entered blocking state [ 133.068960][ T7508] bridge0: port 3(gretap0) entered disabled state [ 133.075798][ T7508] gretap0: entered allmulticast mode [ 133.105659][ T7508] gretap0: entered promiscuous mode [ 133.159637][ T7508] bridge0: port 3(gretap0) entered blocking state [ 133.166591][ T7508] bridge0: port 3(gretap0) entered forwarding state [ 133.762234][ T7537] netlink: 'syz.4.436': attribute type 6 has an invalid length. [ 134.124880][ T7550] xt_CT: No such helper "pptp" [ 134.301530][ T7550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.311203][ T7550] team0: Port device bond2 added [ 134.517931][ T5842] Bluetooth: hci0: command tx timeout [ 134.619851][ T7566] netlink: 'syz.2.443': attribute type 10 has an invalid length. [ 134.836185][ T7566] team0: Port device geneve0 added [ 134.949182][ T7570] lo speed is unknown, defaulting to 1000 [ 138.123656][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.433709][ T7585] lo speed is unknown, defaulting to 1000 [ 177.729203][ T7600] __nla_validate_parse: 6 callbacks suppressed [ 177.729223][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 177.747665][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 178.086573][ T7611] sctp: [Deprecated]: syz.2.455 (pid 7611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.086573][ T7611] Use struct sctp_sack_info instead [ 178.120704][ T7611] pimreg: entered allmulticast mode [ 178.137482][ T7611] pimreg: left allmulticast mode [ 178.203706][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 178.227272][ T7614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.457'. [ 178.619119][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.459'. [ 178.661941][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 178.677627][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 178.847329][ T7643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 178.916340][ T7648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.467'. [ 178.958689][ T7643] netlink: 'syz.0.467': attribute type 10 has an invalid length. [ 178.993762][ T7643] dummy0: entered promiscuous mode [ 179.011762][ T7643] dummy0: entered allmulticast mode [ 179.020860][ T7643] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.576203][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 179.763792][ T7690] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 179.774958][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 179.796464][ T7692] 8021q: VLANs not supported on sit0 [ 179.847625][ T7690] lo speed is unknown, defaulting to 1000 [ 180.141958][ T7705] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 180.219229][ T7707] sctp: [Deprecated]: syz.4.485 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.219229][ T7707] Use struct sctp_sack_info instead [ 180.560413][ T7725] vlan2: entered allmulticast mode [ 180.576303][ T7725] veth0_to_batadv: entered allmulticast mode [ 180.592471][ T7725] bridge0: port 2(vlan2) entered blocking state [ 180.615717][ T7725] bridge0: port 2(vlan2) entered disabled state [ 180.648153][ T7725] vlan2: entered promiscuous mode [ 180.667032][ T7725] veth0_to_batadv: entered promiscuous mode [ 180.701753][ T7725] bridge0: port 2(vlan2) entered blocking state [ 180.708268][ T7725] bridge0: port 2(vlan2) entered forwarding state [ 180.722305][ T7724] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 180.831520][ T7724] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.154364][ T7744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.191277][ T7750] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.545495][ T7764] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 181.559076][ T7764] netlink: 'syz.4.503': attribute type 2 has an invalid length. [ 181.583131][ T7765] lo speed is unknown, defaulting to 1000 [ 181.753442][ T7764] lo speed is unknown, defaulting to 1000 [ 181.826884][ T7773] lo speed is unknown, defaulting to 1000 [ 182.396943][ T7787] netlink: 'syz.0.506': attribute type 3 has an invalid length. [ 182.690311][ T7791] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 182.704145][ T7791] macvtap1: entered promiscuous mode [ 182.715837][ T7791] macvtap1: entered allmulticast mode [ 182.724914][ T7793] x_tables: duplicate underflow at hook 4 [ 182.736473][ T7791] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 182.793152][ T7791] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 182.815091][ T7791] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 183.103411][ T7815] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 183.151941][ T7818] __nla_validate_parse: 8 callbacks suppressed [ 183.151963][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 183.174107][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 183.235801][ T7822] netlink: 'syz.1.517': attribute type 7 has an invalid length. [ 183.509646][ T7834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 183.618381][ T7839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.521'. [ 183.751830][ T7845] netlink: 'syz.2.524': attribute type 5 has an invalid length. [ 183.859143][ T7849] lo speed is unknown, defaulting to 1000 [ 184.024202][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.526'. [ 185.115037][ T7884] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.180702][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 185.199081][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 185.481366][ T7893] lo speed is unknown, defaulting to 1000 [ 185.552530][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.539'. [ 185.650867][ T7907] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 185.805626][ T7915] netlink: 64 bytes leftover after parsing attributes in process `syz.3.543'. [ 185.815116][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 185.892495][ T7918] netlink: 'syz.1.544': attribute type 21 has an invalid length. [ 185.928124][ T7918] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.936103][ T7918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.943750][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 185.951097][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 185.958395][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 186.724824][ T7956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.315976][ T7975] lo speed is unknown, defaulting to 1000 [ 188.075670][ T8001] lo speed is unknown, defaulting to 1000 [ 188.301284][ T8004] __nla_validate_parse: 9 callbacks suppressed [ 188.301305][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.570'. [ 188.485717][ T8009] bridge0: port 3(gretap0) entered blocking state [ 188.493125][ T8009] bridge0: port 3(gretap0) entered disabled state [ 188.509065][ T8009] gretap0: entered allmulticast mode [ 188.527199][ T8009] gretap0: entered promiscuous mode [ 188.541163][ T8013] blkio.reset_stats is deprecated [ 188.634691][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 188.667980][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 189.133548][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.189383][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 189.205329][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 189.246718][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 189.284162][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.516333][ T8047] bridge_slave_0: left allmulticast mode [ 189.524042][ T8047] bridge_slave_0: left promiscuous mode [ 189.532414][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.565757][ T8049] netlink: 'syz.3.584': attribute type 9 has an invalid length. [ 189.576564][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 189.589879][ T8047] bond0: (slave bond_slave_0): Releasing backup interface [ 189.616175][ T8047] bond0: (slave bond_slave_1): Releasing backup interface [ 189.652069][ T8047] team0: Port device team_slave_0 removed [ 189.689864][ T8047] team0: Port device team_slave_1 removed [ 189.696563][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.707033][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.722755][ T8047] vlan2: left promiscuous mode [ 189.727582][ T8047] veth0_to_batadv: left promiscuous mode [ 189.735021][ T8047] bridge0: port 2(vlan2) entered disabled state [ 189.881848][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 189.893278][ T8055] netlink: 'syz.0.586': attribute type 4 has an invalid length. [ 189.901739][ T8058] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 189.913802][ T8058] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 189.923074][ T8059] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 189.935373][ T8059] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 190.034990][ T8062] netlink: 1117 bytes leftover after parsing attributes in process `syz.1.588'. [ 190.087591][ T8068] netlink: 'syz.0.589': attribute type 21 has an invalid length. [ 190.118203][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.589'. [ 190.393520][ T8089] lo speed is unknown, defaulting to 1000 [ 190.617659][ T8099] bond_slave_0: entered promiscuous mode [ 190.623738][ T8099] bond_slave_1: entered promiscuous mode [ 190.629553][ T8099] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 190.650218][ T8099] vlan0: entered promiscuous mode [ 190.658458][ T8099] bond0: entered promiscuous mode [ 191.235953][ T8118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.262202][ T8118] team0: Port device bond3 added [ 191.277856][ T8128] xt_bpf: check failed: parse error [ 191.793587][ T8158] FAULT_INJECTION: forcing a failure. [ 191.793587][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 191.830236][ T8158] CPU: 1 UID: 0 PID: 8158 Comm: syz.4.614 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 191.830267][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.830279][ T8158] Call Trace: [ 191.830286][ T8158] [ 191.830294][ T8158] dump_stack_lvl+0x241/0x360 [ 191.830346][ T8158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.830376][ T8158] ? __pfx__printk+0x10/0x10 [ 191.830409][ T8158] ? __pfx___might_resched+0x10/0x10 [ 191.830439][ T8158] should_fail_ex+0x424/0x570 [ 191.830466][ T8158] should_failslab+0xac/0x100 [ 191.830498][ T8158] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 191.830528][ T8158] ? __alloc_skb+0x1c2/0x480 [ 191.830553][ T8158] __alloc_skb+0x1c2/0x480 [ 191.830570][ T8158] ? count_memcg_event_mm+0x96/0x440 [ 191.830604][ T8158] ? __pfx___alloc_skb+0x10/0x10 [ 191.830621][ T8158] ? count_memcg_event_mm+0x388/0x440 [ 191.830650][ T8158] ? count_memcg_event_mm+0x20/0x440 [ 191.830680][ T8158] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 191.830711][ T8158] ? mtree_range_walk+0x700/0x8e0 [ 191.830737][ T8158] alloc_skb_with_frags+0xc3/0x830 [ 191.830765][ T8158] ? handle_mm_fault+0x1830/0x1bf0 [ 191.830800][ T8158] ? mt_find+0x28a/0x8f0 [ 191.830829][ T8158] sock_alloc_send_pskb+0x91c/0xa70 [ 191.830870][ T8158] ? lockdep_hardirqs_on+0x9d/0x150 [ 191.830897][ T8158] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 191.830921][ T8158] ? __local_bh_enable_ip+0x168/0x200 [ 191.830942][ T8158] ? llc_ui_sendmsg+0x47e/0xfc0 [ 191.830962][ T8158] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.830994][ T8158] llc_ui_sendmsg+0x49f/0xfc0 [ 191.831034][ T8158] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 191.831055][ T8158] ? aa_sock_msg_perm+0x91/0x160 [ 191.831090][ T8158] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 191.831107][ T8158] __sock_sendmsg+0x221/0x270 [ 191.831138][ T8158] ____sys_sendmsg+0x523/0x860 [ 191.831170][ T8158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.831190][ T8158] ? __fget_files+0x2a/0x420 [ 191.831212][ T8158] ? __fget_files+0x2a/0x420 [ 191.831241][ T8158] __sys_sendmmsg+0x3a0/0x7b0 [ 191.831276][ T8158] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.831333][ T8158] ? rcu_read_lock_any_held+0xbb/0x160 [ 191.831360][ T8158] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 191.831392][ T8158] ? vfs_write+0xb29/0xd10 [ 191.831425][ T8158] ? ksys_write+0x24e/0x2d0 [ 191.831452][ T8158] ? __mutex_unlock_slowpath+0x229/0x800 [ 191.831512][ T8158] ? ksys_write+0x275/0x2d0 [ 191.831549][ T8158] __x64_sys_sendmmsg+0xa0/0xb0 [ 191.831574][ T8158] do_syscall_64+0xf3/0x230 [ 191.831601][ T8158] ? clear_bhb_loop+0x45/0xa0 [ 191.831626][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.831655][ T8158] RIP: 0033:0x7f1ab658d169 [ 191.831687][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.831703][ T8158] RSP: 002b:00007f1ab7306038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.831732][ T8158] RAX: ffffffffffffffda RBX: 00007f1ab67a6080 RCX: 00007f1ab658d169 [ 191.831747][ T8158] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000004 [ 191.831761][ T8158] RBP: 00007f1ab7306090 R08: 0000000000000000 R09: 0000000000000000 [ 191.831779][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.831790][ T8158] R13: 0000000000000001 R14: 00007f1ab67a6080 R15: 00007ffdf0c922b8 [ 191.831828][ T8158] [ 192.339864][ T8165] syzkaller1: entered allmulticast mode [ 192.405234][ T8168] pim6reg: entered allmulticast mode [ 192.462832][ T8168] pim6reg: left allmulticast mode [ 192.572841][ T8176] vlan0: entered promiscuous mode [ 192.578671][ T8176] bridge0: entered promiscuous mode [ 192.585644][ T8176] vlan0: entered allmulticast mode [ 192.591915][ T8176] bridge0: entered allmulticast mode [ 193.291919][ T8218] trusted_key: syz.1.631 sent an empty control message without MSG_MORE. [ 193.823479][ T8231] IPVS: length: 78 != 8 [ 194.022673][ T8233] __nla_validate_parse: 12 callbacks suppressed [ 194.022691][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 194.046907][ T8233] vlan0: entered promiscuous mode [ 194.052461][ T8233] ip6gretap0: entered promiscuous mode [ 194.244498][ T8239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 194.264275][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 194.510536][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 194.555861][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 194.571192][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 194.878299][ T8268] netlink: 72 bytes leftover after parsing attributes in process `syz.2.644'. [ 195.467142][ T8297] sctp: [Deprecated]: syz.2.654 (pid 8297) Use of int in max_burst socket option deprecated. [ 195.467142][ T8297] Use struct sctp_assoc_value instead [ 195.471659][ T8295] netlink: 72 bytes leftover after parsing attributes in process `syz.4.653'. [ 195.569731][ T8299] veth0_to_bridge: entered promiscuous mode [ 195.584143][ T8300] erspan1: entered allmulticast mode [ 195.601419][ T8298] veth0_to_bridge: left promiscuous mode [ 195.734271][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.658'. [ 195.758684][ T8311] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 195.963942][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 196.476591][ T8331] Illegal XDP return value 4291497984 on prog (id 262) dev N/A, expect packet loss! [ 196.579393][ T8336] bridge0: port 4(veth1_to_bridge) entered blocking state [ 196.586985][ T8336] bridge0: port 4(veth1_to_bridge) entered disabled state [ 196.604397][ T8336] veth1_to_bridge: entered allmulticast mode [ 196.613553][ T8336] veth1_to_bridge: entered promiscuous mode [ 196.934370][ T8355] netlink: 'syz.3.672': attribute type 39 has an invalid length. [ 197.013241][ T8368] FAULT_INJECTION: forcing a failure. [ 197.013241][ T8368] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 197.030739][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.0.674 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 197.030770][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.030782][ T8368] Call Trace: [ 197.030790][ T8368] [ 197.030798][ T8368] dump_stack_lvl+0x241/0x360 [ 197.030837][ T8368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.030867][ T8368] ? __pfx__printk+0x10/0x10 [ 197.030908][ T8368] should_fail_ex+0x424/0x570 [ 197.030935][ T8368] prepare_alloc_pages+0x220/0x610 [ 197.030968][ T8368] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 197.030995][ T8368] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.031016][ T8368] ? __lock_acquire+0xad5/0xd80 [ 197.031069][ T8368] alloc_pages_mpol+0x339/0x690 [ 197.031095][ T8368] ? llc_sap_state_process+0x257/0x530 [ 197.031123][ T8368] ? llc_ui_sendmsg+0xb2e/0xfc0 [ 197.031147][ T8368] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.031186][ T8368] vma_alloc_folio_noprof+0x12d/0x260 [ 197.031214][ T8368] ? __lock_acquire+0xad5/0xd80 [ 197.031237][ T8368] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 197.031277][ T8368] folio_prealloc+0x2e/0x170 [ 197.031298][ T8368] do_wp_page+0x14f6/0x5e00 [ 197.031331][ T8368] ? __lock_acquire+0xad5/0xd80 [ 197.031366][ T8368] ? __pfx_do_wp_page+0x10/0x10 [ 197.031400][ T8368] ? __lock_acquire+0xad5/0xd80 [ 197.031427][ T8368] ? do_raw_spin_lock+0x151/0x370 [ 197.031478][ T8368] handle_pte_fault+0xfaf/0x61c0 [ 197.031522][ T8368] ? __pfx_handle_pte_fault+0x10/0x10 [ 197.031549][ T8368] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 197.031573][ T8368] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.031597][ T8368] ? __smp_call_single_queue+0x128/0x3a0 [ 197.031625][ T8368] ? ttwu_queue_wakelist+0x297/0x3d0 [ 197.031658][ T8368] ? try_to_wake_up+0xa27/0x15d0 [ 197.031709][ T8368] ? mtree_range_walk+0x700/0x8e0 [ 197.031743][ T8368] handle_mm_fault+0x1129/0x1bf0 [ 197.031771][ T8368] ? mt_find+0x28a/0x8f0 [ 197.031826][ T8368] ? __pfx_handle_mm_fault+0x10/0x10 [ 197.031882][ T8368] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 197.031914][ T8368] exc_page_fault+0x2bb/0x920 [ 197.031948][ T8368] asm_exc_page_fault+0x26/0x30 [ 197.031967][ T8368] RIP: 0010:__put_user_4+0xd/0x20 [ 197.031992][ T8368] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 197.032009][ T8368] RSP: 0018:ffffc9000bfef9b8 EFLAGS: 00050206 [ 197.032039][ T8368] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000013b8 [ 197.032052][ T8368] RDX: 0000200000001380 RSI: ffffffff8e4fde48 RDI: ffffffff8ca1b720 [ 197.032066][ T8368] RBP: ffffc9000bfefed0 R08: 0000000000000001 R09: 0000000000000000 [ 197.032078][ T8368] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000bfefd20 [ 197.032091][ T8368] R13: 0000000000000400 R14: ffffc9000bfefd00 R15: 1ffff920017fdf48 [ 197.032124][ T8368] __sys_sendmmsg+0x524/0x7b0 [ 197.032161][ T8368] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.032223][ T8368] ? rcu_read_lock_any_held+0xbb/0x160 [ 197.032251][ T8368] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 197.032282][ T8368] ? vfs_write+0xb29/0xd10 [ 197.032317][ T8368] ? ksys_write+0x24e/0x2d0 [ 197.032344][ T8368] ? __mutex_unlock_slowpath+0x229/0x800 [ 197.032405][ T8368] ? ksys_write+0x275/0x2d0 [ 197.032443][ T8368] __x64_sys_sendmmsg+0xa0/0xb0 [ 197.032467][ T8368] do_syscall_64+0xf3/0x230 [ 197.032494][ T8368] ? clear_bhb_loop+0x45/0xa0 [ 197.032518][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.032537][ T8368] RIP: 0033:0x7f8eccf8d169 [ 197.032554][ T8368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.032570][ T8368] RSP: 002b:00007f8ecddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.032589][ T8368] RAX: ffffffffffffffda