last executing test programs: 4.166571733s ago: executing program 0 (id=517): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd120, 0x1048e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0003"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 3.82394816s ago: executing program 0 (id=522): syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "004af4", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x27}, [], "ef9edaaa64947bfe"}}}}}}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad88864"], 0xffdd) socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x1108, 0x10, 0x11a8, 0x2a8, 0x2a8, 0x11a8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@private, @loopback, 0x0, 0xff000000, 'vlan0\x00', 'veth0_vlan\x00'}, 0x10, 0x70, 0xb8, 0x1c, {0x6}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0x3, 0x2, 'snmp_trap\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x3}, {0x1, 0x5, 0x3}, 0xa, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x250) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendfile(r1, r1, &(0x7f0000000200)=0x74, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000763a0000000000000300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000084fcffff850000000700000018421400000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002600ef"], 0x33fe0) r10 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r7, 0x30f29000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r11}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r5, @ANYBLOB="20d100000000000014002b8008000100", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 3.010998843s ago: executing program 1 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xfffffffe}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.999498717s ago: executing program 2 (id=531): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000076d5dc0cd0e06a2d0000000b0000000900000000000012030000000030002e615f2e61615f00"], &(0x7f00000003c0)=""/220, 0x2f, 0xdc, 0x0, 0x1, 0x0, @void, @value}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000090601020000000000000000000000020900020073797a3100000000050001000700000018bce580640101010500030002000000b32c384d00b32ad7"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000030605000000000004050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x0, 0x7, 0x8000, 0x44249, 0xffffffffffffffff, 0x6, '\x00', r2, r3, 0x5, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x400, 0x10, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44587, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0xffffffffffffffc9}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000040)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x6, @loopback, 0x4e21, 0x1, 'dh\x00', 0x8, 0x2d67, 0x43}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000078c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="ff45"], 0x48}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x4, @empty}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) 2.490503463s ago: executing program 0 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}}, 0x0) 2.489965636s ago: executing program 2 (id=536): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000000), 0x13, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a0000000500"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)={0x2e, 0x1d, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0xfffd}, @generic={0x3, 0xa5, "3d5c1219ff576bbc9e23aad5027d941df2e12ccaed08ae84880d9944f5093d7eebef40cb9c85f011fa30174205ce200862fdcbd06245644fefd39db73a8b52aea41b6cec3aeaa04bfb5d43492d31e276bdf17cd47910926f5d3852bfa0d15bb90929facf8ed32306afc830ef219b70e5a7ab146a7cc7bde695cdcc95a2d57bc18c2d4aaabef5a74475c214b2da44a076a54af7b9ee45be26695051a0882e47fd3ec1a57ba3"}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd, 0xf53, [0x7, 0x68, 0x6]}}]}, 0xf8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.246506735s ago: executing program 2 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x66) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c000400140034d6f307be05237ec522e97c3f24010002000000ac14140f00000000000000001400020002000000ffffffff0000003a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket(0x2b, 0x80801, 0x1) sendmmsg(r2, 0x0, 0x0, 0x20000090) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001412000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) 2.241298152s ago: executing program 1 (id=540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xf083, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xe, @void, @value, @void, @value}, 0x50) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@routing={0x1, 0x6, 0x1, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1, @mcast2]}, 0x38) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r1, 0x0, &(0x7f0000000300)=""/76, 0x2000000}, 0xffffffffffffff0c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0x7}, &(0x7f00000002c0)=0x8) 2.225091195s ago: executing program 0 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = epoll_create(0x400) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x0, 0xffeffffd}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="f400090006d91625fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x40000000}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000000006000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0), 0x10) (async) close(r9) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 32) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000000e5e2ffffff", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000200100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000200005c91040132bb112240fcbcc3fa9d77468b898614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x4040080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000020000000080a17010000000000000000020000000900010073797a300000000006611400000011000100"/148], 0x94}}, 0x0) 1.989814496s ago: executing program 0 (id=543): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 1.878357549s ago: executing program 1 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, {0xa}]}]}}}]}, 0x50}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x98, 0x30, 0x48b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$netlink(0x10, 0x3, 0xb) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000002f40)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000002080)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000600000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) 1.762911205s ago: executing program 4 (id=546): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a000000760000000000000007020000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) unshare(0x4e000100) 1.742254197s ago: executing program 0 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) unshare(0x20000400) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) socket(0x2000000000000021, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) socket$inet(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 1.618592129s ago: executing program 3 (id=548): socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x2a020480) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x20000000ec071, 0xffffffffffffffff, 0xcfc6c000) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) epoll_create1(0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000001c0)=0x6, 0x4) 1.533292145s ago: executing program 4 (id=549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x800, 0x6ba) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000000)=0xe8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) 1.385093629s ago: executing program 3 (id=550): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0xfffffffffffffebb, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000003c40)=""/4077, 0xfed}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8060, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='neigh_update\x00', r2, 0x0, 0x10000000000000}, 0x18) (async, rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) socket$inet(0xa, 0x801, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a030000000000000000000700000308000a40000000000900020073797a30000000000800010073797a3000000000080005400000000f4400128020000000000000006a2e6e6e6c696d69740000000c0002a00800014000000001200001800e000100636f6e6e663a6d697c0000000c000280080001400000e41f08000340000001201400000010000100000084000aa8ef2f01873ef089b9ec8c18b1f669cf920f9d58228f73c880743d70a38d50209b27d3a9943b9d57206927e762195f9966491f5623"], 0xd0}}, 0x20050800) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001"], 0x80}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000000206010800000000000000000000000015000300686173683a69702c706f72742c6e6574000000000500010007000000050005000200000600000000000000300000000005000400000000001400078008000840000000d30800064000000000509c758a6c0029b13e14345a96878f9f48d62d8e49bfe7b02a2d0a758359e0d3d18fa52068e3f5296aadcfb0f67c6e041453e37016e0cb6855f8d5ccf727f197e511c5cd8d505f44e5a8a68544c09cef33a188087e393a26297ac6aeff1a8485bd6f9bbbc61a2d61b9c7bec377bbe7d691c5e4d372c99ef5c0c2cd0ee0b2dc7f29e4e8cd24ed6fa0e98725230b27a0ab949779650d0a3257beb20295bd6b1611b9f90bc2bed9eed505fd278b2ab1f0dd78ba6de020a90ac4"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 1.318575472s ago: executing program 4 (id=551): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000400000000000000000200000500000000000000000100000000000000e2ff000001000000000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.266796811s ago: executing program 2 (id=552): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0xc, 0x9, 0x86, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed000000a1ff7a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 1.145642252s ago: executing program 1 (id=553): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.086499225s ago: executing program 3 (id=554): socket(0x11, 0x800000003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002100000000000000000000000000ccb00a689efbd8d4841b9c960000"], 0x1d) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="729c144e4a5dbaba083bf0434999fe55d39c934e17078d945c13e196005c7d50559d95cc24e3c13eb005a9b0b87211abf5a60ac70f288f956091e81c7b5fb547675cfb907b", 