last executing test programs: 1m53.236846447s ago: executing program 0 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d80)='%pK \x00'}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000002c0)=0x10, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000340)=0x3, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r8, &(0x7f0000000200), 0x0) 1m53.025021982s ago: executing program 0 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040)) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async, rerun: 32) unshare(0x8040600) (async, rerun: 32) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r4 = socket(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (rerun: 32) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='oom_score_adj_update\x00', r5}, 0x18) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x0, 0x10001, 0xe, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x0, 0x7, 0x1}}) (async, rerun: 64) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={r4, 0x20, &(0x7f0000001b80)={&(0x7f0000001a40)=""/127, 0x7f, 0x0, &(0x7f0000001ac0)=""/139, 0x8b}}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x1e, 0x10, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, @sk_lookup, r11, 0x8, &(0x7f0000000800)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x5, 0xc, 0xb, 0xa8e}, 0x10, r12, r5, 0x0, 0x0, 0x0, 0x10, 0xfff8, @void, @value}, 0x94) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r13) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000006c0)=""/49, 0x31}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f0000001c00)=""/4080, 0xff0}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000400)=""/161, 0xa1}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8042, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) 1m52.823779633s ago: executing program 0 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) 1m52.745415741s ago: executing program 0 (id=523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000080)=0x80) epoll_create1(0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4080800}, 0x8010) 1m52.668785125s ago: executing program 0 (id=524): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x94cde003a5a2b6cb, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f00000001c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5c}, 0x0, 0x70, 0xd8, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x8001, 0x9, 0x2, '\x00', 'syz1\x00', {0x8}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 1m52.409473944s ago: executing program 0 (id=526): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svc_unregister\x00', r1, 0x0, 0x6}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x100000000000014b, 0x4000000, 0x80) sendfile(r2, r3, 0x0, 0x7ffff000) 1m37.360687086s ago: executing program 32 (id=526): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svc_unregister\x00', r1, 0x0, 0x6}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x100000000000014b, 0x4000000, 0x80) sendfile(r2, r3, 0x0, 0x7ffff000) 7.864984944s ago: executing program 3 (id=1174): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007810000f8ffffffb702000008000000b7030000feffffff850000009b0000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x28, 0x5, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000f00)={'ah\x00'}, &(0x7f0000000f40)=0x1e) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x4d, 0x0, &(0x7f0000000240)) bind$vsock_stream(r2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=@bridge_getneigh={0xe0, 0x1e, 0x2, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x12}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bb184e1f077f07a045c2ca4b3a6d48ae"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d6fe60c3bd3429efc469e0a8c30f822e"}]}, @IFLA_WEIGHT={0x8, 0xf, 0xbce5}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3da0ee1702974c1124474edc9125dc82"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0xf86}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x2, 0x7fff, 0x5d, 0x4}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r10, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca2}, 0x50) 7.613582464s ago: executing program 3 (id=1177): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/21, 0x15}, 0x1}], 0x1, 0x2000, 0x0) 6.598819768s ago: executing program 3 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x80}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 6.376331477s ago: executing program 3 (id=1188): socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000002e000000661400000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000002e000000661400000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000800000004000000094000000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000097ffd10000000000000000000000003f00000000ff00"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000070000000400000002000013020000000800003c0300000000000000070000000200000001000000000020002e"], 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.558022384s ago: executing program 3 (id=1197): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockname$ax25(r0, &(0x7f0000000040)={{}, [@null, @bcast, @rose, @bcast, @remote, @rose, @remote, @bcast]}, &(0x7f00000000c0)=0x48) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) (async) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004011}, 0x4) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc8, r9, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2d0}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xfffffc57}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6}, {0x8}, {0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x850}, 0x860) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000800)={0x1, 'ip6gre0\x00', {}, 0x3}) (async) r10 = socket(0x4, 0x800, 0xdec) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000840)=@rose={'rose', 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pK \x00'}, 0x20) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xcc}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x94}, 0x1, 0x0, 0x0, 0x8800}, 0x804) (async) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r7}, 0x8) sendmsg$nl_route(r10, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd25, 0x25dfdbff, {0x2, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x18}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x40800) (async, rerun: 32) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r5) (rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r13, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x803) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40)={0x0, r12}, 0x8) accept4$netrom(r10, 0x0, &(0x7f0000000d80), 0x0) (async, rerun: 32) mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x10010, r11, 0x9dbbc000) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.974672199s ago: executing program 3 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003000)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, &(0x7f0000000f40)=[{&(0x7f00000077c0)="d7", 0x1}], 0x1}}], 0x2, 0x24000045) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.373487157s ago: executing program 1 (id=1237): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x20000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) connect$netrom(r9, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @default, @default]}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) connect$inet6(r10, &(0x7f0000000480)={0xa, 0x4e23, 0x2, @private1, 0x9}, 0x1c) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x82, &(0x7f0000000200), 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000c0ff0000e5491c7c4e9f5bca34fa0000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='contention_end\x00', r11}, 0x18) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, &(0x7f0000000100)) 1.865207746s ago: executing program 4 (id=1249): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007810000f8ffffffb702000008000000b7030000feffffff850000009b0000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x28, 0x5, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000f00)={'ah\x00'}, &(0x7f0000000f40)=0x1e) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x4d, 0x0, &(0x7f0000000240)) bind$vsock_stream(r2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=@bridge_getneigh={0xe0, 0x1e, 0x2, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x12}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bb184e1f077f07a045c2ca4b3a6d48ae"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d6fe60c3bd3429efc469e0a8c30f822e"}]}, @IFLA_WEIGHT={0x8, 0xf, 0xbce5}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3da0ee1702974c1124474edc9125dc82"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0xf86}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x2, 0x7fff, 0x5d, 0x4}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d150100000000009500000000000000691600000000000abf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r10, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca2}, 0x50) 1.725060984s ago: executing program 4 (id=1250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000002100000000000000000000000000ccb00a689e"], 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b70900db5de1682ba5c080351823e0999a015000", @ANYRES32=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x168, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x4}, {0x0, 0x7}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0xa, 0x84c9, 0x0, 0xf, 0x7, 0x8}}]}}]}, 0x168}}, 0x4004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f00000030c0)=0xffffff9e, 0x4) 1.556731845s ago: executing program 4 (id=1253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd700000000000ac1414bb000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000feffff7f00000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff00000800000000000000000002000481680000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 1.510150084s ago: executing program 1 (id=1254): socket$can_j1939(0x1d, 0x2, 0x7) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 1.470857165s ago: executing program 5 (id=1255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000001010400000000000000000200000a1800018006000340000100000c0002800500010000000000240002801400018008000100ac1414aa080002007f0000010c000280050001000000000008000740000000003c00c9bfab67720d8008000100ac1414af14000400fc01000000000000000000000000000114000500fe8000000000000000000000000000bb080002"], 0x94}}, 0x4000010) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000089e8c60d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a01080000002000000000010000000900030073797a32000000000900010073797a30000000001c0008800c000140000000000000000c0c000240000000000000000614000000110001"], 0x70}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, &(0x7f0000000a00)={0x8, 0x80000001, 0x4, 0x9, 0x8, 0x3, 0x4, 0x3}, 0x0, &(0x7f0000000a80), &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r1}, 0x18) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="31032cbd7000ffdbdf251f000000577134c440d1d944809d0805aec40e357257bb2b"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1600000015000100000000000000000002"], 0x18}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.383059594s ago: executing program 1 (id=1256): socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0xcc, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb88a80d008100010008050105237123a5b078ddda761b64f102f7c07a4eb3ab8212b2ec23f872f6c24d875a078f84783ac66313e1945f5bc45cb67829c1e470328b54cf85cdbfcf183ba6fae6445f840c61157183839efe30f43091d75d52b27531f929ac25c519d1ccee68b3b2ce872d3ea037fa587dbfe5a8e45c33a2e1e54d3eb568366f2b276f864cea5195cd65f77671f801547943205acf95f32a865e87f48008e92ab274a412d835003b9e62cfb848cf63f27871079a56cb09eb7732"], 0x0) unshare(0x22020600) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.337563087s ago: executing program 4 (id=1257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.282825367s ago: executing program 4 (id=1258): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x308, 0x1f8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x462) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000020ea000085000000970000009500"/32], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b19, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) socket$kcm(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000000480)="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", 0xde7}], 0x2}, 0x800) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000040), 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, 0x108) 744.857634ms ago: executing program 2 (id=1259): socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) r0 = socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000000000000ae00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620130000000000095"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1007000001050102000000000000000005000003540201000300000000000c000100f7cd58001d0073797a3100000000000000000000000000000000000000000000000000000000f8da18933c1a1d3273b5ca65e0da6c7db9ce325816b6569c58e34cdb8fb1f2a6f7d397ee3b98c590de829624ecd88c23f8d98f769d7fee6e33f822849f593feb030006000300000007000000050017ec010000000a0000000600030000000000000000000900270603000000020000000400000003000000050000000200000403000000f7ffffff0400060000000000020000000200018002000000ffffff7f000616000000000005000000040009000100000005000000cc06d1320000000002000000060021000200000009000000070007000000000000000000020000020300000000000080020000000000000001000000100007000200000080000000030007000300000007000000f7ff5f0002000000060000000500810001000000330000000008ff0003000000f8ffffff5a0cb600010000006f000000010000040200000001040000000005000000000008000000050004000000000000000000000080000300000001800000000004000300000002000000090006000000000001000000090002000200000000000100030003000000000001000100010100020200000005000000ff010a00030000000700000000067fff01000000000000000a000b0001000000b300000002000400010000002f07000007000500030000004e2fcf7f0200470003000000070000000700420003000000010000000800050000000000cee700004f0c1fff02000000b4000000090080f3000000000000000054020100010000000800000005810b00c209180073797a3100000000000000000000000000000000000000000000000000000000965472efc1d6307aacd968eab6deb3c011279273b43b0c5bcf1d211573a3217198d8a4c98f2e772cdbc5bb948c8b1a870c99d179641c690e8a735dce5ea860340800070001000000a945000088070600020000009bf9c61302008000020000000000004f000204000000000008000000060078090200000007000000040003000200000003000000ff7f0100142daa55060000000100000000000000de8000000900ffff0200000000008001ff00400001000000000000000600070003000000060000000800080003000000e60000006105010001000000b80000000004000203000000050000000500180501000000050000000600060002000000830000000400f9ff02000000050000004354faff00000000810000000000ff0702000000bd31000001802abc00000000ae0c00000100080001000000080000000200090002000000ff000000070089a001000000060000000700ff0303000000f20600009b00070003000000010000000400080000000000090000000700b6000200000000800000050004000100000007000000000001040200000000000000f8ff030001000000030000000400092903000000f0ffffff0100050000000000050000000900ffff010000000300000005000200000000008000000000100300010000009e0500000300040003000000b07c2e6f010002000200000000080000080065ff00000000e4000000090004000100000091000000040006000200000001000000540201000300000000000000010b10000600010073797a310000000000000000000000000000000000000000000000000000000042f25259a2b54cd7d75f0b0202781b48f50c640df954f3c6900d6e62efe3b22363e88037788d3c6532022db6c5797789f518e29170ef5b92c9e3d29cd9492cab0200000201000000dc050000790e1000030000006bcf0000050009000000000002000000020097c80000000000040000512a0400010000000300000006000001010000008000000000047f0000000000ffffffff0200900202000000790a0000ff0f030000000000d10c0000d90201000200000002000000080007000000000001000000faff09000100000008000000007c0f00030000008200000000080500020000000700000003000300020000000400000003000300469162d7ff0100000700070002000000743a00000300ffff01000000080000004c000500030000000400000080f40700000000006c0400008004e702020000000300000000800d0003000000054000000700080002000000ffffff7f0000060000000000030000000008c20c02000000070000000300608502000000ff7f00000400030003000000090000000300010000000000df00000008000800000000000b000000100004000000000009000000020008000300000008000000060007000000000007000000f8ff010028d1467f0d0000008dc6cd040000000003000000dd010700020000000500000002000300030000000400000008004e0e030000000100000000000101010000003a09000032f904000300000005000000ff070a00030000005e870000"], 0x710}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x9) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x7}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000001c0)=0x9, 0x4) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000000), 0x8) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xd5, @local, 0x5}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a000101000000000000000002000000000000000000000014001d00"], 0x30}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) 607.597709ms ago: executing program 2 (id=1260): unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007810000f8ffffffb702000008000000b7030000feffffff850000009b0000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x28, 0x5, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000f00)={'ah\x00'}, &(0x7f0000000f40)=0x1e) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x4d, 