RBX: 00007f8ecd1a6080 RCX: 00007f8eccf8d169 [ 197.032603][ T8368] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000004 [ 197.032616][ T8368] RBP: 00007f8ecddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 197.032628][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.032640][ T8368] R13: 0000000000000001 R14: 00007f8ecd1a6080 R15: 00007ffdd70f23c8 [ 197.032672][ T8368] [ 198.053528][ T30] audit: type=1107 audit(1744408210.363:2): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 198.065045][ T8409] @ÿ: renamed from bond_slave_0 (while UP) [ 199.460011][ T8495] __nla_validate_parse: 10 callbacks suppressed [ 199.460029][ T8495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.714'. [ 199.494567][ T8495] netlink: 72 bytes leftover after parsing attributes in process `syz.2.714'. [ 199.562117][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.575021][ T8497] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 199.614480][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 199.626516][ T8497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.696805][ T8502] sctp: [Deprecated]: syz.2.717 (pid 8502) Use of int in max_burst socket option. [ 199.696805][ T8502] Use struct sctp_assoc_value instead [ 199.726866][ T8502] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 199.744240][ T8502] batman_adv: batadv0: Adding interface: ip6gretap1 [ 199.752916][ T8502] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.784130][ T8502] batman_adv: batadv0: Interface activated: ip6gretap1 [ 199.902673][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 199.915836][ T8509] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 199.936404][ T8509] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 199.950706][ T9] lo speed is unknown, defaulting to 1000 [ 199.958693][ T9] s›z0: Port: 1 Link ACTIVE [ 200.006108][ T8513] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 200.041771][ T8513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.104606][ T8514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.116826][ T8514] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.130290][ T8514] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 200.191913][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 200.239255][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 200.271996][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 200.330956][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'. [ 200.382804][ T8526] syzkaller0: entered allmulticast mode [ 200.393064][ T8520] syzkaller0: entered promiscuous mode [ 200.430495][ T8520] syzkaller0 (unregistering): left promiscuous mode [ 200.448014][ T8520] syzkaller0 (unregistering): left allmulticast mode [ 200.534456][ T8540] macvlan0: entered promiscuous mode [ 200.541864][ T8540] macvlan0: entered allmulticast mode [ 200.545905][ T8543] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 200.575859][ T8544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.583264][ T8544] IPv6: NLM_F_CREATE should be set when creating new route [ 200.590585][ T8544] IPv6: NLM_F_CREATE should be set when creating new route [ 200.606315][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.615505][ T8543] bond0: (slave team0): Enslaving as an active interface with an up link [ 200.634645][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 200.782536][ T8552] dccp_invalid_packet: invalid packet type [ 201.125569][ T8575] netlink: 248 bytes leftover after parsing attributes in process `syz.2.738'. [ 201.602915][ T8598] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.306357][ T8621] team0: Port device gtp0 added [ 202.513245][ T8631] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 202.522061][ T8631] netlink: 'syz.2.757': attribute type 2 has an invalid length. [ 202.532441][ T8631] netlink: 'syz.2.757': attribute type 4 has an invalid length. [ 202.902300][ T30] audit: type=1800 audit(1744408215.223:3): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="memory.events" dev="tmpfs" ino=824 res=0 errno=0 [ 202.979874][ T8653] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.982149][ T30] audit: type=1804 audit(1744408215.223:4): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.766" name="/newroot/157/memory.events" dev="tmpfs" ino=824 res=1 errno=0 [ 202.988541][ T8653] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.988595][ T8653] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.988625][ T8653] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.346216][ T8674] sctp: [Deprecated]: syz.0.768 (pid 8674) Use of int in maxseg socket option. [ 203.346216][ T8674] Use struct sctp_assoc_value instead [ 203.580278][ T8685] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 203.702299][ T8685] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.733728][ T8685] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.742942][ T8685] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.751815][ T8685] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.762651][ T8685] bond2: (slave geneve2): making interface the new active one [ 203.774077][ T8685] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 203.881152][ T8685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.047374][ T8706] FAULT_INJECTION: forcing a failure. [ 204.047374][ T8706] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.077197][ T8708] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 204.085780][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.1.781 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 204.085809][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.085821][ T8706] Call Trace: [ 204.085829][ T8706] [ 204.085838][ T8706] dump_stack_lvl+0x241/0x360 [ 204.085877][ T8706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.085908][ T8706] ? __pfx__printk+0x10/0x10 [ 204.085952][ T8706] should_fail_ex+0x424/0x570 [ 204.085979][ T8706] _copy_from_user+0x2d/0xb0 [ 204.086011][ T8706] copy_msghdr_from_user+0xb3/0x580 [ 204.086047][ T8706] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 204.086073][ T8706] ? __fget_files+0x2a/0x420 [ 204.086096][ T8706] ? __fget_files+0x2a/0x420 [ 204.086125][ T8706] __sys_sendmsg+0x20a/0x360 [ 204.086154][ T8706] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.086235][ T8706] ? do_syscall_64+0xb6/0x230 [ 204.086266][ T8706] do_syscall_64+0xf3/0x230 [ 204.086293][ T8706] ? clear_bhb_loop+0x45/0xa0 [ 204.086318][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.086338][ T8706] RIP: 0033:0x7f324138d169 [ 204.086357][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.086374][ T8706] RSP: 002b:00007f324221c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.086395][ T8706] RAX: ffffffffffffffda RBX: 00007f32415a5fa0 RCX: 00007f324138d169 [ 204.086411][ T8706] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000005 [ 204.086424][ T8706] RBP: 00007f324221c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.086436][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.086448][ T8706] R13: 0000000000000000 R14: 00007f32415a5fa0 R15: 00007ffff15fa778 [ 204.086480][ T8706] [ 204.272036][ T8697] lo speed is unknown, defaulting to 1000 [ 204.473157][ T8717] __nla_validate_parse: 9 callbacks suppressed [ 204.473182][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 204.518439][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 204.674623][ T8721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.786'. [ 204.691830][ T8719] lo speed is unknown, defaulting to 1000 [ 204.804929][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 204.840896][ T8732] sctp: [Deprecated]: syz.2.787 (pid 8732) Use of int in maxseg socket option. [ 204.840896][ T8732] Use struct sctp_assoc_value instead [ 205.015666][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 205.312160][ T8742] xt_CT: No such helper "pptp" [ 205.329323][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 205.347168][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.380375][ T8745] bond2: entered promiscuous mode [ 205.385640][ T8745] bond2: entered allmulticast mode [ 205.392070][ T8745] team0: Port device bond2 added [ 205.436346][ T8742] netlink: 'syz.0.788': attribute type 2 has an invalid length. [ 205.532802][ T8749] x_tables: ip_tables: REJECT target: only valid in filter table, not [ 205.532802][ T8749] [ 205.808737][ T8765] SET target dimension over the limit! [ 205.831267][ T8768] FAULT_INJECTION: forcing a failure. [ 205.831267][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 205.846774][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.3.795 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 205.846803][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.846816][ T8768] Call Trace: [ 205.846824][ T8768] [ 205.846832][ T8768] dump_stack_lvl+0x241/0x360 [ 205.846869][ T8768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.846899][ T8768] ? __pfx__printk+0x10/0x10 [ 205.846932][ T8768] ? __pfx___might_resched+0x10/0x10 [ 205.846962][ T8768] should_fail_ex+0x424/0x570 [ 205.846989][ T8768] should_failslab+0xac/0x100 [ 205.847020][ T8768] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 205.847049][ T8768] ? __alloc_skb+0x1c2/0x480 [ 205.847073][ T8768] __alloc_skb+0x1c2/0x480 [ 205.847097][ T8768] ? __pfx___alloc_skb+0x10/0x10 [ 205.847127][ T8768] netlink_sendmsg+0x638/0xcd0 [ 205.847171][ T8768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.847206][ T8768] ? aa_sock_msg_perm+0x91/0x160 [ 205.847241][ T8768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.847269][ T8768] __sock_sendmsg+0x221/0x270 [ 205.847352][ T8768] ____sys_sendmsg+0x523/0x860 [ 205.847385][ T8768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.847405][ T8768] ? __fget_files+0x2a/0x420 [ 205.847428][ T8768] ? __fget_files+0x2a/0x420 [ 205.847457][ T8768] __sys_sendmsg+0x271/0x360 [ 205.847486][ T8768] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.847575][ T8768] ? do_syscall_64+0xb6/0x230 [ 205.847607][ T8768] do_syscall_64+0xf3/0x230 [ 205.847634][ T8768] ? clear_bhb_loop+0x45/0xa0 [ 205.847660][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.847680][ T8768] RIP: 0033:0x7f7ae978d169 [ 205.847698][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.847715][ T8768] RSP: 002b:00007f7ae75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.847740][ T8768] RAX: ffffffffffffffda RBX: 00007f7ae99a5fa0 RCX: 00007f7ae978d169 [ 205.847755][ T8768] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000005 [ 205.847767][ T8768] RBP: 00007f7ae75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.847780][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.847791][ T8768] R13: 0000000000000000 R14: 00007f7ae99a5fa0 R15: 00007fff255fd418 [ 205.847823][ T8768] [ 206.164194][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 206.174845][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 206.412680][ T8792] netlink: 'syz.3.798': attribute type 4 has an invalid length. [ 206.603844][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.801'. [ 206.811649][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'. [ 206.866899][ T8807] netlink: 'syz.1.805': attribute type 21 has an invalid length. [ 206.874709][ T8804] ipip0: entered promiscuous mode [ 207.130646][ T8815] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 207.284185][ T8818] syzkaller0: entered promiscuous mode [ 207.303077][ T8818] syzkaller0: entered allmulticast mode [ 207.359296][ T8820] ip6gretap0: entered promiscuous mode [ 207.365307][ T8820] macsec1: entered promiscuous mode [ 207.374836][ T8820] macsec1: entered allmulticast mode [ 207.381918][ T8820] ip6gretap0: entered allmulticast mode [ 207.806915][ T8844] IPVS: length: 78 != 8 [ 209.436455][ T8848] lo speed is unknown, defaulting to 1000 [ 209.563799][ T8853] lo speed is unknown, defaulting to 1000 [ 209.638611][ T8863] __nla_validate_parse: 5 callbacks suppressed [ 209.638632][ T8863] netlink: 84 bytes leftover after parsing attributes in process `syz.3.822'. [ 209.881212][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 210.073348][ T8616] IPVS: starting estimator thread 0... [ 210.087003][ T8879] netlink: 60 bytes leftover after parsing attributes in process `syz.4.826'. [ 210.168023][ T8880] IPVS: using max 23 ests per chain, 55200 per kthread [ 210.213370][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 210.382306][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 210.801834][ T8904] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 210.895289][ T8910] xt_cgroup: invalid path, errno=-2 [ 210.904902][ T8900] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 210.938389][ T8904] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 210.960064][ T8900] netlink: 228 bytes leftover after parsing attributes in process `syz.0.833'. [ 210.972634][ T8904] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 210.993000][ T8904] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 211.037472][ T8900] netlink: 332 bytes leftover after parsing attributes in process `syz.0.833'. [ 211.461579][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.840'. [ 211.537602][ T8928] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 211.555713][ T8928] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 211.579563][ T8928] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 211.722059][ T8941] tipc: Enabling of bearer rejected, failed to enable media [ 211.778573][ T8939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.842'. [ 211.804041][ T8941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.812820][ T8941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.823172][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'. [ 211.844245][ T8941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.853331][ T8941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.863226][ T8941] geneve2: entered promiscuous mode [ 211.869207][ T8941] geneve2: entered allmulticast mode [ 211.883204][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 211.891783][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 211.896769][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.212377][ T8968] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 212.254673][ T8964] lo speed is unknown, defaulting to 1000 [ 212.403920][ T8983] netlink: 'syz.3.857': attribute type 2 has an invalid length. [ 212.462525][ T8983] : entered promiscuous mode [ 212.775177][ T8991] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 212.792107][ T8993] netlink: 'syz.3.861': attribute type 15 has an invalid length. [ 213.431522][ T9017] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 213.469268][ T9012] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 213.654003][ T9024] 8021q: VLANs not supported on team0 [ 213.750498][ T9028] bridge0: port 4(batadv1) entered blocking state [ 213.806316][ T9028] bridge0: port 4(batadv1) entered disabled state [ 213.841120][ T9028] batadv1: entered allmulticast mode [ 213.853521][ T9028] batadv1: entered promiscuous mode [ 214.238528][ T62] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 214.248421][ T62] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 214.733601][ T9061] __nla_validate_parse: 13 callbacks suppressed [ 214.733625][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'. [ 214.765229][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'. [ 214.860137][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 214.879218][ T9062] lo speed is unknown, defaulting to 1000 [ 214.929664][ T9062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.879'. [ 215.108879][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 215.170088][ T9077] netlink: 72 bytes leftover after parsing attributes in process `syz.0.880'. [ 215.771621][ T9106] netlink: 'syz.3.883': attribute type 2 has an invalid length. [ 215.968466][ T9113] sctp: [Deprecated]: syz.0.887 (pid 9113) Use of int in max_burst socket option. [ 215.968466][ T9113] Use struct sctp_assoc_value instead [ 216.008195][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 216.044152][ T9114] bond0: entered promiscuous mode [ 216.356480][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 216.405229][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'. [ 216.424594][ T9132] FAULT_INJECTION: forcing a failure. [ 216.424594][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 216.462705][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.0.892 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 216.462752][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.462764][ T9132] Call Trace: [ 216.462773][ T9132] [ 216.462782][ T9132] dump_stack_lvl+0x241/0x360 [ 216.462822][ T9132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.462852][ T9132] ? __pfx__printk+0x10/0x10 [ 216.462887][ T9132] ? __pfx___might_resched+0x10/0x10 [ 216.462919][ T9132] should_fail_ex+0x424/0x570 [ 216.462947][ T9132] should_failslab+0xac/0x100 [ 216.462978][ T9132] __kmalloc_cache_noprof+0x73/0x370 [ 216.463006][ T9132] ? tcf_proto_create+0x62/0x370 [ 216.463033][ T9132] tcf_proto_create+0x62/0x370 [ 216.463060][ T9132] tc_new_tfilter+0x15e8/0x1a90 [ 216.463110][ T9132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 216.463148][ T9132] ? __lock_acquire+0xad5/0xd80 [ 216.463193][ T9132] ? __pfx_tc_new_tfilter+0x10/0x10 [ 216.463216][ T9132] rtnetlink_rcv_msg+0x80f/0xd70 [ 216.463244][ T9132] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 216.463278][ T9132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.463316][ T9132] ? ref_tracker_free+0x63e/0x7e0 [ 216.463348][ T9132] netlink_rcv_skb+0x208/0x480 [ 216.463380][ T9132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.463411][ T9132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.463462][ T9132] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.463496][ T9132] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.463529][ T9132] netlink_unicast+0x7f8/0x9a0 [ 216.463567][ T9132] ? __pfx_netlink_unicast+0x10/0x10 [ 216.463597][ T9132] ? skb_put+0x114/0x1f0 [ 216.463622][ T9132] netlink_sendmsg+0x8c3/0xcd0 [ 216.463668][ T9132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.463704][ T9132] ? aa_sock_msg_perm+0x91/0x160 [ 216.463746][ T9132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.463774][ T9132] __sock_sendmsg+0x221/0x270 [ 216.463806][ T9132] ____sys_sendmsg+0x523/0x860 [ 216.463838][ T9132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.463858][ T9132] ? __fget_files+0x2a/0x420 [ 216.463882][ T9132] ? __fget_files+0x2a/0x420 [ 216.463912][ T9132] __sys_sendmsg+0x271/0x360 [ 216.463940][ T9132] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.464022][ T9132] ? do_syscall_64+0xb6/0x230 [ 216.464053][ T9132] do_syscall_64+0xf3/0x230 [ 216.464081][ T9132] ? clear_bhb_loop+0x45/0xa0 [ 216.464107][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.464127][ T9132] RIP: 0033:0x7f8eccf8d169 [ 216.464144][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.464160][ T9132] RSP: 002b:00007f8ecdde6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.464181][ T9132] RAX: ffffffffffffffda RBX: 00007f8ecd1a5fa0 