0x45}], 0x1}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 1.07925144s ago: executing program 4 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x3000000}, 0x0) 936.870502ms ago: executing program 2 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6220}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="db", 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="38007a8014000200541098da66df85273bdd500c00030000aded7c805c81076306e87e6c2a693414000100bcb9f10193877a0600fdffc9cc3b2e6b00000000005539b3d889e2dd447662d52390c1760b739bc678b8bf0bc5d5eb38c20b0e"], 0x54}, 0x1, 0x0, 0x0, 0xc5149aae0af4b1cf}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa4, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="103d0283817a7d4ecaf6d0f7b00d6dda"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "69d6f58567b84126"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="989bccafd86194c867faa36a74f60630"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4cffc7d3f7b5fb56"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b6b0974246da6849b06eebf1baa365e8aa5d38616b91bf82025623573fec24d0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ecd192bc609e7ea5a15fe8ffc4e74360"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5cc90da7b742da80"}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x28}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 790.37208ms ago: executing program 1 (id=557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44085) (async) syz_genetlink_get_family_id$nfc(0x0, r2) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) r3 = socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x24040000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffb], [0x0, 0x0, 0x8]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@rand_addr=0x4, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {0x0, 0x0, 0x2, 0x0, 0x9, 0x6, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x3, 0x8}}, 0xe8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x44061) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0x7}, {0xfff1, 0x1}, {0xfff2, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) (async) r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r10) 704.489307ms ago: executing program 3 (id=558): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x32600) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400000000000000000000000085fdd1694fb57c5878c96fa2cc8dc3746c4ac165767a692aadd6f3c1f7e05dd651bf6763e434e08b22c3f485d9ee9fe506ee10b2a105ace16ce099e1db250e265dc4f0fc", @ANYRES32=0x0, @ANYBLOB="00400000000000001c0012800b00010067656e65766500000c00028008000200000000001400030067656e65766531000000000000000000"], 0x50}}, 0x2040000) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400000000000000000000000085fdd1694fb57c5878c96fa2cc8dc3746c4ac165767a692aadd6f3c1f7e05dd651bf6763e434e08b22c3f485d9ee9fe506ee10b2a105ace16ce099e1db250e265dc4f0fc", @ANYRES32=0x0, @ANYBLOB="00400000000000001c0012800b00010067656e65766500000c00028008000200000000001400030067656e65766531000000000000000000"], 0x50}}, 0x2040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/158, 0x9e}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000100000000b7082000aca5454aa341dd3900000200c5a20000000000000702ff02c32b35ba1c83eedb5c8b0095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000100000000b7082000aca5454aa341dd3900000200c5a20000000000000702ff02c32b35ba1c83eedb5c8b0095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x14, 0x30, 0x12f, 0x0, 0x4}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000440)=0x9, 0x4) socket(0x2b, 0x1, 0x1) (async) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb080045000078fffc000000019078ac1e0001ac1414aa002f0000ac1414bbe000000201440c00010a01010100000007862c00000003020684924d890602020fd109567cb50ec760777fb80755050bc92d3002d91d907b7900020002860c000000000006ade34b13000000"], 0x0) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) (async) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 688.884019ms ago: executing program 1 (id=559): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xffffffff], 'syz_tun\x00', 'macvtap0\x00', {0x101}, {0xff}, 0x0, 0x3, 0x4, 0x20}, 0x0, 0x1f8, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_bond\x00', {0x0, 0x2babb8e4, 0x0, 0x0, 0x0, 0x1, 0x4}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0x0, 0xff000000, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e22, 0x1ff, 0x9, 0x1, 0xc7ec, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffeb0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd072f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b8003"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000060000000000000020000000850000003700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB='\x00'/28, @ANYRES8=r5, @ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000180), &(0x7f0000000040)=@udp=r1}, 0x20) close(0x3) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001400090429bd7000fe9bdf250208a2fd", @ANYRES32=0x0, @ANYBLOB="140006009cb50000ff0f00000700000000000000654ba389e0ffffff"], 0x34}}, 0x4020) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000140)={r14, 0x616d, 0x81}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000280)={r13, 0x6, 0xdabe, 0x8000}, &(0x7f00000002c0)=0x10) 526.542349ms ago: executing program 4 (id=560): socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x2a020480) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x20000000ec071, 0xffffffffffffffff, 0xcfc6c000) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000001c0)=0x6, 0x4) 370.649298ms ago: executing program 2 (id=561): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x22}, 0x1, 0x0, 0x0, 0x800}, 0xbea26d1af7e5d077) r5 = epoll_create1(0x80000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000140)=0x60, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x40000004}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) close(r5) shutdown(r1, 0x0) close(r0) 271.038801ms ago: executing program 4 (id=562): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x4a, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x80000000010000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 138.553508ms ago: executing program 3 (id=563): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x84}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) 0s ago: executing program 3 (id=564): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000130001002bbd7000f9ffffff00000000", @ANYRES32, @ANYBLOB="400000003048000008001300", @ANYRES32, @ANYBLOB="08002e000400"], 0x90}, 0x1, 0xd}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 81.137533][ T5818] cgroup: Unknown subsys name 'net' [ 81.274694][ T5818] cgroup: Unknown subsys name 'cpuset' [ 81.284124][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.954210][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.582901][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.591335][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.600037][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.610015][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.617727][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.627732][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.636012][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.643840][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.650929][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.654631][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.659668][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.667014][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.672686][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.687759][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.689138][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.695884][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.710993][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.711270][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.718593][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.726784][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.732333][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.759859][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.761145][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.775241][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.784150][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.417435][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.542705][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.554004][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.666640][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.720559][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.727927][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.736073][ T5829] bridge_slave_0: entered allmulticast mode [ 86.752697][ T5829] bridge_slave_0: entered promiscuous mode [ 86.811895][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.859249][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.869862][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.877046][ T5829] bridge_slave_1: entered allmulticast mode [ 86.885547][ T5829] bridge_slave_1: entered promiscuous mode [ 87.065211][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.078731][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.088995][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.096586][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.105158][ T5842] bridge_slave_0: entered allmulticast mode [ 87.113475][ T5842] bridge_slave_0: entered promiscuous mode [ 87.182056][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.189238][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.196647][ T5842] bridge_slave_1: entered allmulticast mode [ 87.204066][ T5842] bridge_slave_1: entered promiscuous mode [ 87.302537][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.312199][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.319549][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.329361][ T5839] bridge_slave_0: entered allmulticast mode [ 87.336974][ T5839] bridge_slave_0: entered promiscuous mode [ 