last executing test programs: 2m38.624176855s ago: executing program 4 (id=158): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m38.445321284s ago: executing program 4 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000100), 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="32008d0556ab1a3613339f5d0dba9c0002cb64a796696a"], 0x8) sendmmsg$inet6(r4, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x7fffffff}, 0x1c, &(0x7f0000000b00)}}], 0x1, 0x44191) listen(r4, 0x100) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000200)=0x5, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000000), 0x8) accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x7c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r6, 0x89ee, &(0x7f0000000300)) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000027c0000040000000c00"], 0x528}}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a400000000009000200737d7a31000000000900010073797a30000000000800054000000025140011800a0001006c696d6974000000040001"], 0x98}, 0x1, 0x0, 0x0, 0x810}, 0xc4) 2m37.377144301s ago: executing program 4 (id=172): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1'], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m37.197850633s ago: executing program 4 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x1bc60, 0x1a704}}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4000044) 2m37.015715068s ago: executing program 4 (id=178): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x728, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="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", 0x861}], 0x1}}], 0x1, 0x24000015) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$sock(r4, &(0x7f0000009ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048010) setsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000240)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f00000003c0)=@canfd={{0x4}, 0x3b, 0x2, 0x0, 0x0, "9e4be5f93fbf5faeb00959117fdc0cd62742b22ce50fe64c630f178688121db5d63a087d7037ff4bf955e775bd79d7240eee0daede87b83b752b87ba5356ac22"}, 0x48}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@float={0x10, 0x0, 0x0, 0x10, 0x4}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}, @const={0x3, 0x0, 0x0, 0xa, 0x1}, @union={0x4, 0x4, 0x0, 0x5, 0x0, 0x5, [{0xd, 0x4, 0xffbf}, {0x1, 0x0, 0xfffffc00}, {0xd, 0x0, 0xff}, {0x9, 0x2, 0x2}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x61, 0x30, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000700)=""/236, 0x8f, 0xec, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x2, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0xffff, 0x4}, 0xc) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x14, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x56}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x401, 0xc8, &(0x7f0000000540)=""/200, 0x41000, 0x40, '\x00', r8, @fallback=0x1, r9, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x8, 0x7, 0x4}, 0x10, r10, r1, 0x2, &(0x7f0000000980)=[r2, r11, r12, r2, r1, r2, r13], &(0x7f00000009c0)=[{0x3, 0x3, 0x1, 0x3}, {0x3, 0x1, 0x4, 0x4}], 0x10, 0xfffffff5, @void, @value}, 0x94) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000000c0)) 2m36.086535762s ago: executing program 4 (id=191): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x7, @empty, 0x7}}, 0x0, 0x0, 0x12, 0x0, "6bc1724dcbf67f7a13a2d34bef873391a051c60bc3115826a9b938e3b63b6fbaea9a236d4089a1d710d618077d5642088ab0d4f13358f7682cd440ac52b631a283177c69255772ae6121b72a48a83e3b"}, 0xd8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000200000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000200000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000386dd5a08008000083a0000000000000000000000000000000000ff0200000000000000000000000000018000907800040003"], 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"/14, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"/14, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 2m21.002731999s ago: executing program 32 (id=191): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x7, @empty, 0x7}}, 0x0, 0x0, 0x12, 0x0, "6bc1724dcbf67f7a13a2d34bef873391a051c60bc3115826a9b938e3b63b6fbaea9a236d4089a1d710d618077d5642088ab0d4f13358f7682cd440ac52b631a283177c69255772ae6121b72a48a83e3b"}, 0xd8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000200000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000200000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000386dd5a08008000083a0000000000000000000000000000000000ff0200000000000000000000000000018000907800040003"], 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"/14, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200"/14, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 12.877986427s ago: executing program 3 (id=1100): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe40, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.244350654s ago: executing program 3 (id=1108): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xfffffffe, 0x0, 0x1}]}]}}, &(0x7f0000000240)=""/220, 0x32, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0x7fffffff, 0x8c) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 9.192012493s ago: executing program 0 (id=1109): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x9, 0xc, 0x7, 0x2da, 0x10, 0x9a42, 0x81}, 0x1c) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x5}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xac31, 0x5, 0x7, 0xfffff800}, {0x1d01, 0x3, 0x9, 0x8}]}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'batadv_slave_0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x1000, 0x8, 0xfab9, 0x7, 0x8001, 0x3680000, 0x81, 0x3}}) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x91, "5f636b53ce727673c3f811eddd6f8489fc15f59a6b5e8f42bd75285ce4f582e37eb84142189568eaaddb50011aa950c9101abf5d4b784d31b216432c53b150690dcd15b5f9e9acd4b248d9f54d85f844cf25a93d4e53c1b36a0dfe1eebee42ff92f92b2e10d973b7b380585064906829cb8d4a3af79c2e62ca204a675879e52f19acdce597c36765a4f1e41447a51a71af"}, &(0x7f00000003c0)=0x99) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000004c0)={r4, 0xb0, &(0x7f0000000400)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x347, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e24, 0xffff3e7c, @loopback, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e21, 0xffffffff, @local, 0x5}, @in6={0xa, 0x4e24, 0x3, @local, 0x6b}]}, &(0x7f0000000500)=0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000540)=0x8, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x8c, "824095044178926cf70912219ba425ade11e3cd65b0c4af20852c03be8dd76253e809f801539db68ba13f7c5d6cd8fbdacd1192a56a534449370cafbc4ad5c79f9bc3f8d9f910e4b9c217708682414c27f3a150a70b44dde64158155c7f58d3c820adc48d69b3ba56510312a66f931c6af945159a3af7ae172cdabcb4eeb6ddb7a993ab7fcb0c24bc174b7e0"}, &(0x7f0000000640)=0xb0) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000680), 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000006c0)=0x8, &(0x7f0000000700)=0x2) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000740)=0x3, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000780)=0x1) r6 = accept(r5, &(0x7f00000007c0)=@alg, &(0x7f0000000840)=0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfc2}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x3}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000a00)={0xab, 0xc, 0x200, 0xffff, 0x880}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000a40)={r4, 0x75, 0x10}, 0xc) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$xdp(r6, &(0x7f0000000f80)={&(0x7f0000000b00)={0x2c, 0xf, r8, 0x35}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000b40)="722c877c8a373d955fa82c8dba71f98d3dd302a2", 0x14}, {&(0x7f0000000b80)="73570898cd6ee3db85615f5104d84720ff0f76e8695b0ac90fd8d5eef4fece6114ea161960798564f1b69b69d511757ee67fab9f4c5f3544b65da18e533b35f8d81b876c2155464d4d5178d37796157ca9ab5e2da7ff5d2d666f950c163ef8ef048ec7f5b8c15817fabc448608769a05835fe5e93c52dfc572ae5ef48c34cfc0b538739877ed71165084e6c20f1be33c617aa508efaefad426617df07b35a8c9622c44f3c63cdc19397669313c9f6e420c5a8f9a31d22301d1e36f7f4d892ddba5e4b6", 0xc3}, {&(0x7f0000000c80)="6318263500f13c4ffc6d4ec193a80eda7934e2dc4c7ffa81e384337bc65bb0b5efc5ce6c2205c6f53c6463ce5e2e791441f9618d14720eaf08d39ef25c6b9ba730fccebe773bf1b06ff0ab06d9ab7dbdea65c91119f559f5f1cae911400984db0493bc21c782472a2da460c54384bc33459509af23faad9b9b7ef55199737b07f1398c3ac4752f8b", 0x88}, {&(0x7f0000000d40)="593e628c4843e5729451668f3f711411aec4bb9597f912d228797da80a61f4000986be2b3b4b5004ac8494a59d835f4db343808eaff8998b71b7", 0x3a}, {&(0x7f0000000d80)="14c483f6cc469e2e358217908f85cf79a2f2f66975c348e03e0e5de885b396abfe4db3e1bfc7cb3eb68324e31625b8495df85966da35a8dd197bba912c10dd4343a1a0e2e1a90f964b486ddaf87fb202a80eef43edc168cef76afc86781d11428e48d39905802deda69092c3035c63d6d730facc3981bd2a8b81b966f82bd23e899d9f8ad66a3579176a4cfdaf06c2a71e34a585c2ca5b7c01ffc7e2cb2e7edc6424999b04683f70c20ef6f4f782f8a5974643d1b5a1b518a15a0735369f84e5d931de9d7d26", 0xc6}, {&(0x7f0000000e80)="7f", 0x1}, {&(0x7f0000000ec0)="6631f34fd82443f20bd07024c846d1e6553ed760712387962d179f6008eaa8166d7c766b76de1722e737b09f3d07a01559a51a1c6adef9528fe0c3f3", 0x3c}], 0x7, 0x0, 0x0, 0x20000000}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'syztnl2\x00', r8, 0x29, 0xff, 0x9, 0x1, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x10, 0x9, 0x80000000}}) 8.837773735s ago: executing program 0 (id=1112): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000002a80)=""/4098, 0x1002, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000400)={'bond0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xfffffffffffffc54, 0x2, {0x0, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 