RCX: 00007f8eccf8d169 [ 216.464195][ T9132] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000005 [ 216.464207][ T9132] RBP: 00007f8ecdde6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.464217][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.464228][ T9132] R13: 0000000000000000 R14: 00007f8ecd1a5fa0 R15: 00007ffdd70f23c8 [ 216.464261][ T9132] [ 216.861261][ T9145] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 216.884581][ T9145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 216.905636][ T9145] batadv0: entered promiscuous mode [ 216.911560][ T9145] batadv0: entered allmulticast mode [ 216.923241][ T9145] bridge0: port 5(batadv0) entered blocking state [ 216.930666][ T9145] bridge0: port 5(batadv0) entered disabled state [ 216.950479][ T9145] bridge0: port 5(batadv0) entered blocking state [ 216.957088][ T9145] bridge0: port 5(batadv0) entered forwarding state [ 217.006380][ T9145] batman_adv: batadv0: Adding interface: dummy0 [ 217.032112][ T9145] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.059658][ T9145] batman_adv: batadv0: Interface activated: dummy0 [ 217.124057][ T9145] batadv0: mtu less than device minimum [ 217.145308][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.157781][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.169799][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.181823][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.193859][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.205933][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.218020][ T9145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.295169][ T6244] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 217.305170][ T6244] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 217.396079][ T9160] team0: Device gtp0 is of different type [ 217.656920][ T9175] netlink: 'syz.2.904': attribute type 3 has an invalid length. [ 217.703044][ T9178] FAULT_INJECTION: forcing a failure. [ 217.703044][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.726039][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.3.905 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 217.726074][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.726087][ T9178] Call Trace: [ 217.726096][ T9178] [ 217.726106][ T9178] dump_stack_lvl+0x241/0x360 [ 217.726147][ T9178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.726177][ T9178] ? __pfx__printk+0x10/0x10 [ 217.726222][ T9178] should_fail_ex+0x424/0x570 [ 217.726250][ T9178] _copy_from_user+0x2d/0xb0 [ 217.726281][ T9178] kstrtouint_from_user+0xce/0x1a0 [ 217.726338][ T9178] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 217.726367][ T9178] ? __lock_acquire+0xad5/0xd80 [ 217.726401][ T9178] proc_fail_nth_write+0xac/0x2d0 [ 217.726423][ T9178] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 217.726453][ T9178] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.726480][ T9178] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.726504][ T9178] vfs_write+0x2bc/0xd10 [ 217.726535][ T9178] ? fdget_pos+0x247/0x310 [ 217.726557][ T9178] ? __pfx_vfs_write+0x10/0x10 [ 217.726586][ T9178] ? __fget_files+0x2a/0x420 [ 217.726607][ T9178] ? __fget_files+0x39d/0x420 [ 217.726624][ T9178] ? __fget_files+0x2a/0x420 [ 217.726653][ T9178] ksys_write+0x19d/0x2d0 [ 217.726680][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 217.726711][ T9178] ? do_syscall_64+0xb6/0x230 [ 217.726742][ T9178] do_syscall_64+0xf3/0x230 [ 217.726769][ T9178] ? clear_bhb_loop+0x45/0xa0 [ 217.726794][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.726814][ T9178] RIP: 0033:0x7f7ae978bc1f [ 217.726833][ T9178] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 217.726849][ T9178] RSP: 002b:00007f7ae75f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 217.726872][ T9178] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ae978bc1f [ 217.726886][ T9178] RDX: 0000000000000001 RSI: 00007f7ae75f60a0 RDI: 0000000000000007 [ 217.726899][ T9178] RBP: 00007f7ae75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.726911][ T9178] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 217.726923][ T9178] R13: 0000000000000000 R14: 00007f7ae99a5fa0 R15: 00007fff255fd418 [ 217.726956][ T9178] [ 218.043952][ T9185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.129933][ T9189] netlink: 'syz.3.908': attribute type 4 has an invalid length. [ 218.161944][ T9181] syzkaller1: entered promiscuous mode [ 218.167640][ T9181] syzkaller1: entered allmulticast mode [ 218.352414][ T9197] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 218.505581][ T9204] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 218.763505][ T9219] netlink: 'syz.2.914': attribute type 9 has an invalid length. [ 219.461199][ T9255] sch_fq: defrate 0 ignored. [ 219.755822][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.790741][ T5925] wlan1: No basic rates, using min rate instead [ 219.802315][ T5925] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 219.818837][ T5925] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 219.831560][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.869850][ T6253] wlan1: authenticated [ 219.879296][ T6253] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 219.886328][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.907920][ T6253] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x4584 status=0 aid=1) [ 219.917628][ T9274] __nla_validate_parse: 4 callbacks suppressed [ 219.917647][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 219.925032][ T6253] wlan1: No basic rates, using min rate instead [ 219.945747][ T6253] wlan1: associated [ 219.950612][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 219.981073][ T9272] lo speed is unknown, defaulting to 1000 [ 220.043028][ C1] net_ratelimit: 12 callbacks suppressed [ 220.043052][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 220.535243][ T9291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.638987][ T9291] tipc: Trying to set illegal importance in message [ 220.785251][ T9307] gre1: entered allmulticast mode [ 220.819449][ T9308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'. [ 220.842864][ T9306] lo speed is unknown, defaulting to 1000 [ 221.035621][ T9307] team0: Port device gtp0 removed [ 221.063484][ T9307] bond2: (slave geneve2): Releasing active interface [ 221.103508][ T9307] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.129014][ T9307] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.137539][ T9307] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.169218][ T9307] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 221.212523][ T9314] netlink: 92 bytes leftover after parsing attributes in process `syz.1.940'. [ 221.621427][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 221.659994][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'. [ 221.824014][ T9324] nbd: must specify an index to disconnect [ 221.958530][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 222.197529][ T9354] netlink: 'syz.0.948': attribute type 4 has an invalid length. [ 222.581062][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 222.609454][ T9376] xt_policy: output policy not valid in PREROUTING and INPUT [ 222.674488][ T9376] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 222.698017][ T9376] netlink: 244 bytes leftover after parsing attributes in process `syz.3.955'. [ 222.834927][ T9382] tipc: Started in network mode [ 222.867865][ T9382] tipc: Node identity 7f000001, cluster identity 4711 [ 222.900089][ T9390] netlink: 'syz.1.957': attribute type 39 has an invalid length. [ 222.916161][ T9382] tipc: Enabling of bearer rejected, failed to enable media [ 222.938395][ T9385] syz_tun: entered allmulticast mode [ 222.955622][ T9389] sctp: [Deprecated]: syz.3.959 (pid 9389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.955622][ T9389] Use struct sctp_sack_info instead [ 223.071658][ T9390] syz_tun (unregistering): left allmulticast mode [ 223.174860][ T9389] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 223.207156][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 223.274029][ T9389] bridge1: left promiscuous mode [ 223.313438][ T9389] erspan1: left allmulticast mode [ 223.376719][ T9389] macvlan0: left promiscuous mode [ 223.405393][ T9389] macvlan0: left allmulticast mode [ 223.417393][ T9413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 223.418888][ T9389] ipip0: left promiscuous mode [ 223.806553][ T9438] IPv6: sit2: Disabled Multicast RS [ 223.940888][ T9446] nbd: device at index 3 is going down [ 224.868677][ T9484] tap0: tun_chr_ioctl cmd 1074025677 [ 224.876852][ T9484] tap0: linktype set to 6 [ 225.091241][ T9499] __nla_validate_parse: 8 callbacks suppressed [ 225.091262][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.990'. [ 225.185994][ T9503] sctp: [Deprecated]: syz.3.991 (pid 9503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.185994][ T9503] Use struct sctp_sack_info instead [ 225.344889][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 225.898728][ T9537] sctp: [Deprecated]: syz.0.999 (pid 9537) Use of int in maxseg socket option. [ 225.898728][ T9537] Use struct sctp_assoc_value instead [ 226.194039][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 226.222501][ T9560] lo speed is unknown, defaulting to 1000 [ 227.302791][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 227.823481][ T9625] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1027'. [ 227.887260][ T9627] bridge0: entered promiscuous mode [ 227.906058][ T9627] macvlan2: entered promiscuous