last executing test programs: 3.500111717s ago: executing program 2 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="f78d9ca38fff48f3e1fc06a273cb7ad8680536c0adfd680ae9bd81c3e71d8748ce492b2257f61712b4a21ee14a02edab04749a6b6caa4bcd4885688e51c9d93971375a1800"/79, 0x4f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x88101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4095, 0xfff}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/72, 0x48}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 3.433642127s ago: executing program 4 (id=737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed5093613507", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.321243633s ago: executing program 2 (id=739): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x34, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361", 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.249571856s ago: executing program 4 (id=740): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x129200, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x60}}, 0x4000) recvfrom(r0, 0x0, 0x0, 0x40002021, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0xffffffffffffff57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='f\n\x00\x00', @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r9], 0x0, 0x1006, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000000)='syzkaller\x00', 0x44f9, 0xb5, &(0x7f0000000580)=""/181, 0x40f00, 0x10, '\x00', r6, @fallback=0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000840)=[r1, r1, r1, r1, r1], &(0x7f0000000880)=[{0x3, 0x3, 0x6, 0x3}, {0x4, 0x3, 0x1, 0x1}, {0x3, 0x4, 0xd}], 0x10, 0x9, @void, @value}, 0x94) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x26, &(0x7f00000000c0)={&(0x7f0000000400)="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", 0x3}, 0x1, 0x0, 0x0, 0x4000081}, 0x448a0) 3.188147766s ago: executing program 1 (id=741): r0 = socket(0x29, 0x3, 0xb034) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf25450000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000459686e6900006301370000000016cee5ba638ce0f8ac"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xcf683a673645c2e9, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r5, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e0001"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@gettaction={0x60, 0x32, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x60}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xff}, @rand_addr=0x64010102}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r7, 0x58, &(0x7f00000005c0)}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="3f000000010040", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r11, 0x84, 0x80, &(0x7f0000000540)="07002200090dd0ca8e6c000000", 0xd) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x100}}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.10046218s ago: executing program 2 (id=743): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x24000840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20044080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e22000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200000000000000000000000040000000330000"], 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.978834626s ago: executing program 1 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000002100017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.875092862s ago: executing program 2 (id=746): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x50, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x21006, 0x1c107}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x3, 0x1}, {0x6, 0x5}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x2e, 0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000900)=""/112, 0x46, 0x70, 0x0, 0x7, 0x10000, @value=r2}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x538, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000008c0)={0x77359400}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000a5000100000000000500020000000000050000000000000085c4e5f10affffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000070601020400000000200000000000080500010007000000080006400000000a"], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) 2.796460043s ago: executing program 1 (id=747): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x20048010) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x81, 0x4c6b}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6bd1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.775385987s ago: executing program 0 (id=748): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xa4, &(0x7f0000000200)=""/164, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x0, 0xe00}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x5, 0x1, 0xe, 0xc}, {0x2, 0x3, 0x3, 0x3}, {0x0, 0x2, 0x2, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x21, &(0x7f00000003c0)={r0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xefffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x5c}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0x5, 0x858, 0x2, 0x0, 0x0, [{{r2}, 0x100000001}, {{r2}}]}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2.561510499s ago: executing program 3 (id=749): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000080000000c00000003000004ffff00000700000001000000030000000700000001000000010000000300000005000000010100000b000000000000090400000000304e0f30302e00"], &(0x7f0000001400)=""/4096, 0x5c, 0x1000, 0x0, 0xfffffffb, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00007adb3255cd067000"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x10, 0x80, 0xfff, 0x7, {{0x2e, 0x4, 0x2, 0x1, 0xffffffffffffff8c, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x1c, 0xa, 0x0, 0x7, [0x3, 0x6, 0xf2, 0x87f, 0x80, 0xe]}, @generic={0x82, 0xd, "42cdfa50a701225c3db8c9"}, @cipso={0x86, 0x4b, 0x3, [{0x1, 0x12, "401a6fb3f299c58b1fb8672d37988b0e"}, {0x1, 0x8, "a19a6ab0ddfd"}, {0x5, 0x7, "48bf2fea32"}, {0x0, 0xe, "66498b5f464de3a51995eb7c"}, {0x1, 0x3, "ed"}, {0x0, 0xe, "26a958f4d69c617d274a8385"}, {0x2, 0x3, "1c"}, {0x7, 0x2}]}, @timestamp={0x44, 0xc, 0x89, 0x0, 0x9, [0x4, 0xfff]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x4e, [@remote, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0x8, [{@multicast1, 0x14}]}, @end]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000de51cbed0002000000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb702000008000000", @ANYRES32=0x0, @ANYBLOB="00000000a91d9712a675a6540800000085000000c5000000950641e0be5096a8251a5e9ed6374e9e33d053f4865d64d76091eaa2ea5859e450b21776ffc9b534d2749c3342d503fb9507124c1570458dd20716e335e93ebed599c4086693f3f456c83cf46b1aa91ab2c931b0b444979ae29d34654c6cda5caefe7e9fb0cb7e1804e1d7bb4f686435001eb863f623dbcc8fdbda83610c975c376a85c5"], &(0x7f0000000840)='syzkaller\x00', 0x2, 0x98, &(0x7f0000000c40)=""/152, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)={r2}, &(0x7f0000000580)=0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000198376b585f7aa00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x3, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x34, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300016e994fde440113e90005"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000000), 0xc) bind$qrtr(r9, &(0x7f0000000940)={0x2a, 0x4, 0x1}, 0xc) recvfrom(r9, &(0x7f0000001180)=""/201, 0xc9, 0x10042, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.114773517s ago: executing program 3 (id=750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed5093613507", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 941.902638ms ago: executing program 1 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 928.756362ms ago: executing program 0 (id=752): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x37, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361350702", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r6 = accept4(r5, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 917.206081ms ago: executing program 2 (id=753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x34, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361", 0x0, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000101851000000700", @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 784.343972ms ago: executing program 4 (id=754): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}, 0x1, 0x100000000000}, 0x0) 783.825369ms ago: executing program 3 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x2c, 0x0, &(0x7f0000000ac0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), r7) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000"], 0x18, 0x4004010}, 0x4010) (async) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}, 0x2000) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) ppoll(&(0x7f0000000300)=[{r8, 0x10800}], 0x1, 0x0, 0x0, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) (async) r9 = socket(0x2a, 0x2, 0xffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x34}, {0x3, 0x6, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x64}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0043fb1b87030400000035384df7a1fbb11900", @ANYRES32=0x0, @ANYBLOB="00030000000000001400128009000100766c616e000000000400028008000500", @ANYRES32=r3, @ANYBLOB="20001980050002000000000014000500a198cba78cdff345ea540f96167362af"], 0x5c}}, 0x0) 748.779671ms ago: executing program 0 (id=756): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x24000840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20044080) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200000000000000000000000040000000330000"], 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 676.784051ms ago: executing program 1 (id=757): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000067a6f8af000022004baf0c0001000b0000da44574c01"], 0x20}}, 0x2000c094) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5e8, 0xf0, 0xf0, 0xffffffff, 0xf0, 0x0, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x6, @ipv4=@private=0xa010100, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x68, @icmp_id=0x68}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0x595d236f86c5bc0f], [0xff000000, 0x0, 0xffff00, 0xffffffff], 'pim6reg0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x3b, 0xe, 0x2, 0x1f}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "1876", 0x1}}, @common=@hl={{0x28}, {0x0, 0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}, @icmp_id=0x68, @port=0x4e22}}}, {{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@srh={{0x30}, {0x1d, 0x7, 0xa5, 0x1c, 0x7ff, 0x404, 0x1100}}, @common=@inet=@iprange={{0x68}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4=@remote, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv6=@mcast2, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @icmp_id=0x64, @icmp_id=0x68}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff, 0x0, 0xff, 0xff000000], 'veth1\x00', 'dvmrp1\x00', {}, {0xff}, 0x8, 0x7, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e21, 0x4e21], [0x4e20, 0x4e22], 0x1}}, @common=@unspec=@connlimit={{0x40}, {[0xff, 0xffffff00, 0xff, 0xff], 0x0, 0x3}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@mcast2, @ipv4=@empty, @gre_key=0x714, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002f40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xfffffffe, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @private0, 0x1}, 0x1c, &(0x7f0000000180)}}], 0x2, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, 0x8) 592.535008ms ago: executing program 2 (id=758): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "7f84e5", 0x20, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, 0x5, 0x2, 0x3, 0x9784, 0xfffa, 0x2, 0x4e22, 0x4e21}, 0x4, 0x3}}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfec0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 559.109056ms ago: executing program 3 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100ffffffffffffffe00a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 482.391201ms ago: executing program 4 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 448.850911ms ago: executing program 0 (id=761): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a00100442b33e9bfda85ead0000000000008ff6115a27e9341c7c4244963c32d7c200254d0000bbff0200000000000000000000000000012f00010000000000"], 0x0) 383.499314ms ago: executing program 3 (id=762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback={0x400000000000000}}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 332.611878ms ago: executing program 4 (id=763): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x50, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x21006, 0x1c107}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x3, 0x1}, {0x6, 0x5}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x2e, 0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000900)=""/112, 0x46, 0x70, 0x0, 0x7, 0x10000, @value=r2}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x538, 0x0, 0x0, 0x3d0, 0x160, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x88}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffff000, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000008c0)={0x77359400}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000a5000100000000000500020000000000050000000000000085c4e5f10affffff95"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000070601020400000000200000000000080500010007000000080006400000000a"], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) 288.245171ms ago: executing program 0 (id=764): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 228.290714ms ago: executing program 3 (id=765): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x14, 0x2d, 0x1, 0x30, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) 128.579917ms ago: executing program 0 (id=766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @window={0x3, 0x1, 0xc}, @timestamp, @window, @mss={0x2, 0x5}, @window={0x3, 0xdb8, 0x7}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 78.809945ms ago: executing program 1 