8.594168989s ago: executing program 3 (id=1114): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'erspan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f0000000000371c010700000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x7}, &(0x7f00000001c0)=0x1, 0x0, 0x100000000008, 0x3, 0x8f, 0xfffffffffffffefb, 0x0, 0xd5a3}}], 0x58}, 0x0) 8.315022878s ago: executing program 1 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x43, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xbc4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x10001}]}, 0x2c}}, 0xc001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}}}, 0x24}}, 0x0) 8.151799139s ago: executing program 0 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe40, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.759940612s ago: executing program 1 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async, rerun: 32) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "15fd7b02d8"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8044110) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r6}, 0x38) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000000), &(0x7f0000000380)=@udp6, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0xd3}) 7.583102316s ago: executing program 5 (id=1121): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffd, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xa, 0xf989, "247799b7b5dd"}]}}}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="bd3119fab037020de607352a978727cdd46a7ad7671829c16bb1339d3f711b7c5da66f48a8b5842dad66eedf75899eb65d733423ca5651013e1db97f5d192e302ac583ccd19e1e8a3e7812af51f0eea31c5e05cec737cc11a38936d67d4c7cd78351177f51dab5ebe8523e54dd8db33ab6214499c610051df74b67269c9b554b25c70c3238ffaa908675df728ef76e7ae5ee938e025ed07603ec4cc86ee67be10ef6087e7ff0017b358ebee016f08b756cfd2645ccdf335d8b62b630939ba724776a5f2caa487586527f2066b2845e52758b6da2ce07de99165195af70ea9659005901a0f28e90b49a0803ab10698ade4c07337535c2600c45b8c497ab6863ad984815f375df57e5940e5322d90d66c84937e9b7f2356a6e16a026b2393670d370759a4567a87fd2a4d0d5857b9e2559a5a0a857b845f0e1495e8d9b574b0f4d1a55ec8d93c148a50c5c4228c653be69a7d728fa4983e129ec4e7b821ce041be389d37efd40b81a9704e5182b9cdca1f2d3312351e9edaa8ac96088c465a953e0ec3e8f26aa17ea3e1913b4d147141d1aef80b3ed959d14fad4ead4de92e10f0faca7acdce7c712ab95a11ff4c72798565f0794d7bc50f5082b52b34a1de7c5609e31e1fcc05fc7dbd73973b5dfc92896f57f5b76fd9df5067eb273f0960560df3dfd00ba068e28812244f700d76da4197bb332245f00112b73659c63dfb854eb8eed1a9881e5c49399b2c6932b540d3464d470cabb65a62fe8119c6543923bb11bfd61db06f5455d202681199fc176e67c4714335e8f479725a37a9dea710b98e3583539fb99a076b773ecf636293b98cc5ce8302e739016b20a70e80d1227c9ac1d2d9324c8bc8312179130a44ad1528b2759f08fecded5aa3eb91f3d54928c59d7bbaeba2cc870e9b767e16e510f2b142e7b249bba2bdc19b10996643a26b9631c4dddcf7e310c7bffeff3dd7d22c4e009842059b8e14b3ef308e4bc849fcd77d6fcb2731b1f7a3c00908c1551932784e7ce430d123f4c8249a34d6b347b8507b8a2eb71a6965c5475eb63678da3cfc876dd26971dfe5755eedbe578858e938a039b312466b37a076166fb7c971f14bde339d88bc7ce7acf0cbc005d9dab73da57af154203cace21ee8cc4ab28c98467e61a5258f096aa768b2d8fb2f5618c7686464d2c69d8e817506471369865cc0c1aab81600c5e0c0300eea38c6102c02a2b9432259ccce10be43801ce79a6bb38479c40e9cbba16958d3b24a7a171e8bc3f8dc4788d072bd2f29672f182eeec86ef53400db8416e69b36cdc925322b479ed07a749161af1a03c3d7ed25ac4a43bf2c0e5bbe21cf5e43421adf7f960aca86f06d4e8744fe630571ea5c16e7772fe9b28e6a02d95d8eab4c5062569327f66140e786ae7504850472aea61884e6b05bba6387886a17b6739447e54669d50676543c4eda9b9840865e3930d00ebed9b1eeb4782297edecccaab84e34207ad569fd00a28539395b432b29bc98634a0e335ceacb3370a498095ef22ca0c080781689020e07171b8ff6d9bf4fd671eed3fa8aaa54d4d854c4da3b434332d7724aff7bec9941a07999567a49ae64f9bcbcca4f298497b940a2ab2a8aa2293362f18da3d16a6dae61e87fe2fc072ec53b0142ccf4d9080f3fd2bc244bc194ee9be3f08d256b99305ddfbef01521d262ae93ccd0c11244a90fa2460b16985e5ae68652f1d8564d5e8d94bfbc3f25f86b1b749ea14e9664bfa53eac14aba49d313689e7f8052a633573484569de148aa3296c369f969ed9f148841b277538965a6b9832d7b272d21fb773b8d59eb95ad8dcef4f877115aa0179cde53b497d15e5291a3aaef5d46b0d676798c8524d2dd2c579025ef57802dc0450b3c698611305349836ebf7c0946b07dcbc07e6e8f273eded8c7a7cb43048a8c0aa8f0cad9df1bf0b79cada49f30db48a021d7f2ff3ee535af6ef47ac9e38086c62ebbbaec8768f67", 0x581, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x2c}}, 0x20000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.33644757s ago: executing program 1 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r5, 0x4, r0}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x128, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}, @NFTA_SET_EXPRESSIONS={0x90, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 7.22526515s ago: executing program 2 (id=1124): syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) close(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7d, &(0x7f0000000040)=@assoc_value={r4, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r4, 0x5}, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) 6.988085594s ago: executing program 2 (id=1125): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x70bd29, 0x4000000, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0xf9}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0xa0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470"], 0x78}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000240)="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", 0x1000) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @mcast2, 0xfe6}, 0x1c) 6.492653365s ago: executing program 5 (id=1126): pipe(&(0x7f0000000640)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002640)=r0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x82, 0x7, 0x8, 0x1, @mcast2, @private0, 0x1, 0x1, 0x8, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x90, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x73, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @random="7d73b97d7a62", {0x5, 0x2}}, 0xdcdf, @random=0x2, 0x410, @val={0x0, 0x5, @random="0b968d613b"}, @void, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x1, 0x1, 0xdd27, 0xcd}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x83f6, 0x75}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd, 0x4, 0x20}}, @val={0x76, 0x6, {0x8, 0x8, 0x9, 0xfe00}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xac5, 0x21}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f000000cf40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x114, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "4d9f6e749eab0c15473a7baed7569062c1753ead6cb39c3b7ea312e4211befbd62f9f6880474c3bea02d5af83e57e97d08c81560c6ab527094f096fb4ec97f677e2024269ba3fcf3a0912a92d528c877358b91af7c66539c5509a92a36351599ab86333a30feaffe047b180a3f271b7fe082fa11c204cd0b2dcbf16f6de9e6a3d3bf8179fde986e8e18874d967c9aaf5"}, @NFTA_RULE_USERDATA={0x1b, 0x7, 0x1, 0x0, "ec9bcf195a139e101798893b42f5d418bcb0d47f68d533"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xd4, 0x2, 0xa, 0x605, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x22, 0x6, "c49d237a16523b3bf53d2366f2034d67392c33b945826545e40cb9a83a81"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x65, 0x6, "bc5363f71f5bec378974cce8c8a77527484668cb03f44fb9d10a28e91b17b0b982c70b932a543f8eeaaeaeb2eb07a2b1246598bdc3c8910d44751892696305ecd80aaa1fa3337086f1852404485b6c2f0a46445d591dd5809b164b69f22368cafa"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x114, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0xd4, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2410}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000001580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRES16=r10, @ANYRES16, @ANYBLOB="85d0e0205f81cf567ba5731c8c08e689589d36f2a3a928590a83f1616212fc6a6d1a230cb45551881f864aeff69ea99d4f05a9a5cb876bfd8a3ed7d8124a895d1e8639c9a1bb43080cb0613e2825e669b61489b38f91fc8e74523dc4f66b4fc5c40ad1e1d5fbe9af93f6321ffacd6dbe9186"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = epoll_create1(0x0) epoll_wait(r11, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r11, &(0x7f0000000040)=[{}], 0x1, 0xea1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000080)={0x9d32f4b220c65367}) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delneigh={0x44, 0x1d, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x0, 0x28}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0xa}, @NDA_PROBES={0x8, 0x4, 0xfffffc00}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x4011) socket$kcm(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.845724217s ago: executing program 3 (id=1127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c005600907800000303010030dee97b8cecbb4cccf074ce66d6bc6657192a590fb747eff001855bfc567785b724166ade45e7c8dca8a7a20f0be3fa555b21488b0476ef3a230b12f0c5f971e5cd9776fd303c3d3c105521daea3ea8dfac9b8b0875a85f44595787cb6c0ace28aa95ec2b50c076ce0f149c310bbdaa85e1affdf801b1f9786fc7fee00627ce65a18466228e9ab13a4db2ec7f4cfcea6da9facc07fcb50ebf7289adc74bf083f5800e093b6f6f1d1d737301f9c9333879d000000000000000"], 0x0) 4.736021702s ago: executing program 1 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x0) unshare(0x22020400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8012, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000080)=0x8001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000480)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200040c0}, 0x20000001) setsockopt$sock_int(r0, 0x1, 0x19, &(0x7f00000000c0)=0xffffdb3e, 0x4) 4.735526428s ago: executing program 5 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 4.675267118s ago: executing program 0 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.509486969s ago: executing