0x0, &(0x7f0000000240)) bind$vsock_stream(r2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=@bridge_getneigh={0xe0, 0x1e, 0x2, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x12}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bb184e1f077f07a045c2ca4b3a6d48ae"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d6fe60c3bd3429efc469e0a8c30f822e"}]}, @IFLA_WEIGHT={0x8, 0xf, 0xbce5}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3da0ee1702974c1124474edc9125dc82"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0xf86}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x2, 0x7fff, 0x5d, 0x4}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r10, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca2}, 0x50) 577.466978ms ago: executing program 2 (id=1261): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001180)="89ac51a488d84ef64f575f59a9141eb471e48b896ea3", 0x16}, 0x1, 0x0, 0x0, 0x44091}, 0x80) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) accept4(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80, 0x100800) 530.090285ms ago: executing program 5 (id=1262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x78}}, 0x0) r2 = accept4(r0, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0xfffffffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r3, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3f}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x47}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xa, 0xc, 0xbadc, 0x9, 0x6, 0x6, 0x7f, 0x7fff, 0x40]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40c0}, 0x40854) 465.620006ms ago: executing program 2 (id=1263): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x8c, r2, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x5d7f, @void, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x12, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="560a0000ffffffff791139000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 465.352558ms ago: executing program 5 (id=1264): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x4, 0x5}, &(0x7f0000000340)=0xc) 439.186552ms ago: executing program 1 (id=1265): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001400000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) unshare(0x20000400) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000200)={0xe, 0x8, 0x2}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000047733757000000000000000085000000ba00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17fe, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x5bdd1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="eead6730a0d049c9fe8b2c9769ba45cf14000000", @ANYRES16, @ANYBLOB="010029bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x8, 0x7fffffffffffffff, 0xfff, 0x0, 0x8, 0x4, 0x1ff}, &(0x7f0000000340)={0x4, 0x400, 0x9, 0x800, 0xfffffffffffffffb, 0x4, 0x5, 0x8}, &(0x7f0000000380)={0x5, 0x9, 0x5, 0x7, 0x9a, 0x40, 0x6, 0x5e3}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x3]}, 0x8}) 370.800897ms ago: executing program 5 (id=1266): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 296.219527ms ago: executing program 2 (id=1267): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="dea1", 0x2}], 0x1}, 0x93) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r2, 0x84, 0x9, &(0x7f0000000280), 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, 0x0, 0x8000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x7, 0x7, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102, @broadcast, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x170, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "ff4499b8eff72017547da94cc2725a16304f438de0dc2e504484739469684fc99e3dded57f4ad39aef2567c6a42ab19eac3e320b785c11264693d55ff671d2605670a789135c6e41ffa6072a994cdd968a2924ff5bd19fe2cb4d2c07ea3192d2629c9fae628da5ea483e28e1511af71d69fade6649d47003c8989089ce2fc4e626630d1fb411f4a44cea394168f89ea17cebe5f76f191c7373a7269674f71b9888c6c6994d8ab857560b2658542cd495ada82bb7a13a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!-$&-,)[\':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '-&@:%\xb1).-)@%[\'#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '%)+\\-/[/{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8800}, 0xc0b396fdfa1892f7) close(0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000020000000000a000000000300000100020008000400010000001400070000000000000000000000000000000001"], 0x38}}, 0x0) 241.931864ms ago: executing program 5 (id=1268): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 223.909436ms ago: executing program 1 (id=1269): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000707b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 161.582919ms ago: executing program 4 (id=1270): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x2a0, r3, 0x406, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xdd, 0xc5, "dc01c8cd62c1c9182f79e8924b97db33e70edebec3f1198a1571965f92bb2e6dc53ea78cbfc53b43b2b369b6cb85f0bb949c06eb04c4bae36f5e56bbc7afc2c009e257d3783c538aa17fee46cca80e6ea8ca64dc1aafaba486e8ddfe07e01b08b9adafa802b761521b51ca2bf23aae9bb4ee59d6ad00ee10e65b0319142ec7a04a72b30b444665213e65b1715507cc61b404cbf10b3ae8007561b53876986eb3a357283b4589fcb607f1497f4798f6c3e877843f333d8cb413142b68766bed35d20f71fef52d1f4fd4c880b49db827cb8dd4f6368538038800"}, @NL80211_ATTR_VENDOR_DATA={0xe6, 0xc5, "4267eaeb453447d5fa82a583db0055c05b1dd81eb4d62999bb68b8f536e0848544d594a791050b24b5c067c477f34464d84a8c81541d7d83d23d18d5fde75b535fe20fd583a024e2d02d8c45d8e6277571e117cde4dac6b4b817142c06f42c291eb33a742476ce853b7b172fc73a35523b4f9e1aec6fbcc6b36a1efb644070e0ac3d0a82c08c48044c7843f6cbad5a41faf55b1300e8e3779c8068a783cd4ded2ad7cb3272e522ed6ff2eab0646fec2fa7b555ed5fb2f3443f9530d154c5d8986f862ceec754c2bfbed0b89276dc79f28f3696a01b7d873bb98fbecb139cd962ca89"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0x95, 0xc5, "24d0a5b49919b14295c044ac649dcb9042b400ab9324ec1e3520cc4277d6991c2c983c5437b7f58434121306e448b8b7425fafe0f8b700b899bd2660c78308aef2a09cac5ebfcf5dc6d68d4ffad9ce8695859ef95ed1cff5865ed35fea6eed7561302985256c9575621088e59b147a38477953602e3124fb3cdaa85d9cc0d87a3c8aed66e1a4a9268c0e3d55030b570e2e"}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8015) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x1e8, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "abb0ec09fee25d2c8a3f631f027e1c16ccbfdc726a489742e443fb4a96295f3faaf76d7b1f9eac6d45ede32daee9098af59b6c3cdb2c283fbcb78b6570f44155966674bbe2aee813e387d6c13a3da7df971b8b161b49653c490c2e518fa2fe8f19f275a252bc8e00cd04b19bf6538636b0090987c67a0e88def645a8e9ceb47c9a9bb91e311410d82286e5dafc9428bc4b4c8bd04c532c07eacc408d46a833d47748c2f2f91e2139175667ca40e5c87cfa4b00d6c7069d0ef7a0fdc9f91eda33446d0266403cc2df2dae0a0c38"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x00\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe3e5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x86j\xa3\\\x84\xc4\x03\x8b\xa8\x8b\x9e\x16g|7\xba?;\x19\xd5\x1cD\x92\x1f\x1aP\xc9\xde<\x1a1i\xc1\xc98m\x8aV\x03)\xfc\x1e\xde\xba\x9f\xea\x04\x01\xef!iNV %\xbe\xcc\xac\xb9\'\x1f\xc7\xca\xd3\xa5\xa8\xf1\xb6_\x0f\xdeZ%\x9b\x91\xac\x04\xb2\xf8\xe9\xbf\x92\x8e,\xd47\x18\xd1|K\xd9(\xaflo\x168\xa7'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc000}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="0600cd00000000002f013300802009000802110000010802110000005050505050505f00ffff000000000000"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 137.673823ms ago: executing program 5 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x3}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x400, @none, 0x0, 0x2}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 48.663122ms ago: executing program 1 (id=1272): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500003800000000000190780a010101ac1414aa0305907803000600bde196b00000503e7bb90000ffff0600e00000020e70a4b52dd6ac08"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) 0s ago: executing program 2 (id=1273): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x30, 0x0, &(0x7f0000000480)={0x1, 0x1, [0x905, 0x46e, 0xa73, 0x44a]}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20004054) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xe, 0x100, 0x8, 0xf43, 0xc0, 0xff, 0x8}, 0x9c) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2={0xff, 0x5}, 0x8, 0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x417}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000700)=0xd4, 0x4) kernel console output (not intermixed with test programs): : 156 bytes leftover after parsing attributes in process `syz.0.68'. [ 102.106037][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 102.542985][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 102.657301][ T6215] FAULT_INJECTION: forcing a failure. [ 102.657301][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 102.674177][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.0.78 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 102.674205][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.674217][ T6215] Call Trace: [ 102.674224][ T6215] [ 102.674232][ T6215] dump_stack_lvl+0x189/0x250 [ 102.674269][ T6215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.674297][ T6215] ? __pfx__printk+0x10/0x10 [ 102.674322][ T6215] ? __pfx___might_resched+0x10/0x10 [ 102.674340][ T6215] ? fs_reclaim_acquire+0x7d/0x100 [ 102.674373][ T6215] should_fail_ex+0x414/0x560 [ 102.674408][ T6215] should_failslab+0xa8/0x100 [ 102.674435][ T6215] kmem_cache_alloc_noprof+0x73/0x3c0 [ 102.674458][ T6215] ? __kernfs_new_node+0xd7/0x7f0 [ 102.674490][ T6215] __kernfs_new_node+0xd7/0x7f0 [ 102.674517][ T6215] ? __lock_acquire+0xaac/0xd20 [ 102.674550][ T6215] ? __pfx___kernfs_new_node+0x10/0x10 [ 102.674578][ T6215] ? kernfs_root+0x1c/0x230 [ 102.674610][ T6215] ? kernfs_root+0x1c/0x230 [ 102.674647][ T6215] ? kernfs_root+0x1c/0x230 [ 102.674670][ T6215] ? kernfs_root+0x1c/0x230 [ 102.674700][ T6215] kernfs_new_node+0x102/0x210 [ 102.674733][ T6215] __kernfs_create_file+0x4b/0x2e0 [ 102.674757][ T6215] sysfs_add_file_mode_ns+0x238/0x300 [ 102.674789][ T6215] internal_create_group+0x66d/0x1110 [ 102.674833][ T6215] ? __pfx_internal_create_group+0x10/0x10 [ 102.674859][ T6215] ? kernfs_add_one+0xf0/0x520 [ 102.674896][ T6215] sysfs_create_groups+0x59/0x120 [ 102.674926][ T6215] device_add_attrs+0x1c4/0x5a0 [ 102.674954][ T6215] ? __pfx_device_add_attrs+0x10/0x10 [ 102.674979][ T6215] ? device_add_class_symlinks+0x21f/0x240 [ 102.675003][ T6215] device_add+0x496/0xb50 [ 102.675021][ T6215] ? device_initialize+0x24b/0x440 [ 102.675044][ T6215] wakeup_source_sysfs_add+0x1af/0x280 [ 102.675069][ T6215] wakeup_source_register+0x175/0x250 [ 102.675103][ T6215] ep_insert+0xef6/0x1a00 [ 102.675144][ T6215] ? __pfx_ep_insert+0x10/0x10 [ 102.675164][ T6215] ? __pfx___mutex_lock+0x10/0x10 [ 102.675190][ T6215] ? rcu_is_watching+0x15/0xb0 [ 102.675228][ T6215] ? bpf_lsm_capable+0x9/0x20 [ 102.675264][ T6215] do_epoll_ctl+0x80e/0xe80 [ 102.675294][ T6215] __x64_sys_epoll_ctl+0x163/0x1a0 [ 102.675315][ T6215] ? rcu_is_watching+0x15/0xb0 [ 102.675344][ T6215] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 102.675371][ T6215] ? do_syscall_64+0xba/0x210 [ 102.675400][ T6215] do_syscall_64+0xf6/0x210 [ 102.675426][ T6215] ? clear_bhb_loop+0x45/0xa0 [ 102.675450][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.675469][ T6215] RIP: 0033:0x7fc19258e969 [ 102.675486][ T6215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.675502][ T6215] RSP: 002b:00007fc19338d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 102.675522][ T6215] RAX: ffffffffffffffda RBX: 00007fc1927b5fa0 RCX: 00007fc19258e969 [ 102.675536][ T6215] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 102.675547][ T6215] RBP: 00007fc19338d090 R08: 0000000000000000 R09: 0000000000000000 [ 102.675558][ T6215] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 102.675570][ T6215] R13: 0000000000000000 R14: 00007fc1927b5fa0 R15: 00007ffffc516008 [ 102.675601][ T6215] [ 104.043234][ T6263] FAULT_INJECTION: forcing a failure. [ 104.043234][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 104.069787][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.1.89 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 104.069815][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.069827][ T6263] Call Trace: [ 104.069835][ T6263] [ 104.069843][ T6263] dump_stack_lvl+0x189/0x250 [ 104.069876][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.069901][ T6263] ? __pfx__printk+0x10/0x10 [ 104.069922][ T6263] ? __pfx___might_resched+0x10/0x10 [ 104.069940][ T6263] ? fs_reclaim_acquire+0x7d/0x100 [ 104.069973][ T6263] should_fail_ex+0x414/0x560 [ 104.070007][ T6263] should_failslab+0xa8/0x100 [ 104.070031][ T6263] __kmalloc_cache_noprof+0x70/0x3d0 [ 104.070055][ T6263] ? nft_trans_table_add+0x56/0x430 [ 104.070082][ T6263] nft_trans_table_add+0x56/0x430 [ 104.070110][ T6263] nf_tables_newtable+0xce3/0x1890 [ 104.070152][ T6263] nfnetlink_rcv+0x113f/0x2530 [ 104.070207][ T6263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 104.070283][ T6263] ? skb_clone+0x246/0x3a0 [ 104.070327][ T6263] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.070356][ T6263] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.070391][ T6263] netlink_unicast+0x758/0x8d0 [ 104.070425][ T6263] netlink_sendmsg+0x805/0xb30 [ 104.070449][ T6263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.070468][ T6263] ? aa_sock_msg_perm+0x94/0x160 [ 104.070487][ T6263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.070515][ T6263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.070532][ T6263] __sock_sendmsg+0x219/0x270 [ 104.070559][ T6263] ____sys_sendmsg+0x505/0x830 [ 104.070585][ T6263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.070618][ T6263] ? import_iovec+0x74/0xa0 [ 104.070647][ T6263] ___sys_sendmsg+0x21f/0x2a0 [ 104.070681][ T6263] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.070737][ T6263] ? __fget_files+0x2a/0x420 [ 104.070759][ T6263] ? __fget_files+0x3a0/0x420 [ 104.070792][ T6263] __x64_sys_sendmsg+0x19b/0x260 [ 104.070814][ T6263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.070850][ T6263] ? do_syscall_64+0xba/0x210 [ 104.070877][ T6263] do_syscall_64+0xf6/0x210 [ 104.070900][ T6263] ? clear_bhb_loop+0x45/0xa0 [ 104.070922][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.070939][ T6263] RIP: 0033:0x7ff2cc38e969 [ 104.070955][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.070970][ T6263] RSP: 002b:00007ff2cd2dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.070989][ T6263] RAX: ffffffffffffffda RBX: 00007ff2cc5b5fa0 RCX: 00007ff2cc38e969 [ 104.071002][ T6263] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.071013][ T6263] RBP: 00007ff2cd2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 104.071024][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.071034][ T6263] R13: 0000000000000000 R14: 00007ff2cc5b5fa0 R15: 00007ffd9f574e38 [ 104.071063][ T6263] [ 104.792583][ T6281] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 104.842011][ T6283] lo speed is unknown, defaulting to 1000 [ 104.865591][ T6283] lo speed is unknown, defaulting to 1000 [ 104.912904][ T6283] lo speed is unknown, defaulting to 1000 [ 105.045758][ T6283] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.063717][ T6285] lo speed is unknown, defaulting to 1000 [ 105.089566][ T6285] lo speed is unknown, defaulting to 1000 [ 105.109341][ T6294] tipc: Started in network mode [ 105.114280][ T6294] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.151291][ T6294] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.215948][ T6294] tipc: Enabled bearer , priority 10 [ 105.286936][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.336781][ T6283] lo speed is unknown, defaulting to 1000 [ 105.344386][ T6283] lo speed is unknown, defaulting to 1000 [ 105.393282][ T6283] lo speed is unknown, defaulting to 1000 [ 105.404713][ T6283] lo speed is unknown, defaulting to 1000 [ 105.426566][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.469076][ T6299] netlink: 'syz.2.99': attribute type 11 has an invalid length. [ 105.477302][ T6299] __nla_validate_parse: 3 callbacks suppressed [ 105.477318][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 105.513650][ T6283] lo speed is unknown, defaulting to 1000 [ 105.566575][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.706646][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.752156][ T6316] netlink: 76 bytes leftover after parsing attributes in process `syz.3.102'. [ 105.768908][ T6316] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 105.846906][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.895669][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 105.905077][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 105.943749][ T6324] netlink: 'syz.2.104': attribute type 2 has an invalid length. [ 105.986593][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.012157][ T6324] k›*·]‘: entered promiscuous mode [ 106.116781][ T6327] siw: device registration error -23 [ 106.126537][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.230129][ T6329] sit1: entered allmulticast mode [ 106.267138][ T5889] tipc: Node number set to 2886997162 [ 106.406021][ T6329] sit1: left allmulticast mode [ 106.562163][ T6344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.112'. [ 