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=768): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x4e22, 0xfffe, 0xa, 0x0, 0x10, 0x2e}, {0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x2, @in=@multicast1, 0x3503, 0x1, 0x2, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0xffffff7f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 83.929360][ T5827] cgroup: Unknown subsys name 'net' [ 84.023452][ T5827] cgroup: Unknown subsys name 'cpuset' [ 84.033004][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.678992][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.014864][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.032558][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.042426][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.050454][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.057875][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.065787][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.073777][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.081630][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.083155][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.089483][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.104291][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.111692][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.120160][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.130498][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.145830][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.150020][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.154938][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.167574][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.177501][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.185050][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.194482][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.203180][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.212335][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.237682][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.246584][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.776610][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.950472][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.964063][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 91.103366][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.110715][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.118969][ T5838] bridge_slave_0: entered allmulticast mode [ 91.126741][ T5838] bridge_slave_0: entered promiscuous mode [ 91.175556][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.227634][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.235113][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.242431][ T5838] bridge_slave_1: entered allmulticast mode [ 91.250177][ T5838] bridge_slave_1: entered promiscuous mode [ 91.362217][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.376652][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.390704][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.419915][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.427163][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.434548][ T5851] bridge_slave_0: entered allmulticast mode [ 91.442570][ T5851] bridge_slave_0: entered promiscuous mode [ 91.451530][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.458635][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.466796][ T5851] bridge_slave_1: entered allmulticast mode [ 91.475096][ T5851] bridge_slave_1: entered promiscuous mode [ 91.597061][ T5838] team0: Port device team_slave_0 added [ 91.606347][ T5838] team0: Port device team_slave_1 added [ 91.613628][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.621710][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.628913][ T5843] bridge_slave_0: entered allmulticast mode [ 91.636885][ T5843] bridge_slave_0: entered promiscuous mode [ 91.644379][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.651843][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.659042][ T5840] bridge_slave_0: entered allmulticast mode [ 91.667248][ T5840] bridge_slave_0: entered promiscuous mode [ 91.700453][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.713109][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.735861][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.743238][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.750644][ T5843] bridge_slave_1: entered allmulticast mode [ 91.758084][ T5843] bridge_slave_1: entered promiscuous mode [ 91.768798][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.776726][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.784119][ T5840] bridge_slave_1: entered allmulticast mode [ 91.792215][ T5840] bridge_slave_1: entered promiscuous mode [ 91.884401][ T5851] team0: Port device team_slave_0 added [ 91.892028][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.898998][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.929461][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.949912][ T9] cfg80211: failed to load regulatory.db [ 91.993263][ T5851] team0: Port device team_slave_1 added [ 92.013883][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.021521][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.047710][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.072687][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.086854][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.099003][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.123618][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.130992][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.138201][ T5846] bridge_slave_0: entered allmulticast mode [ 92.145877][ T5846] bridge_slave_0: entered promiscuous mode [ 92.155213][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.162716][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.170172][ T5858] Bluetooth: hci0: command tx timeout [ 92.176180][ T5846] bridge_slave_1: entered allmulticast mode [ 92.184040][ T5846] bridge_slave_1: entered promiscuous mode [ 92.222911][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.239403][ T5858] Bluetooth: hci1: command tx timeout [ 92.264416][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.271460][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.297451][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.319702][ T55] Bluetooth: hci3: command tx timeout [ 92.319806][ T5852] Bluetooth: hci2: command tx timeout [ 92.325424][ T5858] Bluetooth: hci4: command tx timeout [ 92.380531][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.387516][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.414142][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.428173][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.447635][ T5843] team0: Port device team_slave_0 added [ 92.456690][ T5840] team0: Port device team_slave_0 added [ 92.466241][ T5840] team0: Port device team_slave_1 added [ 92.493622][ T5838] hsr_slave_0: entered promiscuous mode [ 92.500552][ T5838] hsr_slave_1: entered promiscuous mode [ 92.510062][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.521579][ T5843] team0: Port device team_slave_1 added [ 92.626041][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.635893][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.663365][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.676068][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.683124][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.709581][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.726147][ T5851] hsr_slave_0: entered promiscuous mode [ 92.732795][ T5851] hsr_slave_1: entered promiscuous mode [ 92.738970][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.747046][ T5851] Cannot create hsr debugfs directory [ 92.755536][ T5846] team0: Port device team_slave_0 added [ 92.764946][ T5846] team0: Port device team_slave_1 added [ 92.785508][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.792846][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.818892][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.895942][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.903341][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.930481][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.013052][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.020188][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.046630][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.087243][ T5840] hsr_slave_0: entered promiscuous mode [ 93.094242][ T5840] hsr_slave_1: entered promiscuous mode [ 93.101340][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.108961][ T5840] Cannot create hsr debugfs directory [ 93.116635][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.123897][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.149868][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.220079][ T5843] hsr_slave_0: entered promiscuous mode [ 93.227163][ T5843] hsr_slave_1: entered promiscuous mode [ 93.233845][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.241752][ T5843] Cannot create hsr debugfs directory [ 93.425587][ T5846] hsr_slave_0: entered promiscuous mode [ 93.434573][ T5846] hsr_slave_1: entered promiscuous mode [ 93.441360][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.449000][ T5846] Cannot create hsr debugfs directory [ 93.826943][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.841117][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.853064][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.873221][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.933101][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.953607][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.967281][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.978269][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.085242][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.116959][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.144274][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.154751][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.240106][ T5858] Bluetooth: hci0: command tx timeout [ 94.245878][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.286122][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.297307][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.319492][ T5858] Bluetooth: hci1: command tx timeout [ 94.328617][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.357900][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.400180][ T5858] Bluetooth: hci2: command tx timeout [ 94.400784][ T5852] Bluetooth: hci4: command tx timeout [ 94.405621][ T5858] Bluetooth: hci3: command tx timeout [ 94.442951][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.466228][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.478865][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.486205][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.526840][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.543803][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.558202][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.565476][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.595794][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.625266][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.645480][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.661648][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.676291][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.683489][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.712517][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.719715][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.820905][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.879307][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.886505][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.951305][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.958515][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.034895][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.177005][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.214685][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.243369][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.250697][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.286783][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.294032][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.390285][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.407136][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.542551][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.584434][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.591709][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.644380][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.651616][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.731444][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.772815][ T5840] veth0_vlan: entered promiscuous mode [ 95.836460][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.883859][ T5840] veth1_vlan: entered promiscuous mode [ 95.988949][ T5838] veth0_vlan: entered promiscuous mode [ 96.026049][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.047317][ T5840] veth0_macvtap: entered promiscuous mode [ 96.077418][ T5840] veth1_macvtap: entered promiscuous mode [ 96.106092][ T5843] veth0_vlan: entered promiscuous mode [ 96.122853][ T5838] veth1_vlan: entered promiscuous mode [ 96.149417][ T5843] veth1_vlan: entered promiscuous mode [ 96.157831][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.200832][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.223156][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.234003][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.243770][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.252677][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.268693][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.305893][ T5838] veth0_macvtap: entered promiscuous mode [ 96.331767][ T5858] Bluetooth: hci0: command tx timeout [ 