mode [ 227.930576][ T9627] bridge0: port 4(macvlan2) entered blocking state [ 227.954441][ T9627] bridge0: port 4(macvlan2) entered disabled state [ 227.964696][ T9627] macvlan2: entered allmulticast mode [ 227.970542][ T9627] bridge0: entered allmulticast mode [ 227.981796][ T9627] macvlan2: left allmulticast mode [ 227.998001][ T9627] bridge0: left allmulticast mode [ 228.005020][ T9637] netlink: 'syz.4.1029': attribute type 11 has an invalid length. [ 228.026746][ T9627] bridge0: left promiscuous mode [ 228.305912][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'. [ 228.508256][ T9661] netlink: 'syz.0.1038': attribute type 6 has an invalid length. [ 228.538098][ T9661] netlink: 'syz.0.1038': attribute type 7 has an invalid length. [ 228.545898][ T9661] netlink: 'syz.0.1038': attribute type 8 has an invalid length. [ 228.598253][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 228.612641][ T9661] netlink: 'syz.0.1038': attribute type 4 has an invalid length. [ 228.626639][ T9668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 228.643045][ T9668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.773220][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 228.802084][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 228.823768][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 229.353346][ T9683] bond2: entered promiscuous mode [ 229.361921][ T9683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.636667][ T9683] bond2 (unregistering): Released all slaves [ 229.991327][ T9704] lo speed is unknown, defaulting to 1000 [ 230.252779][ T9724] sctp: [Deprecated]: syz.1.1062 (pid 9724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.252779][ T9724] Use struct sctp_sack_info instead [ 230.254547][ T9727] netlink: 'syz.3.1065': attribute type 21 has an invalid length. [ 230.293224][ T9730] __nla_validate_parse: 2 callbacks suppressed [ 230.293247][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 230.314197][ T9727] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1065'. [ 230.329160][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 230.453920][ T9736] x_tables: duplicate underflow at hook 3 [ 230.525413][ T9739] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 230.617503][ T9739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.646010][ T9739] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 230.712719][ T9740] bond3: (slave ip6gretap1): making interface the new active one [ 230.739777][ T9740] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 230.777472][ T9747] bond0: entered promiscuous mode [ 230.778812][ T9739] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 230.786719][ T9747] bond_slave_0: entered promiscuous mode [ 230.803694][ T9747] bond_slave_1: entered promiscuous mode [ 230.811201][ T9747] team0: entered promiscuous mode [ 230.817407][ T9747] team_slave_0: entered promiscuous mode [ 230.830122][ T9747] team_slave_1: entered promiscuous mode [ 230.845852][ T9747] batadv0: entered promiscuous mode [ 230.855637][ T9747] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 230.869462][ T9747] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 230.887891][ T9739] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 231.213782][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 231.292527][ T9765] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.320006][ T9769] veth0_to_bond: entered promiscuous mode [ 231.331239][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 231.442173][ T9769] veth0_to_bond (unregistering): left promiscuous mode [ 231.532719][ T9776] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1079'. [ 231.584527][ T9774] lo speed is unknown, defaulting to 1000 [ 232.289397][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1087'. [ 232.337584][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 232.358789][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 232.430329][ T9816] geneve1: entered promiscuous mode [ 232.435612][ T9816] geneve1: entered allmulticast mode [ 232.660680][ T9825] lo speed is unknown, defaulting to 1000 [ 232.767276][ T9828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 232.888429][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 233.067232][ T9845] netlink: del zone limit has 4 unknown bytes [ 233.125350][ T9845] validate_nla: 64 callbacks suppressed [ 233.125376][ T9845] netlink: 'syz.2.1096': attribute type 33 has an invalid length. [ 234.075560][ T9886] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 234.139191][ T9887] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 234.616614][ T9900] 8021q: VLANs not supported on nr0 [ 235.049522][ T9921] netlink: 'syz.1.1118': attribute type 11 has an invalid length. [ 235.356977][ T9937] veth6: entered allmulticast mode [ 235.918885][ T5853] Bluetooth: hci4: link tx timeout [ 235.924305][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.867353][ T9988] __nla_validate_parse: 5 callbacks suppressed [ 236.867375][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 236.898085][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 236.921557][ T9988] netlink: 'syz.0.1135': attribute type 18 has an invalid length. [ 237.958554][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 238.666558][ T6242] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.745383][T10000] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1138'. [ 238.808439][T10000] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 238.816861][T10000] openvswitch: netlink: Message has 13 unknown bytes. [ 239.108592][T10022] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1144'. [ 239.136445][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1144'. [ 239.490170][T10044] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.517297][T10043] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.659107][T10051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1152'. [ 239.849384][T10065] netlink: 'syz.3.1157': attribute type 11 has an invalid length. [ 239.899900][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1157'. [ 239.918449][T10065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1157'. [ 240.312019][T10091] tipc: Enabling of bearer rejected, failed to enable media [ 240.342468][T10090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1161'. [ 240.477195][T10096] bridge0: port 3(gretap0) entered blocking state [ 240.485378][T10096] bridge0: port 3(gretap0) entered disabled state [ 240.523384][T10096] gretap0: entered allmulticast mode [ 240.537317][T10097] netlink: 'syz.1.1163': attribute type 10 has an invalid length. [ 240.550181][T10096] gretap0: entered promiscuous mode [ 240.566780][T10097] bridge0: entered promiscuous mode [ 240.573814][T10097] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 240.583021][T10094] gretap0: left allmulticast mode [ 240.592315][T10094] gretap0: left promiscuous mode [ 240.608708][T10094] bridge0: port 3(gretap0) entered disabled state [ 240.631410][T10097] netlink: 'syz.1.1163': attribute type 6 has an invalid length. [ 241.102322][T10116] delete_channel: no stack [ 241.151485][T10120] netlink: 'syz.1.1169': attribute type 10 has an invalid length. [ 241.256470][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 241.353593][T10125] netlink: 'syz.4.1172': attribute type 2 has an invalid length. [ 241.549370][T10136] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.557678][T10136] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.566048][T10136] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.574526][T10136] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.609797][T10136] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.618377][T10136] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.626769][T10136] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.635277][T10136] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.931760][T10161] xt_hashlimit: size too large, truncated to 1048576 [ 242.322574][T10174] sctp: [Deprecated]: syz.1.1187 (pid 10174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.322574][T10174] Use struct sctp_sack_info instead [ 242.448010][T10177] geneve1: left promiscuous mode [ 242.456198][T10177] geneve1: left allmulticast mode [ 242.476858][T10177] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.485615][T10177] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.494804][T10177] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.503303][T10177] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.512193][T10177] geneve2: left promiscuous mode [ 242.517172][T10177] geneve2: left allmulticast mode [ 242.540179][ T8614] lo speed is unknown, defaulting to 1000 [ 242.546602][ T8614] s›z0: Port: 1 Link DOWN [ 242.721853][T10189] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.731424][T10189] __nla_validate_parse: 3 callbacks suppressed [ 242.731445][T10189] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1192'. [ 242.757920][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.923137][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 243.448150][T10230] netlink: 'syz.2.1201': attribute type 4 has an invalid length. [ 243.677256][T10237] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1204'. [ 243.706122][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 243.734926][T10237] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 243.865909][T10246] bond2: (slave gretap1): making interface the new active one [ 243.875613][T10246] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 244.016975][T10260] x_tables: duplicate