program 3 (id=1131): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3a, &(0x7f0000002040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "a185e0", 0x4, 0x84, 0x0, @local, @remote, {[], "fa0babbf"}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x1403, 0x516, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8}, 0x0) 4.485650419s ago: executing program 5 (id=1132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x8, 0x6, {{0x6, 0x4, 0x3, 0x15, 0x18, 0x65, 0x0, 0x8, 0x0, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3d}, {[@end, @noop]}}}}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001a40)="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", 0x1000}, {&(0x7f00000008c0)="ef8b62b8528baa04329febea071d3f7ad5f84b2bfa2b2856c88e8ba2b7b25ec179756ee27d2c1b76c093fd0edec6f4ad24f75e5842a629370d3f73871e0ae3d88859ff171cadd65ded2bf19951ab8459a08ab378752ca3a41fdb66a5877960bdd5100a2f9ed5b12035ab038f50671f024d50a38b00197a55dc37866a8c05c81828a98349649510041d699a2fbd0010cc11644274873d5513f6c3c74c02b154069ad98e42963f0b7b5be981587be35281c459d56072c9e444a71990981930a895df6bba227ea6ce3d5d6e96252dca206df4bc90faaee272e4a684b4ce803c4888", 0xe0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000200100"/32, @ANYRES32=r2, @ANYRESOCT=r2], 0xd8}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x94901, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000800)=0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)) (async) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010300000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="ebac8f8e7ff9d524469c7be2231b8a258173c589f07eb199320e28fbc75be7f61852d46aceb05f3facbd56bd8d5ce2f7ca92fe6c6e463508bfa12f3fddd51fa8ded30ec88ab907be94cf482d8aaa1fc27435abeff738081c39df214219ca23d6556fc5dcb7491dbe1d8e09de4a8c056fdaa82e94843ad81670506ed926da40ce2158a2d692e4dbb1d2b0afe154c37b38e7220a8b2797a4ef8c354622f8b5fc4f913c094e94315cba371305b6ca03b9"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20200000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='host1x_cdma_push_gather\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x338, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2a0, 0x1f0, 0x1f0, 0x2a0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x7, 0x100, 0x20, 0x11, 0x3, 0x4, 0x1, 0x20, 0x18}, {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 4.404940172s ago: executing program 1 (id=1133): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc469", 0x3}], 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0xfffffffa, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x18000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0x48) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a331286dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x4, 0x10000, 0x1, 0x7, 0x9}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d46, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYBLOB="08000500"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050025bd7000000000004400000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'veth1_to_bond\x00'}) 4.104024732s ago: executing program 0 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)={0x24, r4, 0x103, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001000"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x2f) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7}, 0x57) r8 = accept4(r0, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000005c0)=0x80, 0x800) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e20, 0xeee, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb2}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x2, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x0) 4.010872577s ago: executing program 2 (id=1135): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffd}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r1) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000b00)='memory.swap.current\x00', 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)="e6cb52f62e79a6185dd87ae1d48354e21677b22be6e8da7c3600f26bf9e537b2e092b9dd03a201500ad4c6ab74fc4ee6f4423c0b1b", 0x35}, {&(0x7f0000000300)="7c749dbe974212dc7e17ef643c3ed7cad54b84717a82b895eaec6c8dee22f721c2801c4fe9795d87da620aa4b6403fea", 0x30}, {&(0x7f00000006c0)="fff88b4088f9524497442fad17eeb95d4b8a4540a6e34345a32506b1afa91e13562c1d24a3a39f4dd5903d8193cc49b81e1c9e9908b26363b3ab99740f06fe2a6126d97914dec6a6919bf1b2bd4183e48409e82209dc37daa15314abb4adbc32d6e7c9cf5296f422f331a75ac78b6e394352f31504dc527d92cc05ba05552d453c2379865308fa0b1742c57a7df0735b6f3b0734862d11c1811054fe6ae83ab3597f709ae2aaf66dab02cca32b728ccf3d85b69d5f7e08ea5ea39b921266a0485027262ce94c54ff919b611b946d79c237cf1b", 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="bab7055697746a599282474f57217bbb6001c9b8d3f3d61f31c302", 0x1b}, {&(0x7f00000027c0)="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", 0x866}], 0x2}}], 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x4, 0x1}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="3a8cf64d7322f8837e87af293489c419349e4d1b4e3994a9484859ab2b26aafb9c3cfc04078bd0bf0e3bff341cdd4d52c3e2533589278352cd13290bd716cf4c2aed4126f42b71622b18f06fd99a0afb15ec0fdf", 0x54}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x232a4f23}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x55c98fe6}}], 0x48}}, {{&(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)="e316e31c94c677b6100fd0acaf7e7c5eecedf028cb7b2859a2608d761f4e6d785e6473ccf90225d6a481d1ba06112c4303a7142d6de49b3a96e59117d31009facf4ffd6e4766963f763f0680b8ba669c8e57e0b5672a79ee86494d0f8a4ca36bd80e0da3c3d2fa0e0288e7a8fdf461d2107cc3d1796228e94037a377dd1443d8749199252c9b284e825ec94cf1f86f35a45ef3d5743638955c8e25294161f11f76736177e84cfcbf1a6e4cc861961166a8aab3395c89dc05c0e29ff28c7a34b659755a506c41165053b5b258ac5d1252510954ab775f0861d1857dcb243f1716f635423fd5e046688dffb02027303fa719", 0xf1}, {&(0x7f00000003c0)="7b91b19142149dae964d20aa5b0089b83df03fde03", 0x15}, {&(0x7f00000005c0)="c251aac181dfee591a53b6c1e7d538c4dbf19b4165190bd28d1d762fe004ca6aa3dd1f54ea910e115e9278f019a05380a184a2a8b765e3b913cbf636a28300ea6309a20cfe5d4f6abafb16d5df7c3393eac0ee96d170b68b1d39004c77b90c98d8a063606e3775357db560578c3066e61c09b4c2c9d9ed19a2b686a44a62491c1b3a6d8707efa7fc4838e0b8ac7f86fd5f8e2141faa0a1ab69415e4ad4ac930305b3c6d50525b1fa2ed1053cedd82c85e049e54c77cbd5cd429c0b1f87e7c64f9a143158494aaaf6335af2935bd8b4208df9c37da78c964af9eb8100e4500c2cf558c8db302bd3905a2319", 0xeb}, {&(0x7f00000006c0)="4809cc5257e9a3b5a1041a821d8151514f9de3b32a6dfd1ee3dcedc718c331d14266f79a687a0dabcc2f800e7f272413ed2834b48ba53d7b051bb2856c16263301e0dc7c6212add56050ec4a3cc0f1a791916de488806665bcdef145cb48188a0331f00ffa8623e179e33031b126e5b028e311661fdb83c29982074592a3ac05302be64619c2c4e2036e37a38b05d85eea6cf8494cb76add065bfe3ef01d89db7a1d2c24343cd7045eee63df7756f8b2ff3fb8c52baf98db5608d6e22fe49422bc1e50a81e9ee312c975cc29e008c4d5812979421cf5", 0xd6}, {&(0x7f00000007c0)="4e2f6b854b562b5ea363deeca6eae26fd6915ba974f22525a619fd2f67db9b610b813280dd8f09794e8ee6773f4f92a3bbdc57e233485e9eaa9fddb9ff9357effd8df788dd64f144dc17176a84e2586e4f1d04176b78e329efc409ecba836257448e886f50ada1de11684bcb82da80badafbf8eefa16d75429101b247b77b5ebdbe19ddc7ed48e5628de8d8ee381ef1eface3024ce775575c6839bd07b", 0x9d}], 0x5, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0xfffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xd78}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xd8}}], 0x2, 0x90) 3.742907337s ago: executing program 2 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x90, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x73, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @random="7d73b97d7a62", {0x5, 0x2}}, 0xdcdf, @random=0x2, 0x410, @val={0x0, 0x5, @random="0b968d613b"}, @void, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x1, 0x1, 0xdd27, 0xcd}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x83f6, 0x75}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd, 0x4, 0x20}}, @val={0x76, 0x6, {0x8, 0x8, 0x9, 0xfe00}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000a289c2770578e2c30d9a29fcf599eb0ec717055b7c6b799eb4457c987da839acfeed3f1875fc56f525bfd8a13bbcb89e6914c204b50b780d753b67b8143a7d", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf25670000000800010075000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x3bc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000001580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRES16=r7, @ANYRES16, @ANYBLOB="85d0e0205f81cf567ba5731c8c08e689589d36f2a3a928590a83f1616212fc6a6d1a230cb45551881f864aeff69ea99d4f05a9a5cb876bfd8a3ed7d8124a895d1e8639c9a1bb43080cb0613e2825e669b61489b38f91fc8e74523dc4f66b4fc5c40ad1e1d5fbe9af93f6321ffacd6dbe9186"], 0x32600) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r10 = epoll_create1(0x0) epoll_wait(r10, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r10, &(0x7f0000000040)=[{}], 0x1, 0xea1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000080)={0x9d32f4b220c65367}) ioctl$FICLONE(r8, 0x40049409, r1) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.627995233s ago: executing program 5 (id=1137): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x4, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="5040000010db2d4f6a1b8ce878df8c682e7d00ff97ca4764b715c5790176bedda7ea4d131cb2180ec3c653c06b8a2ca813cacea8fdc0ae78d008d9f0629f2f0ee4fb69b234daff7148b2f70b959e4ab9f8627dda43d29b", @ANYRES32=0x0, @ANYBLOB="4912050000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000bb0500090004000000"], 0x50}}, 0x4800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001400), 0x8) sendfile(r0, 