96.341882][ T5843] veth0_macvtap: entered promiscuous mode [ 96.354864][ T5838] veth1_macvtap: entered promiscuous mode [ 96.384089][ T5851] veth0_vlan: entered promiscuous mode [ 96.395135][ T5843] veth1_macvtap: entered promiscuous mode [ 96.409978][ T5858] Bluetooth: hci1: command tx timeout [ 96.437704][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.449182][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.465515][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.476567][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.488332][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.493428][ T5858] Bluetooth: hci4: command tx timeout [ 96.499966][ T55] Bluetooth: hci2: command tx timeout [ 96.504241][ T5858] Bluetooth: hci3: command tx timeout [ 96.511211][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.532347][ T5851] veth1_vlan: entered promiscuous mode [ 96.543790][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.552800][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.564273][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.573084][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.602466][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.613443][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.623709][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.634305][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.647749][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.693934][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.704785][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.716244][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.727108][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.741631][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.753940][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.763284][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.773945][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.782882][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808731][ T5846] veth0_vlan: entered promiscuous mode [ 96.818784][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.823274][ T5846] veth1_vlan: entered promiscuous mode [ 96.835268][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.952466][ T5851] veth0_macvtap: entered promiscuous mode [ 96.979437][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.988010][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.010259][ T5851] veth1_macvtap: entered promiscuous mode [ 97.026923][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.050851][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.095981][ T5846] veth0_macvtap: entered promiscuous mode [ 97.143457][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.157544][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.167616][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.178734][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.189020][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.199873][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.211789][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.230555][ T5846] veth1_macvtap: entered promiscuous mode [ 97.246602][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.259706][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.264767][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.279347][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.291112][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.301338][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.311870][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.321776][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.332409][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.343501][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.351789][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.370215][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.465394][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.475165][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.484607][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.494231][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.518596][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.543659][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.544684][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.592693][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.610792][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.628771][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.638818][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.649468][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.663570][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.674405][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.691936][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.760548][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.788165][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.816343][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.844607][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.854945][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.866897][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.877122][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.888107][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.910584][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.977914][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.997517][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.010857][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.020034][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.196480][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.231530][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.340318][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.359172][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.401934][ T5858] Bluetooth: hci0: command tx timeout [ 98.462145][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.473333][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.481435][ T5858] Bluetooth: hci1: command tx timeout [ 98.559431][ T5858] Bluetooth: hci3: command tx timeout [ 98.561008][ T5852] Bluetooth: hci2: command tx timeout [ 98.564968][ T5858] Bluetooth: hci4: command tx timeout [ 98.596945][ T5950] trusted_key: syz.4.10 sent an empty control message without MSG_MORE. [ 98.632981][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.654619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.676995][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10'. [ 98.725438][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10'. [ 98.754097][ T5949] netlink: 'syz.4.10': attribute type 4 has an invalid length. [ 99.161006][ T5964] netlink: 'syz.4.13': attribute type 4 has an invalid length. [ 99.285980][ T5968] gretap0: entered promiscuous mode [ 99.316072][ T5968] macsec1: entered promiscuous mode [ 99.356935][ T5968] gretap0: left promiscuous mode [ 99.406293][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 99.468651][ T5974] netlink: 'syz.3.14': attribute type 6 has an invalid length. [ 99.473016][ T5967] netlink: 'syz.4.13': attribute type 4 has an invalid length. [ 99.491812][ T5974] netlink: 'syz.3.14': attribute type 7 has an invalid length. [ 99.500715][ T5974] netlink: 'syz.3.14': attribute type 8 has an invalid length. [ 99.507298][ T5964] vlan2: entered allmulticast mode [ 99.518737][ T5974] netlink: 112 bytes leftover after parsing attributes in process `syz.3.14'. [ 99.530789][ T5964] ip6gretap0: entered allmulticast mode [ 99.543582][ T5978] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 99.625888][ T5977] Zero length message leads to an empty skb [ 99.908319][ T5988] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.548295][ T6008] netlink: 'syz.3.24': attribute type 7 has an invalid length. [ 100.577116][ T6010] lo speed is unknown, defaulting to 1000 [ 100.584842][ T6010] lo speed is unknown, defaulting to 1000 [ 100.597666][ T6010] lo speed is unknown, defaulting to 1000 [ 100.617358][ T6010] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.632491][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.697833][ T6010] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 100.700589][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 100.765996][ T976] lo speed is unknown, defaulting to 1000 [ 100.786565][ T6010] lo speed is unknown, defaulting to 1000 [ 100.803138][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 100.834641][ T6010] lo speed is unknown, defaulting to 1000 [ 100.847527][ T6010] lo speed is unknown, defaulting to 1000 [ 100.856293][ T6010] lo speed is unknown, defaulting to 1000 [ 100.867952][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 100.882842][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.891766][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.898964][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.907954][ T6010] lo speed is unknown, defaulting to 1000 [ 101.069744][ T6019] batman_adv: batadv0: Adding interface: dummy0 [ 101.094550][ T6019] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.137530][ T6019] batman_adv: batadv0: Interface activated: dummy0 [ 101.226541][ T6022] batadv0: mtu less than device minimum [ 101.278171][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.290426][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.302438][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.314494][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.326577][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.338672][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.350739][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.362768][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.374845][ T6022] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.474638][ T6023] lo speed is unknown, defaulting to 1000 [ 101.769481][ T6032] netlink: 'syz.2.33': attribute type 2 has an invalid length. [ 102.215245][ T6044] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.39'. [ 102.499002][ T6057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.41'. [ 102.627541][ T6064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.073836][ T6082] batman_adv: batadv0: Adding interface: dummy0 [ 103.088496][ T6082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.196043][ T6082] batman_adv: batadv0: Interface activated: dummy0 [ 103.521209][ T6096] x_tables: duplicate underflow at hook 1 [ 103.708800][ T6103] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 103.724395][ T6103] __nla_validate_parse: 2 callbacks suppressed [ 103.724414][ T6103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.54'. [ 103.995095][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.57'. [ 104.039097][ T6113] bridge0: entered promiscuous mode [ 104.067177][ T6113] macvlan2: entered promiscuous mode [ 104.089186][ T6113] bridge0: port 3(macvlan2) entered blocking state [ 104.098104][ T6113] bridge0: port 3(macvlan2) entered disabled state [ 104.124219][ T6113] macvlan2: entered allmulticast mode [ 104.131994][ T6113] bridge0: entered allmulticast mode [ 104.142755][ T6113] macvlan2: left allmulticast mode [ 104.151073][ T6113] bridge0: left allmulticast mode [ 104.157677][ T6113] bridge0: left promiscuous mode [ 104.420642][ T6123] Cannot find add_set index 0 as target [ 104.512271][ T5858] block nbd0: Receive control failed (result -32) [ 104.644897][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 104.654522][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 104.686116][ T6135] netlink: 38 bytes leftover after parsing attributes in process `syz.4.68'. [ 105.083527][ T6153] warning: `syz.3.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.158155][ T6157] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 105.316256][ T6131] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 106.003056][ T6194] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.198592][ T6195] FAULT_INJECTION: forcing a failure. [ 106.198592][ T6195] name failslab, interval 1, probability 0, space 0, times 1 [ 106.272022][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.0.82 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 106.272052][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.272069][ T6195] Call Trace: [ 106.272077][ T6195] [ 106.272086][ T6195] dump_stack_lvl+0x241/0x360 [ 106.272138][ T6195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.272168][ T6195] ? __pfx__printk+0x10/0x10 [ 106.272203][ T6195] ? __pfx___might_resched+0x10/0x10 [ 106.272236][ T6195] should_fail_ex+0x424/0x570 [ 106.272269][ T6195] should_failslab+0xac/0x100 [ 106.272301][ T6195] __kmalloc_cache_noprof+0x73/0x370 [ 106.272329][ T6195] ? __request_module+0x2bb/0x640 [ 106.272357][ T6195] __request_module+0x2bb/0x640 [ 106.272384][ T6195] ? crypto_alg_mod_lookup+0xc2/0x640 [ 106.272407][ T6195] ? __pfx___request_module+0x10/0x10 [ 106.272428][ T6195] ? __up_read+0x2c4/0x6b0 [ 106.272457][ T6195] ? __pfx___up_read+0x10/0x10 [ 106.272496][ T6195] ? crypto_alg_lookup+0x3d2/0x450 [ 106.272524][ T6195] crypto_alg_mod_lookup+0xf4/0x640 [ 106.272553][ T6195] crypto_alloc_tfm_node+0x131/0x3a0 [ 106.272599][ T6195] mac802154_llsec_key_add+0x93a/0xeb0 [ 106.272640][ T6195] ieee802154_add_llsec_key+0x65/0x80 [ 106.272675][ T6195] nl802154_add_llsec_key+0x5aa/0x910 [ 106.272714][ T6195] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 106.272753][ T6195] ? irqentry_exit+0x63/0x90 [ 106.272773][ T6195] ? lockdep_hardirqs_on+0x9d/0x150 [ 106.272805][ T6195] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 106.272829][ T6195] ? genl_rcv_msg+0xada/0xf00 [ 106.272865][ T6195] genl_rcv_msg+0xb38/0xf00 [ 106.272904][ T6195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.272929][ T6195] ? stack_trace_save+0x11a/0x1d0 [ 106.272961][ T6195] ? __pfx_stack_trace_save+0x10/0x10 [ 106.272998][ T6195] ? stack_depot_save_flags+0x44/0x940 [ 106.273022][ T6195] ? stack_trace_snprint+0x71/0xf0 [ 106.273066][ T6195] ? __lock_acquire+0xad5/0xd80 [ 106.273088][ T6195] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 106.273106][ T6195] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 106.273127][ T6195] ? __pfx_nl802154_post_doit+0x10/0x10 [ 106.273164][ T6195] netlink_rcv_skb+0x208/0x480 [ 106.273187][ T6195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.273215][ T6195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.273262][ T6195] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.273291][ T6195] genl_rcv+0x28/0x40 [ 106.273315][ T6195] netlink_unicast+0x7f8/0x9a0 [ 106.273357][ T6195] ? __pfx_netlink_unicast+0x10/0x10 [ 106.273390][ T6195] ? skb_put+0x114/0x1f0 [ 106.273420][ T6195] netlink_sendmsg+0x8c3/0xcd0 [ 106.273456][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.273483][ T6195] ? aa_sock_msg_perm+0x91/0x160 [ 106.273519][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.273538][ T6195] __sock_sendmsg+0x221/0x270 [ 106.273575][ T6195] ____sys_sendmsg+0x523/0x860 [ 106.273612][ T6195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.273635][ T6195] ? __fget_files+0x2a/0x420 [ 106.273670][ T6195] ? __fget_files+0x2a/0x420 [ 106.273717][ T6195] __sys_sendmsg+0x271/0x360 [ 106.273750][ T6195] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.273840][ T6195] ? do_syscall_64+0xb6/0x230 [ 106.273867][ T6195] do_syscall_64+0xf3/0x230 [ 106.273890][ T6195] ? clear_bhb_loop+0x45/0xa0 [ 106.273916][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.273941][ T6195] RIP: 0033:0x7f971a78e169 [ 106.273963][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.273979][ T6195] RSP: 002b:00007f971b645038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.274001][ T6195] RAX: ffffffffffffffda RBX: 00007f971a9b5fa0 RCX: 00007f971a78e169 [ 106.274015][ T6195] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 106.274028][ T6195] RBP: 00007f971b645090 R08: 0000000000000000 R09: 0000000000000000 [ 106.274040][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.274051][ T6195] R13: 0000000000000000 R14: 00007f971a9b5fa0 R15: 00007ffda8691e58 [ 106.274084][ T6195] [ 106.767336][ T6209] lo speed is unknown, defaulting to 1000 [ 107.342849][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'. [ 107.371483][ T6237] nbd: must specify at least one socket [ 108.230008][ T6261] lo speed is unknown, defaulting to 1000 [ 108.386893][ T6278] netlink: 'syz.2.102': attribute type 72 has an invalid length. [ 108.912469][ T6302] FAULT_INJECTION: forcing a failure. [ 108.912469][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 108.933417][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.3.107 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 108.933446][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.933458][ T6302] Call Trace: [ 108.933466][ T6302] [ 108.933475][ T6302] dump_stack_lvl+0x241/0x360 [ 108.933512][ T6302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.933540][ T6302] ? __pfx__printk+0x10/0x10 [ 108.933572][ T6302] ? __pfx___might_resched+0x10/0x10 [ 108.933601][ T6302] should_fail_ex+0x424/0x570 [ 108.933632][ T6302] should_failslab+0xac/0x100 [ 108.933662][ T6302] kmem_cache_alloc_noprof+0x78/0x390 [ 108.933689][ T6302] ? mas_alloc_nodes+0x267/0x7e0 [ 108.933715][ T6302] mas_alloc_nodes+0x267/0x7e0 [ 108.933745][ T6302] mas_preallocate+0x5ea/0x950 [ 108.933771][ T6302] ? __pfx_mas_preallocate+0x10/0x10 [ 108.933803][ T6302] ? __mas_set_range+0x133/0x3c0 [ 108.933836][ T6302] __split_vma+0x2f2/0xb20 [ 108.933872][ T6302] ? __pfx___split_vma+0x10/0x10 [ 108.933905][ T6302] ? mas_find+0x950/0xbb0 [ 108.933932][ T6302] vms_gather_munmap_vmas+0x4e1/0x13d0 [ 108.933978][ T6302] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 108.934013][ T6302] ? mas_find+0x8c0/0xbb0 [ 108.934040][ T6302] mmap_region+0xa13/0x2ea0 [ 108.934103][ T6302] ? __pfx_mmap_region+0x10/0x10 [ 108.934126][ T6302] ? is_bpf_text_address+0x26/0x2a0 [ 108.934152][ T6302] ? is_bpf_text_address+0x26/0x2a0 [ 108.934175][ T6302] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 108.934256][ T6302] ? arch_get_unmapped_area_topdown+0x2b0/0xd50 [ 108.934293][ T6302] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 108.934332][ T6302] ? cap_mmap_addr+0xaa/0xf0 [ 108.934356][ T6302] ? bpf_lsm_mmap_addr+0x9/0x10 [ 108.934375][ T6302] ? security_mmap_addr+0x6f/0x250 [ 108.934410][ T6302] ? shmem_mapping+0xd/0x50 [ 108.934439][ T6302] do_mmap+0xd42/0x1420 [ 108.934480][ T6302] ? __pfx_do_mmap+0x10/0x10 [ 108.934505][ T6302] ? down_write_killable+0x1a0/0x260 [ 108.934530][ T6302] ? vm_mmap_pgoff+0x214/0x530 [ 108.934557][ T6302] ? __pfx_down_write_killable+0x10/0x10 [ 108.934580][ T6302] ? common_file_perm+0x1a6/0x210 [ 108.934616][ T6302] vm_mmap_pgoff+0x2a2/0x530 [ 108.934655][ T6302] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 108.934686][ T6302] ? __fget_files+0x2a/0x420 [ 108.934719][ T6302] ? __fget_files+0x39d/0x420 [ 108.934746][ T6302] ? __fget_files+0x2a/0x420 [ 108.934782][ T6302] ksys_mmap_pgoff+0x4ee/0x720 [ 108.934811][ T6302] ? __x64_sys_mmap+0x7f/0x140 [ 108.934837][ T6302] do_syscall_64+0xf3/0x230 [ 108.934860][ T6302] ? clear_bhb_loop+0x45/0xa0 [ 108.934885][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.934904][ T6302] RIP: 0033:0x7f68ee58e169 [ 108.934922][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.934938][ T6302] RSP: 002b:00007f68ef3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 108.934960][ T6302] RAX: ffffffffffffffda RBX: 00007f68ee7b5fa0 RCX: 00007f68ee58e169 [ 108.934974][ T6302] RDX: 000000000700000d RSI: 0000000000001000 RDI: 0000200000018000 [ 108.934987][ T6302] RBP: 00007f68ef3b4090 R08: 0000000000000003 R09: 0000000180000000 [ 108.934999][ T6302] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000001 [ 108.935011][ T6302] R13: 0000000000000000 R14: 00007f68ee7b5fa0 R15: 00007ffcf416f8b8 [ 108.935042][ T6302] [ 109.649837][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 109.658879][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 109.672336][ T6321] netlink: 'syz.0.114': attribute type 14 has an invalid length. [ 110.046105][ T6337] lo speed is unknown, defaulting to 1000 [ 110.195411][ T6349] netlink: 44 bytes leftover after parsing attributes in process `syz.2.121'. [ 110.408720][ T6356] netlink: 'syz.3.122': attribute type 4 has an invalid length. [ 110.547311][ T6352] team0 (unregistering): Port device team_slave_0 removed [ 110.560706][ T6352] team0 (unregistering): Port device team_slave_1 removed [ 110.736057][ T6360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 110.756031][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 110.782460][ T6363] netlink: 'syz.4.124': attribute type 21 has an invalid length. [ 110.827526][ T6363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.124'. [ 111.565062][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 111.624646][ T6383] netlink: 80 bytes leftover after parsing attributes in process `syz.2.130'. [ 112.748537][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.086083][ T6438] Cannot find add_set index 0 as target [ 113.264740][ T6436] lo speed is unknown, defaulting to 1000 [ 113.549621][ T6448] netlink: 248 bytes leftover after parsing attributes in process `syz.2.153'. [ 113.821493][ T6453] tipc: Started in network mode [ 113.843447][ T6453] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 113.878067][ T6453] tipc: Enabled bearer , priority 10 [ 114.881636][ T6492] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 114.990505][ T47] tipc: Node number set to 4269801488 [ 115.021456][ T6494] lo speed is unknown, defaulting to 1000 [ 116.110677][ T6512] lo speed is unknown, defaulting to 1000 [ 116.486416][ T6542] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 116.928407][ T6560] FAULT_INJECTION: forcing a failure. [ 116.928407][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 116.988191][ T6560] CPU: 1 UID: 0 PID: 6560 Comm: syz.1.179 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 116.988222][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.988235][ T6560] Call Trace: [ 116.988243][ T6560] [ 116.988252][ T6560] dump_stack_lvl+0x241/0x360 [ 116.988291][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.988321][ T6560] ? __pfx__printk+0x10/0x10 [ 116.988354][ T6560] ? __pfx___might_resched+0x10/0x10 [ 116.988384][ T6560] should_fail_ex+0x424/0x570 [ 116.988416][ T6560] should_failslab+0xac/0x100 [ 116.988447][ T6560] __kmalloc_noprof+0xdf/0x4d0 [ 116.988475][ T6560] ? tomoyo_encode+0x26f/0x540 [ 116.988511][ T6560] tomoyo_encode+0x26f/0x540 [ 116.988544][ T6560] ? __pfx_sockfs_dname+0x10/0x10 [ 116.988585][ T6560] tomoyo_realpath_from_path+0x59e/0x5e0 [ 116.988631][ T6560] tomoyo_path_number_perm+0x245/0x790 [ 116.988662][ T6560] ? tomoyo_path_number_perm+0x215/0x790 [ 116.988692][ T6560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.988726][ T6560] ? ksys_write+0x24e/0x2d0 [ 116.988758][ T6560] ? __lock_acquire+0xad5/0xd80 [ 116.988800][ T6560] ? __fget_files+0x2a/0x420 [ 116.988830][ T6560] ? __fget_files+0x2a/0x420 [ 116.988877][ T6560] ? __fget_files+0x2a/0x420 [ 116.988912][ T6560] security_file_ioctl+0xc6/0x2a0 [ 116.988938][ T6560] __se_sys_ioctl+0x46/0x160 [ 116.988964][ T6560] do_syscall_64+0xf3/0x230 [ 116.988987][ T6560] ? clear_bhb_loop+0x45/0xa0 [ 116.989012][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.989032][ T6560] RIP: 0033:0x7eff4718e169 [ 116.989049][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.989065][ T6560] RSP: 002b:00007eff47f3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.989086][ T6560] RAX: ffffffffffffffda RBX: 00007eff473b5fa0 RCX: 00007eff4718e169 [ 116.989101][ T6560] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 116.989113][ T6560] RBP: 00007eff47f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.989125][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.989137][ T6560] R13: 0000000000000000 R14: 00007eff473b5fa0 R15: 00007ffde0671558 [ 116.989169][ T6560] [ 116.989189][ T6560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.507085][ T6580] bond0: option ad_select: unable to set because the bond device is up [ 118.274737][ T6595] lo speed is unknown, defaulting to 1000 [ 119.096803][ T6621] lo speed is unknown, defaulting to 1000 [ 119.812993][ T6653] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.204'. [ 119.849591][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 119.886695][ T6655] netlink: 'syz.4.202': attribute type 6 has an invalid length. [ 119.956230][ T6655] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.202'. [ 120.191125][ T6649] gretap0: entered promiscuous mode [ 120.221254][ T6649] macsec1: entered promiscuous mode [ 120.255396][ T6649] gretap0: left promiscuous mode [ 120.403447][ T47] IPVS: starting estimator thread 0... [ 120.433814][ T6668] netlink: 'syz.2.207': attribute type 21 has an invalid length. [ 120.507806][ T6668] netlink: 112 bytes leftover after parsing attributes in process `syz.2.207'. [ 120.519760][ T6670] IPVS: using max 24 ests per chain, 57600 per kthread [ 120.996230][ T6687] netlink: 'syz.2.215': attribute type 2 has an invalid length. [ 121.015476][ T6687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.215'. [ 121.056429][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 121.094420][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 121.124772][ T6691] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 121.299976][ T6696] lo speed is unknown, defaulting to 1000 [ 121.318212][ T6687] lo speed is unknown, defaulting to 1000 [ 121.320651][ T6701] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.495058][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 121.510756][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 121.542632][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 121.557764][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 123.996332][ T6765] tap0: tun_chr_ioctl cmd 2148553947 [ 124.227958][ T6775] net_ratelimit: 30 callbacks suppressed [ 124.227980][ T6775] netlink: zone id is out of range [ 124.257459][ T6775] netlink: zone id is out of range [ 124.269937][ T6775] netlink: zone id is out of range [ 124.280726][ T6775] netlink: zone id is out of range [ 124.304047][ T6777] sctp: [Deprecated]: syz.2.242 (pid 6777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.304047][ T6777] Use struct sctp_sack_info instead [ 124.817370][ T6788] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 124.843180][ T6788] netlink: 'syz.0.248': attribute type 3 has an invalid length. [ 124.852174][ T6788] __nla_validate_parse: 52 callbacks suppressed [ 124.852192][ T6788] netlink: 224 bytes leftover after parsing attributes in process `syz.0.248'. [ 124.938062][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 125.017969][ T6797] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 125.176983][ T6810] batman_adv: batadv0: Adding interface: dummy0 [ 125.190517][ T6810] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.277473][ T6810] batman_adv: batadv0: Interface activated: dummy0 [ 125.348380][ T6818] batadv0: mtu less than device minimum [ 125.421252][ T6818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.433444][ T6818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.445522][ T6818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.457542][ T6818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.469612][ T6818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.080215][ T6834] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 126.134145][ T6833] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 126.187897][ T6834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.201337][ T6845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.262'. [ 126.248714][ T6837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.256111][ T6837] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.281754][ T6837] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 126.537635][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 126.659680][ T6860] vlan2: entered allmulticast mode [ 126.933749][ T6875] vcan0: tx drop: invalid da for name 0x00000000000000fd [ 126.981571][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 127.283790][ T6882] Bluetooth: MGMT ver 1.23 [ 127.398800][ T6883] lo speed is unknown, defaulting to 1000 [ 127.830155][ T6877] lo speed is unknown, defaulting to 1000 [ 128.025597][ T6919] FAULT_INJECTION: forcing a failure. [ 128.025597][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 128.073334][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.0.275 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 128.073366][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.073379][ T6919] Call Trace: [ 128.073388][ T6919] [ 128.073397][ T6919] dump_stack_lvl+0x241/0x360 [ 128.073436][ T6919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.073466][ T6919] ? __pfx__printk+0x10/0x10 [ 128.073499][ T6919] ? __pfx___might_resched+0x10/0x10 [ 128.073529][ T6919] should_fail_ex+0x424/0x570 [ 128.073561][ T6919] should_failslab+0xac/0x100 [ 128.073592][ T6919] __kmalloc_noprof+0xdf/0x4d0 [ 128.073619][ T6919] ? security_sk_alloc+0x53/0x360 [ 128.073647][ T6919] security_sk_alloc+0x53/0x360 [ 128.073672][ T6919] sk_prot_alloc+0xfa/0x210 [ 128.073702][ T6919] sk_alloc+0x3e/0x370 [ 128.073732][ T6919] pn_socket_create+0xfe/0x520 [ 128.073761][ T6919] __sock_create+0x4c0/0xa30 [ 128.073792][ T6919] __sys_socket+0x14d/0x3c0 [ 128.073815][ T6919] ? __pfx___sys_socket+0x10/0x10 [ 128.073848][ T6919] __x64_sys_socket+0x7a/0x90 [ 128.073870][ T6919] do_syscall_64+0xf3/0x230 [ 128.073894][ T6919] ? clear_bhb_loop+0x45/0xa0 [ 128.073919][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.073939][ T6919] RIP: 0033:0x7f971a78e169 [ 128.073958][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.073974][ T6919] RSP: 002b:00007f971b645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 128.073996][ T6919] RAX: ffffffffffffffda RBX: 00007f971a9b5fa0 RCX: 00007f971a78e169 [ 128.074011][ T6919] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 128.074023][ T6919] RBP: 00007f971b645090 R08: 0000000000000000 R09: 0000000000000000 [ 128.074036][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.074048][ T6919] R13: 0000000000000001 R14: 00007f971a9b5fa0 R15: 00007ffda8691e58 [ 128.074083][ T6919] [ 130.043245][ T6991] x_tables: unsorted underflow at hook 3 [ 130.559830][ T6993] syzkaller1: entered allmulticast mode [ 130.573746][ T7010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.295'. [ 130.704676][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 130.935440][ T7017] lo speed is unknown, defaulting to 1000 [ 131.083743][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 131.733370][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.755726][ T7032] bond0: (slave bond1): Enslaving as an active interface with an up link [ 131.962860][ T7047] batman_adv: batadv0: Interface deactivated: dummy0 [ 131.980460][ T7047] batman_adv: batadv0: Removing interface: dummy0 [ 132.086479][ T7047] bridge_slave_0: left allmulticast mode [ 132.108787][ T7047] bridge_slave_0: left promiscuous mode [ 132.122354][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.136840][ T7047] bridge_slave_1: left allmulticast mode [ 132.146998][ T7047] bridge_slave_1: left promiscuous mode [ 132.153239][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.174209][ T7047] bond0: (slave bond_slave_0): Releasing backup interface [ 132.193751][ T7047] bond0: (slave bond_slave_1): Releasing backup interface [ 132.228314][ T7047] team0: Port device team_slave_0 removed [ 132.250424][ T7047] team0: Port device team_slave_1 removed [ 132.265873][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.282703][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.294478][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.303121][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.887777][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894594][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.086519][ T7082] lo speed is unknown, defaulting to 1000 [ 133.339787][ T7097] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.312'. [ 133.834647][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 133.913682][ T7117] syzkaller1: entered promiscuous mode [ 133.919423][ T7117] syzkaller1: entered allmulticast mode [ 133.932735][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 134.268298][ T7125] lo speed is unknown, defaulting to 1000 [ 134.425123][ T7145] bridge0: port 3(gretap0) entered blocking state [ 134.486302][ T7145] bridge0: port 3(gretap0) entered disabled state [ 134.525212][ T7145] gretap0: entered allmulticast mode [ 134.562114][ T7145] gretap0: entered promiscuous mode [ 134.641618][ T7145] bridge0: port 3(gretap0) entered blocking state [ 134.648559][ T7145] bridge0: port 3(gretap0) entered forwarding state [ 135.005992][ T7158] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 135.079156][ T7158] bond3: entered promiscuous mode [ 135.084762][ T7158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.701058][ T7188] lo speed is unknown, defaulting to 1000 [ 136.956555][ T7192] lo speed is unknown, defaulting to 1000 [ 137.553954][ T7213] netlink: 'syz.3.338': attribute type 10 has an invalid length. [ 137.562170][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.338'. [ 137.582304][ T7213] bridge0: port 3(dummy0) entered blocking state [ 137.593939][ T7213] bridge0: port 3(dummy0) entered disabled state [ 137.656378][ T7213] dummy0: entered allmulticast mode [ 137.682917][ T7213] dummy0: entered promiscuous mode [ 137.713674][ T7213] bridge0: port 3(dummy0) entered blocking state [ 137.720256][ T7213] bridge0: port 3(dummy0) entered forwarding state [ 138.308949][ T7225] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 138.734792][ T7245] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 138.779546][ T7245] netlink: 224 bytes leftover after parsing attributes in process `syz.2.349'. [ 138.831394][ T7241] lo speed is unknown, defaulting to 1000 [ 138.983202][ T7251] net_ratelimit: 15 callbacks suppressed [ 138.983223][ T7251] openvswitch: netlink: IPv4 tun info is not correct [ 139.095318][ T7255] netlink: 332 bytes leftover after parsing attributes in process `syz.4.351'. [ 139.150525][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 139.978631][ T7286] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 140.290740][ T7295] tls_set_device_offload_rx: netdev not found [ 140.308499][ T7299] netlink: 'syz.2.366': attribute type 4 has an invalid length. [ 140.550568][ T7308] netlink: 'syz.2.369': attribute type 72 has an invalid length. [ 141.026948][ T7330] netlink: 'syz.0.375': attribute type 16 has an invalid length. [ 141.058192][ T7330] netlink: 'syz.0.375': attribute type 17 has an invalid length. [ 141.192653][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 141.227732][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.390143][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 141.619190][ T7358] netlink: 'syz.3.384': attribute type 72 has an invalid length. [ 141.670655][ T7330] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.685513][ T7330] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.695504][ T7330] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.705725][ T7330] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.784859][ T7348] tun0: tun_chr_ioctl cmd 2147767520 [ 142.087741][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 142.105642][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 142.140032][ T7369] FAULT_INJECTION: forcing a failure. [ 142.140032][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 142.209733][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.0.388 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 142.209773][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.209787][ T7369] Call Trace: [ 142.209795][ T7369] [ 142.209804][ T7369] dump_stack_lvl+0x241/0x360 [ 142.209842][ T7369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.209871][ T7369] ? __pfx__printk+0x10/0x10 [ 142.209904][ T7369] ? __pfx___might_resched+0x10/0x10 [ 142.209935][ T7369] should_fail_ex+0x424/0x570 [ 142.209967][ T7369] should_failslab+0xac/0x100 [ 142.209997][ T7369] __kmalloc_cache_noprof+0x73/0x370 [ 142.210026][ T7369] ? mgmt_pending_new+0x65/0x250 [ 142.210062][ T7369] mgmt_pending_new+0x65/0x250 [ 142.210097][ T7369] set_dev_class+0x37d/0x590 [ 142.210128][ T7369] hci_mgmt_cmd+0xa2e/0xf20 [ 142.210165][ T7369] hci_sock_sendmsg+0x7b8/0x11f0 [ 142.210206][ T7369] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.210233][ T7369] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 142.210265][ T7369] ? __pfx_aa_file_perm+0x10/0x10 [ 142.210293][ T7369] ? aa_sock_msg_perm+0x91/0x160 [ 142.210327][ T7369] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 142.210356][ T7369] __sock_sendmsg+0x221/0x270 [ 142.210393][ T7369] sock_write_iter+0x2d9/0x3f0 [ 142.210426][ T7369] ? __pfx_sock_write_iter+0x10/0x10 [ 142.210469][ T7369] ? bpf_lsm_file_permission+0x9/0x10 [ 142.210501][ T7369] vfs_write+0x70f/0xd10 [ 142.210532][ T7369] ? __pfx_sock_write_iter+0x10/0x10 [ 142.210563][ T7369] ? __pfx_vfs_write+0x10/0x10 [ 142.210590][ T7369] ? __fget_files+0x2a/0x420 [ 142.210626][ T7369] ? __fget_files+0x2a/0x420 [ 142.210667][ T7369] ksys_write+0x19d/0x2d0 [ 142.210693][ T7369] ? __pfx_ksys_write+0x10/0x10 [ 142.210723][ T7369] ? do_syscall_64+0xb6/0x230 [ 142.210751][ T7369] do_syscall_64+0xf3/0x230 [ 142.210783][ T7369] ? clear_bhb_loop+0x45/0xa0 [ 142.210808][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.210829][ T7369] RIP: 0033:0x7f971a78e169 [ 142.210847][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.210863][ T7369] RSP: 002b:00007f971b624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.210885][ T7369] RAX: ffffffffffffffda RBX: 00007f971a9b6080 RCX: 00007f971a78e169 [ 142.210901][ T7369] RDX: 0000000000000008 RSI: 00002000000005c0 RDI: 0000000000000004 [ 142.210914][ T7369] RBP: 00007f971b624090 R08: 0000000000000000 R09: 0000000000000000 [ 142.210927][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.210939][ T7369] R13: 0000000000000001 R14: 00007f971a9b6080 R15: 00007ffda8691e58 [ 142.210972][ T7369] [ 142.649441][ T7380] netlink: 104 bytes leftover after parsing attributes in process `syz.2.393'. [ 142.661201][ T7379] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 142.796374][ T7382] x_tables: duplicate underflow at hook 1 [ 142.948010][ T7392] netlink: 64 bytes leftover after parsing attributes in process `syz.3.399'. [ 143.022908][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 143.033429][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 143.066194][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 143.105570][ T7400] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 143.118926][ T7401] FAULT_INJECTION: forcing a failure. [ 143.118926][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 143.155020][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.1.400 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 143.155051][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.155064][ T7401] Call Trace: [ 143.155071][ T7401] [ 143.155080][ T7401] dump_stack_lvl+0x241/0x360 [ 143.155119][ T7401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.155149][ T7401] ? __pfx__printk+0x10/0x10 [ 143.155192][ T7401] should_fail_ex+0x424/0x570 [ 143.155224][ T7401] should_failslab+0xac/0x100 [ 143.155255][ T7401] __kmalloc_cache_noprof+0x73/0x370 [ 143.155283][ T7401] ? sctp_add_bind_addr+0x89/0x3a0 [ 143.155314][ T7401] sctp_add_bind_addr+0x89/0x3a0 [ 143.155345][ T7401] sctp_copy_local_addr_list+0x313/0x500 [ 143.155374][ T7401] ? sctp_copy_local_addr_list+0xad/0x500 [ 143.155400][ T7401] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 143.155429][ T7401] ? sctp_v6_is_any+0x60/0x70 [ 143.155458][ T7401] ? sctp_copy_one_addr+0x94/0x360 [ 143.155487][ T7401] sctp_bind_addr_copy+0xad/0x3b0 [ 143.155513][ T7401] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 143.155540][ T7401] sctp_connect_new_asoc+0x337/0x700 [ 143.155575][ T7401] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 143.155604][ T7401] ? sctp_sendmsg+0xf30/0x3620 [ 143.155649][ T7401] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 143.155677][ T7401] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 143.155703][ T7401] sctp_sendmsg+0x2009/0x3620 [ 143.155758][ T7401] ? __pfx_sctp_sendmsg+0x10/0x10 [ 143.155792][ T7401] ? aa_sk_perm+0x96f/0xac0 [ 143.155839][ T7401] ? inet_sendmsg+0x330/0x390 [ 143.155873][ T7401] __sock_sendmsg+0x1a6/0x270 [ 143.155909][ T7401] __sys_sendto+0x365/0x4c0 [ 143.155940][ T7401] ? __pfx___sys_sendto+0x10/0x10 [ 143.155979][ T7401] ? __fget_files+0x2a/0x420 [ 143.156021][ T7401] ? ksys_write+0x275/0x2d0 [ 143.156057][ T7401] __x64_sys_sendto+0xde/0x100 [ 143.156085][ T7401] do_syscall_64+0xf3/0x230 [ 143.156109][ T7401] ? clear_bhb_loop+0x45/0xa0 [ 143.156134][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.156153][ T7401] RIP: 0033:0x7eff4718e169 [ 143.156172][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.156189][ T7401] RSP: 002b:00007eff47f1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 143.156210][ T7401] RAX: ffffffffffffffda RBX: 00007eff473b6080 RCX: 00007eff4718e169 [ 143.156225][ T7401] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 143.156238][ T7401] RBP: 00007eff47f1e090 R08: 0000200000000080 R09: 000000000000001c [ 143.156251][ T7401] R10: 0000000004000051 R11: 0000000000000246 R12: 0000000000000002 [ 143.156264][ T7401] R13: 0000000000000001 R14: 00007eff473b6080 R15: 00007ffde0671558 [ 143.156297][ T7401] [ 143.499135][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 143.526140][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 143.542380][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 143.790383][ T7422] FAULT_INJECTION: forcing a failure. [ 143.790383][ T7422] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 143.814196][ T7422] CPU: 1 UID: 0 PID: 7422 Comm: syz.3.411 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 143.814225][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.814237][ T7422] Call Trace: [ 143.814244][ T7422] [ 143.814253][ T7422] dump_stack_lvl+0x241/0x360 [ 143.814289][ T7422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.814317][ T7422] ? __pfx__printk+0x10/0x10 [ 143.814354][ T7422] should_fail_ex+0x424/0x570 [ 143.814383][ T7422] prepare_alloc_pages+0x220/0x610 [ 143.814413][ T7422] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 143.814438][ T7422] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.814457][ T7422] ? __up_read+0x2c4/0x6b0 [ 143.814501][ T7422] alloc_pages_mpol+0x339/0x690 [ 143.814533][ T7422] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.814578][ T7422] alloc_pages_noprof+0x121/0x190 [ 143.814607][ T7422] bpf_prog_test_run_xdp+0xcc4/0x1200 [ 143.814648][ T7422] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 143.814670][ T7422] ? __fget_files+0x2a/0x420 [ 143.814702][ T7422] ? __fget_files+0x2a/0x420 [ 143.814735][ T7422] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 143.814757][ T7422] bpf_prog_test_run+0x2e4/0x360 [ 143.814783][ T7422] __sys_bpf+0x4ee/0x8b0 [ 143.814804][ T7422] ? __pfx___sys_bpf+0x10/0x10 [ 143.814836][ T7422] ? ksys_write+0x275/0x2d0 [ 143.814871][ T7422] __x64_sys_bpf+0x7c/0x90 [ 143.814901][ T7422] do_syscall_64+0xf3/0x230 [ 143.814923][ T7422] ? clear_bhb_loop+0x45/0xa0 [ 143.814947][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.814965][ T7422] RIP: 0033:0x7f68ee58e169 [ 143.814982][ T7422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.814997][ T7422] RSP: 002b:00007f68ef3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.815018][ T7422] RAX: ffffffffffffffda RBX: 00007f68ee7b5fa0 RCX: 00007f68ee58e169 [ 143.815032][ T7422] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 143.815044][ T7422] RBP: 00007f68ef3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 143.815056][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.815067][ T7422] R13: 0000000000000000 R14: 00007f68ee7b5fa0 R15: 00007ffcf416f8b8 [ 143.815096][ T7422] [ 143.816201][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 143.958347][ T7423] syz_tun: entered allmulticast mode [ 144.124499][ T7419] syz_tun: left allmulticast mode [ 144.932554][ T7464] x_tables: duplicate entry at hook 1 [ 145.125393][ T7471] netlink: 'syz.1.425': attribute type 11 has an invalid length. [ 145.156591][ T7471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.425'. [ 145.208648][ T7471] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 145.535636][ T7481] lo speed is unknown, defaulting to 1000 [ 146.275404][ T7511] dummy0: left allmulticast mode [ 146.284879][ T7511] dummy0: left promiscuous mode [ 146.290516][ T7511] bridge0: port 3(dummy0) entered disabled state [ 146.338648][ T7511] batman_adv: batadv0: Adding interface: dummy0 [ 146.362806][ T7517] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 146.371005][ T7511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.427137][ T7511] batman_adv: batadv0: Interface activated: dummy0 [ 146.486825][ T7516] batadv0: mtu less than device minimum [ 146.534424][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.546512][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.558657][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.570676][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.582680][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.594644][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.606703][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.618773][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.630816][ T7516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.718390][ T7517] €: entered promiscuous mode [ 147.225374][ T7553] geneve1: entered promiscuous mode [ 147.712631][ T7567] lo speed is unknown, defaulting to 1000 [ 148.151022][ T7594] 8021q: VLANs not supported on ip6_vti0 [ 148.540484][ T7604] bond4 (unregistering): Released all slaves [ 148.685362][ T7629] __nla_validate_parse: 7 callbacks suppressed [ 148.685383][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 148.773426][ T7632] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 149.256983][ T7649] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 149.323127][ T7649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.030416][ T7661] lo speed is unknown, defaulting to 1000 [ 150.208373][ T7667] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 150.833365][ T7697] xt_bpf: check failed: parse error [ 151.160231][ T7709] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.482'. [ 151.215167][ T7712] geneve2: entered promiscuous mode [ 151.227206][ T7712] geneve2: entered allmulticast mode [ 151.248946][ T7716] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 151.282053][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 151.482681][ T7726] syz_tun: entered allmulticast mode [ 151.534505][ T7725] syz_tun: left allmulticast mode [ 152.508678][ T7772] syz_tun: entered allmulticast mode [ 152.654634][ T7771] syz_tun: left allmulticast mode [ 152.660653][ T7776] FAULT_INJECTION: forcing a failure. [ 152.660653][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.732095][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.2.502 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 152.732126][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.732139][ T7776] Call Trace: [ 152.732147][ T7776] [ 152.732156][ T7776] dump_stack_lvl+0x241/0x360 [ 152.732191][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.732220][ T7776] ? __pfx__printk+0x10/0x10 [ 152.732261][ T7776] should_fail_ex+0x424/0x570 [ 152.732292][ T7776] _copy_from_user+0x2d/0xb0 [ 152.732314][ T7776] addrconf_del_ifaddr+0xcd/0x1d0 [ 152.732343][ T7776] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 152.732378][ T7776] ? kasan_quarantine_put+0xdc/0x230 [ 152.732399][ T7776] ? lockdep_hardirqs_on+0x9d/0x150 [ 152.732423][ T7776] inet6_ioctl+0x10f/0x280 [ 152.732453][ T7776] ? __pfx_inet6_ioctl+0x10/0x10 [ 152.732484][ T7776] ? tomoyo_path_number_perm+0x684/0x790 [ 152.732513][ T7776] ? tomoyo_path_number_perm+0x215/0x790 [ 152.732545][ T7776] sock_do_ioctl+0x15a/0x490 [ 152.732582][ T7776] ? __pfx_sock_do_ioctl+0x10/0x10 [ 152.732625][ T7776] ? __lock_acquire+0xad5/0xd80 [ 152.732658][ T7776] sock_ioctl+0x644/0x900 [ 152.732689][ T7776] ? __pfx_sock_ioctl+0x10/0x10 [ 152.732715][ T7776] ? __fget_files+0x2a/0x420 [ 152.732744][ T7776] ? __fget_files+0x2a/0x420 [ 152.732777][ T7776] ? __fget_files+0x2a/0x420 [ 152.732812][ T7776] ? __pfx_sock_ioctl+0x10/0x10 [ 152.732841][ T7776] __se_sys_ioctl+0xf1/0x160 [ 152.732866][ T7776] do_syscall_64+0xf3/0x230 [ 152.732889][ T7776] ? clear_bhb_loop+0x45/0xa0 [ 152.732913][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.732932][ T7776] RIP: 0033:0x7fe67d98e169 [ 152.732949][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.732966][ T7776] RSP: 002b:00007fe67e883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.732987][ T7776] RAX: ffffffffffffffda RBX: 00007fe67dbb5fa0 RCX: 00007fe67d98e169 [ 152.733002][ T7776] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 152.733014][ T7776] RBP: 00007fe67e883090 R08: 0000000000000000 R09: 0000000000000000 [ 152.733025][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.733037][ T7776] R13: 0000000000000000 R14: 00007fe67dbb5fa0 R15: 00007ffeb0e7a078 [ 152.733068][ T7776] [ 153.188836][ T7782] bond0: entered promiscuous mode [ 153.224482][ T7782] bond0: entered allmulticast mode [ 153.231110][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.480540][ T7792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.508'. [ 153.534434][ T7794] netlink: 'syz.2.509': attribute type 25 has an invalid length. [ 153.541728][ T7795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 153.918967][ T7806] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.511'. [ 154.420442][ T7827] pimreg: entered allmulticast mode [ 154.458339][ T7824] pimreg: left allmulticast mode [ 154.628431][ T7833] FAULT_INJECTION: forcing a failure. [ 154.628431][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.648271][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.3.518 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 154.648301][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.648315][ T7833] Call Trace: [ 154.648323][ T7833] [ 154.648332][ T7833] dump_stack_lvl+0x241/0x360 [ 154.648370][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.648399][ T7833] ? __pfx__printk+0x10/0x10 [ 154.648440][ T7833] should_fail_ex+0x424/0x570 [ 154.648473][ T7833] _copy_to_user+0x31/0xb0 [ 154.648508][ T7833] generic_map_lookup_batch+0x946/0xf20 [ 154.648555][ T7833] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 154.648581][ T7833] ? __fget_files+0x39d/0x420 [ 154.648612][ T7833] ? __fget_files+0x2a/0x420 [ 154.648648][ T7833] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 154.648679][ T7833] bpf_map_do_batch+0x288/0x660 [ 154.648709][ T7833] __sys_bpf+0x6b4/0x8b0 [ 154.648731][ T7833] ? __pfx___sys_bpf+0x10/0x10 [ 154.648771][ T7833] ? ksys_write+0x275/0x2d0 [ 154.648809][ T7833] __x64_sys_bpf+0x7c/0x90 [ 154.648841][ T7833] do_syscall_64+0xf3/0x230 [ 154.648865][ T7833] ? clear_bhb_loop+0x45/0xa0 [ 154.648890][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.648921][ T7833] RIP: 0033:0x7f68ee58e169 [ 154.648939][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.648955][ T7833] RSP: 002b:00007f68ef3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.648977][ T7833] RAX: ffffffffffffffda RBX: 00007f68ee7b5fa0 RCX: 00007f68ee58e169 [ 154.648991][ T7833] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000018 [ 154.649003][ T7833] RBP: 00007f68ef3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 154.649015][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.649027][ T7833] R13: 0000000000000000 R14: 00007f68ee7b5fa0 R15: 00007ffcf416f8b8 [ 154.649058][ T7833] [ 154.908702][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 154.922634][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 155.437587][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 155.485878][ T7859] netlink: 112 bytes leftover after parsing attributes in process `syz.3.527'. [ 156.094821][ T7872] lo speed is unknown, defaulting to 1000 [ 156.636486][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 156.726355][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 156.741636][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.537'. [ 157.032546][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 157.180949][ T7927] net_ratelimit: 11 callbacks suppressed [ 157.180969][ T7927] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 157.295907][ T7919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 157.416396][ T7919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 157.472774][ T7931] lo speed is unknown, defaulting to 1000 [ 157.845491][ T7937] batman_adv: batadv0: Interface deactivated: dummy0 [ 157.912265][ T7937] batman_adv: batadv0: Removing interface: dummy0 [ 157.995434][ T7937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.632660][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 159.516792][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.562'. [ 159.876506][ T8022] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 159.904462][ T8022] netlink: 224 bytes leftover after parsing attributes in process `syz.3.566'. [ 160.441325][ T8045] lo speed is unknown, defaulting to 1000 [ 160.590065][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 160.622062][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.574'. [ 160.638597][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.574'. [ 160.653405][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 160.685625][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 161.047562][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 161.057129][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 161.344772][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 161.517353][ T8087] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 161.528591][ T8087] batadv0: entered promiscuous mode [ 161.536439][ T8087] batadv0: entered allmulticast mode [ 161.549584][ T8087] bridge0: port 3(batadv0) entered blocking state [ 161.556524][ T8087] bridge0: port 3(batadv0) entered disabled state [ 161.590973][ T8087] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 161.679660][ T8087] bridge0: port 3(batadv0) entered blocking state [ 161.686306][ T8087] bridge0: port 3(batadv0) entered forwarding state [ 162.110607][ T82] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 162.120320][ T82] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 162.679831][ T5211] udevd[5211]: worker [5996] terminated by signal 33 (Unknown signal 33) [ 162.691378][ T5943] syzkaller0: tun_net_xmit 76 [ 162.716609][ T5211] udevd[5211]: worker [5996] failed while handling '/devices/virtual/block/loop3' [ 162.781966][ T8118] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 162.800193][ T8118] syzkaller0: Linktype set failed because interface is up [ 162.889085][ T5211] udevd[5211]: worker [5847] terminated by signal 33 (Unknown signal 33) [ 162.928995][ T5211] udevd[5211]: worker [5847] failed while handling '/devices/virtual/block/loop0' [ 162.948658][ T30] audit: type=1804 audit(1744890029.374:2): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.596" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=616 res=1 errno=0 [ 162.982183][ T5943] syzkaller0: tun_net_xmit 76 [ 163.006825][ T30] audit: type=1800 audit(1744890029.404:3): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.596" name="cgroup.controllers" dev="tmpfs" ino=616 res=0 errno=0 [ 164.739747][ T8180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 164.884292][ T8187] syz_tun: entered allmulticast mode [ 164.958437][ T8193] x_tables: duplicate underflow at hook 1 [ 164.966421][ T8184] syz_tun: left allmulticast mode [ 165.499285][ T8206] xt_CT: No such helper "snmp" [ 165.545452][ T8214] __nla_validate_parse: 6 callbacks suppressed [ 165.545474][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 