106.763815][ T6352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.115'. [ 107.068198][ T6366] siw: device registration error -23 [ 107.145597][ T6369] netlink: 'syz.1.121': attribute type 20 has an invalid length. [ 107.477661][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 107.539019][ T6388] lo speed is unknown, defaulting to 1000 [ 107.562423][ T6388] lo speed is unknown, defaulting to 1000 [ 107.641416][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 107.696315][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 108.246648][ T6408] tipc: Enabling of bearer rejected, already enabled [ 108.655806][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 108.784887][ T6432] Cannot find add_set index 0 as target [ 109.059959][ T6447] tipc: Started in network mode [ 109.072546][ T6447] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.087801][ T6447] tipc: Enabled bearer , priority 10 [ 109.413568][ T6458] syz.1.152 (6458) used greatest stack depth: 20136 bytes left [ 109.429239][ T6469] xt_policy: too many policy elements [ 109.845979][ T6487] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.874589][ T6487] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 110.072802][ T6493] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 110.107093][ T5899] tipc: Node number set to 2886997162 [ 110.117927][ T6487] lo speed is unknown, defaulting to 1000 [ 110.125395][ T6487] lo speed is unknown, defaulting to 1000 [ 110.306566][ C1] net_ratelimit: 5 callbacks suppressed [ 110.306584][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.426012][ T6507] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 110.574776][ T6516] __nla_validate_parse: 11 callbacks suppressed [ 110.574794][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 110.680959][ T6509] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 110.766968][ T6509] bond1: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 110.793761][ T6509] bond1: (slave ip6tnl1): making interface the new active one [ 110.803009][ T6509] bond1: (slave ip6tnl1): Enslaving as an active interface with an up link [ 110.884741][ T6523] geneve2: entered promiscuous mode [ 111.178442][ T6533] tipc: Enabling of bearer rejected, already enabled [ 111.346641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 111.379055][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 111.393133][ T10] IPVS: starting estimator thread 0... [ 111.506003][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 111.517837][ T6548] IPVS: using max 31 ests per chain, 74400 per kthread [ 111.716864][ T6557] netlink: 404 bytes leftover after parsing attributes in process `syz.4.181'. [ 111.725869][ T6557] netlink: 88 bytes leftover after parsing attributes in process `syz.4.181'. [ 111.776628][ T6557] netlink: 88 bytes leftover after parsing attributes in process `syz.4.181'. [ 111.906832][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 111.986753][ T6559] syzkaller0: entered promiscuous mode [ 111.998783][ T6559] syzkaller0: entered allmulticast mode [ 112.100899][ T6545] tipc: Started in network mode [ 112.106186][ T6545] tipc: Node identity ac1414aa, cluster identity 4711 [ 112.150567][ T6545] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.193538][ T6545] tipc: Enabled bearer , priority 10 [ 112.286733][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.386524][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 112.426699][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.566592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.608051][ T6601] siw: device registration error -23 [ 112.688257][ T6603] tipc: Enabling of bearer rejected, already enabled [ 112.706682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.856557][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.930937][ T6615] netlink: 'syz.1.195': attribute type 4 has an invalid length. [ 112.996593][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.277584][ T5899] tipc: Node number set to 2886997162 [ 113.519460][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 113.536960][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 113.552048][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 113.930081][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.207'. [ 114.595200][ T6657] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 114.608509][ T6653] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 114.620841][ T6659] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 114.734931][ T6667] trusted_key: syz.1.213 sent an empty control message without MSG_MORE. [ 114.931389][ T6671] bridge_slave_0: left allmulticast mode [ 114.996586][ T6671] bridge_slave_0: left promiscuous mode [ 115.003539][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.059900][ T6671] bridge_slave_1: left allmulticast mode [ 115.087147][ T6671] bridge_slave_1: left promiscuous mode [ 115.094156][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.151938][ T6671] bond0: (slave bond_slave_0): Releasing backup interface [ 115.169296][ T6671] bond0: (slave bond_slave_1): Releasing backup interface [ 115.199273][ T6688] xt_cgroup: xt_cgroup: no path or classid specified [ 115.211960][ T6671] team0: Port device team_slave_0 removed [ 115.225710][ T6671] team0: Port device team_slave_1 removed [ 115.239304][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.251272][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.264581][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.275176][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.301749][ T5890] lo speed is unknown, defaulting to 1000 [ 115.475813][ T6683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.506637][ C1] net_ratelimit: 6 callbacks suppressed [ 115.506655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 115.840351][ T6712] lo speed is unknown, defaulting to 1000 [ 115.850490][ T6714] __nla_validate_parse: 6 callbacks suppressed [ 115.850509][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 115.875638][ T6712] lo speed is unknown, defaulting to 1000 [ 115.950823][ T6716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 116.110743][ T6727] FAULT_INJECTION: forcing a failure. [ 116.110743][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 116.132123][ T6727] CPU: 0 UID: 0 PID: 6727 Comm: syz.0.233 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 116.132150][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 116.132162][ T6727] Call Trace: [ 116.132169][ T6727] [ 116.132178][ T6727] dump_stack_lvl+0x189/0x250 [ 116.132217][ T6727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.132246][ T6727] ? __pfx__printk+0x10/0x10 [ 116.132272][ T6727] ? __pfx___might_resched+0x10/0x10 [ 116.132291][ T6727] ? fs_reclaim_acquire+0x7d/0x100 [ 116.132325][ T6727] should_fail_ex+0x414/0x560 [ 116.132356][ T6727] should_failslab+0xa8/0x100 [ 116.132378][ T6727] __kmalloc_cache_noprof+0x70/0x3d0 [ 116.132398][ T6727] ? nfnetlink_rcv+0xf0f/0x2530 [ 116.132421][ T6727] nfnetlink_rcv+0xf0f/0x2530 [ 116.132476][ T6727] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.132538][ T6727] ? skb_clone+0x246/0x3a0 [ 116.132570][ T6727] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.132594][ T6727] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.132623][ T6727] netlink_unicast+0x758/0x8d0 [ 116.132655][ T6727] netlink_sendmsg+0x805/0xb30 [ 116.132679][ T6727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.132699][ T6727] ? aa_sock_msg_perm+0x94/0x160 [ 116.132718][ T6727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.132736][ T6727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.132751][ T6727] __sock_sendmsg+0x219/0x270 [ 116.132791][ T6727] ____sys_sendmsg+0x505/0x830 [ 116.132813][ T6727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.132839][ T6727] ? import_iovec+0x74/0xa0 [ 116.132864][ T6727] ___sys_sendmsg+0x21f/0x2a0 [ 116.132885][ T6727] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.132932][ T6727] ? __fget_files+0x2a/0x420 [ 116.132953][ T6727] ? __fget_files+0x3a0/0x420 [ 116.132984][ T6727] __x64_sys_sendmsg+0x19b/0x260 [ 116.133008][ T6727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.133046][ T6727] ? do_syscall_64+0xba/0x210 [ 116.133080][ T6727] do_syscall_64+0xf6/0x210 [ 116.133104][ T6727] ? clear_bhb_loop+0x45/0xa0 [ 116.133127][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.133145][ T6727] RIP: 0033:0x7fc19258e969 [ 116.133162][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.133176][ T6727] RSP: 002b:00007fc19338d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.133195][ T6727] RAX: ffffffffffffffda RBX: 00007fc1927b5fa0 RCX: 00007fc19258e969 [ 116.133206][ T6727] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 116.133215][ T6727] RBP: 00007fc19338d090 R08: 0000000000000000 R09: 0000000000000000 [ 116.133224][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.133233][ T6727] R13: 0000000000000000 R14: 00007fc1927b5fa0 R15: 00007ffffc516008 [ 116.133258][ T6727] [ 116.409024][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.542115][ T6734] netlink: 68 bytes leftover after parsing attributes in process `syz.4.234'. [ 116.551476][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 116.591438][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.234'. [ 116.621502][ T6734] netlink: 212 bytes leftover after parsing attributes in process `syz.4.234'. [ 116.676905][ T6733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.720751][ T6734] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 116.791199][ T6733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.843591][ T6736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.930661][ T6733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.974524][ T6736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.033238][ T6733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.139893][ T6736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.179602][ T6750] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 117.353251][ T6736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.427771][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.489230][ T6733] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.527685][ T6733] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.579720][ T6733] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.588218][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 117.661356][ T6733] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.760421][ T6736] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.825667][ T6736] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.862195][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 117.936021][ T6736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.188509][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.252'. [ 118.221270][ T6736] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.466758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 118.590271][ T6804] netlink: zone id is out of range [ 118.600234][ T6804] netlink: zone id is out of range [ 118.852452][ T6816] sock: sock_timestamping_bind_phc: sock not bind to device [ 119.302809][ T6832] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 119.534039][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.623390][ T6832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.638859][ T6839] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 119.689131][ T6832] ieee802154 phy0 wpan0: encryption failed: -90 [ 119.703081][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 119.720571][ T6840] ip6erspan0: entered promiscuous mode [ 119.832964][ T6840] bond3: (slave ip6erspan0): making interface the new active one [ 119.904175][ T6840] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 119.963127][ T6860] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 120.105336][ T6865] !: renamed from dummy0 (while UP) [ 120.144055][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 120.305339][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.309603][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 120.313417][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.326214][ T6878] netlink: 252 bytes leftover after parsing attributes in process `syz.4.275'. [ 120.547407][ C0] net_ratelimit: 13 callbacks suppressed [ 120.547431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.580399][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.620987][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.706641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 120.820525][ T6867] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.831246][ T6867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.856541][ T6867] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.867936][ T6867] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.918550][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 121.008025][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.016032][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.032981][ T6870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.097375][ T6870] syz.2.272 (6870) used greatest stack depth: 19712 bytes left [ 121.210594][ T6876] lo speed is unknown, defaulting to 1000 [ 121.251600][ T6873] lo speed is unknown, defaulting to 1000 [ 121.251600][ T6876] lo speed is unknown, defaulting to 1000 [ 121.322007][ T6873] lo speed is unknown, defaulting to 1000 [ 121.586706][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 121.746508][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 121.783474][ T6904] lo speed is unknown, defaulting to 1000 [ 121.825965][ T6904] lo speed is unknown, defaulting to 1000 [ 122.626689][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.634688][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 122.658668][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 122.786545][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 122.918296][ T6950] dummy0: entered promiscuous mode [ 122.957427][ T6950] bond0: entered promiscuous mode [ 122.972644][ T6950] bond_slave_0: entered promiscuous mode [ 122.985466][ T6950] bond_slave_1: entered promiscuous mode [ 123.666516][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 123.828672][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.928416][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 123.965890][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.294'. [ 124.212045][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.239967][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.250092][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz.2.298'. [ 124.407846][ T7001] Bluetooth: MGMT ver 1.23 [ 124.513808][ T7010] !: renamed from dummy0 (while UP) [ 124.561808][ T7013] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 124.603357][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 124.893529][ T7015] lo speed is unknown, defaulting to 1000 [ 124.924685][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 124.971294][ T7015] lo speed is unknown, defaulting to 1000 [ 125.638815][ T7052] 8021q: VLANs not supported on vxcan1 [ 125.747719][ C0] net_ratelimit: 3 callbacks suppressed [ 125.747737][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.824452][ T7058] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 125.834762][ T7058] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 125.906526][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.015469][ T7071] __nla_validate_parse: 3 callbacks suppressed [ 126.015487][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 126.115009][ T7074] netlink: 'syz.4.315': attribute type 1 has an invalid length. [ 126.220565][ T7077] netlink: 68 bytes leftover after parsing attributes in process `syz.1.317'. [ 126.290182][ T7071] bridge_slave_1: left allmulticast mode [ 126.335876][ T7071] bridge_slave_1: left promiscuous mode [ 126.342781][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.355060][ T7071] bridge_slave_0: left allmulticast mode [ 126.364095][ T7071] bridge_slave_0: left promiscuous mode [ 126.374209][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.786845][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.803180][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 126.814850][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.319'. [ 126.824820][ T7095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.320'. [ 126.891910][ T7064] lo speed is unknown, defaulting to 1000 [ 126.900874][ T7094] !: renamed from dummy0 (while UP) [ 126.930863][ T7090] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.943098][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 126.952117][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.967591][ T7064] lo speed is unknown, defaulting to 1000 [ 126.973528][ T7024] lo speed is unknown, defaulting to 1000 [ 127.107951][ T7097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.221882][ T7024] lo speed is unknown, defaulting to 1000 [ 127.408263][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.322'. [ 127.419213][ T7097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.655159][ T7097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.676152][ T7127] netlink: 104 bytes leftover after parsing attributes in process `syz.1.324'. [ 127.806088][ T7130] FAULT_INJECTION: forcing a failure. [ 127.806088][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 