0xffffffffffffffff, &(0x7f00000013c0)=0x3, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300000000000ff2100907812000228250000090000000000000000e0000002e0000000"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x278, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x264, 0x1, [@m_skbmod={0x160, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}]}, {0xe1, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace9aaf8a1a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x5c, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffff5fe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x2, 0x8, 0x5ca, 0x4}}]}, {0xd, 0x6, "be2efb00003dffffb4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xa4, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0xffff, 0x7, 0x5, 0xc3cd}}]}, {0x5e, 0x6, "2d3226d2e3c57ead557080202f648bcdfedc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x278}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.476580731s ago: executing program 3 (id=1138): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x4, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="5040000010db2d4f6a1b8ce878df8c682e7d00ff97ca4764b715c5790176bedda7ea4d131cb2180ec3c653c06b8a2ca813cacea8fdc0ae78d008d9f0629f2f0ee4fb69b234daff7148b2f70b959e4ab9f8627dda43d29b", @ANYRES32=0x0, @ANYBLOB="4912050000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000bb0500090004000000"], 0x50}}, 0x4800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001400), 0x8) sendfile(r0, 0xffffffffffffffff, &(0x7f00000013c0)=0x3, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300000000000ff2100907812000228250000090000000000000000e0000002e0000000"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x278, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x264, 0x1, [@m_skbmod={0x160, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf}]}, {0xe1, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace9aaf8a1a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x5c, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffff5fe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x2, 0x8, 0x5ca, 0x4}}]}, {0xd, 0x6, "be2efb00003dffffb4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xa4, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0xffff, 0x7, 0x5, 0xc3cd}}]}, {0x5e, 0x6, "2d3226d2e3c57ead557080202f648bcdfedc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x278}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003000000000000190780a010100ac1414aa030090780300183f45000000002409a133c40dc52000000000000000ac1414aaac141400c12ad56b933e52a8224f3fb7f808b6db50b3b5a11d9fb34c51b23ec380f721f1c77cb7dd51965935c78fbbd8ebb4e00a4d00ea828c88305b5b5a39d76eb72e007166f2c1ab26a81bb795cb60bc20e350a6d7e856d5b00cb48a34ce111d5ffeaa946cbf001cfcfd79c44d398df70b134279631012a7192466a1c87b66cc3e08c225f729bb9ccdd0cbcaa0f1d33f5d574ebe8e2306232ebc5526dbf31166f9fa15e1caee86d2f01cb7b71836c9db55260b4c76a973631fe24515af5e92cda9d852582b6353be1ce3003698cb7567fea12f7c448d1375e64a4f178edba46c0e7cadad7e27b4a03e20821c59858be4c32d5710717608394a82d91fe2f3c3cf98e01f4be7753ecaf4e12572c87cb39c1ef7a1ebf66e978fbd17225bc7b77517af2c7d63ad5485dd85a15b77"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.314383936s ago: executing program 1 (id=1139): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_batadv\x00', {0x4}, 0x8d06}) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000140)="3badf22db08f10c7d67ab7e9b54f2cce1c1ecece013842c30b0f3324d58d39c1d3c25e35a12b024ea141d9b8a46cc2c3640def3cae29801c7afdd12ad68065765887b269a13c8d9244e5fa27f054af8e2aed31d03f138e99655543acf2b294df6dbcadfbf0c505a1fe780f35e07b0ad1c6327cb3c0570388e2b89a4c4a24fb9aaeaa6d26666badd63e5b1ee08b9a688746eec1eadb43c959bc3cfe6e84d53a98826dc03e5c5c92a78e9fae1d6f403a5c3cffd8dbc90d5b010344866114703cb8d32114d93783d23fd9cc5ce594b0f8b273a81753", 0xd4, 0xc1, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty, 0x2}, 0x1c) (async) unshare(0x12001a00) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x2000300) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x0, 0x8, 0xfd}}, 0x3) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000004c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) recvmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/33, 0x21}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/68, 0x44}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x9, &(0x7f00000019c0)=""/101, 0x65}, 0xf3bc}, {{&(0x7f0000001a40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001ac0)=""/175, 0xaf}], 0x1, &(0x7f0000001bc0)=""/206, 0xce}, 0x6}], 0x2, 0x1, &(0x7f0000001d40)) (async) bind$inet6(r1, &(0x7f0000001d80)={0xa, 0x4e20, 0x8000, @remote, 0x1ff}, 0x1c) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) (async) connect$inet6(r1, &(0x7f0000001e40)={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000001ec0)={0x368, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x334, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "559e9e1363b5d3230dc6b43c2a0cc00b5d6c878fd8f4a49673413936287a1820"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xfffffc15, @mcast2}}, @WGPEER_A_FLAGS={0x8}]}, {0x250, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4ff5, @private0}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000001, @loopback, 0x1}}, @WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d1a635d335c5b9badd6c34bf03b8c93a7d8f62536fdda33a162df6d76613245a"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, 0x77c7}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffd}, @WGDEVICE_A_FLAGS={0x8}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000884}, 0x1) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000022c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@bloom_filter={0x1e, 0x0, 0x6, 0x6, 0x44020, r7, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'vcan0\x00'}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000026c0)={&(0x7f0000002480)={0x21c, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) sendmsg$nl_route_sched(r5, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0xc349f296dd172c3e}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)=@getqdisc={0x30, 0x26, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0x8}, {0x9, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x4) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x48, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000104}, 0x20000004) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) 3.224105057s ago: executing program 2 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe40, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.849115833s ago: executing program 0 (id=1141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006c0001"], 0x20}}, 0x20004800) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1eb481, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000009a5f00007c0000007c000000060000000000000000000003000000000400000002000000070000000600000004000006bb0400000002000000000000800800000000544014a0c6abe29adc0c0000000a000000060000000200000001000000090000000000000c010000000100001000000011010000000a0000000c00000000000011010000000a0000000a00000000000002050000000000610061"], &(0x7f00000000c0)=""/179, 0x9a, 0xb3, 0x0, 0x3cf, 0x10000, @value}, 0x28) r2 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r2, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f00000001c0)=0x3ff, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000710600000000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x1e, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000440)=0x2, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000cf, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@private, @in=@local}}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in6=@remote, @in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, @in6=@remote, @in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xec}}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x8, r4}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, 0x0, &(0x7f0000000140)=""/248}, 0x20) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380), 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0x8) 42.642031ms ago: executing program 5 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 0s ago: executing program 2 (id=1143): syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2, 0x5, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x29, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100, 0x4) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): idge_slave_0: entered promiscuous mode [ 60.869275][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.876586][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.883994][ T5842] bridge_slave_1: entered allmulticast mode [ 60.890883][ T5842] bridge_slave_1: entered promiscuous mode [ 60.905030][ T5832] team0: Port device team_slave_1 added [ 60.912785][ T5833] team0: Port device team_slave_0 added [ 60.927106][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.934357][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.941682][ T5837] bridge_slave_0: entered allmulticast mode [ 60.949757][ T5837] bridge_slave_0: entered promiscuous mode [ 60.958443][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.984386][ T5833] team0: Port device team_slave_1 added [ 60.990292][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.999517][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.008482][ T5837] bridge_slave_1: entered allmulticast mode [ 61.016903][ T5837] bridge_slave_1: entered promiscuous mode [ 