87.364024][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.371300][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.378538][ T5828] bridge_slave_0: entered allmulticast mode [ 87.386159][ T5828] bridge_slave_0: entered promiscuous mode [ 87.396269][ T5829] team0: Port device team_slave_0 added [ 87.410445][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.434775][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.442344][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.449526][ T5839] bridge_slave_1: entered allmulticast mode [ 87.457036][ T5839] bridge_slave_1: entered promiscuous mode [ 87.478943][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.486223][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.493568][ T5828] bridge_slave_1: entered allmulticast mode [ 87.501365][ T5828] bridge_slave_1: entered promiscuous mode [ 87.510374][ T5829] team0: Port device team_slave_1 added [ 87.546743][ T5842] team0: Port device team_slave_0 added [ 87.580020][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.587186][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.594462][ T5831] bridge_slave_0: entered allmulticast mode [ 87.602265][ T5831] bridge_slave_0: entered promiscuous mode [ 87.641947][ T5842] team0: Port device team_slave_1 added [ 87.648766][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.656282][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.682673][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.698601][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.708712][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.715994][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.723746][ T5831] bridge_slave_1: entered allmulticast mode [ 87.732056][ T5831] bridge_slave_1: entered promiscuous mode [ 87.766725][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.773932][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.781118][ T5844] Bluetooth: hci1: command tx timeout [ 87.800641][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.805978][ T5841] Bluetooth: hci0: command tx timeout [ 87.816917][ T5838] Bluetooth: hci2: command tx timeout [ 87.834822][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.860014][ T5838] Bluetooth: hci4: command tx timeout [ 87.861917][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.865835][ T5838] Bluetooth: hci3: command tx timeout [ 87.895715][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.902751][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.929721][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.975424][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.999381][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.006530][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.032657][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.065958][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.078849][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.136527][ T5829] hsr_slave_0: entered promiscuous mode [ 88.143061][ T5829] hsr_slave_1: entered promiscuous mode [ 88.153262][ T5839] team0: Port device team_slave_0 added [ 88.177109][ T5828] team0: Port device team_slave_0 added [ 88.217586][ T5839] team0: Port device team_slave_1 added [ 88.240547][ T5828] team0: Port device team_slave_1 added [ 88.249371][ T5831] team0: Port device team_slave_0 added [ 88.274734][ T5842] hsr_slave_0: entered promiscuous mode [ 88.281279][ T5842] hsr_slave_1: entered promiscuous mode [ 88.287429][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.295503][ T5842] Cannot create hsr debugfs directory [ 88.343333][ T5831] team0: Port device team_slave_1 added [ 88.352640][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.359711][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.386199][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.448194][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.455340][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.481991][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.518415][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.526152][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.552420][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.598581][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.605610][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.631648][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.651743][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.658737][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.689482][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.703191][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.710269][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.736358][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.852045][ T5828] hsr_slave_0: entered promiscuous mode [ 88.858477][ T5828] hsr_slave_1: entered promiscuous mode [ 88.865279][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.873221][ T5828] Cannot create hsr debugfs directory [ 89.004825][ T5831] hsr_slave_0: entered promiscuous mode [ 89.012663][ T5831] hsr_slave_1: entered promiscuous mode [ 89.018787][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.026450][ T5831] Cannot create hsr debugfs directory [ 89.036990][ T5839] hsr_slave_0: entered promiscuous mode [ 89.043545][ T5839] hsr_slave_1: entered promiscuous mode [ 89.049657][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.057322][ T5839] Cannot create hsr debugfs directory [ 89.420621][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.472819][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.512145][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.551029][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.601446][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.622180][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.638093][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.663313][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.746749][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.765607][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.795447][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.809442][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.860608][ T5844] Bluetooth: hci1: command tx timeout [ 89.866089][ T5844] Bluetooth: hci0: command tx timeout [ 89.874137][ T5838] Bluetooth: hci2: command tx timeout [ 89.882447][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.926832][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.940362][ T5844] Bluetooth: hci4: command tx timeout [ 89.945921][ T5838] Bluetooth: hci3: command tx timeout [ 89.964131][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.975801][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.054008][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.066300][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.077797][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.088337][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.119032][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.153127][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.206257][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.243774][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.261761][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.268978][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.308824][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.316033][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.336252][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.343445][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.376401][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.384142][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.445436][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.518011][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.536399][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.543616][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.594653][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.603587][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.625772][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.750959][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.792801][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.812949][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.820154][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.867384][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.878908][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.886108][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.942335][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.949817][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.975448][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.982682][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.042638][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.205821][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.266758][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.296647][ T5829] veth0_vlan: entered promiscuous mode [ 91.361585][ T5829] veth1_vlan: entered promiscuous mode [ 91.487839][ T5842] veth0_vlan: entered promiscuous mode [ 91.557691][ T5828] veth0_vlan: entered promiscuous mode [ 91.608286][ T5829] veth0_macvtap: entered promiscuous mode [ 91.635663][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.647931][ T5842] veth1_vlan: entered promiscuous mode [ 91.658302][ T5828] veth1_vlan: entered promiscuous mode [ 91.676720][ T5829] veth1_macvtap: entered promiscuous mode [ 91.702922][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.747631][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.803577][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.843556][ T5828] veth0_macvtap: entered promiscuous mode [ 91.875810][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.881528][ T47] cfg80211: failed to load regulatory.db [ 91.885803][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.901544][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.910346][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.938630][ T5839] veth0_vlan: entered promiscuous mode [ 91.945899][ T5838] Bluetooth: hci1: command tx timeout [ 91.951477][ T5844] Bluetooth: hci2: command tx timeout [ 91.951488][ T5841] Bluetooth: hci0: command tx timeout [ 91.966964][ T5842] veth0_macvtap: entered promiscuous mode [ 91.985610][ T5828] veth1_macvtap: entered promiscuous mode [ 92.013678][ T5842] veth1_macvtap: entered promiscuous mode [ 92.020748][ T5838] Bluetooth: hci4: command tx timeout [ 92.027985][ T5844] Bluetooth: hci3: command tx timeout [ 92.070953][ T5839] veth1_vlan: entered promiscuous mode [ 92.102244][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.117391][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.137103][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.147477][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.158227][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.169074][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.179591][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.192289][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.227978][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.239087][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.252577][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.264331][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.276173][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.286160][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.296711][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.307833][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.331014][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340104][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.348963][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.358296][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.389157][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.398107][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.407380][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.416702][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.466297][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.473703][ T5839] veth0_macvtap: entered promiscuous mode [ 92.487269][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.526807][ T5839] veth1_macvtap: entered promiscuous mode [ 92.609043][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.613090][ T5831] veth0_vlan: entered promiscuous mode [ 92.628058][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.641233][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.652415][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.662685][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.673317][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.683878][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.694422][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.706072][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.732129][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.742782][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.752687][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.763224][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.773194][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.784028][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.795969][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.825910][ T5831] veth1_vlan: entered promiscuous mode [ 92.868708][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.883582][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.892935][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.902918][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.914959][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.933504][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.952353][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.978137][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.000170][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.071983][ T5831] veth0_macvtap: entered promiscuous mode [ 93.115044][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.125920][ T5831] veth1_macvtap: entered promiscuous mode [ 93.137374][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.175497][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.195383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.261991][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.274685][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.288624][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.300557][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.311025][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.325823][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.346744][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.357783][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.376625][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.473671][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.481985][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.565438][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.580637][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.652682][ T5924] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.662481][ T5924] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.672226][ T5924] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.681839][ T5924] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.736284][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.750650][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.760961][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.771707][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.782185][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.793248][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.822826][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.868706][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.888404][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.927960][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938821][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.949382][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.958432][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.024025][ T5844] Bluetooth: hci0: command tx timeout [ 94.030256][ T5838] Bluetooth: hci2: command tx timeout [ 94.031467][ T5841] Bluetooth: hci1: command tx timeout [ 94.066521][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.086424][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.102020][ T5841] Bluetooth: hci4: command tx timeout [ 94.107513][ T5844] Bluetooth: hci3: command tx timeout [ 94.148643][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.224609][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.411372][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.463807][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.711625][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.726756][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.753709][ T5952] netlink: 'syz.0.7': attribute type 9 has an invalid length. [ 94.780198][ T5952] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 94.787727][ T5952] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.830287][ T5955] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 94.893913][ T5955] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 95.013258][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.066255][ T5960] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 95.459230][ T5968] netlink: 124 bytes leftover after parsing attributes in process `syz.3.11'. [ 95.675455][ T5974] sctp: failed to load transform for md5: -2 [ 95.791137][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 95.989369][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 96.338179][ T6015] Zero length message leads to an empty skb [ 96.566698][ T6029] 8021q: VLANs not supported on sit0 [ 96.837609][ T6034] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 96.873919][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 96.890963][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 97.309334][ T6052] xt_CT: No such helper "netbios-ns" [ 97.371104][ T6067] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 97.488951][ T6075] warning: `syz.3.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.579718][ T6075] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 97.599922][ T6064] bridge_slave_0: left allmulticast mode [ 97.637606][ T6064] bridge_slave_0: left promiscuous mode [ 97.689075][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.749057][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 97.751528][ T6064] bridge_slave_1: left allmulticast mode [ 97.839567][ T6064] bridge_slave_1: left promiscuous mode [ 97.873537][ T6090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.880104][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.066193][ T6064] bond0: (slave bond_slave_0): Releasing backup interface [ 98.227945][ T6064] bond0: (slave bond_slave_1): Releasing backup interface [ 98.355089][ T6064] team0: Port device team_slave_0 removed [ 98.392754][ T6064] team0: Port device team_slave_1 removed [ 98.414975][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.437753][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.477684][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.499506][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.585240][ T6075] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.801514][ T6064] syz.3.35 (6064) used greatest stack depth: 20168 bytes left [ 98.806980][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.850942][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.121715][ T6145] netlink: 'syz.2.46': attribute type 12 has an invalid length. [ 99.159688][ T6145] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.286768][ T6148] Cannot find del_set index 0 as target [ 99.300386][ T5844] Bluetooth: hci4: command tx timeout [ 99.986519][ T6190] dvmrp3: entered allmulticast mode [ 100.016391][ T6192] dvmrp3: left allmulticast mode [ 100.040573][ T6193] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 100.131847][ T6199] ip6tnl1: entered promiscuous mode [ 100.137298][ T6199] ip6tnl1: entered allmulticast mode [ 