underflow at hook 2 [ 244.562832][T10293] lo speed is unknown, defaulting to 1000 [ 244.894054][T10301] lo speed is unknown, defaulting to 1000 [ 245.035392][T10303] lo speed is unknown, defaulting to 1000 [ 245.168807][T10320] Bluetooth: MGMT ver 1.23 [ 245.209779][T10320] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.238358][T10320] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.278295][T10320] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.286618][T10320] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.307966][T10320] geneve2: entered promiscuous mode [ 245.522175][T10325] dccp_v6_rcv: dropped packet with invalid checksum [ 245.982360][T10349] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1234'. [ 246.015005][T10349] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 246.285540][T10349] lo speed is unknown, defaulting to 1000 [ 246.304727][T10362] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 246.404637][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 246.953014][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 247.099780][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 247.131609][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.143677][T10375] macsec0: entered allmulticast mode [ 247.150595][T10375] dummy0: entered allmulticast mode [ 247.356392][T10405] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 247.380389][T10405] bridge0: port 5(batadv0) entered disabled state [ 247.417365][T10405] batadv0: left allmulticast mode [ 247.423538][T10405] batadv0: left promiscuous mode [ 247.440471][T10405] bridge0: port 5(batadv0) entered disabled state [ 247.476383][T10405] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 247.504343][T10405] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 247.552364][T10405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.582086][T10405] batadv0: entered promiscuous mode [ 247.592445][T10405] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 247.848781][ T36] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 247.863453][ T36] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.020456][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 248.039904][T10432] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1254'. [ 248.303863][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 248.432985][ T6255] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 248.447652][ T6255] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.912696][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1263'. [ 249.019913][ T6243] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 249.034457][ T6243] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 249.282179][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 249.457642][T10498] netlink: 'syz.2.1270': attribute type 2 has an invalid length. [ 249.470801][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 249.485126][T10497] tipc: Cannot configure node identity twice [ 249.613535][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 249.635669][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 249.653993][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 249.680940][T10504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1274'. [ 250.027653][T10517] x_tables: duplicate underflow at hook 2 [ 250.440712][T10525] bridge0: port 3(vlan2) entered disabled state [ 250.447373][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.455009][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.609475][ T13] net_ratelimit: 4 callbacks suppressed [ 250.609497][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 250.629965][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.676332][T10525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.710416][T10525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.842847][T10525] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.853763][T10525] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.870867][T10525] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.879948][T10525] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.002458][T10525] ip6gretap0: left allmulticast mode [ 251.008510][T10525] macsec1: left promiscuous mode [ 251.013701][T10525] macsec1: left allmulticast mode [ 251.209967][ T6255] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 251.225133][ T6255] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 251.397994][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.752044][T10541] bond0: (slave team0): Releasing backup interface [ 251.761839][T10541] team0 (unregistering): left promiscuous mode [ 251.768330][T10541] team_slave_0: left promiscuous mode [ 251.774289][T10541] team_slave_1: left promiscuous mode [ 251.792499][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 251.802077][T10541] team0 (unregistering): Port device team_slave_0 removed [ 251.807921][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 251.833071][T10541] team0 (unregistering): Port device team_slave_1 removed [ 251.901542][T10574] tunl0: entered promiscuous mode [ 251.906848][T10574] netlink: 'syz.0.1288': attribute type 4 has an invalid length. [ 251.947920][T10577] sch_fq: defrate 117 ignored. [ 252.345011][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 252.360577][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 252.380756][T10606] netlink: 'syz.1.1294': attribute type 15 has an invalid length. [ 252.594625][T10619] netlink: 'syz.2.1295': attribute type 16 has an invalid length. [ 252.628056][T10622] sctp: [Deprecated]: syz.1.1297 (pid 10622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.628056][T10622] Use struct sctp_sack_info instead [ 252.720508][T10623] lo speed is unknown, defaulting to 1000 [ 252.905072][T10626] tipc: Enabling of bearer rejected, failed to enable media [ 252.934766][ T6253] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 252.950271][ T6253] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 253.232598][T10634] __nla_validate_parse: 4 callbacks suppressed [ 253.232622][T10634] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1304'. [ 253.463545][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 253.475507][T10624] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1298'. [ 253.506542][T10623] lo speed is unknown, defaulting to 1000 [ 253.676350][ T36] veth1_to_bridge: left allmulticast mode [ 253.685567][ T36] veth1_to_bridge: left promiscuous mode [ 253.694058][ T36] bridge0: port 4(veth1_to_bridge) entered disabled state [ 253.779071][ T36] gretap0: left allmulticast mode [ 253.784198][ T36] gretap0: left promiscuous mode [ 253.801588][ T36] bridge0: port 3(gretap0) entered disabled state [ 253.825177][T10644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1306'. [ 253.849508][ T36] bridge_slave_1: left allmulticast mode [ 253.855294][ T36] bridge_slave_1: left promiscuous mode [ 253.872540][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.910184][ T36] bridge_slave_0: left allmulticast mode [ 253.931911][ T36] bridge_slave_0: left promiscuous mode [ 253.948328][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.141179][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 254.155513][T10659] FAULT_INJECTION: forcing a failure. [ 254.155513][T10659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.173195][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 254.182894][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.4.1309 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 254.182926][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.182953][T10659] Call Trace: [ 254.182962][T10659] [ 254.182971][T10659] dump_stack_lvl+0x241/0x360 [ 254.183009][T10659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.183039][T10659] ? __pfx__printk+0x10/0x10 [ 254.183082][T10659] should_fail_ex+0x424/0x570 [ 254.183110][T10659] _copy_from_iter+0x211/0x1c70 [ 254.183155][T10659] ? __pfx__copy_from_iter+0x10/0x10 [ 254.183192][T10659] ? skb_put+0x114/0x1f0 [ 254.183218][T10659] hci_sock_sendmsg+0x4f1/0x11f0 [ 254.183281][T10659] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.183308][T10659] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 254.183335][T10659] ? __pfx_aa_file_perm+0x10/0x10 [ 254.183363][T10659] ? aa_sock_msg_perm+0x91/0x160 [ 254.183397][T10659] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 254.183421][T10659] __sock_sendmsg+0x221/0x270 [ 254.183452][T10659] sock_write_iter+0x2d9/0x3f0 [ 254.183481][T10659] ? __pfx_sock_write_iter+0x10/0x10 [ 254.183520][T10659] ? bpf_lsm_file_permission+0x9/0x10 [ 254.183561][T10659] vfs_write+0x70f/0xd10 [ 254.183594][T10659] ? __pfx_sock_write_iter+0x10/0x10 [ 254.183621][T10659] ? __pfx_vfs_write+0x10/0x10 [ 254.183648][T10659] ? __fget_files+0x2a/0x420 [ 254.183671][T10659] ? __fget_files+0x2a/0x420 [ 254.183699][T10659] ksys_write+0x19d/0x2d0 [ 254.183725][T10659] ? __pfx_ksys_write+0x10/0x10 [ 254.183762][T10659] ? do_syscall_64+0xb6/0x230 [ 254.183790][T10659] do_syscall_64+0xf3/0x230 [ 254.183812][T10659] ? clear_bhb_loop+0x45/0xa0 [ 254.183837][T10659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.183865][T10659] RIP: 0033:0x7f1ab658d169 [ 254.183884][T10659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.183902][T10659] RSP: 002b:00007f1ab7306038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.183925][T10659] RAX: ffffffffffffffda RBX: 00007f1ab67a6080 RCX: 00007f1ab658d169 [ 254.183941][T10659] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000005 [ 254.183953][T10659] RBP: 00007f1ab7306090 R08: 0000000000000000 