165.806121][ T8230] FAULT_INJECTION: forcing a failure. [ 165.806121][ T8230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.839562][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.0.620 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 165.839592][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.839605][ T8230] Call Trace: [ 165.839613][ T8230] [ 165.839621][ T8230] dump_stack_lvl+0x241/0x360 [ 165.839657][ T8230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.839685][ T8230] ? __pfx__printk+0x10/0x10 [ 165.839727][ T8230] should_fail_ex+0x424/0x570 [ 165.839757][ T8230] _copy_from_user+0x2d/0xb0 [ 165.839779][ T8230] kstrtouint_from_user+0xce/0x1a0 [ 165.839815][ T8230] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 165.839847][ T8230] ? __lock_acquire+0xad5/0xd80 [ 165.839879][ T8230] proc_fail_nth_write+0xac/0x2d0 [ 165.839899][ T8230] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.839928][ T8230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.839954][ T8230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.839976][ T8230] vfs_write+0x2bc/0xd10 [ 165.840004][ T8230] ? fdget_pos+0x247/0x310 [ 165.840034][ T8230] ? __pfx_vfs_write+0x10/0x10 [ 165.840068][ T8230] ? __fget_files+0x2a/0x420 [ 165.840116][ T8230] ? __fget_files+0x39d/0x420 [ 165.840144][ T8230] ? __fget_files+0x2a/0x420 [ 165.840186][ T8230] ksys_write+0x19d/0x2d0 [ 165.840210][ T8230] ? __pfx_ksys_write+0x10/0x10 [ 165.840237][ T8230] ? do_syscall_64+0xb6/0x230 [ 165.840271][ T8230] do_syscall_64+0xf3/0x230 [ 165.840292][ T8230] ? clear_bhb_loop+0x45/0xa0 [ 165.840317][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.840336][ T8230] RIP: 0033:0x7f971a78cc1f [ 165.840354][ T8230] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 165.840371][ T8230] RSP: 002b:00007f971b645030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 165.840392][ T8230] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f971a78cc1f [ 165.840406][ T8230] RDX: 0000000000000001 RSI: 00007f971b6450a0 RDI: 0000000000000003 [ 165.840418][ T8230] RBP: 00007f971b645090 R08: 0000000000000000 R09: 0000000000000000 [ 165.840430][ T8230] R10: 0000000000000083 R11: 0000000000000293 R12: 0000000000000001 [ 165.840441][ T8230] R13: 0000000000000001 R14: 00007f971a9b5fa0 R15: 00007ffda8691e58 [ 165.840473][ T8230] [ 166.073942][ T8236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.145886][ T8228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.438501][ T9] IPVS: starting estimator thread 0... [ 166.445228][ T8236] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.531023][ T8254] IPVS: using max 25 ests per chain, 60000 per kthread [ 166.628863][ T8251] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 167.026079][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 167.035183][ T8275] netlink: 'syz.4.634': attribute type 9 has an invalid length. [ 167.084710][ T8275] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 167.094486][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 167.106298][ T8282] FAULT_INJECTION: forcing a failure. [ 167.106298][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 167.121387][ T8275] macvlan2: entered allmulticast mode [ 167.140548][ T8275] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 167.156663][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.3.636 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 167.156693][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.156706][ T8282] Call Trace: [ 167.156714][ T8282] [ 167.156723][ T8282] dump_stack_lvl+0x241/0x360 [ 167.156762][ T8282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.156792][ T8282] ? __pfx__printk+0x10/0x10 [ 167.156836][ T8282] should_fail_ex+0x424/0x570 [ 167.156868][ T8282] should_failslab+0xac/0x100 [ 167.156899][ T8282] __kmalloc_cache_noprof+0x73/0x370 [ 167.156927][ T8282] ? sctp_add_bind_addr+0x89/0x3a0 [ 167.156958][ T8282] sctp_add_bind_addr+0x89/0x3a0 [ 167.156986][ T8282] sctp_copy_local_addr_list+0x313/0x500 [ 167.157013][ T8282] ? sctp_copy_local_addr_list+0xad/0x500 [ 167.157038][ T8282] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 167.157066][ T8282] ? sctp_v6_is_any+0x60/0x70 [ 167.157093][ T8282] ? sctp_copy_one_addr+0x94/0x360 [ 167.157122][ T8282] sctp_bind_addr_copy+0xad/0x3b0 [ 167.157148][ T8282] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 167.157175][ T8282] sctp_connect_new_asoc+0x337/0x700 [ 167.157209][ T8282] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 167.157237][ T8282] ? sctp_sendmsg+0xf30/0x3620 [ 167.157273][ T8282] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 167.157301][ T8282] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 167.157328][ T8282] sctp_sendmsg+0x2009/0x3620 [ 167.157390][ T8282] ? __pfx_sctp_sendmsg+0x10/0x10 [ 167.157426][ T8282] ? aa_sk_perm+0x96f/0xac0 [ 167.157473][ T8282] ? inet_sendmsg+0x330/0x390 [ 167.157507][ T8282] __sock_sendmsg+0x1a6/0x270 [ 167.157543][ T8282] __sys_sendto+0x365/0x4c0 [ 167.157573][ T8282] ? __pfx___sys_sendto+0x10/0x10 [ 167.157614][ T8282] ? __fget_files+0x2a/0x420 [ 167.157658][ T8282] ? ksys_write+0x275/0x2d0 [ 167.157695][ T8282] __x64_sys_sendto+0xde/0x100 [ 167.157724][ T8282] do_syscall_64+0xf3/0x230 [ 167.157749][ T8282] ? clear_bhb_loop+0x45/0xa0 [ 167.157775][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.157795][ T8282] RIP: 0033:0x7f68ee58e169 [ 167.157815][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.157832][ T8282] RSP: 002b:00007f68ef3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 167.157854][ T8282] RAX: ffffffffffffffda RBX: 00007f68ee7b5fa0 RCX: 00007f68ee58e169 [ 167.157869][ T8282] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 167.157882][ T8282] RBP: 00007f68ef3b4090 R08: 000020000005ffe4 R09: 000000000000001c [ 167.157895][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.157906][ T8282] R13: 0000000000000000 R14: 00007f68ee7b5fa0 R15: 00007ffcf416f8b8 [ 167.157940][ T8282] [ 167.564858][ T8289] vlan0: entered promiscuous mode [ 167.767567][ T8293] tipc: Can't bind to reserved service type 1 [ 168.152454][ T8317] netlink: 96 bytes leftover after parsing attributes in process `syz.1.649'. [ 168.330495][ T8323] openvswitch: netlink: IPv4 tun info is not correct [ 169.009961][ T8350] FAULT_INJECTION: forcing a failure. [ 169.009961][ T8350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.039882][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.4.659 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 169.039913][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.039933][ T8350] Call Trace: [ 169.039941][ T8350] [ 169.039950][ T8350] dump_stack_lvl+0x241/0x360 [ 169.039987][ T8350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.040015][ T8350] ? __pfx__printk+0x10/0x10 [ 169.040054][ T8350] should_fail_ex+0x424/0x570 [ 169.040085][ T8350] _copy_to_user+0x31/0xb0 [ 169.040108][ T8350] generic_map_lookup_batch+0x9b4/0xf20 [ 169.040153][ T8350] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 169.040179][ T8350] ? __fget_files+0x39d/0x420 [ 169.040207][ T8350] ? __fget_files+0x2a/0x420 [ 169.040240][ T8350] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 169.040269][ T8350] bpf_map_do_batch+0x288/0x660 [ 169.040297][ T8350] __sys_bpf+0x6b4/0x8b0 [ 169.040318][ T8350] ? __pfx___sys_bpf+0x10/0x10 [ 169.040351][ T8350] ? ksys_write+0x275/0x2d0 [ 169.040388][ T8350] __x64_sys_bpf+0x7c/0x90 [ 169.040418][ T8350] do_syscall_64+0xf3/0x230 [ 169.040440][ T8350] ? clear_bhb_loop+0x45/0xa0 [ 169.040464][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.040483][ T8350] RIP: 0033:0x7f7b4a18e169 [ 169.040500][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.040517][ T8350] RSP: 002b:00007f7b4af2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.040538][ T8350] RAX: ffffffffffffffda RBX: 00007f7b4a3b5fa0 RCX: 00007f7b4a18e169 [ 169.040552][ T8350] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000018 [ 169.040564][ T8350] RBP: 00007f7b4af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.040576][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.040587][ T8350] R13: 0000000000000000 R14: 00007f7b4a3b5fa0 R15: 00007ffe2695b1c8 [ 169.040618][ T8350] [ 169.294820][ T8355] bridge0: port 3(gretap0) entered blocking state [ 169.315739][ T8355] bridge0: port 3(gretap0) entered disabled state [ 169.332937][ T8355] gretap0: entered allmulticast mode [ 169.351733][ T8355] gretap0: entered promiscuous mode [ 169.359958][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 169.374082][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 169.411093][ T8355] bridge0: port 3(gretap0) entered blocking state [ 169.418541][ T8355] bridge0: port 3(gretap0) entered forwarding state [ 169.538323][ T8356] gretap0: left allmulticast mode [ 169.554099][ T8356] gretap0: left promiscuous mode [ 169.570996][ T8356] bridge0: port 3(gretap0) entered disabled state [ 169.954974][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 170.092243][ T8392] FAULT_INJECTION: forcing a failure. [ 170.092243][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 170.136604][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.4.671 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 170.136634][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.136647][ T8392] Call Trace: [ 170.136655][ T8392] [ 170.136664][ T8392] dump_stack_lvl+0x241/0x360 [ 170.136700][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.136729][ T8392] ? __pfx__printk+0x10/0x10 [ 170.136755][ T8392] ? stack_trace_save+0x11a/0x1d0 [ 170.136786][ T8392] ? __pfx___might_resched+0x10/0x10 [ 170.136816][ T8392] should_fail_ex+0x424/0x570 [ 170.136848][ T8392] should_failslab+0xac/0x100 [ 170.136878][ T8392] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 170.136907][ T8392] ? __alloc_skb+0x1c2/0x480 [ 170.136928][ T8392] ? genl_rcv_msg+0x8a4/0xf00 [ 170.136958][ T8392] __alloc_skb+0x1c2/0x480 [ 170.136978][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.137005][ T8392] ? __pfx___alloc_skb+0x10/0x10 [ 170.137039][ T8392] netlink_dump+0x237/0xeb0 [ 170.137080][ T8392] ? __pfx_netlink_dump+0x10/0x10 [ 170.137116][ T8392] ? __asan_memset+0x23/0x50 [ 170.137136][ T8392] ? genl_start+0x4ae/0x6d0 [ 170.137179][ T8392] __netlink_dump_start+0x5a2/0x790 [ 170.137212][ T8392] genl_rcv_msg+0x8a4/0xf00 [ 170.137249][ T8392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.137273][ T8392] ? __dev_queue_xmit+0x1780/0x3f60 [ 170.137307][ T8392] ? __pfx_genl_start+0x10/0x10 [ 170.137329][ T8392] ? __pfx_genl_dumpit+0x10/0x10 [ 170.137353][ T8392] ? __pfx_genl_done+0x10/0x10 [ 170.137394][ T8392] ? __lock_acquire+0xad5/0xd80 [ 170.137416][ T8392] ? __pfx_mptcp_pm_nl_get_addr_dumpit+0x10/0x10 [ 170.137459][ T8392] netlink_rcv_skb+0x208/0x480 [ 170.137481][ T8392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.137509][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.137554][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.137582][ T8392] genl_rcv+0x28/0x40 [ 170.137606][ T8392] netlink_unicast+0x7f8/0x9a0 [ 170.137647][ T8392] ? __pfx_netlink_unicast+0x10/0x10 [ 170.137705][ T8392] ? skb_put+0x114/0x1f0 [ 170.137734][ T8392] netlink_sendmsg+0x8c3/0xcd0 [ 170.137770][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.137797][ T8392] ? aa_sock_msg_perm+0x91/0x160 [ 170.137833][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.137852][ T8392] __sock_sendmsg+0x221/0x270 [ 170.137887][ T8392] ____sys_sendmsg+0x523/0x860 [ 170.137921][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.137943][ T8392] ? __fget_files+0x2a/0x420 [ 170.137977][ T8392] ? __fget_files+0x2a/0x420 [ 170.138019][ T8392] __sys_sendmsg+0x271/0x360 [ 170.138057][ T8392] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.138145][ T8392] ? do_syscall_64+0xb6/0x230 [ 170.138172][ T8392] do_syscall_64+0xf3/0x230 [ 170.138194][ T8392] ? clear_bhb_loop+0x45/0xa0 [ 170.138219][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.138239][ T8392] RIP: 0033:0x7f7b4a18e169 [ 170.138257][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.138274][ T8392] RSP: 002b:00007f7b4af2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.138296][ T8392] RAX: ffffffffffffffda RBX: 00007f7b4a3b5fa0 RCX: 00007f7b4a18e169 [ 170.138311][ T8392] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 170.138324][ T8392] RBP: 00007f7b4af2d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.138336][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.138348][ T8392] R13: 0000000000000000 R14: 00007f7b4a3b5fa0 R15: 00007ffe2695b1c8 [ 170.138381][ T8392] [ 170.577858][ T8393] wireguard0: entered promiscuous mode [ 170.595349][ T8393] wireguard0: entered allmulticast mode [ 170.798770][ T8408] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 170.907370][ T8408] bond1: entered promiscuous mode [ 170.917971][ T8408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.996142][ T8414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.005160][ T8414] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 171.029472][ T8414] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 171.088262][ T8414] bond1: (slave ip6gre1): making interface the new active one [ 171.115593][ T8414] ip6gre1: entered promiscuous mode [ 171.133015][ T8414] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 171.705114][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 171.810140][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 171.981654][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 172.003308][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 172.012503][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 172.036195][ T8448] geneve2: entered promiscuous mode [ 172.090743][ T8448] geneve2: entered allmulticast mode [ 172.130640][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 172.681267][ T8476] netlink: 128 bytes leftover after parsing attributes in process `syz.1.697'. [ 172.727566][ T8476] xt_hashlimit: max too large, truncated to 1048576 [ 172.745989][ T8476] Cannot find add_set index 3 as target [ 172.941210][ T8490] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 172.974944][ T8490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.700'. [ 173.109639][ T8495] batman_adv: batadv0: Interface deactivated: dummy0 [ 173.130655][ T5832] batman_adv: batadv0: Local translation table size (56) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 173.151239][ T8495] batman_adv: batadv0: Removing interface: dummy0 [ 173.183981][ T8495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.275692][ T8503] syz_tun: entered allmulticast mode [ 173.446788][ T8502] syz_tun: left allmulticast mode [ 174.045973][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 174.073137][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 174.203261][ T8541] netlink: del zone limit has 4 unknown bytes [ 174.935643][ T8580] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 174.968020][ T8580] batadv0: entered promiscuous mode [ 174.982446][ T8580] batadv0: entered allmulticast mode [ 175.004048][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.038577][ T8580] bridge0: port 1(batadv0) entered blocking state [ 175.076649][ T8580] bridge0: port 1(batadv0) entered disabled state [ 175.208511][ T1324] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 175.218531][ T1324] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 175.232036][ T8590] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.521945][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 175.831377][ T8619] Bluetooth: MGMT ver 1.23 [ 176.004960][ T8631] openvswitch: netlink: Message has 4 unknown bytes. [ 177.943920][ T8650] bridge3: entered promiscuous mode [ 177.964225][ T8650] bridge3: entered allmulticast mode [ 178.215708][ T8674] __nla_validate_parse: 11 callbacks suppressed [ 178.215729][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 178.231877][ T8674] netlink: 244 bytes leftover after parsing attributes in process `syz.3.755'. [ 178.357196][ T8680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.756'. [ 178.443239][ T8689] x_tables: duplicate underflow at hook 1 [ 178.960937][ T8708] ------------[ cut here ]------------ [ 178.966731][ T8708] WARNING: CPU: 1 PID: 8708 at ./include/net/netdev_lock.h:17 netdev_nl_dev_fill+0x6bc/0x860 [ 178.977066][ T8708] Modules linked in: [ 178.981646][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.3.765 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 178.993699][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.004736][ T8708] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 179.011636][ T8708] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 85 ec c3 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 77 ec c3 f7 90 0f 0b 90 42 80 3c 3b 00 [ 179.031817][ T8708] RSP: 0018:ffffc9000ef5e860 EFLAGS: 00010283 [ 179.037959][ T8708] RAX: ffffffff89ff68eb RBX: 0000000000000000 RCX: 0000000000080000 [ 179.046677][ T8708] RDX: ffffc9000c323000 RSI: 000000000006d0ee RDI: 000000000006d0ef [ 179.054864][ T8708] RBP: ffffc9000ef5e990 R08: ffffffff89ff630c R09: 1ffff110049e91dc [ 179.063300][ T8708] R10: dffffc0000000000 R11: ffffed10049e91dd R12: ffff88805db74000 [ 179.071370][ T8708] R13: ffff8880589e5280 R14: ffff8880589e5280 R15: ffffc9000ef5e9e0 [ 179.079736][ T8708] FS: 00007f68ef3b46c0(0000) GS:ffff8881250a5000(0000) knlGS:0000000000000000 [ 179.088722][ T8708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.095448][ T8708] CR2: 00007f1fa956a5a0 CR3: 0000000059d10000 CR4: 00000000003526f0 [ 179.103881][ T8708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.112471][ T8708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.121405][ T8708] Call Trace: [ 179.124736][ T8708] [ 179.127709][ T8708] ? __build_skb_around+0x247/0x3d0 [ 179.133054][ T8708] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 179.138645][ T8708] ? __alloc_skb+0x298/0x480 [ 179.143678][ T8708] ? __pfx___alloc_skb+0x10/0x10 [ 179.148686][ T8708] netdev_genl_dev_notify+0x1fb/0x450 [ 179.154207][ T8708] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 179.160528][ T8708] ? dev_map_notification+0x14d/0x9a0 [ 179.165959][ T8708] ? ip_vs_dst_event+0x508/0x6a0 [ 179.171043][ T8708] netdev_genl_netdevice_event+0x81/0xa0 [ 179.176729][ T8708] notifier_call_chain+0x1a5/0x3f0 [ 179.182293][ T8708] register_netdevice+0x16c0/0x1b80 [ 179.187624][ T8708] ? __pfx_register_netdevice+0x10/0x10 [ 179.193299][ T8708] ? ieee80211_debugfs_recreate_netdev+0x629/0x1520 [ 179.200440][ T8708] cfg80211_register_netdevice+0x149/0x2f0 [ 179.206316][ T8708] ieee80211_if_add+0x119b/0x1780 [ 179.211985][ T8708] ieee80211_register_hw+0x3718/0x42d0 [ 179.217964][ T8708] ? ieee80211_register_hw+0x1661/0x42d0 [ 179.224068][ T8708] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 179.230046][ T8708] ? __hrtimer_setup+0x17f/0x200 [ 179.235032][ T8708] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 179.241289][ T8708] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 179.247104][ T8708] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 179.253327][ T8708] ? __asan_memset+0x23/0x50 [ 179.257975][ T8708] hwsim_new_radio_nl+0xed0/0x2290 [ 179.263566][ T8708] ? __pfx___nla_validate_parse+0x10/0x10 [ 179.269430][ T8708] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.275068][ T8708] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 179.281812][ T8708] genl_rcv_msg+0xb38/0xf00 [ 179.286383][ T8708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.291540][ T8708] ? stack_trace_save+0x11a/0x1d0 [ 179.296623][ T8708] ? __pfx_stack_trace_save+0x10/0x10 [ 179.302443][ T8708] ? stack_depot_save_flags+0x44/0x940 [ 179.307962][ T8708] ? stack_trace_snprint+0x71/0xf0 [ 179.313721][ T8708] ? __lock_acquire+0xad5/0xd80 [ 179.319067][ T8708] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.325091][ T8708] netlink_rcv_skb+0x208/0x480 [ 179.329961][ T8708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.335046][ T8708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.340765][ T8708] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.346022][ T8708] genl_rcv+0x28/0x40 [ 179.350167][ T8708] netlink_unicast+0x7f8/0x9a0 [ 179.355003][ T8708] ? __pfx_netlink_unicast+0x10/0x10 [ 179.360814][ T8708] ? skb_put+0x114/0x1f0 [ 179.365136][ T8708] netlink_sendmsg+0x8c3/0xcd0 [ 179.370075][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.375400][ T8708] ? aa_sock_msg_perm+0x91/0x160 [ 179.380768][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.386097][ T8708] __sock_sendmsg+0x221/0x270 [ 179.390921][ T8708] ____sys_sendmsg+0x523/0x860 [ 179.395750][ T8708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.401462][ T8708] ? __fget_files+0x2a/0x420 [ 179.406132][ T8708] ? __fget_files+0x2a/0x420 [ 179.410875][ T8708] __sys_sendmsg+0x271/0x360 [ 179.416001][ T8708] ? __pfx_futex_wake+0x10/0x10 [ 179.421690][ T8708] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.426866][ T8708] ? netlink_setsockopt+0x7d5/0x960 [ 179.432181][ T8708] ? kfree+0x54/0x430 [ 179.436232][ T8708] ? __se_sys_futex+0x436/0x4c0 [ 179.441747][ T8708] ? do_syscall_64+0xb6/0x230 [ 179.446475][ T8708] do_syscall_64+0xf3/0x230 [ 179.451112][ T8708] ? clear_bhb_loop+0x45/0xa0 [ 179.455834][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.462095][ T8708] RIP: 0033:0x7f68ee58e169 [ 179.466557][ T8708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.486663][ T8708] RSP: 002b:00007f68ef3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.495216][ T8708] RAX: ffffffffffffffda RBX: 00007f68ee7b5fa0 RCX: 00007f68ee58e169 [ 179.503617][ T8708] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 179.511722][ T8708] RBP: 00007f68ee610a68 R08: 0000000000000000 R09: 0000000000000000 [ 179.520602][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.528627][ T8708] R13: 0000000000000000 R14: 00007f68ee7b5fa0 R15: 00007ffcf416f8b8 [ 179.537204][ T8708] [ 179.540647][ T8708] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.547969][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.3.765 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 179.559889][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.569966][ T8708] Call Trace: [ 179.573272][ T8708] [ 179.576210][ T8708] dump_stack_lvl+0x241/0x360 [ 179.580906][ T8708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.586121][ T8708] ? __pfx__printk+0x10/0x10 [ 179.590730][ T8708] ? vscnprintf+0x5d/0x90 [ 179.595077][ T8708] panic+0x349/0x880 [ 179.598991][ T8708] ? __warn+0x174/0x4d0 [ 179.603174][ T8708] ? __pfx_panic+0x10/0x10 [ 179.607653][ T8708] __warn+0x344/0x4d0 [ 179.611681][ T8708] ? netdev_nl_dev_fill+0x6bc/0x860 [ 179.616927][ T8708] report_bug+0x2b3/0x500 [ 179.621286][ T8708] ? netdev_nl_dev_fill+0x6bc/0x860 [ 179.626498][ T8708] ? netdev_nl_dev_fill+0x6bc/0x860 [ 179.631706][ T8708] ? netdev_nl_dev_fill+0x6be/0x860 [ 179.636937][ T8708] handle_bug+0x89/0x170 [ 179.641191][ T8708] exc_invalid_op+0x1a/0x50 [ 179.645705][ T8708] asm_exc_invalid_op+0x1a/0x20 [ 179.650569][ T8708] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 179.656393][ T8708] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 85 ec c3 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 77 ec c3 f7 90 0f 0b 90 42 80 3c 3b 00 [ 179.676012][ T8708] RSP: 0018:ffffc9000ef5e860 EFLAGS: 00010283 [ 179.682093][ T8708] RAX: ffffffff89ff68eb RBX: 0000000000000000 RCX: 0000000000080000 [ 179.690075][ T8708] RDX: ffffc9000c323000 RSI: 000000000006d0ee RDI: 000000000006d0ef [ 179.698058][ T8708] RBP: ffffc9000ef5e990 R08: ffffffff89ff630c R09: 1ffff110049e91dc [ 179.706047][ T8708] R10: dffffc0000000000 R11: ffffed10049e91dd R12: ffff88805db74000 [ 179.714033][ T8708] R13: ffff8880589e5280 R14: ffff8880589e5280 R15: ffffc9000ef5e9e0 [ 179.722025][ T8708] ? netdev_nl_dev_fill+0xdc/0x860 [ 179.727147][ T8708] ? netdev_nl_dev_fill+0x6bb/0x860 [ 179.732369][ T8708] ? __build_skb_around+0x247/0x3d0 [ 179.737588][ T8708] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 179.743141][ T8708] ? __alloc_skb+0x298/0x480 [ 179.747756][ T8708] ? __pfx___alloc_skb+0x10/0x10 [ 179.752740][ T8708] netdev_genl_dev_notify+0x1fb/0x450 [ 179.758128][ T8708] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 179.764045][ T8708] ? dev_map_notification+0x14d/0x9a0 [ 179.769435][ T8708] ? ip_vs_dst_event+0x508/0x6a0 [ 179.774396][ T8708] netdev_genl_netdevice_event+0x81/0xa0 [ 179.780056][ T8708] notifier_call_chain+0x1a5/0x3f0 [ 179.785189][ T8708] register_netdevice+0x16c0/0x1b80 [ 179.790464][ T8708] ? __pfx_register_netdevice+0x10/0x10 [ 179.796026][ T8708] ? ieee80211_debugfs_recreate_netdev+0x629/0x1520 [ 179.802664][ T8708] cfg80211_register_netdevice+0x149/0x2f0 [ 179.808517][ T8708] ieee80211_if_add+0x119b/0x1780 [ 179.813841][ T8708] ieee80211_register_hw+0x3718/0x42d0 [ 179.819339][ T8708] ? ieee80211_register_hw+0x1661/0x42d0 [ 179.825003][ T8708] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 179.830846][ T8708] ? __hrtimer_setup+0x17f/0x200 [ 179.835800][ T8708] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 179.841887][ T8708] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 179.847650][ T8708] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 179.853742][ T8708] ? __asan_memset+0x23/0x50 [ 179.858354][ T8708] hwsim_new_radio_nl+0xed0/0x2290 [ 179.863492][ T8708] ? __pfx___nla_validate_parse+0x10/0x10 [ 179.869238][ T8708] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.874823][ T8708] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 179.881173][ T8708] genl_rcv_msg+0xb38/0xf00 [ 179.885698][ T8708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.890733][ T8708] ? stack_trace_save+0x11a/0x1d0 [ 179.895774][ T8708] ? __pfx_stack_trace_save+0x10/0x10 [ 179.901164][ T8708] ? stack_depot_save_flags+0x44/0x940 [ 179.906635][ T8708] ? stack_trace_snprint+0x71/0xf0 [ 179.911778][ T8708] ? __lock_acquire+0xad5/0xd80 [ 179.916668][ T8708] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.922251][ T8708] netlink_rcv_skb+0x208/0x480 [ 179.927031][ T8708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.932077][ T8708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.937411][ T8708] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.942633][ T8708] genl_rcv+0x28/0x40 [ 179.946627][ T8708] netlink_unicast+0x7f8/0x9a0 [ 179.951421][ T8708] ? __pfx_netlink_unicast+0x10/0x10 [ 179.956732][ T8708] ? skb_put+0x114/0x1f0 [ 179.960993][ T8708] netlink_sendmsg+0x8c3/0xcd0 [ 179.965782][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.971082][ T8708] ? aa_sock_msg_perm+0x91/0x160 [ 179.976049][ T8708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.981350][ T8708] __sock_sendmsg+0x221/0x270 [ 179.986050][ T8708] ____sys_sendmsg+0x523/0x860 [ 179.990837][ T8708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.996163][ T8708] ? __fget_files+0x2a/0x420 [ 180.000796][ T8708] ? __fget_files+0x2a/0x420 [ 180.005423][ T8708] __sys_sendmsg+0x271/0x360 [ 180.010049][ T8708] ? __pfx_futex_wake+0x10/0x10 [ 180.014933][ T8708] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.020057][ T8708] ? netlink_setsockopt+0x7d5/0x960 [ 180.025282][ T8708] ? kfree+0x54/0x430 [ 180.029321][ T8708] ? __se_sys_futex+0x436/0x4c0 [ 180.034244][ T8708] ? do_syscall_64+0xb6/0x230 [ 180.038979][ T8708] do_syscall_64+0xf3/0x230 [ 180.043509][ T8708] ? clear_bhb_loop+0x45/0xa0 [ 180.048201][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.054133][ T8708] RIP: 0033:0x7f68ee58e169 [ 180.058626][ T8708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.078260][ T8708] RSP: 002b:00007f68ef3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.086710][ T8708] RAX: ffffffffffffffda RBX: 00007f68ee7b5fa0 RCX: 00007f68ee58e169 [ 180.094691][ T8708] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 180.102675][ T8708] RBP: 00007f68ee610a68 R08: 0000000000000000 R09: 0000000000000000 [ 180.110656][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.118633][ T8708] R13: 0000000000000000 R14: 00007f68ee7b5fa0 R15: 00007ffcf416f8b8 [ 180.126676][ T8708] [ 180.130042][ T8708] Kernel Offset: disabled [ 180.134405][ T8708] Rebooting in 86400 seconds..