127.825646][ T7101] xt_hashlimit: size too large, truncated to 1048576 [ 127.831694][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.4.325 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 127.831726][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 127.831739][ T7130] Call Trace: [ 127.831747][ T7130] [ 127.831757][ T7130] dump_stack_lvl+0x189/0x250 [ 127.831811][ T7130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.831842][ T7130] ? __pfx__printk+0x10/0x10 [ 127.831871][ T7130] ? __pfx___might_resched+0x10/0x10 [ 127.831889][ T7130] ? fs_reclaim_acquire+0x7d/0x100 [ 127.831926][ T7130] should_fail_ex+0x414/0x560 [ 127.831965][ T7130] should_failslab+0xa8/0x100 [ 127.831995][ T7130] __kmalloc_cache_noprof+0x70/0x3d0 [ 127.832021][ T7130] ? nft_trans_rule_add+0x59/0x440 [ 127.832053][ T7130] nft_trans_rule_add+0x59/0x440 [ 127.832084][ T7130] nf_tables_newrule+0x1b5e/0x2890 [ 127.832124][ T7130] ? __pfx_nf_tables_newrule+0x10/0x10 [ 127.832149][ T7130] ? nfnl_pernet+0x23/0x240 [ 127.832186][ T7130] ? __nla_parse+0x40/0x60 [ 127.832214][ T7130] nfnetlink_rcv+0x113f/0x2530 [ 127.832277][ T7130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 127.832357][ T7130] ? skb_clone+0x246/0x3a0 [ 127.832396][ T7130] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.832426][ T7130] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.832462][ T7130] netlink_unicast+0x758/0x8d0 [ 127.832501][ T7130] netlink_sendmsg+0x805/0xb30 [ 127.832529][ T7130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.832551][ T7130] ? aa_sock_msg_perm+0x94/0x160 [ 127.832573][ T7130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.832594][ T7130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.832613][ T7130] __sock_sendmsg+0x219/0x270 [ 127.832654][ T7130] ____sys_sendmsg+0x505/0x830 [ 127.832688][ T7130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.832717][ T7130] ? import_iovec+0x74/0xa0 [ 127.832739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.832744][ T7130] ___sys_sendmsg+0x21f/0x2a0 [ 127.832768][ T7130] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.832826][ T7130] ? __fget_files+0x2a/0x420 [ 127.832849][ T7130] ? __fget_files+0x3a0/0x420 [ 127.832883][ T7130] __x64_sys_sendmsg+0x19b/0x260 [ 127.832908][ T7130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.832945][ T7130] ? do_syscall_64+0xba/0x210 [ 127.832972][ T7130] do_syscall_64+0xf6/0x210 [ 127.832997][ T7130] ? clear_bhb_loop+0x45/0xa0 [ 127.833022][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.833040][ T7130] RIP: 0033:0x7f5674d8e969 [ 127.833065][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.833080][ T7130] RSP: 002b:00007f5675c40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.833105][ T7130] RAX: ffffffffffffffda RBX: 00007f5674fb5fa0 RCX: 00007f5674d8e969 [ 127.833119][ T7130] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 127.833131][ T7130] RBP: 00007f5675c40090 R08: 0000000000000000 R09: 0000000000000000 [ 127.833143][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.833153][ T7130] R13: 0000000000000000 R14: 00007f5674fb5fa0 R15: 00007ffe72fdc4a8 [ 127.833184][ T7130] [ 127.986551][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.200184][ T7097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.298809][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 128.421261][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 128.544839][ T7097] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.642621][ T7097] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.701121][ T7097] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.763469][ T7097] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.866704][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.026637][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 129.099753][ T7169] netlink: 'syz.4.333': attribute type 16 has an invalid length. [ 129.150758][ T7169] netlink: 'syz.4.333': attribute type 17 has an invalid length. [ 129.241611][ T7169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.188294][ T7205] Cannot find del_set index 4 as target [ 130.956635][ C0] net_ratelimit: 2 callbacks suppressed [ 130.956653][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.106598][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.370430][ T7256] __nla_validate_parse: 8 callbacks suppressed [ 131.370448][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.355'. [ 131.403536][ T7256] IPVS: length: 78 != 8 [ 131.656011][ T7238] lo speed is unknown, defaulting to 1000 [ 131.725025][ T7268] geneve2: entered promiscuous mode [ 131.737900][ T7268] geneve2: entered allmulticast mode [ 131.986635][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.091792][ T7238] lo speed is unknown, defaulting to 1000 [ 132.146556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 132.832655][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.027007][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.158230][ T7313] lo speed is unknown, defaulting to 1000 [ 133.186537][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 133.358238][ T7313] lo speed is unknown, defaulting to 1000 [ 133.364962][ T7332] tipc: Enabling of bearer rejected, already enabled [ 133.782688][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 133.792294][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 133.832391][ T7346] netlink: 'syz.1.377': attribute type 26 has an invalid length. [ 133.912122][ T7348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.973495][ T7348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.000356][ T7348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.025896][ T7348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.050981][ T7348] geneve2: entered promiscuous mode [ 134.067418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.082979][ T7348] geneve2: entered allmulticast mode [ 134.120153][ T7355] block nbd0: server does not support multiple connections per device. [ 134.135411][ T7348] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.152278][ T7348] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.178427][ T7355] block nbd0: shutting down sockets [ 134.181340][ T7348] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.225944][ T7348] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.235037][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 134.255134][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 134.916614][ T7372] lo speed is unknown, defaulting to 1000 [ 134.966396][ T7372] lo speed is unknown, defaulting to 1000 [ 134.966404][ T7377] lo speed is unknown, defaulting to 1000 [ 135.106752][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.115262][ T7384] tipc: Enabling of bearer rejected, already enabled [ 135.128112][ T7377] lo speed is unknown, defaulting to 1000 [ 135.266509][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.625598][ T7378] SET target dimension over the limit! [ 135.704085][ T7375] geneve2: entered promiscuous mode [ 135.768004][ T7375] geneve2: entered allmulticast mode [ 135.800531][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 135.833946][ T7378] netlink: 96 bytes leftover after parsing attributes in process `syz.2.386'. [ 136.121186][ T7427] IPv6: Can't replace route, no match found [ 136.146604][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 136.220392][ T7430] netlink: 'syz.1.399': attribute type 33 has an invalid length. [ 136.240740][ T7430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.399'. [ 136.271660][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 136.306578][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.381676][ T7434] dummy0 (unregistering): left promiscuous mode [ 136.548364][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 136.605580][ T7440] ip6gre1: entered allmulticast mode [ 136.639288][ T7444] tipc: Enabling of bearer rejected, already enabled [ 136.649271][ T7442] lo speed is unknown, defaulting to 1000 [ 136.678112][ T7442] lo speed is unknown, defaulting to 1000 [ 136.728968][ T7448] xt_hashlimit: size too large, truncated to 1048576 [ 136.749023][ T7445] lo speed is unknown, defaulting to 1000 [ 136.763228][ T7449] can: request_module (can-proto-5) failed. [ 136.790225][ T7452] delete_channel: no stack [ 136.835745][ T7445] lo speed is unknown, defaulting to 1000 [ 137.168615][ T7461] block nbd0: shutting down sockets [ 137.186690][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.285265][ T7471] IPv6: NLM_F_REPLACE set, but no existing node found! [ 137.346641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.611100][ T7476] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 137.645220][ T7476] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.673292][ T7480] IPv6: Can't replace route, no match found [ 137.727180][ T7483] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 137.800635][ T7483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.823045][ T7483] batadv0: entered promiscuous mode [ 137.831119][ T7483] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 138.088968][ T7494] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 138.118972][ T7494] netlink: 232 bytes leftover after parsing attributes in process `syz.2.415'. [ 138.226590][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.226879][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'. [ 138.386511][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 138.829263][ T7516] siw: device registration error -23 [ 139.266715][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.426537][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 139.438150][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 139.462387][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 139.571800][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 139.913705][ T7553] vlan2: entered promiscuous mode [ 140.076240][ T7559] lo speed is unknown, defaulting to 1000 [ 140.112164][ T7559] lo speed is unknown, defaulting to 1000 [ 140.306544][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.531005][ T7577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.441'. [ 140.650263][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 140.707760][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 140.789280][ T7596] siw: device registration error -23 [ 141.313964][ T7626] netlink: 68 bytes leftover after parsing attributes in process `syz.1.459'. [ 141.346603][ C0] net_ratelimit: 1 callbacks suppressed [ 141.346621][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.460061][ T7637] siw: device registration error -23 [ 141.506548][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 141.598130][ T7639] Cannot find add_set index 2 as target [ 141.673863][ T7647] __nla_validate_parse: 1 callbacks suppressed [ 141.673880][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.467'. [ 141.740952][ T7652] lo speed is unknown, defaulting to 1000 [ 141.805908][ T7652] lo speed is unknown, defaulting to 1000 [ 141.911930][ T7655] lo speed is unknown, defaulting to 1000 [ 141.955811][ T7655] lo speed is unknown, defaulting to 1000 [ 142.386610][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.474001][ T7690] geneve1: entered promiscuous mode [ 142.479434][ T7690] geneve1: entered allmulticast mode [ 142.546500][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.592224][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 142.724920][ T7700] FAULT_INJECTION: forcing a failure. [ 142.724920][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 142.760804][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.2.482 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 142.760833][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.760845][ T7700] Call Trace: [ 142.760853][ T7700] [ 142.760861][ T7700] dump_stack_lvl+0x189/0x250 [ 142.760897][ T7700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.760925][ T7700] ? __pfx__printk+0x10/0x10 [ 142.760951][ T7700] ? __pfx___might_resched+0x10/0x10 [ 142.760968][ T7700] ? fs_reclaim_acquire+0x7d/0x100 [ 142.761010][ T7700] should_fail_ex+0x414/0x560 [ 142.761045][ T7700] should_failslab+0xa8/0x100 [ 142.761072][ T7700] __kmalloc_cache_noprof+0x70/0x3d0 [ 142.761096][ T7700] ? nf_tables_newchain+0x1dec/0x29f0 [ 142.761121][ T7700] nf_tables_newchain+0x1dec/0x29f0 [ 142.761156][ T7700] ? __pfx_nf_tables_newchain+0x10/0x10 [ 142.761211][ T7700] ? nfnl_pernet+0x23/0x240 [ 142.761245][ T7700] ? __nla_parse+0x40/0x60 [ 142.761270][ T7700] nfnetlink_rcv+0x113f/0x2530 [ 142.761327][ T7700] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 142.761407][ T7700] ? skb_clone+0x246/0x3a0 [ 142.761466][ T7700] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.761496][ T7700] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.761533][ T7700] netlink_unicast+0x758/0x8d0 [ 142.761574][ T7700] netlink_sendmsg+0x805/0xb30 [ 142.761604][ T7700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.761627][ T7700] ? aa_sock_msg_perm+0x94/0x160 [ 142.761650][ T7700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.761672][ T7700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.761692][ T7700] __sock_sendmsg+0x219/0x270 [ 142.761724][ T7700] ____sys_sendmsg+0x505/0x830 [ 142.761752][ T7700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.761785][ T7700] ? import_iovec+0x74/0xa0 [ 142.761818][ T7700] ___sys_sendmsg+0x21f/0x2a0 [ 142.761843][ T7700] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.761906][ T7700] ? __fget_files+0x2a/0x420 [ 142.761931][ T7700] ? __fget_files+0x3a0/0x420 [ 142.761968][ T7700] __x64_sys_sendmsg+0x19b/0x260 [ 142.761994][ T7700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.762041][ T7700] ? do_syscall_64+0xba/0x210 [ 142.762072][ T7700] do_syscall_64+0xf6/0x210 [ 142.762099][ T7700] ? clear_bhb_loop+0x45/0xa0 [ 142.762124][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.762143][ T7700] RIP: 0033:0x7f846098e969 [ 142.762162][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.762178][ T7700] RSP: 002b:00007f845e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.762198][ T7700] RAX: ffffffffffffffda RBX: 00007f8460bb5fa0 RCX: 00007f846098e969 [ 142.762213][ T7700] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 142.762225][ T7700] RBP: 00007f845e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.762237][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.762248][ T7700] R13: 0000000000000000 R14: 00007f8460bb5fa0 R15: 00007fffa550d2b8 [ 142.762281][ T7700] [ 143.206240][ T7711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.483'. [ 143.368413][ T7719] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 143.586663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 143.609867][ T7727] erspan0: entered promiscuous mode [ 143.640400][ T7727] batman_adv: batadv0: Adding interface: macvlan2 [ 143.672356][ T7727] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.704835][ T7727] batman_adv: batadv0: Interface activated: macvlan2 [ 143.708384][ T7738] siw: device registration error -23 [ 143.720058][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 143.730928][ T7735] netlink: 108 bytes leftover after parsing attributes in process `syz.3.489'. [ 143.741561][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 143.743031][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 143.795608][ T7735] netlink: 108 bytes leftover after parsing attributes in process `syz.3.489'. [ 143.981676][ T7745] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.029883][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.493'. [ 144.049772][ T7747] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 144.191136][ T7751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.494'. [ 144.285872][ T7745] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.347951][ T7757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.381240][ T7757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.406721][ T7757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.429755][ T7757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.466847][ T7757] geneve2: entered promiscuous mode [ 144.478105][ T7757] geneve2: entered allmulticast mode [ 144.510490][ T7757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.538487][ T7757] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.548219][ T7757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.560127][ T7757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.593811][ T7766] tipc: Enabling of bearer rejected, already enabled [ 144.626623][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 144.643032][ T7745] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.754761][ T7745] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.792076][ T7773] Bluetooth: MGMT ver 1.23 [ 144.856319][ T7775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.869144][ T7775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.878173][ T7775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.887038][ T7775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.909152][ T7775] geneve2: entered promiscuous mode [ 144.914699][ T7775] geneve2: entered allmulticast mode [ 144.934539][ T7775] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.944078][ T7775] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.953542][ T7775] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.963954][ T7775] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.985766][ T7784] netlink: 'syz.3.504': attribute type 2 has an invalid length. [ 145.028823][ T7785] Cannot find del_set index 1 as target [ 145.035721][ T7784] : entered promiscuous mode [ 145.056206][ T7778] lo speed is unknown, defaulting to 1000 [ 145.078658][ T7778] lo speed is unknown, defaulting to 1000 [ 145.102062][ T7745] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.118764][ T7787] Cannot find set identified by id 0 to match [ 145.184298][ T7745] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.215954][ T7745] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.252313][ T7745] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.323064][ T7793] lo speed is unknown, defaulting to 1000 [ 145.362820][ T7793] lo speed is unknown, defaulting to 1000 [ 145.654356][ T7809] tipc: Enabling of bearer rejected, already enabled [ 145.666628][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.045562][ T7833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.067038][ T7833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.075876][ T7833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.113785][ T7833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.153026][ T7833] geneve2: entered promiscuous mode [ 146.182176][ T7833] geneve2: entered allmulticast mode [ 146.262788][ T7848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.540845][ T7860] tipc: Enabling of bearer rejected, already enabled [ 146.608662][ T7863] netlink: 'syz.4.529': attribute type 58 has an invalid length. [ 146.706598][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.057256][ T7871] lo speed is unknown, defaulting to 1000 [ 147.082659][ T7871] lo speed is unknown, defaulting to 1000 [ 147.746501][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.747025][ T7902] __nla_validate_parse: 8 callbacks suppressed [ 147.747041][ T7902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.538'. [ 148.084779][ T7918] netlink: 68 bytes leftover after parsing attributes in process `syz.2.542'. [ 148.171987][ T7921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.385356][ T7931] bridge_slave_0: entered promiscuous mode [ 148.530913][ T7939] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 148.570571][ T7939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.786925][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.830532][ T7952] netlink: 68 bytes leftover after parsing attributes in process `syz.1.555'. [ 148.919192][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 148.999498][ T7956] bridge0: entered promiscuous mode [ 149.008954][ T7956] macvlan3: entered promiscuous mode [ 149.021389][ T7956] bridge0: port 3(macvlan3) entered blocking state [ 149.028864][ T7956] bridge0: port 3(macvlan3) entered disabled state [ 149.035663][ T7956] macvlan3: entered allmulticast mode [ 149.045016][ T7956] bridge0: entered allmulticast mode [ 149.056275][ T7956] macvlan3: left allmulticast mode [ 149.068176][ T7956] bridge0: left allmulticast mode [ 149.076294][ T7956] bridge0: left promiscuous mode [ 149.088427][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.558'. [ 149.299153][ T7968] netlink: 'syz.1.560': attribute type 11 has an invalid length. [ 149.321627][ T7968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.560'. [ 149.405865][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 149.680912][ T7984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.567'. [ 149.826497][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.920460][ T7993] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 149.938114][ T7993] netlink: 'syz.2.571': attribute type 8 has an invalid length. [ 149.958122][ T7993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.571'. [ 150.018160][ T7997] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.027571][ T7997] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.037135][ T7997] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.046325][ T7997] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.088168][ T8001] veth3: entered allmulticast mode [ 150.093964][ T8001] bridge0: port 3(veth3) entered blocking state [ 150.105463][ T8001] bridge0: port 3(veth3) entered disabled state [ 150.114052][ T8001] veth3: entered promiscuous mode [ 150.482701][ T8026] netlink: 68 bytes leftover after parsing attributes in process `syz.4.581'. [ 150.618853][ T8030] bridge0: entered promiscuous mode [ 150.624264][ T8030] macvlan2: entered promiscuous mode [ 150.639760][ T8030] bridge0: port 4(macvlan2) entered blocking state [ 150.646708][ T8030] bridge0: port 4(macvlan2) entered disabled state [ 150.653456][ T8030] macvlan2: entered allmulticast mode [ 150.661079][ T8030] bridge0: entered allmulticast mode [ 150.693127][ T8030] macvlan2: left allmulticast mode [ 150.702970][ T8030] bridge0: left allmulticast mode [ 150.722991][ T8030] bridge0: left promiscuous mode [ 150.866578][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.006290][ T8049] FAULT_INJECTION: forcing a failure. [ 151.006290][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 151.024397][ T8049] CPU: 0 UID: 0 PID: 8049 Comm: syz.2.590 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 151.024425][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.024436][ T8049] Call Trace: [ 151.024444][ T8049] [ 151.024452][ T8049] dump_stack_lvl+0x189/0x250 [ 151.024487][ T8049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.024515][ T8049] ? __pfx__printk+0x10/0x10 [ 151.024537][ T8049] ? __pfx___might_resched+0x10/0x10 [ 151.024555][ T8049] ? fs_reclaim_acquire+0x7d/0x100 [ 151.024597][ T8049] should_fail_ex+0x414/0x560 [ 151.024631][ T8049] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 151.024659][ T8049] should_failslab+0xa8/0x100 [ 151.024687][ T8049] __kvmalloc_node_noprof+0x168/0x5e0 [ 151.024712][ T8049] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 151.024759][ T8049] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 151.024798][ T8049] __nf_unregister_net_hook+0x4f6/0x700 [ 151.024833][ T8049] nf_tables_abort+0x69f9/0x88b0 [ 151.024861][ T8049] ? free_large_kmalloc+0x145/0x200 [ 151.024886][ T8049] ? nf_tables_newrule+0x23bc/0x2890 [ 151.024911][ T8049] ? __pfx_nf_tables_abort+0x10/0x10 [ 151.024935][ T8049] ? __pfx_nf_tables_newrule+0x10/0x10 [ 151.024968][ T8049] ? __nla_parse+0x40/0x60 [ 151.024985][ T8049] ? skb_pull+0xc1/0x1d0 [ 151.025011][ T8049] nfnetlink_rcv+0x1cb0/0x2530 [ 151.025064][ T8049] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 151.025083][ T8049] ? stack_depot_save_flags+0x40/0x910 [ 151.025178][ T8049] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.025206][ T8049] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.025239][ T8049] netlink_unicast+0x758/0x8d0 [ 151.025275][ T8049] netlink_sendmsg+0x805/0xb30 [ 151.025302][ T8049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.025322][ T8049] ? aa_sock_msg_perm+0x94/0x160 [ 151.025342][ T8049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.025362][ T8049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.025380][ T8049] __sock_sendmsg+0x219/0x270 [ 151.025408][ T8049] ____sys_sendmsg+0x505/0x830 [ 151.025434][ T8049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.025464][ T8049] ? import_iovec+0x74/0xa0 [ 151.025490][ T8049] ___sys_sendmsg+0x21f/0x2a0 [ 151.025513][ T8049] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.025569][ T8049] ? __fget_files+0x2a/0x420 [ 151.025597][ T8049] ? __fget_files+0x3a0/0x420 [ 151.025631][ T8049] __x64_sys_sendmsg+0x19b/0x260 [ 151.025654][ T8049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.025691][ T8049] ? do_syscall_64+0xba/0x210 [ 151.025720][ T8049] do_syscall_64+0xf6/0x210 [ 151.025743][ T8049] ? clear_bhb_loop+0x45/0xa0 [ 151.025766][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.025783][ T8049] RIP: 0033:0x7f846098e969 [ 151.025799][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.025814][ T8049] RSP: 002b:00007f845e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.025833][ T8049] RAX: ffffffffffffffda RBX: 00007f8460bb5fa0 RCX: 00007f846098e969 [ 151.025846][ T8049] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 151.025857][ T8049] RBP: 00007f845e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.025868][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.025878][ T8049] R13: 0000000000000000 R14: 00007f8460bb5fa0 R15: 00007fffa550d2b8 [ 151.025907][ T8049] [ 151.418465][ T8054] siw: device registration error -23 [ 151.680237][ T8068] lo speed is unknown, defaulting to 1000 [ 151.688073][ T8068] lo speed is unknown, defaulting to 1000 [ 151.840390][ T8069] lo speed is unknown, defaulting to 1000 [ 151.849439][ T8069] lo speed is unknown, defaulting to 1000 [ 151.863040][ T8071] lo speed is unknown, defaulting to 1000 [ 151.870950][ T8071] lo speed is unknown, defaulting to 1000 [ 151.907852][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.946498][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.015397][ T8114] lo speed is unknown, defaulting to 1000 [ 153.066937][ T8122] __nla_validate_parse: 7 callbacks suppressed [ 153.066956][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 153.094398][ T8114] lo speed is unknown, defaulting to 1000 [ 153.174691][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 153.234384][ T8132] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 153.249867][ T8134] macvlan2: entered promiscuous mode [ 153.255293][ T8134] bridge0: entered promiscuous mode [ 153.264902][ T8134] bridge0: port 4(macvlan2) entered blocking state [ 153.275597][ T8134] bridge0: port 4(macvlan2) entered disabled state [ 153.282664][ T8134] macvlan2: entered allmulticast mode [ 153.288536][ T8134] bridge0: entered allmulticast mode [ 153.295717][ T8134] macvlan2: left allmulticast mode [ 153.301228][ T8134] bridge0: left allmulticast mode [ 153.309073][ T8134] bridge0: left promiscuous mode [ 153.357807][ T8132] bond4: entered promiscuous mode [ 153.363918][ T8132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.598694][ T8146] netlink: 76 bytes leftover after parsing attributes in process `syz.1.619'. [ 153.618627][ T8146] netlink: 76 bytes leftover after parsing attributes in process `syz.1.619'. [ 153.754251][ T8153] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 153.969623][ T8167] netlink: 188 bytes leftover after parsing attributes in process `syz.4.628'. [ 153.986590][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.065159][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 154.089800][ T8174] bridge0: entered promiscuous mode [ 154.095323][ T8174] macvlan2: entered promiscuous mode [ 154.107561][ T8174] bridge0: port 4(macvlan2) entered blocking state [ 154.114355][ T8174] bridge0: port 4(macvlan2) entered disabled state [ 154.124930][ T8174] macvlan2: entered allmulticast mode [ 154.130960][ T8174] bridge0: entered allmulticast mode [ 154.143641][ T8174] macvlan2: left allmulticast mode [ 154.149039][ T8174] bridge0: left allmulticast mode [ 154.155142][ T8174] bridge0: left promiscuous mode [ 154.313717][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 154.327394][ T8183] lo speed is unknown, defaulting to 1000 [ 154.334904][ T8183] lo speed is unknown, defaulting to 1000 [ 154.719973][ T8183] netlink: 'syz.4.633': attribute type 11 has an invalid length. [ 154.783145][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 154.902807][ T8203] geneve1: entered promiscuous mode [ 154.925835][ T8203] geneve1: entered allmulticast mode [ 154.937625][ T8207] syz.3.641: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.982684][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 154.984532][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.3.641 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 154.984560][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.984573][ T8207] Call Trace: [ 154.984581][ T8207] [ 154.984590][ T8207] dump_stack_lvl+0x189/0x250 [ 154.984629][ T8207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.984658][ T8207] ? __pfx__printk+0x10/0x10 [ 154.984679][ T8207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.984712][ T8207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.984745][ T8207] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 154.984780][ T8207] warn_alloc+0x214/0x310 [ 154.984809][ T8207] ? __pfx___schedule+0x10/0x10 [ 154.984836][ T8207] ? __pfx_warn_alloc+0x10/0x10 [ 154.984864][ T8207] ? kasan_save_track+0x4f/0x80 [ 154.984885][ T8207] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 154.984909][ T8207] ? xskq_create+0x56/0x170 [ 154.984934][ T8207] ? __x64_sys_setsockopt+0x18b/0x220 [ 154.984954][ T8207] ? do_syscall_64+0xf6/0x210 [ 154.984997][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.985044][ T8207] __vmalloc_node_range_noprof+0x125/0x12c0 [ 154.985105][ T8207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.985136][ T8207] ? __kasan_kmalloc+0x93/0xb0 [ 154.985165][ T8207] vmalloc_user_noprof+0x74/0x80 [ 154.985197][ T8207] ? xskq_create+0xbf/0x170 [ 154.985219][ T8207] xskq_create+0xbf/0x170 [ 154.985245][ T8207] xsk_init_queue+0xb0/0x110 [ 154.985271][ T8207] xsk_setsockopt+0x4de/0x710 [ 154.985295][ T8207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.985323][ T8207] ? aa_sock_opt_perm+0x74/0x110 [ 154.985347][ T8207] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 154.985369][ T8207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.985392][ T8207] do_sock_setsockopt+0x257/0x3e0 [ 154.985416][ T8207] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 154.985434][ T8207] ? __fget_files+0x2a/0x420 [ 154.985464][ T8207] ? __fget_files+0x3a0/0x420 [ 154.985488][ T8207] ? __fget_files+0x2a/0x420 [ 154.985525][ T8207] __x64_sys_setsockopt+0x18b/0x220 [ 154.985553][ T8207] do_syscall_64+0xf6/0x210 [ 154.985580][ T8207] ? clear_bhb_loop+0x45/0xa0 [ 154.985605][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.985626][ T8207] RIP: 0033:0x7f373598e969 [ 154.985644][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.985661][ T8207] RSP: 002b:00007f373684a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.985682][ T8207] RAX: ffffffffffffffda RBX: 00007f3735bb5fa0 RCX: 00007f373598e969 [ 154.985696][ T8207] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 154.985708][ T8207] RBP: 00007f3735a10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 154.985720][ T8207] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 154.985733][ T8207] R13: 0000000000000000 R14: 00007f3735bb5fa0 R15: 00007fff728abac8 [ 154.985763][ T8207] [ 154.986654][ T8207] Mem-Info: [ 155.026599][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.073567][ T8208] netlink: 'syz.2.640': attribute type 9 has an invalid length. [ 155.077486][ T8207] active_anon:4098 inactive_anon:0 isolated_anon:0 [ 155.077486][ T8207] active_file:1546 inactive_file:38340 isolated_file:0 [ 155.077486][ T8207] unevictable:768 dirty:188 writeback:0 [ 155.077486][ T8207] slab_reclaimable:10709 slab_unreclaimable:98586 [ 155.077486][ T8207] mapped:28574 shmem:1431 pagetables:753 [ 155.077486][ T8207] sec_pagetables:0 bounce:0 [ 155.077486][ T8207] kernel_misc_reclaimable:0 [ 155.077486][ T8207] free:1346293 free_pcp:579 free_cma:0 [ 155.126320][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 155.135299][ T8207] Node 0 active_anon:16392kB inactive_anon:0kB active_file:6184kB inactive_file:153284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114296kB dirty:752kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11108kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.397166][ T8207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.433696][ T8207] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.461539][ T8207] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 155.467538][ T8207] Node 0 DMA32 free:1457952kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:16384kB inactive_anon:0kB active_file:6184kB inactive_file:153184kB unevictable:1536kB writepending:752kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:3180kB local_pcp:1888kB free_cma:0kB [ 155.499198][ T8207] lowmem_reserve[]: 0 0 0 0 0 [ 155.504108][ T8207] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.535968][ T8207] lowmem_reserve[]: 0 0 0 0 0 [ 155.542166][ T8207] Node 1 Normal free:3910276kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.571509][ T8207] lowmem_reserve[]: 0 0 0 0 0 [ 155.576526][ T8207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.590258][ T8207] Node 0 DMA32: 248*4kB (UME) 306*8kB (UM) 301*16kB (UME) 489*32kB (UME) 201*64kB (UME) 96*128kB (UME) 51*256kB (UM) 24*512kB (UM) 9*1024kB (UME) 3*2048kB (M) 334*4096kB (UM) = 1457824kB [ 155.609363][ T8207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 155.622376][ T8207] Node 1 Normal: 225*4kB (UE) 64*8kB (UME) 44*16kB (UME) 224*32kB (UME) 115*64kB (UME) 23*128kB (UME) 10*256kB (UME) 8*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3910276kB [ 155.642778][ T8207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.644935][ T8208] macvlan2: entered promiscuous mode [ 155.656154][ T8207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.670433][ T8208] macvlan2: entered allmulticast mode [ 155.675834][ T8208] veth0_macvtap: entered allmulticast mode [ 155.684443][ T8207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.690596][ T8216] tipc: Enabled bearer , priority 0 [ 155.704022][ T8207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.723708][ T8207] 41317 total pagecache pages [ 155.733373][ T8207] 0 pages in swap cache [ 155.742000][ T8207] Free swap = 124996kB [ 155.750686][ T8207] Total swap = 124996kB [ 155.754980][ T8207] 2097051 pages RAM [ 155.792164][ T8207] 0 pages HighMem/MovableOnly [ 155.828713][ T8207] 424361 pages reserved [ 155.833228][ T8207] 0 pages cma reserved [ 156.066497][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.376924][ T8249] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 156.940306][ T8282] syzkaller1: entered promiscuous mode [ 156.949304][ T8282] syzkaller1: entered allmulticast mode [ 157.108484][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.280518][ T8291] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 157.330019][ T8298] netlink: 'syz.2.670': attribute type 33 has an invalid length. [ 157.360910][ T8291] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.542281][ T8308] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.886381][ T8321] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 158.146581][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.149099][ T8340] __nla_validate_parse: 11 callbacks suppressed [ 158.149117][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 158.272330][ T8346] netlink: 68 bytes leftover after parsing attributes in process `syz.1.687'. [ 158.349547][ T8343] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.717213][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 158.778474][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 158.833588][ T8374] Bluetooth: MGMT ver 1.23 [ 159.004374][ T8386] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 159.100014][ T8392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.700'. [ 159.186852][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.280987][ T8395] team_slave_0: entered promiscuous mode [ 159.287573][ T8395] team_slave_1: entered promiscuous mode [ 159.300569][ T8395] macsec1: entered promiscuous mode [ 159.305953][ T8395] team0: entered promiscuous mode [ 159.351164][ T8395] team0: left promiscuous mode [ 159.366809][ T8395] team_slave_0: left promiscuous mode [ 159.372364][ T8395] team_slave_1: left promiscuous mode [ 159.431427][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 159.528436][ T8409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 159.540146][ T8409] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.898935][ T8429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.910484][ T8429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.920688][ T8429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.929619][ T8429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.938789][ T8429] geneve3: entered promiscuous mode [ 159.944126][ T8429] geneve3: entered allmulticast mode [ 159.966653][ T8429] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.975663][ T8429] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.992589][ T8429] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.002158][ T8429] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.110364][ T8434] netlink: 68 bytes leftover after parsing attributes in process `syz.2.713'. [ 160.226580][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.397155][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.718'. [ 160.621775][ T8463] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 160.735702][ T8471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.749395][ T8471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.760194][ T8471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.769305][ T8471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.778483][ T8471] geneve3: entered promiscuous mode [ 160.803894][ T8471] geneve3: entered allmulticast mode [ 160.812165][ T8471] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.822174][ T8471] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.831343][ T8471] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.841500][ T8471] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.266763][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.420288][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 161.670481][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 162.156351][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.170674][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.180584][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.197887][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.210628][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.306795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.417294][ T8558] IPv6: Can't replace route, no match found [ 162.523806][ T8545] lo speed is unknown, defaulting to 1000 [ 162.535232][ T8545] lo speed is unknown, defaulting to 1000 [ 162.659037][ T8564] sctp: [Deprecated]: syz.2.742 (pid 8564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.659037][ T8564] Use struct sctp_sack_info instead [ 162.744283][ T8564] veth0_macvtap (unregistering): left allmulticast mode [ 163.033913][ T8575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.056383][ T8575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.069453][ T8575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.082621][ T8575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.093369][ T8575] geneve3: entered promiscuous mode [ 163.099528][ T8575] geneve3: entered allmulticast mode [ 163.109605][ T8575] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.119389][ T8575] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.128446][ T8575] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.137713][ T8575] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.167238][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 163.346672][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.415400][ T8602] __nla_validate_parse: 3 callbacks suppressed [ 163.415420][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 163.432859][ T8601] netlink: 4832 bytes leftover after parsing attributes in process `syz.2.753'. [ 163.442230][ T8601] netlink: 52716 bytes leftover after parsing attributes in process `syz.2.753'. [ 163.495469][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.505229][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.513449][ T8545] bridge_slave_0: entered allmulticast mode [ 163.522376][ T8545] bridge_slave_0: entered promiscuous mode [ 163.532485][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.542170][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.550306][ T8545] bridge_slave_1: entered allmulticast mode [ 163.588389][ T8545] bridge_slave_1: entered promiscuous mode [ 163.768525][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.809911][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.863228][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 163.923592][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 163.934637][ T8545] team0: Port device team_slave_0 added [ 164.056041][ T8621] hsr_slave_1 (unregistering): left promiscuous mode [ 164.093434][ T8545] team0: Port device team_slave_1 added [ 164.230700][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.243803][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 164.255698][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.285375][ T8648] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 164.306337][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.768'. [ 164.323550][ T5839] Bluetooth: hci5: command tx timeout [ 164.324582][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 164.339674][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.353231][ T8652] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 164.357340][ T8648] batadv0: entered promiscuous mode [ 164.366290][ T8648] batadv0: entered allmulticast mode [ 164.380518][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.386648][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.388900][ T8648] bridge0: port 4(batadv0) entered blocking state [ 164.401065][ T8648] bridge0: port 4(batadv0) entered disabled state [ 164.408073][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 164.423609][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.435842][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.463246][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 164.473894][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.555787][ T8652] bridge0: port 4(batadv0) entered blocking state [ 164.562485][ T8652] bridge0: port 4(batadv0) entered forwarding state [ 164.574244][ T8652] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 164.800715][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 164.810528][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 164.893620][ T8545] hsr_slave_0: entered promiscuous mode [ 164.920616][ T8545] hsr_slave_1: entered promiscuous mode [ 164.927638][ T8545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.936022][ T8545] Cannot create hsr debugfs directory [ 164.948419][ T8680] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.973685][ T8680] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.099521][ T8688] tipc: Enabled bearer , priority 0 [ 165.257230][ T8688] syzkaller0: entered promiscuous mode [ 165.275151][ T8688] syzkaller0: entered allmulticast mode [ 165.285632][ T8688] tipc: Resetting bearer [ 165.345969][ T8699] tipc: Resetting bearer [ 165.373022][ T8687] tipc: Resetting bearer [ 165.426603][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.660821][ T8719] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 166.387266][ T5839] Bluetooth: hci5: command tx timeout [ 166.466616][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.637777][ T8687] tipc: Disabling bearer [ 166.665682][ T8710] hsr0: entered promiscuous mode [ 166.724228][ T8719] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 166.755175][ T8710] hsr0: left promiscuous mode [ 166.875530][ T8545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.945536][ T8545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.973300][ T8545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.002081][ T8731] lo speed is unknown, defaulting to 1000 [ 167.012599][ T8731] lo speed is unknown, defaulting to 1000 [ 167.087495][ T8545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.506645][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.773071][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.832639][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.869194][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.876377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.935770][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.942971][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.038232][ T8786] IPv6: Can't replace route, no match found [ 168.173362][ T8795] nbd: socks must be embedded in a SOCK_ITEM attr [ 168.288998][ T8801] IPVS: length: 78 != 8 [ 168.466873][ T5839] Bluetooth: hci5: command tx timeout [ 168.546562][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.811620][ T8821] __nla_validate_parse: 14 callbacks suppressed [ 168.811643][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 168.847380][ T8821] netlink: 88 bytes leftover after parsing attributes in process `syz.3.813'. [ 168.955440][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.034883][ T8831] netlink: 92 bytes leftover after parsing attributes in process `syz.4.815'. [ 169.408843][ T8850] Bluetooth: MGMT ver 1.23 [ 169.422778][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.818'. [ 169.519413][ T8545] veth0_vlan: entered promiscuous mode [ 169.561486][ T8545] veth1_vlan: entered promiscuous mode [ 169.586523][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.693835][ T8545] veth0_macvtap: entered promiscuous mode [ 169.708419][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 169.719536][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 169.732233][ T8545] veth1_macvtap: entered promiscuous mode [ 169.777694][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.798851][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.815141][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 169.818705][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.849111][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.852182][ T8864] netlink: 88 bytes leftover after parsing attributes in process `syz.1.823'. [ 169.859435][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 169.883742][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 169.895222][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.962583][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.990894][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.012092][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.033099][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.056816][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.073698][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.085274][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.129776][ T8545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.156653][ T8545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.165422][ T8545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.174202][ T8545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.432575][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.459315][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.547080][ T5839] Bluetooth: hci5: command tx timeout [ 170.661149][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.680233][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.701346][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.645310][ T8943] bridge_slave_0: left allmulticast mode [ 171.654027][ T8943] bridge_slave_0: left promiscuous mode [ 171.663156][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.693413][ T8943] bridge_slave_1: left allmulticast mode [ 171.703716][ T8949] netlink: 'syz.1.853': attribute type 3 has an invalid length. [ 171.711512][ T8943] bridge_slave_1: left promiscuous mode [ 171.711752][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.745338][ T8943] bond0: (slave bond_slave_0): Releasing backup interface [ 171.746855][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.769057][ T8943] bond0: (slave bond_slave_1): Releasing backup interface [ 171.807602][ T8943] team0: Port device team_slave_0 removed [ 171.815033][ T8955] IPv6: Can't replace route, no match found [ 171.829467][ T8943] team0: Port device team_slave_1 removed [ 171.837631][ T8943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.846276][ T8943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.861146][ T8943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.879066][ T8943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.241081][ T8969] xt_hashlimit: max too large, truncated to 1048576 [ 172.256244][ T8969] No such timeout policy "syz1" [ 172.537563][ T8978] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 172.549872][ T8988] nft_compat: unsupported protocol 0 [ 172.692439][ T8997] netlink: 'syz.5.867': attribute type 3 has an invalid length. [ 172.715625][ T8999] netlink: 'syz.5.867': attribute type 3 has an invalid length. [ 172.757293][ T9001] IPv6: Can't replace route, no match found [ 172.786752][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.826669][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.850753][ T9069] IPv6: Can't replace route, no match found [ 173.961743][ T9075] __nla_validate_parse: 31 callbacks suppressed [ 173.961764][ T9075] netlink: 76 bytes leftover after parsing attributes in process `syz.4.885'. [ 174.102721][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 174.222630][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 174.273520][ T9090] lo speed is unknown, defaulting to 1000 [ 174.328882][ T9091] lo speed is unknown, defaulting to 1000 [ 174.357098][ T9090] lo speed is unknown, defaulting to 1000 [ 174.435473][ T9091] lo speed is unknown, defaulting to 1000 [ 174.454875][ T9098] Bluetooth: MGMT ver 1.23 [ 174.866747][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.052014][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 175.096388][ T9118] netlink: 92 bytes leftover after parsing attributes in process `syz.2.893'. [ 175.119038][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 175.197176][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 175.473445][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.897'. [ 175.498374][ T9135] netlink: 76 bytes leftover after parsing attributes in process `syz.5.899'. [ 175.603044][ T9141] IPv6: Can't replace route, no match found [ 175.743127][ T9147] netlink: 'syz.5.901': attribute type 21 has an invalid length. [ 175.796681][ T9147] netlink: 128 bytes leftover after parsing attributes in process `syz.5.901'. [ 175.900794][ T9133] vlan0: entered allmulticast mode [ 175.906012][ T9133] veth0_vlan: entered allmulticast mode [ 175.906697][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.976104][ T9147] netlink: 'syz.5.901': attribute type 4 has an invalid length. [ 175.987252][ T9147] netlink: 'syz.5.901': attribute type 5 has an invalid length. [ 176.326582][ T9160] team0 (unregistering): Port device team_slave_0 removed [ 176.336378][ T9160] team0 (unregistering): Port device team_slave_1 removed [ 176.384012][ T9176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.409155][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.445312][ T9176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.482203][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.654923][ T9183] geneve2: entered promiscuous mode [ 176.661066][ T9183] geneve2: entered allmulticast mode [ 176.946859][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 177.180192][ T9226] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 177.252292][ T9226] nbd: error processing sock list [ 177.309947][ T9230] siw: device registration error -23 [ 177.373956][ T9236] sctp: [Deprecated]: syz.4.929 (pid 9236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.373956][ T9236] Use struct sctp_sack_info instead [ 177.732066][ T9258] geneve2: entered promiscuous mode [ 177.751129][ T9258] geneve2: entered allmulticast mode [ 177.930013][ T9267] batadv1: entered promiscuous mode [ 177.936482][ T9267] batadv1: entered allmulticast mode [ 177.986695][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.350584][ T9295] bond0: (slave bridge0): Releasing backup interface [ 178.408024][ T9295] bridge0: port 4(batadv0) entered disabled state [ 178.494662][ T9295] bridge0: port 4(batadv0) entered disabled state [ 178.512893][ T9295] bridge_slave_0: left allmulticast mode [ 178.533267][ T9295] bridge_slave_0: left promiscuous mode [ 178.545553][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.569996][ T9295] bridge_slave_1: left allmulticast mode [ 178.575827][ T9295] bridge_slave_1: left promiscuous mode [ 178.587048][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.748207][ T9295] bond0: (slave bond_slave_0): Releasing backup interface [ 178.760179][ T9295] bond0: (slave bond_slave_1): Releasing backup interface [ 178.774253][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.787906][ T9295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.799859][ T9295] bond1: (slave ip6tnl1): Releasing backup interface [ 178.809353][ T9295] veth3: left promiscuous mode [ 178.814486][ T9295] bridge0: port 3(veth3) entered disabled state [ 178.849419][ T9302] geneve1: entered promiscuous mode [ 178.854982][ T9302] geneve1: entered allmulticast mode [ 179.026696][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.635371][ T9314] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.649980][ T9314] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.659513][ T9314] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.674475][ T9314] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.754596][ T9321] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.980456][ T9321] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.066938][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 180.165208][ T9345] __nla_validate_parse: 19 callbacks suppressed [ 180.165227][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 180.233675][ T9321] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.320614][ T9354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.342660][ T9321] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.381281][ T9355] dvmrp1: entered allmulticast mode [ 180.477665][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 180.502767][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 180.537004][ T9363] netlink: 'syz.5.969': attribute type 1 has an invalid length. [ 180.555007][ T9363] netlink: 10 bytes leftover after parsing attributes in process `syz.5.969'. [ 180.558107][ T9321] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.642728][ T9321] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.680547][ T9321] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.729829][ T9321] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.856599][ T47] IPVS: starting estimator thread 0... [ 180.958554][ T9384] IPVS: using max 33 ests per chain, 79200 per kthread [ 181.106732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.146819][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 183.186799][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.226680][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.266649][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.306704][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.346723][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 188.386672][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.426752][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.466710][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.506874][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.546707][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.586733][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.230409][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.626704][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 195.666696][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.706820][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.746700][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.786789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.826788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.866826][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.906700][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.946742][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.986655][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.026770][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.066772][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.106760][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.146697][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.186718][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.226675][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.266694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.671001][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.671814][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 211.681382][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 211.683206][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 212.306687][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.346729][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.386686][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.426750][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.466727][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.506823][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.546800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.586718][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.626720][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.666685][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.706673][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.746701][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.786676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.853843][ T9394] lo speed is unknown, defaulting to 1000 [ 224.872469][ T9399] macvlan2: entered promiscuous mode [ 224.881872][ T9399] bridge0: entered promiscuous mode [ 224.887884][ T9399] bridge0: port 1(macvlan2) entered blocking state [ 224.894731][ T9399] bridge0: port 1(macvlan2) entered disabled state [ 224.902012][ T9399] macvlan2: entered allmulticast mode [ 224.908068][ T9399] bridge0: entered allmulticast mode [ 224.917098][ T9399] macvlan2: left allmulticast mode [ 224.925074][ T9399] bridge0: left allmulticast mode [ 224.935616][ T9399] bridge0: left promiscuous mode [ 224.984520][ T9394] lo speed is unknown, defaulting to 1000 [ 224.987737][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.978'. [ 225.095956][ T9403] Â: renamed from pim6reg1 [ 225.107015][ T3620] syzkaller0: tun_net_xmit 76 [ 225.109370][ T9400] syzkaller0: create flow: hash 3695733826 index 0 [ 225.339020][ T9417] FAULT_INJECTION: forcing a failure. [ 225.339020][ T9417] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 225.356676][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.1.981 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 225.356703][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 225.356715][ T9417] Call Trace: [ 225.356723][ T9417] [ 225.356731][ T9417] dump_stack_lvl+0x189/0x250 [ 225.356767][ T9417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.356793][ T9417] ? __pfx__printk+0x10/0x10 [ 225.356824][ T9417] should_fail_ex+0x414/0x560 [ 225.356859][ T9417] _copy_to_user+0x31/0xb0 [ 225.356882][ T9417] simple_read_from_buffer+0xe1/0x170 [ 225.356907][ T9417] proc_fail_nth_read+0x1df/0x250 [ 225.356931][ T9417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.356956][ T9417] ? rw_verify_area+0x258/0x650 [ 225.356973][ T9417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.356995][ T9417] vfs_read+0x1fd/0x980 [ 225.357034][ T9417] ? __pfx___mutex_lock+0x10/0x10 [ 225.357058][ T9417] ? __pfx_vfs_read+0x10/0x10 [ 225.357078][ T9417] ? __fget_files+0x2a/0x420 [ 225.357104][ T9417] ? __fget_files+0x3a0/0x420 [ 225.357124][ T9417] ? __fget_files+0x2a/0x420 [ 225.357154][ T9417] ksys_read+0x145/0x250 [ 225.357176][ T9417] ? __pfx_ksys_read+0x10/0x10 [ 225.357198][ T9417] ? do_syscall_64+0xba/0x210 [ 225.357224][ T9417] do_syscall_64+0xf6/0x210 [ 225.357249][ T9417] ? clear_bhb_loop+0x45/0xa0 [ 225.357271][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.357287][ T9417] RIP: 0033:0x7ff2cc38d37c [ 225.357303][ T9417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.357318][ T9417] RSP: 002b:00007ff2cd2bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.357336][ T9417] RAX: ffffffffffffffda RBX: 00007ff2cc5b6080 RCX: 00007ff2cc38d37c [ 225.357348][ T9417] RDX: 000000000000000f RSI: 00007ff2cd2bb0a0 RDI: 0000000000000007 [ 225.357358][ T9417] RBP: 00007ff2cd2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 225.357369][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.357379][ T9417] R13: 0000000000000001 R14: 00007ff2cc5b6080 R15: 00007ffd9f574e38 [ 225.357406][ T9417] [ 225.826812][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.785807][ T9421] pim6reg: entered allmulticast mode [ 226.798252][ T9397] syzkaller0 (unregistered): delete flow: hash 3695733826 index 0 [ 226.866843][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.949421][ T9436] netlink: 9 bytes leftover after parsing attributes in process `syz.4.987'. [ 226.963534][ T9436] 0·: renamed from hsr_slave_1 (while UP) [ 226.998639][ T9436] 0·: entered allmulticast mode [ 227.030078][ T9436] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 227.046865][ T9436] netlink: 9 bytes leftover after parsing attributes in process `syz.4.987'. [ 227.069066][ T9436] 1·: renamed from c0· (while UP) [ 227.120929][ T9436] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 227.285869][ T9454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.991'. [ 227.361587][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 227.387263][ T9456] netlink: 'syz.4.994': attribute type 4 has an invalid length. [ 227.463872][ T9461] netlink: 248 bytes leftover after parsing attributes in process `syz.5.995'. [ 227.500112][ T9460] netlink: 248 bytes leftover after parsing attributes in process `syz.5.995'. [ 227.906755][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.017768][ T9495] netlink: 'syz.3.1005': attribute type 4 has an invalid length. [ 228.029876][ T9495] syzkaller0: entered allmulticast mode [ 228.035888][ T9494] syzkaller0: left allmulticast mode [ 228.121124][ T9499] lo speed is unknown, defaulting to 1000 [ 228.133341][ T9499] lo speed is unknown, defaulting to 1000 [ 228.143203][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 228.571296][ T9516] openvswitch: netlink: Actions may not be safe on all matching packets [ 228.604993][ T9516] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 228.615137][ T9516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1010'. [ 228.927433][ T9524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1012'. [ 228.946973][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.089858][ T9533] lo speed is unknown, defaulting to 1000 [ 229.099791][ T9533] lo speed is unknown, defaulting to 1000 [ 229.338803][ T9546] netlink: 'syz.3.1017': attribute type 2 has an invalid length. [ 229.558775][ T9549] lo speed is unknown, defaulting to 1000 [ 229.598970][ T9549] lo speed is unknown, defaulting to 1000 [ 229.736077][ T9555] bridge0: entered promiscuous mode [ 229.742078][ T9555] macvlan2: entered promiscuous mode [ 229.757238][ T9555] bridge0: port 4(macvlan2) entered blocking state [ 229.763912][ T9555] bridge0: port 4(macvlan2) entered disabled state [ 229.774721][ T9555] macvlan2: entered allmulticast mode [ 229.780558][ T9555] bridge0: entered allmulticast mode [ 229.788651][ T9555] macvlan2: left allmulticast mode [ 229.793895][ T9555] bridge0: left allmulticast mode [ 229.807713][ T9555] bridge0: left promiscuous mode [ 229.986728][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.077822][ T9576] __nla_validate_parse: 1 callbacks suppressed [ 230.077837][ T9576] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1024'. [ 230.195424][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 230.225592][ T9583] ip6gretap0: entered promiscuous mode [ 230.235622][ T9583] macsec1: entered promiscuous mode [ 230.300625][ T9581] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.326673][ T9586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1025'. [ 230.349281][ T9586] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1025'. [ 230.365685][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 230.387225][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 230.405064][ T9588] sctp: [Deprecated]: syz.4.1027 (pid 9588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.405064][ T9588] Use struct sctp_sack_info instead [ 230.408502][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 230.478326][ T9591] netlink: 'syz.3.1028': attribute type 5 has an invalid length. [ 230.479833][ T9581] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.627579][ T9581] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.699974][ T9581] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.814283][ T9581] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.837960][ T9581] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.870641][ T9581] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.897770][ T9581] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.956051][ T9602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1030'. [ 231.026754][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.082364][ T9608] macvlan3: entered promiscuous mode [ 231.088842][ T9608] bridge0: entered promiscuous mode [ 231.095497][ T9608] bridge0: port 1(macvlan3) entered blocking state [ 231.102559][ T9608] bridge0: port 1(macvlan3) entered disabled state [ 231.110906][ T9608] macvlan3: entered allmulticast mode [ 231.116495][ T9608] bridge0: entered allmulticast mode [ 231.128153][ T9608] macvlan3: left allmulticast mode [ 231.133465][ T9608] bridge0: left allmulticast mode [ 231.146799][ T9608] bridge0: left promiscuous mode [ 231.174230][ T9611] bridge0: entered promiscuous mode [ 231.183048][ T9611] macvlan3: entered promiscuous mode [ 231.191614][ T9611] bridge0: port 3(macvlan3) entered blocking state [ 231.200314][ T9611] bridge0: port 3(macvlan3) entered disabled state [ 231.207290][ T9611] macvlan3: entered allmulticast mode [ 231.213091][ T9611] bridge0: entered allmulticast mode [ 231.227408][ T9611] macvlan3: left allmulticast mode [ 231.233615][ T9611] bridge0: left allmulticast mode [ 231.244307][ T9611] bridge0: left promiscuous mode [ 231.315451][ T9614] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1035'. [ 231.415289][ T9616] syzkaller0: entered promiscuous mode [ 231.428603][ T9616] syzkaller0: entered allmulticast mode [ 231.465409][ T9621] geneve3: entered promiscuous mode [ 231.473085][ T9621] geneve3: entered allmulticast mode [ 231.687461][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1040'. [ 232.070268][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.106688][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.225641][ T9634] dummy0: entered promiscuous mode [ 233.234601][ T9634] dummy0: left promiscuous mode [ 233.275064][ T9648] tipc: Enabling of bearer rejected, already enabled [ 233.523939][ T9661] geneve3: entered promiscuous mode [ 233.547926][ T9661] geneve3: entered allmulticast mode [ 233.622830][ T9667] ip6gre2: entered allmulticast mode [ 233.792531][ T9669] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 233.844064][ T9669] bond2: entered promiscuous mode [ 233.851217][ T9669] bond2: entered allmulticast mode [ 233.959898][ T9681] sctp: [Deprecated]: syz.2.1058 (pid 9681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.959898][ T9681] Use struct sctp_sack_info instead [ 234.001864][ T9685] openvswitch: netlink: Actions may not be safe on all matching packets [ 234.105105][ T9689] C: renamed from team_slave_0 [ 234.123517][ T9689] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 234.132021][ T9689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 234.146690][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.337898][ T9699] lo speed is unknown, defaulting to 1000 [ 234.345419][ T9699] lo speed is unknown, defaulting to 1000 [ 234.929681][ T9718] openvswitch: netlink: Actions may not be safe on all matching packets [ 235.189561][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.494817][ T9751] __nla_validate_parse: 14 callbacks suppressed [ 235.494835][ T9751] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1083'. [ 235.519858][ T9749] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 235.596086][ T9753] openvswitch: netlink: Actions may not be safe on all matching packets [ 235.733874][ T9760] IPv6: Can't replace route, no match found [ 235.942462][ T9770] batadv_slave_0: entered promiscuous mode [ 236.041480][ T9769] batadv_slave_0: left promiscuous mode [ 236.081395][ T9775] bridge0: entered promiscuous mode [ 236.105375][ T9775] macvlan2: entered promiscuous mode [ 236.124427][ T9775] bridge0: port 4(macvlan2) entered blocking state [ 236.154245][ T9775] bridge0: port 4(macvlan2) entered disabled state [ 236.163103][ T9775] macvlan2: entered allmulticast mode [ 236.170107][ T9775] bridge0: entered allmulticast mode [ 236.185916][ T9775] macvlan2: left allmulticast mode [ 236.191319][ T9775] bridge0: left allmulticast mode [ 236.198200][ T9775] bridge0: left promiscuous mode [ 236.230947][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.419621][ T9793] openvswitch: netlink: Actions may not be safe on all matching packets [ 236.535187][ T9798] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 236.790421][ T9810] lo speed is unknown, defaulting to 1000 [ 236.827253][ T9810] lo speed is unknown, defaulting to 1000 [ 237.128196][ T9818] lo speed is unknown, defaulting to 1000 [ 237.160889][ T9818] lo speed is unknown, defaulting to 1000 [ 237.160907][ T9819] lo speed is unknown, defaulting to 1000 [ 237.266832][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.307038][ T9819] lo speed is unknown, defaulting to 1000 [ 237.383382][ T9842] openvswitch: netlink: Actions may not be safe on all matching packets [ 237.619891][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 237.620053][ T9845] xt_hashlimit: max too large, truncated to 1048576 [ 237.637539][ T9845] xt_hashlimit: overflow, try lower: 0/0 [ 238.310314][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.188037][ T9813] lo speed is unknown, defaulting to 1000 [ 239.225233][ T9857] bridge3: entered allmulticast mode [ 239.244900][ T9813] lo speed is unknown, defaulting to 1000 [ 239.277865][ T9864] Cannot find add_set index 0 as target [ 239.314851][ T9863] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1113'. [ 239.346769][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.371116][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 239.383609][ T9863] 0ªX¹¦À: renamed from caif0 [ 239.413278][ T9863] 0ªX¹¦À: entered allmulticast mode [ 239.421435][ T9863] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 239.728060][ T9878] netlink: 'syz.3.1117': attribute type 13 has an invalid length. [ 239.954540][ T5890] lo speed is unknown, defaulting to 1000 [ 239.960957][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 239.995025][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.026799][ T9879] IPv6: sit3: Disabled Multicast RS [ 240.312819][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1122'. [ 240.386756][ C1] net_ratelimit: 1 callbacks suppressed [ 240.386777][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.470987][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.511812][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1120'. [ 240.727912][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 241.426794][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.047436][ T9909] netlink: 'syz.4.1126': attribute type 30 has an invalid length. [ 242.084774][ T3503] syzkaller0: tun_net_xmit 76 [ 242.091116][ T3503] syzkaller0: tun_net_xmit 48 [ 242.106747][ T5899] syzkaller0: tun_net_xmit 76 [ 242.112501][ T9896] lo speed is unknown, defaulting to 1000 [ 242.168803][ T9896] lo speed is unknown, defaulting to 1000 [ 242.206984][ T9888] syzkaller0 (unregistered): delete flow: hash 3349360955 index 0 [ 242.466652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.183620][ T9923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.233303][ T9923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.506725][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.584107][ T9923] tipc: Resetting bearer [ 243.619637][ T9923] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.628650][ T9923] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.637930][ T9923] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.646322][ T9923] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.698115][ T9922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.713697][ T5885] lo speed is unknown, defaulting to 1000 [ 243.766462][ T5885] syz1: Port: 1 Link DOWN [ 243.962731][ T9941] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.549658][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.589072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.357816][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 246.427372][ T9960] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1136'. [ 246.626478][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.751765][ T9967] netlink: 'syz.4.1138': attribute type 30 has an invalid length. [ 247.084367][ T12] syzkaller0: tun_net_xmit 76 [ 247.094144][ T9977] syzkaller0: create flow: hash 3349360955 index 0 [ 247.103920][ T12] syzkaller0: tun_net_xmit 48 [ 247.109647][ T5887] syzkaller0: tun_net_xmit 76 [ 247.127926][ T9996] pimreg: entered allmulticast mode [ 247.208034][ T9997] pimreg: left allmulticast mode [ 247.222134][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1146'. [ 247.231701][ T5887] syzkaller0: tun_net_xmit 76 [ 247.349939][T10003] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1147'. [ 247.517260][T10012] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1149'. [ 247.666636][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.716481][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.874752][T10005] netlink: 'syz.5.1148': attribute type 30 has an invalid length. [ 248.918740][ T9976] syzkaller0 (unregistered): delete flow: hash 3349360955 index 0 [ 248.940362][T10018] bridge4: entered promiscuous mode [ 248.955926][T10018] bridge4: entered allmulticast mode [ 248.984973][T10018] team0: Device bridge4 is up. Set it down before adding it as a team port [ 249.015591][T10025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1151'. [ 249.096660][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 249.151289][T10020] vlan2: entered promiscuous mode [ 249.156849][T10020] gretap0: entered promiscuous mode [ 249.193481][T10030] netlink: 'syz.5.1152': attribute type 30 has an invalid length. [ 249.324305][T10048] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 249.334606][T10048] veth1_vlan: entered allmulticast mode [ 249.351408][T10046] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 249.373481][T10048] team0: Device veth1_vlan failed to register rx_handler [ 249.440885][T10046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.512596][T10053] bond3: (slave veth1): Enslaving as an active interface with a down link [ 249.528180][T10057] tipc: New replicast peer: 255.255.255.255 [ 249.549320][T10057] tipc: Enabled bearer , priority 10 [ 249.562584][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 249.598368][T10063] tipc: Disabling bearer [ 249.622288][T10046] vlan2: entered allmulticast mode [ 249.628011][T10046] bond3: entered allmulticast mode [ 249.640964][T10046] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 249.700318][T10063] vxcan1: entered allmulticast mode [ 249.756618][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.769221][T10057] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1161'. [ 249.812997][T10066] lo speed is unknown, defaulting to 1000 [ 249.856262][T10066] lo speed is unknown, defaulting to 1000 [ 250.089068][T10079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 250.383936][T10086] netlink: 'syz.5.1167': attribute type 1 has an invalid length. [ 250.786670][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.803862][T10097] ip6gre2: entered promiscuous mode [ 251.201182][T10107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.826614][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.911102][T10127] bond3: (slave veth1): Releasing active interface [ 251.938010][T10130] __nla_validate_parse: 3 callbacks suppressed [ 251.938029][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1184'. [ 251.944138][T10128] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1183'. [ 252.010482][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 252.129208][T10134] macvlan2: entered promiscuous mode [ 252.148019][T10134] bridge0: entered promiscuous mode [ 252.161076][T10134] bridge0: port 1(macvlan2) entered blocking state [ 252.175002][T10134] bridge0: port 1(macvlan2) entered disabled state [ 252.189070][T10134] macvlan2: entered allmulticast mode [ 252.204731][T10134] bridge0: entered allmulticast mode [ 252.255977][T10134] macvlan2: left allmulticast mode [ 252.285383][T10134] bridge0: left allmulticast mode [ 252.307481][T10134] bridge0: left promiscuous mode [ 252.621937][T10152] siw: device registration error -23 [ 252.668659][T10149] lo speed is unknown, defaulting to 1000 [ 252.699330][T10149] lo speed is unknown, defaulting to 1000 [ 252.758451][T10150] lo speed is unknown, defaulting to 1000 [ 252.835081][T10150] lo speed is unknown, defaulting to 1000 [ 252.851990][T10157] netlink: 'syz.4.1191': attribute type 5 has an invalid length. [ 252.866865][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.884351][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 252.972551][T10159] netlink: 'syz.2.1192': attribute type 1 has an invalid length. [ 253.078309][T10159] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 253.079257][T10160] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 253.238605][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 253.290004][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 253.398783][T10185] Unsupported ieee802154 address type: 0 [ 253.480084][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 253.774688][T10180] lo speed is unknown, defaulting to 1000 [ 253.906571][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.909272][T10180] lo speed is unknown, defaulting to 1000 [ 254.336176][T10201] netlink: 'syz.2.1203': attribute type 5 has an invalid length. [ 254.349732][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 254.674949][T10213] openvswitch: netlink: Duplicate or invalid key (type 0). [ 254.704595][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.774325][T10217] siw: device registration error -23 [ 254.946476][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.989589][T10231] macsec1: entered promiscuous mode [ 254.995124][T10231] hsr0: entered promiscuous mode [ 255.004588][T10231] macsec1: entered allmulticast mode [ 255.012715][T10231] hsr0: entered allmulticast mode [ 255.020990][T10231] hsr_slave_0: entered allmulticast mode [ 255.033388][T10231] hsr_slave_1: entered allmulticast mode [ 255.036092][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 255.051871][T10231] hsr0: left allmulticast mode [ 255.062517][T10231] hsr_slave_0: left allmulticast mode [ 255.068207][T10231] hsr_slave_1: left allmulticast mode [ 255.073681][T10231] hsr0: left promiscuous mode [ 255.283239][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 255.464093][T10257] siw: device registration error -23 [ 255.672310][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.996467][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.032358][T10286] siw: device registration error -23 [ 256.215179][T10295] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 256.215183][T10296] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 256.250589][T10296] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 256.265358][T10296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.967157][T10336] __nla_validate_parse: 3 callbacks suppressed [ 256.967176][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1249'. [ 257.027015][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.152114][T10343] openvswitch: netlink: Actions may not be safe on all matching packets [ 257.172838][T10339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 257.174233][T10343] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 257.193958][T10343] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1252'. [ 257.552443][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 257.564940][T10357] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 257.574697][T10357] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 258.066549][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.165585][T10369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1260'. [ 258.232996][T10371] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.413824][T10379] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.478426][T10379] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 258.489840][T10379] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1265'. [ 258.609385][T10388] siw: device registration error -23 [ 258.764435][T10393] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.773530][T10393] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.782425][T10393] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.792115][T10393] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.792262][ T12] wlan1: Trigger new scan to find an IBSS to join [ 258.820046][ T12] ------------[ cut here ]------------ [ 258.826707][ T12] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 258.835954][ T12] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 258.843224][T10399] macvlan3: entered promiscuous mode [ 258.856051][T10399] bridge0: entered promiscuous mode [ 258.861395][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 258.861429][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.861443][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 258.861490][ T12] Call Trace: [ 258.861498][ T12] [ 258.861508][ T12] dump_stack_lvl+0x189/0x250 [ 258.861543][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.861578][ T12] ? __pfx__printk+0x10/0x10 [ 258.861613][ T12] ubsan_epilogue+0xa/0x40 [ 258.861634][ T12] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 258.861665][ T12] ieee80211_request_ibss_scan+0x600/0x8b0 [ 258.861706][ T12] ieee80211_ibss_work+0xde7/0x1060 [ 258.861740][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 258.861775][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 258.861799][ T12] ? rcu_is_watching+0x15/0xb0 [ 258.861830][ T12] cfg80211_wiphy_work+0x2dc/0x460 [ 258.861855][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 258.861882][ T12] process_scheduled_works+0xadb/0x17a0 [ 258.861932][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.861972][ T12] worker_thread+0x8a0/0xda0 [ 258.862011][ T12] kthread+0x70e/0x8a0 [ 258.862032][ T12] ? __pfx_worker_thread+0x10/0x10 [ 258.862047][ T12] ? __pfx_kthread+0x10/0x10 [ 258.862066][ T12] ? __pfx_kthread+0x10/0x10 [ 258.862085][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.862104][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.862124][ T12] ? __pfx_kthread+0x10/0x10 [ 258.862142][ T12] ret_from_fork+0x4b/0x80 [ 258.862157][ T12] ? __pfx_kthread+0x10/0x10 [ 258.862175][ T12] ret_from_fork_asm+0x1a/0x30 [ 258.862207][ T12] [ 258.862269][ T12] ---[ end trace ]--- [ 258.863272][T10399] bridge0: port 1(macvlan3) entered blocking state [ 258.875927][ T12] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 258.875950][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 258.875977][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.876011][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 258.876052][ T12] Call Trace: [ 258.876061][ T12] [ 258.876072][ T12] dump_stack_lvl+0x99/0x250 [ 258.876109][ T12] ? __asan_memcpy+0x40/0x70 [ 258.876133][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.876177][ T12] ? __pfx__printk+0x10/0x10 [ 258.876215][ T12] panic+0x2db/0x790 [ 258.876252][ T12] ? __pfx_panic+0x10/0x10 [ 258.876280][ T12] ? _printk+0xcf/0x120 [ 258.876311][ T12] ? __pfx__printk+0x10/0x10 [ 258.876343][ T12] check_panic_on_warn+0x89/0xb0 [ 258.876373][ T12] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 258.876408][ T12] ieee80211_request_ibss_scan+0x600/0x8b0 [ 258.876452][ T12] ieee80211_ibss_work+0xde7/0x1060 [ 258.876489][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 258.876528][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 258.876558][ T12] ? rcu_is_watching+0x15/0xb0 [ 258.876605][ T12] cfg80211_wiphy_work+0x2dc/0x460 [ 258.876637][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 258.876673][ T12] process_scheduled_works+0xadb/0x17a0 [ 258.876738][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.876791][ T12] worker_thread+0x8a0/0xda0 [ 258.876842][ T12] kthread+0x70e/0x8a0 [ 258.876870][ T12] ? __pfx_worker_thread+0x10/0x10 [ 258.876891][ T12] ? __pfx_kthread+0x10/0x10 [ 258.876917][ T12] ? __pfx_kthread+0x10/0x10 [ 258.876941][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.876966][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.876992][ T12] ? __pfx_kthread+0x10/0x10 [ 258.877016][ T12] ret_from_fork+0x4b/0x80 [ 258.877037][ T12] ? __pfx_kthread+0x10/0x10 [ 258.877062][ T12] ret_from_fork_asm+0x1a/0x30 [ 258.877101][ T12] [ 258.885023][ T12] Kernel Offset: disabled