100.751842][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 100.807693][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 100.916750][ T6229] vlan2: entered allmulticast mode [ 100.939865][ T6229] bridge_slave_0: entered allmulticast mode [ 101.024871][ T6243] netlink: 'syz.4.64': attribute type 5 has an invalid length. [ 101.041432][ T6243] ip6erspan0: entered promiscuous mode [ 101.333434][ T6254] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 101.341304][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 101.406067][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 101.933546][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 102.237267][ T6274] FAULT_INJECTION: forcing a failure. [ 102.237267][ T6274] name failslab, interval 1, probability 0, space 0, times 1 [ 102.250189][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.4.73 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 102.250216][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 102.250232][ T6274] Call Trace: [ 102.250244][ T6274] [ 102.250253][ T6274] dump_stack_lvl+0x189/0x250 [ 102.250297][ T6274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.250326][ T6274] ? __pfx__printk+0x10/0x10 [ 102.250361][ T6274] should_fail_ex+0x414/0x560 [ 102.250398][ T6274] should_failslab+0xa8/0x100 [ 102.250427][ T6274] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 102.250461][ T6274] ? __alloc_skb+0x112/0x2d0 [ 102.250478][ T6274] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.250514][ T6274] __alloc_skb+0x112/0x2d0 [ 102.250538][ T6274] tipc_buf_acquire+0x2b/0xe0 [ 102.250564][ T6274] tipc_named_withdraw+0x1db/0x760 [ 102.250596][ T6274] tipc_nametbl_withdraw+0xcc/0x280 [ 102.250634][ T6274] tipc_release+0x770/0x2160 [ 102.250669][ T6274] ? __pfx_tipc_release+0x10/0x10 [ 102.250687][ T6274] ? down_write+0x162/0x1f0 [ 102.250714][ T6274] ? __pfx_down_write+0x10/0x10 [ 102.250739][ T6274] ? locks_remove_posix+0x381/0x650 [ 102.250763][ T6274] ? __pfx_locks_remove_posix+0x10/0x10 [ 102.250788][ T6274] sock_close+0xc0/0x240 [ 102.250815][ T6274] ? __pfx_sock_close+0x10/0x10 [ 102.250840][ T6274] __fput+0x449/0xa70 [ 102.250883][ T6274] fput_close_sync+0x169/0x200 [ 102.250916][ T6274] ? __pfx_fput_close_sync+0x10/0x10 [ 102.250947][ T6274] ? do_raw_spin_unlock+0x122/0x240 [ 102.250979][ T6274] __x64_sys_close+0x7f/0x110 [ 102.250999][ T6274] do_syscall_64+0xf6/0x210 [ 102.251027][ T6274] ? clear_bhb_loop+0x45/0xa0 [ 102.251052][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.251071][ T6274] RIP: 0033:0x7f53c838e969 [ 102.251094][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.251110][ T6274] RSP: 002b:00007f53c913b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 102.251131][ T6274] RAX: ffffffffffffffda RBX: 00007f53c85b5fa0 RCX: 00007f53c838e969 [ 102.251146][ T6274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.251157][ T6274] RBP: 00007f53c913b090 R08: 0000000000000000 R09: 0000000000000000 [ 102.251169][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.251180][ T6274] R13: 0000000000000000 R14: 00007f53c85b5fa0 R15: 00007ffc1eba33e8 [ 102.251212][ T6274] [ 102.251222][ T6274] tipc: Withdrawal distribution failure [ 102.433358][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.74'. [ 102.512467][ T6279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.527427][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 103.029080][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 103.185459][ T6306] netlink: 64 bytes leftover after parsing attributes in process `syz.4.84'. [ 103.197323][ T6308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.399645][ T6319] tipc: Withdrawal distribution failure [ 103.943638][ T6335] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 103.999405][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.019047][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.048122][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.084229][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.167831][ T6374] __nla_validate_parse: 3 callbacks suppressed [ 105.167866][ T6374] netlink: 100 bytes leftover after parsing attributes in process `syz.4.105'. [ 105.297883][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 105.477478][ T6378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.783506][ T6378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.954750][ T6406] netlink: 'syz.4.112': attribute type 10 has an invalid length. [ 105.964570][ T6406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 106.008124][ T6404] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 106.031717][ T6406] netlink: 'syz.4.112': attribute type 10 has an invalid length. [ 106.062713][ T6378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.064619][ T6406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 106.103228][ T6404] veth0_vlan: left promiscuous mode [ 106.114625][ T6404] veth0_vlan: entered promiscuous mode [ 106.133146][ T6404] team0: Device veth0_vlan failed to register rx_handler [ 106.254717][ T6378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.274733][ T6414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 106.465689][ T6423] syz.0.117: vmalloc error: size 26714112, failed to allocated page array size 52176, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.489830][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.0.117 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 106.489858][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.489870][ T6423] Call Trace: [ 106.489884][ T6423] [ 106.489892][ T6423] dump_stack_lvl+0x189/0x250 [ 106.489930][ T6423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.489959][ T6423] ? __pfx__printk+0x10/0x10 [ 106.489979][ T6423] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.490012][ T6423] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.490047][ T6423] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 106.490082][ T6423] warn_alloc+0x214/0x310 [ 106.490117][ T6423] ? __pfx_warn_alloc+0x10/0x10 [ 106.490154][ T6423] ? __get_vm_area_node+0x1c5/0x2d0 [ 106.490179][ T6423] ? __get_vm_area_node+0x25a/0x2d0 [ 106.490212][ T6423] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 106.490239][ T6423] ? pfn_valid+0xf4/0x450 [ 106.490285][ T6423] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 106.490309][ T6423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.490346][ T6423] ? do_replace_finish+0x73/0x1930 [ 106.490369][ T6423] vmalloc_noprof+0x79/0x90 [ 106.490396][ T6423] ? do_replace_finish+0x73/0x1930 [ 106.490418][ T6423] do_replace_finish+0x73/0x1930 [ 106.490444][ T6423] ? __might_fault+0xb0/0x130 [ 106.490498][ T6423] do_replace+0x324/0x430 [ 106.490523][ T6423] ? __pfx_do_replace+0x10/0x10 [ 106.490557][ T6423] ? bpf_lsm_capable+0x9/0x20 [ 106.490584][ T6423] ? security_capable+0x7e/0x2e0 [ 106.490612][ T6423] do_ebt_set_ctl+0x1e3/0xb60 [ 106.490641][ T6423] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 106.490668][ T6423] ? rcu_is_watching+0x15/0xb0 [ 106.490707][ T6423] ? nf_setsockopt+0x221/0x290 [ 106.490733][ T6423] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 106.490763][ T6423] ? __pfx___mutex_lock+0x10/0x10 [ 106.490789][ T6423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.490813][ T6423] ? smc_setsockopt+0x181/0xab0 [ 106.490839][ T6423] ? __pfx___mutex_lock+0x10/0x10 [ 106.490866][ T6423] ? futex_wait+0x285/0x360 [ 106.490906][ T6423] nf_setsockopt+0x26c/0x290 [ 106.490928][ T6423] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.490961][ T6423] smc_setsockopt+0x22f/0xab0 [ 106.490991][ T6423] ? __pfx_smc_setsockopt+0x10/0x10 [ 106.491020][ T6423] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.491042][ T6423] ? __pfx_smc_setsockopt+0x10/0x10 [ 106.491066][ T6423] do_sock_setsockopt+0x257/0x3e0 [ 106.491090][ T6423] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.491108][ T6423] ? __fget_files+0x2a/0x420 [ 106.491139][ T6423] ? __fget_files+0x3a0/0x420 [ 106.491162][ T6423] ? __fget_files+0x2a/0x420 [ 106.491196][ T6423] __x64_sys_setsockopt+0x18b/0x220 [ 106.491224][ T6423] do_syscall_64+0xf6/0x210 [ 106.491252][ T6423] ? clear_bhb_loop+0x45/0xa0 [ 106.491277][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.491296][ T6423] RIP: 0033:0x7f1690d8e969 [ 106.491313][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.491330][ T6423] RSP: 002b:00007f1691bdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.491350][ T6423] RAX: ffffffffffffffda RBX: 00007f1690fb6160 RCX: 00007f1690d8e969 [ 106.491365][ T6423] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 106.491376][ T6423] RBP: 00007f1690e10ab1 R08: 0000000000000108 R09: 0000000000000000 [ 106.491388][ T6423] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 106.491400][ T6423] R13: 0000000000000000 R14: 00007f1690fb6160 R15: 00007ffe5aa06888 [ 106.491431][ T6423] [ 106.491448][ T6423] Mem-Info: [ 106.929346][ T6423] active_anon:6180 inactive_anon:0 isolated_anon:0 [ 106.929346][ T6423] active_file:1401 inactive_file:38315 isolated_file:0 [ 106.929346][ T6423] unevictable:768 dirty:558 writeback:0 [ 106.929346][ T6423] slab_reclaimable:9523 slab_unreclaimable:98152 [ 106.929346][ T6423] mapped:30139 shmem:2883 pagetables:860 [ 106.929346][ T6423] sec_pagetables:0 bounce:0 [ 106.929346][ T6423] kernel_misc_reclaimable:0 [ 106.929346][ T6423] free:1348314 free_pcp:891 free_cma:0 [ 106.992146][ T6378] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.010273][ T6423] Node 0 active_anon:24720kB inactive_anon:0kB active_file:5604kB inactive_file:153188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120556kB dirty:2224kB writeback:0kB shmem:9996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:3340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.057680][ T6378] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.123990][ T6378] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.148770][ T6423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.172420][ T6378] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.260006][ T6423] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.303359][ T6423] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 