61.025796][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.081297][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.093086][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.104935][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.111884][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.138091][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.150584][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.158000][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.184916][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.213075][ T5846] team0: Port device team_slave_0 added [ 61.241089][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.248348][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.274861][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.287707][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.294816][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.321009][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.334428][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.349077][ T5846] team0: Port device team_slave_1 added [ 61.367140][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.394652][ T5842] team0: Port device team_slave_0 added [ 61.435467][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.442525][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.469473][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.482515][ T5842] team0: Port device team_slave_1 added [ 61.499485][ T5832] hsr_slave_0: entered promiscuous mode [ 61.507131][ T5832] hsr_slave_1: entered promiscuous mode [ 61.527354][ T5837] team0: Port device team_slave_0 added [ 61.539884][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.546952][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.573256][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.601129][ T5837] team0: Port device team_slave_1 added [ 61.620767][ T5833] hsr_slave_0: entered promiscuous mode [ 61.629299][ T5833] hsr_slave_1: entered promiscuous mode [ 61.636022][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.644467][ T5833] Cannot create hsr debugfs directory [ 61.650590][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.657806][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.665227][ T5148] Bluetooth: hci1: command tx timeout [ 61.689528][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.726069][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.733037][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.744025][ T5839] Bluetooth: hci3: command tx timeout [ 61.764838][ T5841] Bluetooth: hci2: command tx timeout [ 61.770678][ T5148] Bluetooth: hci0: command tx timeout [ 61.776816][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.803284][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.810305][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.836727][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.844863][ T5839] Bluetooth: hci4: command tx timeout [ 61.849091][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.859875][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.886186][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.932840][ T5846] hsr_slave_0: entered promiscuous mode [ 61.939632][ T5846] hsr_slave_1: entered promiscuous mode [ 61.946189][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.954124][ T5846] Cannot create hsr debugfs directory [ 62.024702][ T5842] hsr_slave_0: entered promiscuous mode [ 62.030870][ T5842] hsr_slave_1: entered promiscuous mode [ 62.037803][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.045826][ T5842] Cannot create hsr debugfs directory [ 62.077431][ T5837] hsr_slave_0: entered promiscuous mode [ 62.084357][ T5837] hsr_slave_1: entered promiscuous mode [ 62.090298][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.098454][ T5837] Cannot create hsr debugfs directory [ 62.364720][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.393466][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.416769][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.427043][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.483612][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.496551][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.510672][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.521388][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.586525][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.600075][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.636788][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.656663][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.707055][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.717882][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.730014][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.746724][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.798803][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.838683][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.848905][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.859379][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.883144][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.898226][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.919414][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.926668][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.963460][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.970624][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.997927][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.049851][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.068690][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.075821][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.101648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.108801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.128789][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.210947][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.233210][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.260731][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.267981][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.299997][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.307153][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.340632][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.376471][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.412522][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.419678][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.438505][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.445676][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.480525][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.491017][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.520566][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.527737][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.588140][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.595322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.647898][ T5832] veth0_vlan: entered promiscuous mode [ 63.712061][ T5832] veth1_vlan: entered promiscuous mode [ 63.745191][ T5839] Bluetooth: hci1: command tx timeout [ 63.818639][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.829397][ T5839] Bluetooth: hci3: command tx timeout [ 63.829451][ T5839] Bluetooth: hci0: command tx timeout [ 63.829496][ T5839] Bluetooth: hci2: command tx timeout [ 63.870107][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.903881][ T5148] Bluetooth: hci4: command tx timeout [ 63.912946][ T5832] veth0_macvtap: entered promiscuous mode [ 63.970688][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.985821][ T5832] veth1_macvtap: entered promiscuous mode [ 64.010599][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.100261][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.133140][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.153287][ T5842] veth0_vlan: entered promiscuous mode [ 64.168232][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.184358][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.193090][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.202700][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.247079][ T5842] veth1_vlan: entered promiscuous mode [ 64.260307][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.272179][ T5837] veth0_vlan: entered promiscuous mode [ 64.311094][ T5837] veth1_vlan: entered promiscuous mode [ 64.339313][ T5842] veth0_macvtap: entered promiscuous mode [ 64.367077][ T5842] veth1_macvtap: entered promiscuous mode [ 64.428093][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.440198][ T5833] veth0_vlan: entered promiscuous mode [ 64.443624][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.481186][ T5833] veth1_vlan: entered promiscuous mode [ 64.505652][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.517005][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.529490][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.540846][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.554945][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.566108][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.587949][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.591624][ T5837] veth0_macvtap: entered promiscuous mode [ 64.601728][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.605630][ T5846] veth0_vlan: entered promiscuous mode [ 64.624276][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.633109][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.642356][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.651753][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.668145][ T5846] veth1_vlan: entered promiscuous mode [ 64.680391][ T5837] veth1_macvtap: entered promiscuous mode [ 64.728442][ T5833] veth0_macvtap: entered promiscuous mode [ 