R09: 0000000000000000 [ 254.183967][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.183979][T10659] R13: 0000000000000000 R14: 00007f1ab67a6080 R15: 00007ffdf0c922b8 [ 254.184012][T10659] [ 254.436548][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1305'. [ 254.454681][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.465692][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.475487][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.484168][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.499854][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.561225][ T36] bond2 (unregistering): (slave gretap1): Releasing active interface [ 254.668932][T10665] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 254.685366][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 254.694586][ T36] bridge0 (unregistering): left promiscuous mode [ 255.017465][ T36] bond0 (unregistering): left promiscuous mode [ 255.023931][ T36] bond_slave_0: left promiscuous mode [ 255.029729][ T36] bond_slave_1: left promiscuous mode [ 255.036998][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.047871][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.059187][ T36] bond0 (unregistering): Released all slaves [ 255.073848][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1312'. [ 255.189777][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 255.198933][ T36] bond1 (unregistering): Released all slaves [ 255.215888][ T36] bond2 (unregistering): Released all slaves [ 255.233596][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1305'. [ 255.304928][ T36] €: left promiscuous mode [ 255.381321][T10672] x_tables: duplicate underflow at hook 1 [ 255.408295][T10672] x_tables: duplicate underflow at hook 2 [ 255.419485][T10661] lo speed is unknown, defaulting to 1000 [ 255.815518][ T36] batadv0: left promiscuous mode [ 255.881819][ T36] hsr_slave_0: left promiscuous mode [ 255.917316][ T36] hsr_slave_1: left promiscuous mode [ 255.928743][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.941052][T10691] No such timeout policy "syz0" [ 255.948274][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.973992][ T36] [ 255.976385][ T36] ============================================ [ 255.982565][ T36] WARNING: possible recursive locking detected [ 255.988754][ T36] 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 Not tainted [ 255.996102][ T36] -------------------------------------------- [ 256.002283][ T36] kworker/u8:2/36 is trying to acquire lock: [ 256.008290][ T36] ffff888011dead30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 256.018533][ T36] [ 256.018533][ T36] but task is already holding lock: [ 256.025930][ T36] ffff888011dead30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 256.037574][ T36] and the lock comparison function returns 0: [ 256.043664][ T36] [ 256.043664][ T36] other info that might help us debug this: [ 256.048899][ T6244] net_ratelimit: 11 callbacks suppressed [ 256.048924][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 256.051723][ T36] Possible unsafe locking scenario: [ 256.051723][ T36] [ 256.051733][ T36] CPU0 [ 256.057418][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 256.071587][ T36] ---- [ 256.071600][ T36] lock(&dev_instance_lock_key#3); [ 256.071629][ T36] lock(&dev_instance_lock_key#3); [ 256.071649][ T36] [ 256.071649][ T36] *** DEADLOCK *** [ 256.071649][ T36] [ 256.071655][ T36] May be due to missing lock nesting notation [ 256.071655][ T36] [ 256.071663][ T36] 5 locks held by kworker/u8:2/36: [ 256.071676][ T36] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 256.071735][ T36] #1: ffffc90000ad7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 256.071790][ T36] #2: ffffffff900f0910 (pernet_ops_rwsem){++++}-{4:4} [ 256.083868][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 256.096766][ T36] , at: cleanup_net+0x17c/0xd60 [ 256.096810][ T36] #3: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 256.096886][ T36] #4: ffff888011dead30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 256.196151][ T36] [ 256.196151][ T36] stack backtrace: [ 256.202050][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 256.202075][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.202087][ T36] Workqueue: netns cleanup_net [ 256.202115][ T36] Call Trace: [ 256.202122][ T36] [ 256.202130][ T36] dump_stack_lvl+0x241/0x360 [ 256.202157][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.202183][ T36] ? __pfx__printk+0x10/0x10 [ 256.202206][ T36] ? print_lock+0x171/0x1a0 [ 256.202228][ T36] print_deadlock_bug+0x2be/0x2d0 [ 256.202250][ T36] validate_chain+0x928/0x24e0 [ 256.202274][ T36] ? do_raw_spin_lock+0x151/0x370 [ 256.202305][ T36] __lock_acquire+0xad5/0xd80 [ 256.202325][ T36] lock_acquire+0x116/0x2f0 [ 256.202340][ T36] ? dev_set_allmulti+0x11c/0x270 [ 256.202360][ T36] __mutex_lock+0x1a5/0x10c0 [ 256.202382][ T36] ? dev_set_allmulti+0x11c/0x270 [ 256.202403][ T36] ? dev_set_allmulti+0x11c/0x270 [ 256.202417][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 256.202446][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.202467][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 256.202484][ T36] ? macsec_dev_stop+0x264/0x440 [ 256.202500][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 256.202518][ T36] dev_set_allmulti+0x11c/0x270 [ 256.202535][ T36] macsec_dev_stop+0x2b8/0x440 [ 256.202552][ T36] ? __pfx_macsec_dev_stop+0x10/0x10 [ 256.202572][ T36] ? dev_deactivate_many+0xc09/0xca0 [ 256.202600][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 256.202626][ T36] ? notifier_call_chain+0x3cc/0x3f0 [ 256.202647][ T36] ? __pfx_macsec_dev_stop+0x10/0x10 [ 256.202663][ T36] __dev_close_many+0x3d7/0x760 [ 256.202689][ T36] ? __pfx___dev_close_many+0x10/0x10 [ 256.202717][ T36] dev_close_many+0x250/0x4c0 [ 256.202741][ T36] ? __pfx_dev_close_many+0x10/0x10 [ 256.202763][ T36] ? __lock_acquire+0xad5/0xd80 [ 256.202784][ T36] unregister_netdevice_many_notify+0x628/0x2510 [ 256.202808][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.202828][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 256.202844][ T36] ? batadv_tt_local_remove+0x119/0x230 [ 256.202862][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 256.202878][ T36] ? batadv_tt_local_remove+0x119/0x230 [ 256.202895][ T36] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 256.202921][ T36] ? unregister_netdevice_queue+0x2c4/0x400 [ 256.202944][ T36] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 256.202970][ T36] default_device_exit_batch+0x7ff/0x880 [ 256.203000][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 256.203026][ T36] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 256.203049][ T36] ? cfg802154_pernet_exit+0xc3/0xe0 [ 256.203065][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 256.203106][ T36] cleanup_net+0x8af/0xd60 [ 256.203134][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 256.203163][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 256.203183][ T36] process_scheduled_works+0xac3/0x18e0 [ 256.203214][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.203236][ T36] ? assign_work+0x367/0x3d0 [ 256.203256][ T36] worker_thread+0x870/0xd50 [ 256.203282][ T36] ? __kthread_parkme+0x1a8/0x200 [ 256.203303][ T36] ? __pfx_worker_thread+0x10/0x10 [ 256.203322][ T36] kthread+0x7b7/0x940 [ 256.203345][ T36] ? __pfx_worker_thread+0x10/0x10 [ 256.203365][ T36] ? __pfx_kthread+0x10/0x10 [ 256.203387][ T36] ? __pfx_kthread+0x10/0x10 [ 256.203408][ T36] ? __pfx_kthread+0x10/0x10 [ 256.203437][ T36] ? __pfx_kthread+0x10/0x10 [ 256.203460][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.203476][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.203495][ T36] ? __pfx_kthread+0x10/0x10 [ 256.203518][ T36] ret_from_fork+0x4b/0x80 [ 256.203535][ T36] ? __pfx_kthread+0x10/0x10 [ 256.203558][ T36] ret_from_fork_asm+0x1a/0x30 [ 256.203579][ T36] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.603625][ T5853] Bluetooth: hci2: command tx timeout [ 256.728771][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 256.743334][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 257.339532][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 257.354000][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 257.877945][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 257.892582][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 258.409061][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 258.423901][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 258.677970][ T5853] Bluetooth: hci2: command tx timeout [ 260.758189][ T5853] Bluetooth: hci2: command tx timeout [ 261.000152][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.499296][ T6244] net_ratelimit: 10 callbacks suppressed [ 261.499314][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 261.519338][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.038013][ T6242] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 262.052529][ T6242] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.567906][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 262.582286][ T6244] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.840088][ T5853] Bluetooth: hci2: command tx timeout [ 263.097914][ T6242] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 263.112298][ T6242] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 263.629207][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 263.643701][ T13] batman_adv: batadv0: Local translation table size (48) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01