107.309212][ T6423] Node 0 DMA32 free:1463400kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:29612kB inactive_anon:0kB active_file:5604kB inactive_file:153096kB unevictable:1536kB writepending:2220kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:1456kB local_pcp:1088kB free_cma:0kB [ 107.369836][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 107.374965][ T6423] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 107.402611][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 107.407525][ T6423] Node 1 Normal free:3910772kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 107.437834][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 107.469903][ T6423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.511797][ T6453] netlink: 'syz.3.123': attribute type 2 has an invalid length. [ 107.521699][ T6423] Node 0 DMA32: 54*4kB (UM) 103*8kB (UE) 378*16kB (UE) 533*32kB (UME) 302*64kB (UE) 59*128kB (UME) 25*256kB (UE) 7*512kB (U) 15*1024kB (UME) 13*2048kB (UM) 332*4096kB (UM) = 1462864kB [ 107.588193][ T6423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.649814][ T6423] Node 1 Normal: 195*4kB (UE) 33*8kB (UME) 36*16kB (UME) 191*32kB (UME) 75*64kB (UME) 27*128kB (UM) 16*256kB (UME) 11*512kB (UM) 4*1024kB (UME) 5*2048kB (UE) 945*4096kB (M) = 3910772kB [ 107.688549][ T6423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.710634][ T6423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.756596][ T6423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.783674][ T6423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.833532][ T6464] syz_tun: entered allmulticast mode [ 107.847852][ T6423] 41599 total pagecache pages [ 107.854623][ T6423] 0 pages in swap cache [ 107.858887][ T6423] Free swap = 124996kB [ 107.861966][ T6457] dvmrp8: entered allmulticast mode [ 107.874030][ T6423] Total swap = 124996kB [ 107.881384][ T6423] 2097051 pages RAM [ 107.885417][ T6423] 0 pages HighMem/MovableOnly [ 107.890546][ T6423] 424361 pages reserved [ 107.910537][ T6423] 0 pages cma reserved [ 109.178146][ T6507] netlink: 'syz.3.139': attribute type 21 has an invalid length. [ 109.210294][ T6507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.139'. [ 109.253309][ T6507] netlink: 'syz.3.139': attribute type 5 has an invalid length. [ 109.295803][ T6507] netlink: 'syz.3.139': attribute type 6 has an invalid length. [ 109.312448][ T6507] netlink: 3 bytes leftover after parsing attributes in process `syz.3.139'. [ 109.604105][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 109.686406][ T24] hid-generic 0005:07C0:0A0F.0001: item fetching failed at offset 0/3 [ 109.703384][ T24] hid-generic 0005:07C0:0A0F.0001: probe with driver hid-generic failed with error -22 [ 109.823991][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.147'. [ 109.925759][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.147'. [ 110.067548][ T6528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.106258][ T6528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.141421][ T6528] bond0 (unregistering): Released all slaves [ 110.369988][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.152'. [ 110.724562][ T6567] netlink: 'syz.4.155': attribute type 21 has an invalid length. [ 110.752542][ T6567] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.155'. [ 111.936357][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 112.289035][ T6619] wireguard0: entered promiscuous mode [ 112.320221][ T6619] wireguard0: entered allmulticast mode [ 112.515330][ T6626] Bluetooth: MGMT ver 1.23 [ 112.779238][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 112.856377][ T6637] team0: Port device virt_wifi0 added [ 112.879461][ T6646] netlink: 39092 bytes leftover after parsing attributes in process `syz.3.174'. [ 113.094453][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 113.105084][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 113.157451][ T6653] netlink: 'syz.0.177': attribute type 18 has an invalid length. [ 113.396899][ T6661] net veth1_virt_wifi ÿÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 113.628233][ T6673] FAULT_INJECTION: forcing a failure. [ 113.628233][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.660233][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.4.184 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 113.660262][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.660274][ T6673] Call Trace: [ 113.660282][ T6673] [ 113.660291][ T6673] dump_stack_lvl+0x189/0x250 [ 113.660328][ T6673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.660357][ T6673] ? __pfx__printk+0x10/0x10 [ 113.660390][ T6673] should_fail_ex+0x414/0x560 [ 113.660427][ T6673] _copy_to_user+0x31/0xb0 [ 113.660456][ T6673] simple_read_from_buffer+0xe1/0x170 [ 113.660486][ T6673] proc_fail_nth_read+0x1df/0x250 [ 113.660517][ T6673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.660548][ T6673] ? rw_verify_area+0x258/0x650 [ 113.660569][ T6673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.660598][ T6673] vfs_read+0x1fd/0x980 [ 113.660625][ T6673] ? __pfx___mutex_lock+0x10/0x10 [ 113.660662][ T6673] ? __pfx_vfs_read+0x10/0x10 [ 113.660686][ T6673] ? __fget_files+0x2a/0x420 [ 113.660716][ T6673] ? __fget_files+0x3a0/0x420 [ 113.660740][ T6673] ? __fget_files+0x2a/0x420 [ 113.660775][ T6673] ksys_read+0x145/0x250 [ 113.660795][ T6673] ? rcu_is_watching+0x15/0xb0 [ 113.660827][ T6673] ? __pfx_ksys_read+0x10/0x10 [ 113.660852][ T6673] ? do_syscall_64+0xba/0x210 [ 113.660883][ T6673] do_syscall_64+0xf6/0x210 [ 113.660910][ T6673] ? clear_bhb_loop+0x45/0xa0 [ 113.660935][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.660954][ T6673] RIP: 0033:0x7f53c838d37c [ 113.660971][ T6673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.660987][ T6673] RSP: 002b:00007f53c913b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.661007][ T6673] RAX: ffffffffffffffda RBX: 00007f53c85b5fa0 RCX: 00007f53c838d37c [ 113.661022][ T6673] RDX: 000000000000000f RSI: 00007f53c913b0a0 RDI: 0000000000000004 [ 113.661034][ T6673] RBP: 00007f53c913b090 R08: 0000000000000000 R09: 0000000000000000 [ 113.661046][ T6673] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 113.661058][ T6673] R13: 0000000000000000 R14: 00007f53c85b5fa0 R15: 00007ffc1eba33e8 [ 113.661089][ T6673] [ 113.978794][ T6680] vxcan3: entered allmulticast mode [ 114.327748][ T6698] netlink: 'syz.4.191': attribute type 11 has an invalid length. [ 114.399590][ T6706] netlink: 'syz.4.191': attribute type 11 has an invalid length. [ 114.529374][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 114.876727][ T6708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.906960][ T6718] netlink: 248 bytes leftover after parsing attributes in process `syz.4.194'. [ 115.076089][ T6725] ipvlan2: entered promiscuous mode [ 115.088441][ T6725] ipvlan2: entered allmulticast mode [ 115.112129][ T6725] bridge0: entered allmulticast mode [ 115.125286][ T6725] batman_adv: batadv0: Adding interface: ipvlan2 [ 115.132717][ T6725] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.160698][ T6725] batman_adv: batadv0: Interface activated: ipvlan2 [ 115.214061][ T6735] netlink: 'syz.2.197': attribute type 3 has an invalid length. [ 115.966018][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 115.983233][ T6768] sctp: [Deprecated]: syz.4.209 (pid 6768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.983233][ T6768] Use struct sctp_sack_info instead [ 116.932873][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 116.984042][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 117.324834][ T6812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.217'. [ 117.373545][ T6823] ªªªªªª: renamed from vlan0 (while UP) [ 118.003513][ T6845] netlink: 'syz.4.224': attribute type 2 has an invalid length. [ 118.052064][ T6845] netlink: 'syz.4.224': attribute type 8 has an invalid length. [ 118.073065][ T6845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.224'. [ 118.094671][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 118.341091][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 118.509530][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 118.578221][ T6869] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 118.587996][ T6869] netlink: 224 bytes leftover after parsing attributes in process `syz.4.228'. [ 119.078083][ T6885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.233'. [ 119.870226][ T6919] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 119.964988][ T6922] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 119.993188][ T6919] ip6gre1: entered allmulticast mode [ 121.181082][ T6967] netlink: 'syz.4.251': attribute type 16 has an invalid length. [ 121.219891][ T6967] netlink: 'syz.4.251': attribute type 17 has an invalid length. [ 121.294134][ T6974] netlink: 'syz.4.251': attribute type 16 has an invalid length. [ 121.419571][ T6974] netlink: 'syz.4.251': attribute type 17 has an invalid length. [ 121.514044][ T6985] netlink: 'syz.1.253': attribute type 2 has an invalid length. [ 121.571277][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.579126][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.855820][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.901580][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.006364][ T6967] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.016170][ T6967] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.027079][ T6967] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.036151][ T6967] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.098518][ T6998] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 122.391137][ T7004] syzkaller1: entered promiscuous mode [ 122.396671][ T7004] syzkaller1: entered allmulticast mode [ 122.438558][ T7007] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 122.460569][ T7007] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 122.507503][ T7013] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 122.710327][ T7015] __nla_validate_parse: 8 callbacks suppressed [ 122.710347][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.721971][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 