64.760785][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.782487][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.806430][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.817098][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.827895][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.839737][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.853187][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.865368][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.876154][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.886893][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.897734][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.915574][ T5833] veth1_macvtap: entered promiscuous mode [ 64.928807][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.938984][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.948549][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.957842][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.968960][ T5846] veth0_macvtap: entered promiscuous mode [ 65.030186][ T5917] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 65.038865][ T5917] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.062852][ T5846] veth1_macvtap: entered promiscuous mode [ 65.076679][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.091044][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.111365][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.123625][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.139184][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.151002][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.167170][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.180370][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.197188][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.244022][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.251889][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.271405][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.291347][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.301566][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.312421][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.322590][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.333795][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.345766][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.356484][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.365298][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.374116][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.382812][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.396499][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.407277][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.417534][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.428520][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.439611][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.450562][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.460515][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.471043][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.482110][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.492302][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.502842][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.512999][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.523555][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.533781][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.544786][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.554682][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.565196][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.576126][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.624789][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636336][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645950][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.655412][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.748666][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.777612][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.779282][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.809403][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.824959][ T5148] Bluetooth: hci1: command tx timeout [ 65.903965][ T5148] Bluetooth: hci2: command tx timeout [ 65.909502][ T5148] Bluetooth: hci0: command tx timeout [ 65.915367][ T5148] Bluetooth: hci3: command tx timeout [ 65.967953][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.982086][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.989700][ T5839] Bluetooth: hci4: command tx timeout [ 66.106142][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.131201][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.154356][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.161200][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.263670][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.273916][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.543359][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 66.985409][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 67.020648][ T5965] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 67.073956][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17'. [ 67.083637][ T5965] veth0_vlan: entered allmulticast mode [ 67.089865][ T5965] bridge0: port 3(veth0_vlan) entered blocking state [ 67.109587][ T5965] bridge0: port 3(veth0_vlan) entered disabled state [ 67.130798][ T5965] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 67.243317][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 67.335399][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 67.413591][ T5976] netlink: 'syz.4.19': attribute type 13 has an invalid length. [ 67.421515][ T5976] netlink: 'syz.4.19': attribute type 11 has an invalid length. [ 67.910673][ T5839] Bluetooth: hci1: command tx timeout [ 67.994118][ T5839] Bluetooth: hci3: command tx timeout [ 67.999691][ T5148] Bluetooth: hci0: command tx timeout [ 67.999704][ T5841] Bluetooth: hci2: command tx timeout [ 68.065531][ T5841] Bluetooth: hci4: command tx timeout [ 68.346117][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 68.358038][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.455864][ T6024] Zero length message leads to an empty skb [ 68.491970][ T6022] netlink: 'syz.0.31': attribute type 11 has an invalid length. [ 68.675767][ T6015] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.29'. [ 68.803664][ T6037] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 68.837062][ T6037] macvlan2: entered allmulticast mode [ 68.842672][ T6037] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 68.860415][ T6037] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 68.872204][ T6041] Illegal XDP return value 8 on prog (id 13) dev N/A, expect packet loss! [ 69.330020][ T6057] netlink: 94 bytes leftover after parsing attributes in process `syz.4.42'. [ 69.379228][ T6059] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 69.398304][ T6061] sctp: [Deprecated]: syz.4.44 (pid 6061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.398304][ T6061] Use struct sctp_sack_info instead [ 69.417778][ T6061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.44'. [ 69.625581][ T6070] dccp_invalid_packet: P.Data Offset(172) too large [ 69.688474][ T6069] netlink: 'syz.1.47': attribute type 12 has an invalid length. [ 70.155426][ T6096] __nla_validate_parse: 3 callbacks suppressed [ 70.155445][ T6096] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.52'. [ 70.285986][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.393376][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 70.436778][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 70.532423][ T6114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 70.798711][ T6133] netlink: 80 bytes leftover after parsing attributes in process `syz.4.63'. [ 70.877830][ T6136] pim6reg: entered allmulticast mode [ 70.937271][ T6136] pim6reg: left allmulticast mode [ 70.982494][ T6143] netlink: 112 bytes leftover after parsing attributes in process `syz.4.63'. [ 71.005135][ T6142] tipc: Failed to remove unknown binding: 66,1,1/0:3159890977/3159890979 [ 71.051315][ T6142] tipc: Failed to remove unknown binding: 66,1,1/0:3159890977/3159890979 [ 71.194760][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 71.249122][ T6149] netlink: 244 bytes leftover after parsing attributes in process `syz.3.66'. [ 71.313979][ T6158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'. [ 71.327080][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 71.342525][ T6159] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 71.392471][ T6160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.420593][ T6152] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 71.432737][ T6162] sock: sock_timestamping_bind_phc: sock not bind to device [ 71.676199][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.682756][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.913768][ T6184] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 72.099163][ T6190] syzkaller0: entered promiscuous mode [ 72.117646][ T6190] syzkaller0: entered allmulticast mode [ 72.167015][ T6200] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 72.437265][ T6210] sctp: [Deprecated]: syz.1.84 (pid 6210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.437265][ T6210] Use struct sctp_sack_info instead [ 74.923933][ T6293] xt_l2tp: wrong L2TP version: 0 [ 75.653781][ T6318] __nla_validate_parse: 42 callbacks suppressed [ 75.653803][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.107'. [ 75.745622][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 75.972633][ T6339] netlink: 5 bytes leftover after parsing attributes in process `syz.3.111'. [ 