122.750040][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 122.751379][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.789696][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.796580][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 122.809707][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.890832][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.934724][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.961080][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 123.811865][ T5886] IPVS: starting estimator thread 0... [ 123.934609][ T7068] IPVS: using max 25 ests per chain, 60000 per kthread [ 124.915438][ T7111] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 125.328023][ T7124] dvmrp1: entered allmulticast mode [ 125.705771][ T7145] 8021q: VLANs not supported on vxcan0 [ 125.848870][ T7159] xt_bpf: check failed: parse error [ 126.349651][ T7189] netlink: 'syz.4.299': attribute type 21 has an invalid length. [ 126.410012][ T7189] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.418121][ T7189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.425746][ T7189] IPv6: NLM_F_CREATE should be set when creating new route [ 126.433153][ T7189] IPv6: NLM_F_CREATE should be set when creating new route [ 126.440458][ T7189] IPv6: NLM_F_CREATE should be set when creating new route [ 126.479574][ T7193] netlink: 'syz.4.299': attribute type 4 has an invalid length. [ 128.162794][ T7251] __nla_validate_parse: 56 callbacks suppressed [ 128.162816][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 128.400153][ T7243] netlink: 96 bytes leftover after parsing attributes in process `syz.4.310'. [ 128.877315][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 128.946278][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 129.105608][ T7283] netlink: 476 bytes leftover after parsing attributes in process `syz.0.318'. [ 129.156170][ T7283] bond_slave_0: entered promiscuous mode [ 129.197671][ T7283] netlink: 64 bytes leftover after parsing attributes in process `syz.0.318'. [ 129.217617][ T7283] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 129.252262][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 129.275261][ T30] audit: type=1800 audit(1745938301.367:2): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.320" name="memory.events" dev="tmpfs" ino=409 res=0 errno=0 [ 129.359065][ T30] audit: type=1804 audit(1745938301.417:3): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.320" name="memory.events" dev="tmpfs" ino=409 res=1 errno=0 [ 129.612843][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 129.920074][ T7328] netlink: 88 bytes leftover after parsing attributes in process `syz.4.328'. [ 130.068166][ T7334] lo: entered allmulticast mode [ 130.082357][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 130.110728][ T7334] lo: left allmulticast mode [ 131.090110][ T7378] netlink: 'syz.3.339': attribute type 5 has an invalid length. [ 131.427895][ T7388] xt_CT: No such helper "snmp" [ 131.904692][ T7428] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 131.929505][ T7424] netlink: 'syz.2.352': attribute type 23 has an invalid length. [ 131.944489][ T7428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.963973][ T7434] gretap1: entered promiscuous mode [ 131.969251][ T7434] gretap1: entered allmulticast mode [ 132.362037][ T7448] !: renamed from dummy0 [ 132.774949][ T7466] netlink: 'syz.4.359': attribute type 10 has an invalid length. [ 132.826925][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254269][ T7479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.593735][ T7504] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 133.621021][ T7498] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 133.644859][ T7504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.657802][ T7504] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.726808][ T7503] __nla_validate_parse: 5 callbacks suppressed [ 133.726827][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.366'. [ 135.787078][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 136.274847][ T7640] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.284570][ T7640] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.294341][ T7640] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.304512][ T7640] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.337817][ T7640] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 136.772495][ T7657] No such timeout policy "syz1" [ 136.804072][ T7660] netlink: 'syz.3.392': attribute type 7 has an invalid length. [ 136.845919][ T7660] netlink: 'syz.3.392': attribute type 8 has an invalid length. [ 136.876413][ T7657] netlink: 248 bytes leftover after parsing attributes in process `syz.1.390'. [ 137.559427][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 137.647158][ T7704] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 137.662427][ T7701] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 137.701067][ T7704] netlink: 600 bytes leftover after parsing attributes in process `syz.2.403'. [ 137.784763][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 137.854776][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 138.249105][ T7728] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 138.304460][ T7728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.787131][ T7752] netlink: zone id is out of range [ 139.181878][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 139.257292][ T7772] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 139.299537][ T7770] 8021q: VLANs not supported on nlmon0 [ 139.361691][ T7777] netlink: 'syz.4.420': attribute type 16 has an invalid length. [ 139.368877][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.388150][ T7777] netlink: 'syz.4.420': attribute type 3 has an invalid length. [ 139.401118][ T7777] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.420'. [ 139.422440][ T7772] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.754947][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 140.231524][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 140.650615][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 141.047752][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 141.100132][ T7845] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 141.189552][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 141.329232][ T7853] netlink: 108 bytes leftover after parsing attributes in process `syz.3.436'. [ 141.412569][ T7853] netlink: 108 bytes leftover after parsing attributes in process `syz.3.436'. [ 142.067230][ T7874] netlink: 'syz.4.442': attribute type 2 has an invalid length. [ 142.213684][ T7882] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 142.225861][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.4.442 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 142.225893][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.225906][ T7882] Call Trace: [ 142.225915][ T7882] [ 142.225924][ T7882] dump_stack_lvl+0x189/0x250 [ 142.225973][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.226001][ T7882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.226031][ T7882] ? __pfx__printk+0x10/0x10 [ 142.226056][ T7882] ? kernfs_path_from_node+0x2b/0x260 [ 142.226088][ T7882] ? kernfs_path_from_node+0x216/0x260 [ 142.226120][ T7882] sysfs_warn_dup+0x8e/0xa0 [ 142.226147][ T7882] sysfs_do_create_link_sd+0xc0/0x110 [ 142.226177][ T7882] device_add_class_symlinks+0x1cf/0x240 [ 142.226206][ T7882] device_add+0x475/0xb50 [ 142.226234][ T7882] wiphy_register+0x199a/0x26b0 [ 142.226284][ T7882] ? __pfx_wiphy_register+0x10/0x10 [ 142.226312][ T7882] ? minstrel_ht_alloc+0x893/0x990 [ 142.226354][ T7882] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 142.226393][ T7882] ieee80211_register_hw+0x334b/0x4060 [ 142.226433][ T7882] ? ieee80211_register_hw+0x1471/0x4060 [ 142.226469][ T7882] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 142.226497][ T7882] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.226530][ T7882] ? __hrtimer_setup+0x187/0x210 [ 142.226559][ T7882] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 142.226595][ T7882] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 142.226667][ T7882] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 142.226695][ T7882] ? trace_kmalloc+0x1f/0xd0 [ 142.226718][ T7882] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 142.226745][ T7882] ? kstrndup+0xbf/0x160 [ 142.226777][ T7882] hwsim_new_radio_nl+0xea4/0x1b10 [ 142.226811][ T7882] ? __pfx___nla_validate_parse+0x10/0x10 [ 142.226851][ T7882] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 142.226891][ T7882] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 142.226929][ T7882] ? __nla_parse+0x40/0x60 [ 142.226956][ T7882] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 142.226992][ T7882] genl_family_rcv_msg_doit+0x212/0x300 [ 142.227028][ T7882] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.227070][ T7882] ? bpf_lsm_capable+0x9/0x20 [ 142.227097][ T7882] ? security_capable+0x7e/0x2e0 [ 142.227126][ T7882] genl_rcv_msg+0x60e/0x790 [ 142.227159][ T7882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.227183][ T7882] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 142.227230][ T7882] netlink_rcv_skb+0x219/0x490 [ 142.227265][ T7882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.227292][ T7882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.227353][ T7882] ? down_read+0x1ad/0x2e0 [ 142.227384][ T7882] genl_rcv+0x28/0x40 [ 142.227407][ T7882] netlink_unicast+0x758/0x8d0 [ 142.227450][ T7882] netlink_sendmsg+0x805/0xb30 [ 142.227482][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.227506][ T7882] ? aa_sock_msg_perm+0x94/0x160 [ 142.227529][ T7882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.227552][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.227573][ T7882] __sock_sendmsg+0x219/0x270 [ 142.227605][ T7882] ____sys_sendmsg+0x505/0x830 [ 142.227641][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.227676][ T7882] ? import_iovec+0x74/0xa0 [ 142.227707][ T7882] ___sys_sendmsg+0x21f/0x2a0 [ 142.227734][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.227801][ T7882] ? __fget_files+0x2a/0x420 [ 142.227827][ T7882] ? __fget_files+0x3a0/0x420 [ 142.227866][ T7882] __x64_sys_sendmsg+0x19b/0x260 [ 142.227892][ T7882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.227936][ T7882] ? do_syscall_64+0xba/0x210 [ 142.227968][ T7882] do_syscall_64+0xf6/0x210 [ 142.227995][ T7882] ? clear_bhb_loop+0x45/0xa0 [ 142.228019][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.228038][ T7882] RIP: 0033:0x7f53c838e969 [ 142.228063][ T7882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.228080][ T7882] RSP: 002b:00007f53c911a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.228106][ T7882] RAX: ffffffffffffffda RBX: 00007f53c85b6080 RCX: 00007f53c838e969 [ 142.228121][ T7882] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e [ 142.228134][ T7882] RBP: 00007f53c8410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.228147][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.228158][ T7882] R13: 0000000000000000 R14: 00007f53c85b6080 R15: 00007ffc1eba33e8 [ 142.228192][ T7882] [ 142.721476][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'. [ 144.277696][ T7945] __nla_validate_parse: 1 callbacks suppressed [ 144.277715][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 144.887640][ T7965] sctp: [Deprecated]: syz.0.461 (pid 7965) Use of int in max_burst socket option. [ 144.887640][ T7965] Use struct sctp_assoc_value instead [ 145.352635][ T7976] Bluetooth: MGMT ver 1.23 [ 145.370540][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 145.490007][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.464'. [ 146.387310][ T8024] can: request_module (can-proto-0) failed. [ 146.701373][ T8042] x_tables: duplicate underflow at hook 3 [ 146.933898][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 146.984869][ T8055] xt_cluster: node mask cannot exceed total number of nodes [ 147.001302][ T8053] netlink: 104 bytes leftover after parsing attributes in process `syz.4.480'. [ 147.279105][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 147.319047][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.485'. [ 147.451905][ T8068] vlan3: entered allmulticast mode [ 147.500011][ T8068] syz_tun: entered allmulticast mode [ 147.541245][ T8080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.487'. [ 147.599606][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.487'. [ 147.910664][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.918434][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.207743][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.302869][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.726529][ T8078] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.756277][ T8078] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.779836][ T8078] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.799266][ T8078] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.823484][ T8078] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 148.939668][ T8122] ip_vti0: entered promiscuous mode [ 149.089170][ T8129] netlink: 'syz.4.494': attribute type 23 has an invalid length. [ 149.165798][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 149.211348][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.461562][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 149.471085][ T8147] veth0_to_bond: entered allmulticast mode [ 149.988183][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'. [ 150.781757][ T8190] veth0_to_bond: entered promiscuous mode [ 150.882615][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 150.983210][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 151.049026][ T8190] veth0_to_bond (unregistering): left promiscuous mode [ 151.541140][ T8225] netlink: 596 bytes leftover after parsing attributes in process `syz.1.518'. [ 151.804646][ T8239] xt_socket: unknown flags 0x4 [ 151.843795][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 151.864737][ T8239] netlink: 280 bytes leftover after parsing attributes in process `syz.2.521'. [ 151.991190][ T8241] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.522'. [ 152.062606][ T8245] veth1_to_bond: entered promiscuous mode [ 152.101931][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 152.335926][ T8264] netlink: 192 bytes leftover after parsing attributes in process `syz.2.528'. [ 152.763876][ T8284] veth1_macvtap: left promiscuous mode [ 152.787138][ T8284] macsec0: entered promiscuous mode [ 152.840117][ T8289] veth1_macvtap: entered promiscuous mode [ 152.846200][ T8289] macsec0: left promiscuous mode [ 153.448152][ T8323] sctp: [Deprecated]: syz.1.540 (pid 8323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.448152][ T8323] Use struct sctp_sack_info instead [ 154.087272][ T8351] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.763876][ T8376] bond1: entered promiscuous mode [ 154.769229][ T8376] bond1: entered allmulticast mode [ 154.775131][ T8376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.924161][ T8394] __nla_validate_parse: 8 callbacks suppressed [ 154.924182][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.558'. [ 154.945932][ T8395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.558'. [ 155.205166][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 155.383797][ T8411] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 155.507218][ T8411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.598551][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 155.652102][ T8417] bond2: (slave ip6gretap1): making interface the new active one [ 155.686260][ T8417] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.755156][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 155.778472][ T8422] netlink: 96 bytes leftover after parsing attributes in process `syz.3.564'. [ 155.870743][ T7507] wlan1: Trigger new scan to find an IBSS to join [ 155.884327][ T7507] ------------[ cut here ]------------ [ 155.898549][ T7507] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 155.916170][ T7507] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 155.931228][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: kworker/u8:9 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 155.931256][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.931268][ T7507] Workqueue: events_unbound cfg80211_wiphy_work [ 155.931303][ T7507] Call Trace: [ 155.931311][ T7507] [ 155.931319][ T7507] dump_stack_lvl+0x189/0x250 [ 155.931354][ T7507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.931383][ T7507] ? __pfx__printk+0x10/0x10 [ 155.931417][ T7507] ubsan_epilogue+0xa/0x40 [ 155.931437][ T7507] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 155.931469][ T7507] ieee80211_request_ibss_scan+0x600/0x8b0 [ 155.931511][ T7507] ieee80211_ibss_work+0xde7/0x1060 [ 155.931546][ T7507] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 155.931583][ T7507] ? ieee80211_iface_work+0xf39/0xfe0 [ 155.931610][ T7507] ? rcu_is_watching+0x15/0xb0 [ 155.931646][ T7507] cfg80211_wiphy_work+0x2dc/0x460 [ 155.931677][ T7507] ? process_scheduled_works+0x9ec/0x17a0 [ 155.931710][ T7507] process_scheduled_works+0xadb/0x17a0 [ 155.931774][ T7507] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.931825][ T7507] worker_thread+0x8a0/0xda0 [ 155.931847][ T7507] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.931880][ T7507] ? __kthread_parkme+0x7b/0x200 [ 155.931912][ T7507] kthread+0x70e/0x8a0 [ 155.931939][ T7507] ? __pfx_worker_thread+0x10/0x10 [ 155.931957][ T7507] ? __pfx_kthread+0x10/0x10 [ 155.931990][ T7507] ? __pfx_kthread+0x10/0x10 [ 155.932012][ T7507] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.932034][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.932059][ T7507] ? __pfx_kthread+0x10/0x10 [ 155.932081][ T7507] ret_from_fork+0x4b/0x80 [ 155.932100][ T7507] ? __pfx_kthread+0x10/0x10 [ 155.932123][ T7507] ret_from_fork_asm+0x1a/0x30 [ 155.932161][ T7507] [ 155.932168][ T7507] ---[ end trace ]--- [ 156.114568][ T7507] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 156.121815][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: kworker/u8:9 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 156.133993][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.144064][ T7507] Workqueue: events_unbound cfg80211_wiphy_work [ 156.150330][ T7507] Call Trace: [ 156.153616][ T7507] [ 156.156553][ T7507] dump_stack_lvl+0x99/0x250 [ 156.161172][ T7507] ? __asan_memcpy+0x40/0x70 [ 156.165778][ T7507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.171006][ T7507] ? __pfx__printk+0x10/0x10 [ 156.175614][ T7507] panic+0x2db/0x790 [ 156.179535][ T7507] ? __pfx_panic+0x10/0x10 [ 156.183972][ T7507] ? _printk+0xcf/0x120 [ 156.188138][ T7507] ? __pfx__printk+0x10/0x10 [ 156.192739][ T7507] check_panic_on_warn+0x89/0xb0 [ 156.197692][ T7507] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 156.203425][ T7507] ieee80211_request_ibss_scan+0x600/0x8b0 [ 156.209260][ T7507] ieee80211_ibss_work+0xde7/0x1060 [ 156.214498][ T7507] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 156.220179][ T7507] ? ieee80211_iface_work+0xf39/0xfe0 [ 156.225652][ T7507] ? rcu_is_watching+0x15/0xb0 [ 156.230442][ T7507] cfg80211_wiphy_work+0x2dc/0x460 [ 156.235570][ T7507] ? process_scheduled_works+0x9ec/0x17a0 [ 156.241305][ T7507] process_scheduled_works+0xadb/0x17a0 [ 156.246890][ T7507] ? __pfx_process_scheduled_works+0x10/0x10 [ 156.252899][ T7507] worker_thread+0x8a0/0xda0 [ 156.257619][ T7507] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.263963][ T7507] ? __kthread_parkme+0x7b/0x200 [ 156.268915][ T7507] kthread+0x70e/0x8a0 [ 156.273016][ T7507] ? __pfx_worker_thread+0x10/0x10 [ 156.278131][ T7507] ? __pfx_kthread+0x10/0x10 [ 156.282732][ T7507] ? __pfx_kthread+0x10/0x10 [ 156.287326][ T7507] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.292535][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.297742][ T7507] ? __pfx_kthread+0x10/0x10 [ 156.302354][ T7507] ret_from_fork+0x4b/0x80 [ 156.306776][ T7507] ? __pfx_kthread+0x10/0x10 [ 156.311374][ T7507] ret_from_fork_asm+0x1a/0x30 [ 156.316158][ T7507] [ 156.319319][ T7507] Kernel Offset: disabled [ 156.323697][ T7507] Rebooting in 86400 seconds..