75.993744][ T6339] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 76.101907][ T6339] 0ªX¹¦Dö»: entered allmulticast mode [ 76.425283][ T6361] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.116'. [ 76.476468][ T6364] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 77.384145][ T6399] netem: incorrect ge model size [ 77.403300][ T6399] netem: change failed [ 77.817915][ T6415] tun0: tun_chr_ioctl cmd 2147767519 [ 77.826433][ T6410] netlink: 'syz.2.133': attribute type 16 has an invalid length. [ 77.843572][ T6410] netlink: 'syz.2.133': attribute type 2 has an invalid length. [ 77.856669][ T6410] netlink: 62854 bytes leftover after parsing attributes in process `syz.2.133'. [ 78.073766][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.135'. [ 78.310922][ T6406] IPVS: You probably need to specify IP address on multicast interface. [ 78.337998][ T6406] IPVS: Error connecting to the multicast addr [ 78.627198][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 78.677389][ T6436] block nbd0: not configured, cannot reconfigure [ 78.948696][ T6454] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.141'. [ 80.423747][ T6514] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 80.642424][ T6525] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 81.575400][ T6574] netlink: 'syz.2.159': attribute type 2 has an invalid length. [ 81.620604][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 81.633876][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.662105][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.733408][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.751075][ T6583] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.160'. [ 81.774250][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.919194][ T25] cfg80211: failed to load regulatory.db [ 82.616457][ T6629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.928341][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 83.323915][ T6669] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.182'. [ 83.771544][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 83.870582][ T6689] FAULT_INJECTION: forcing a failure. [ 83.870582][ T6689] name failslab, interval 1, probability 0, space 0, times 1 [ 83.884274][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.2.190 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 83.894906][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.905007][ T6689] Call Trace: [ 83.908310][ T6689] [ 83.911263][ T6689] dump_stack_lvl+0x241/0x360 [ 83.915991][ T6689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.921218][ T6689] ? __pfx__printk+0x10/0x10 [ 83.925818][ T6689] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 83.931798][ T6689] ? __pfx___might_resched+0x10/0x10 [ 83.937086][ T6689] should_fail_ex+0x3b0/0x4e0 [ 83.941762][ T6689] should_failslab+0xac/0x100 [ 83.946442][ T6689] kmem_cache_alloc_node_noprof+0x77/0x380 [ 83.952249][ T6689] ? __alloc_skb+0x1c3/0x440 [ 83.956844][ T6689] __alloc_skb+0x1c3/0x440 [ 83.961261][ T6689] ? __pfx___alloc_skb+0x10/0x10 [ 83.966199][ T6689] ? netlink_autobind+0xd6/0x2f0 [ 83.971135][ T6689] ? netlink_autobind+0x2b0/0x2f0 [ 83.976158][ T6689] netlink_sendmsg+0x638/0xcb0 [ 83.980929][ T6689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.986213][ T6689] ? aa_sock_msg_perm+0x91/0x160 [ 83.991149][ T6689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.996428][ T6689] __sock_sendmsg+0x221/0x270 [ 84.001108][ T6689] ____sys_sendmsg+0x52a/0x7e0 [ 84.005880][ T6689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.011252][ T6689] ? __fget_files+0x2a/0x410 [ 84.015841][ T6689] ? __fget_files+0x2a/0x410 [ 84.020436][ T6689] __sys_sendmsg+0x269/0x350 [ 84.025028][ T6689] ? __pfx_lock_release+0x10/0x10 [ 84.030078][ T6689] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.035200][ T6689] ? __pfx_vfs_write+0x10/0x10 [ 84.039979][ T6689] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.046303][ T6689] ? do_syscall_64+0x100/0x230 [ 84.051065][ T6689] ? do_syscall_64+0xb6/0x230 [ 84.055746][ T6689] do_syscall_64+0xf3/0x230 [ 84.060249][ T6689] ? clear_bhb_loop+0x35/0x90 [ 84.064927][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.070832][ T6689] RIP: 0033:0x7f31c1f85d29 [ 84.075261][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.094871][ T6689] RSP: 002b:00007f31c2d5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.103370][ T6689] RAX: ffffffffffffffda RBX: 00007f31c2175fa0 RCX: 00007f31c1f85d29 [ 84.111335][ T6689] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 84.119298][ T6689] RBP: 00007f31c2d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 84.127270][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.135233][ T6689] R13: 0000000000000000 R14: 00007f31c2175fa0 R15: 00007ffc16be64a8 [ 84.143210][ T6689] [ 84.222094][ T51] IPVS: starting estimator thread 0... [ 84.306503][ T6698] netlink: 'syz.2.193': attribute type 4 has an invalid length. [ 84.333934][ T6694] IPVS: using max 23 ests per chain, 55200 per kthread [ 84.355789][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 84.385076][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 84.415457][ T6700] syz_tun: entered promiscuous mode [ 84.450742][ T6700] syz_tun: left promiscuous mode [ 84.727554][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 84.799002][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 84.861746][ T3524] IPVS: stop unused estimator thread 0... [ 85.005345][ T6711] xt_CT: No such helper "netbios-ns" [ 85.235640][ T6727] syzkaller0: entered promiscuous mode [ 85.249309][ T6727] syzkaller0: entered allmulticast mode [ 85.449394][ T6736] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.202'. [ 85.745058][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 88.777413][ T6768] __nla_validate_parse: 1 callbacks suppressed [ 88.777434][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 88.830563][ T6769] xt_bpf: check failed: parse error [ 89.653760][ T6788] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 89.852153][ T6786] netlink: 'syz.2.214': attribute type 21 has an invalid length. [ 89.884550][ T6788] netlink: 2 bytes leftover after parsing attributes in process `syz.3.217'. [ 89.929022][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 90.023451][ T6788] bridge0: entered promiscuous mode [ 90.298647][ T6779] batadv0: entered promiscuous mode [ 90.384665][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.822908][ T12] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 91.020977][ T6798] netlink: 192 bytes leftover after parsing attributes in process `syz.1.219'. [ 91.526952][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.972094][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 92.335194][ T6835] tipc: Enabling of bearer rejected, failed to enable media [ 92.804391][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. [ 93.606863][ T6867] team0: entered promiscuous mode [ 93.622342][ T6867] team_slave_0: entered promiscuous mode [ 93.639810][ T6867] team_slave_1: entered promiscuous mode [ 93.687153][ T6867] batadv_slave_1: entered promiscuous mode [ 93.721407][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.237'. [ 94.381197][ T6883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.541634][ T6883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.668332][ T6883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.780595][ T6883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.979004][ T6899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 94.992437][ T6883] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.060647][ T6883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.076589][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 95.091529][ T6883] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.130939][ T6883] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.364281][ T6910] netlink: 'syz.2.247': attribute type 5 has an invalid length. [ 95.771973][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 95.799389][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.250'. [ 95.845142][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 95.892497][ T6918] bridge_slave_1: left allmulticast mode [ 95.940737][ T6918] bridge_slave_1: left promiscuous mode [ 95.973772][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.037809][ T6918] bridge_slave_0: left allmulticast mode [ 96.113591][ T6918] bridge_slave_0: left promiscuous mode [ 96.119392][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.260681][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.253'. [ 96.283389][ T6921] Bluetooth: MGMT ver 1.23 [ 96.453029][ T6930] syz.3.252[6930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.453269][ T6930] syz.3.252[6930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.499262][ T6930] syz.3.252[6930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.960477][ T6913] xt_policy: output policy not valid in PREROUTING and INPUT [ 97.035067][ T6942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.255'. [ 97.067538][ T6913] netlink: 'syz.1.248': attribute type 21 has an invalid length. [ 97.102590][ T6913] netlink: 128 bytes leftover after parsing attributes in process `syz.1.248'. [ 97.214625][ T6913] netlink: 'syz.1.248': attribute type 5 has an invalid length. [ 97.249852][ T6913] netlink: 'syz.1.248': attribute type 6 has an invalid length. [ 97.283683][ T6913] netlink: 3 bytes leftover after parsing attributes in process `syz.1.248'. [ 97.368150][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.256'. [ 99.239508][ T6996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.296244][ T6996] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 99.985655][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.995880][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.003672][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.011489][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.019921][ T5148] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.027429][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.877161][ T7004] chnl_net:caif_netlink_parms(): no params data found [ 102.223924][ T5148] Bluetooth: hci5: command tx timeout [ 102.244179][ T7033] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 102.757923][ T7033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.799202][ T7035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.810277][ T7035] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 103.016698][ T7035] bond1: (slave vcan1): Error -95 calling set_mac_address [ 104.306262][ T5148] Bluetooth: hci5: command tx timeout [ 104.434137][ T7059] FAULT_INJECTION: forcing a failure. [ 104.434137][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 104.514833][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.1.284 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 104.525478][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.535559][ T7059] Call Trace: [ 104.538851][ T7059] [ 104.541801][ T7059] dump_stack_lvl+0x241/0x360 [ 104.546505][ T7059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.551724][ T7059] ? __pfx__printk+0x10/0x10 [ 104.556368][ T7059] should_fail_ex+0x3b0/0x4e0 [ 104.561061][ T7059] should_failslab+0xac/0x100 [ 104.565758][ T7059] ? skb_clone+0x20c/0x390 [ 104.570182][ T7059] kmem_cache_alloc_noprof+0x70/0x380 [ 104.575575][ T7059] skb_clone+0x20c/0x390 [ 104.579842][ T7059] __netlink_deliver_tap+0x3cc/0x7f0 [ 104.585151][ T7059] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.590387][ T7059] netlink_deliver_tap+0x19d/0x1b0 [ 104.595528][ T7059] netlink_unicast+0x7c4/0x990 [ 104.600417][ T7059] ? __pfx_netlink_unicast+0x10/0x10 [ 104.605717][ T7059] ? __virt_addr_valid+0x45f/0x530 [ 104.610853][ T7059] ? __phys_addr_symbol+0x2f/0x70 [ 104.615889][ T7059] ? __check_object_size+0x47a/0x730 [ 104.621192][ T7059] netlink_sendmsg+0x8e4/0xcb0 [ 104.626070][ T7059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.631372][ T7059] ? aa_sock_msg_perm+0x91/0x160 [ 104.636335][ T7059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.641632][ T7059] __sock_sendmsg+0x221/0x270 [ 104.646328][ T7059] ____sys_sendmsg+0x52a/0x7e0 [ 104.651210][ T7059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.656517][ T7059] ? __fget_files+0x2a/0x410 [ 104.661129][ T7059] ? __fget_files+0x2a/0x410 [ 104.665741][ T7059] __sys_sendmsg+0x269/0x350 [ 104.670343][ T7059] ? __pfx_lock_release+0x10/0x10 [ 104.675381][ T7059] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.680516][ T7059] ? __pfx_vfs_write+0x10/0x10 [ 104.685317][ T7059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.691667][ T7059] ? do_syscall_64+0x100/0x230 [ 104.696449][ T7059] ? do_syscall_64+0xb6/0x230 [ 104.701145][ T7059] do_syscall_64+0xf3/0x230 [ 104.705658][ T7059] ? clear_bhb_loop+0x35/0x90 [ 104.710351][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.716257][ T7059] RIP: 0033:0x7fe7b8585d29 [ 104.720684][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.740315][ T7059] RSP: 002b:00007fe7b940e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.748744][ T7059] RAX: ffffffffffffffda RBX: 00007fe7b8775fa0 RCX: 00007fe7b8585d29 [ 104.756733][ T7059] RDX: 0000000000000800 RSI: 0000000020000100 RDI: 0000000000000003 [ 104.764722][ T7059] RBP: 00007fe7b940e090 R08: 0000000000000000 R09: 0000000000000000 [ 104.772704][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.780687][ T7059] R13: 0000000000000000 R14: 00007fe7b8775fa0 R15: 00007ffdf6954df8 [ 104.788692][ T7059] [ 105.008067][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.038884][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.093944][ T7004] bridge_slave_0: entered allmulticast mode [ 105.117171][ T7004] bridge_slave_0: entered promiscuous mode [ 105.255487][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.294859][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.312903][ T7004] bridge_slave_1: entered allmulticast mode [ 105.341684][ T7004] bridge_slave_1: entered promiscuous mode [ 105.384643][ T7061] __nla_validate_parse: 7 callbacks suppressed [ 105.384664][ T7061] netlink: 80 bytes leftover after parsing attributes in process `syz.2.285'. [ 105.587787][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.695255][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.616094][ T5148] Bluetooth: hci5: command tx timeout [ 106.710151][ T7004] team0: Port device team_slave_0 added [ 106.718353][ T7004] team0: Port device team_slave_1 added [ 106.743410][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.750533][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.776710][ T7004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.789346][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.796371][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.822606][ T7004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.892823][ T7004] hsr_slave_0: entered promiscuous mode [ 106.900130][ T7004] hsr_slave_1: entered promiscuous mode [ 106.945991][ T7004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.983745][ T7004] Cannot create hsr debugfs directory [ 107.518498][ T7087] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 107.555710][ T7087] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 108.038380][ T7004] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.087168][ T5210] udevd[5210]: worker [5838] terminated by signal 33 (Unknown signal 33) [ 108.111324][ T7099] FAULT_INJECTION: forcing a failure. [ 108.111324][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 108.124203][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.2.297 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 108.134820][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.144896][ T7099] Call Trace: [ 108.148192][ T7099] [ 108.151132][ T7099] dump_stack_lvl+0x241/0x360 [ 108.155922][ T7099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.161142][ T7099] ? __pfx__printk+0x10/0x10 [ 108.165758][ T7099] should_fail_ex+0x3b0/0x4e0 [ 108.170450][ T7099] should_failslab+0xac/0x100 [ 108.175142][ T7099] ? skb_clone+0x20c/0x390 [ 108.179568][ T7099] kmem_cache_alloc_noprof+0x70/0x380 [ 108.184957][ T7099] skb_clone+0x20c/0x390 [ 108.189216][ T7099] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 108.194424][ T7099] dev_queue_xmit_nit+0x249/0xca0 [ 108.199460][ T7099] ? dev_queue_xmit_nit+0x2b/0xca0 [ 108.204583][ T7099] ? validate_xmit_skb+0x9b8/0xff0 [ 108.209710][ T7099] dev_hard_start_xmit+0x15f/0x7d0 [ 108.214849][ T7099] ? __pfx_validate_xmit_skb+0x10/0x10 [ 108.220332][ T7099] __dev_queue_xmit+0x1b73/0x3f50 [ 108.225367][ T7099] ? kasan_save_track+0x51/0x80 [ 108.230232][ T7099] ? ____sys_sendmsg+0x52a/0x7e0 [ 108.235193][ T7099] ? __dev_queue_xmit+0x2f4/0x3f50 [ 108.240328][ T7099] ? __pfx___dev_queue_xmit+0x10/0x10 [ 108.245732][ T7099] ? __copy_skb_header+0x437/0x5b0 [ 108.250855][ T7099] ? __asan_memcpy+0x40/0x70 [ 108.255454][ T7099] ? __copy_skb_header+0x437/0x5b0 [ 108.260581][ T7099] ? __skb_clone+0x454/0x6c0 [ 108.265193][ T7099] ? skb_clone+0x240/0x390 [ 108.269625][ T7099] __netlink_deliver_tap+0x56b/0x7f0 [ 108.274934][ T7099] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.280148][ T7099] netlink_deliver_tap+0x19d/0x1b0 [ 108.285275][ T7099] netlink_unicast+0x7c4/0x990 [ 108.290057][ T7099] ? __pfx_netlink_unicast+0x10/0x10 [ 108.295349][ T7099] ? __virt_addr_valid+0x45f/0x530 [ 108.300477][ T7099] ? __phys_addr_symbol+0x2f/0x70 [ 108.305508][ T7099] ? __check_object_size+0x47a/0x730 [ 108.310810][ T7099] netlink_sendmsg+0x8e4/0xcb0 [ 108.315597][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.320896][ T7099] ? aa_sock_msg_perm+0x91/0x160 [ 108.325850][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.331148][ T7099] __sock_sendmsg+0x221/0x270 [ 108.335850][ T7099] ____sys_sendmsg+0x52a/0x7e0 [ 108.340641][ T7099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.345939][ T7099] ? __fget_files+0x2a/0x410 [ 108.350551][ T7099] ? __fget_files+0x2a/0x410 [ 108.355169][ T7099] __sys_sendmsg+0x269/0x350 [ 108.359773][ T7099] ? __pfx_lock_release+0x10/0x10 [ 108.364813][ T7099] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.369949][ T7099] ? __pfx_vfs_write+0x10/0x10 [ 108.374756][ T7099] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.381100][ T7099] ? do_syscall_64+0x100/0x230 [ 108.385880][ T7099] ? do_syscall_64+0xb6/0x230 [ 108.390572][ T7099] do_syscall_64+0xf3/0x230 [ 108.395088][ T7099] ? clear_bhb_loop+0x35/0x90 [ 108.399780][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.405686][ T7099] RIP: 0033:0x7f31c1f85d29 [ 108.410113][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.429751][ T7099] RSP: 002b:00007f31c2d5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.438216][ T7099] RAX: ffffffffffffffda RBX: 00007f31c2175fa0 RCX: 00007f31c1f85d29 [ 108.446205][ T7099] RDX: 0000000000000800 RSI: 0000000020000100 RDI: 0000000000000003 [ 108.454190][ T7099] RBP: 00007f31c2d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 108.462172][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.470153][ T7099] R13: 0000000000000000 R14: 00007f31c2175fa0 R15: 00007ffc16be64a8 [ 108.478154][ T7099] [ 108.514937][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 108.631563][ T5148] Bluetooth: hci5: command tx timeout [ 108.746913][ T7004] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.783960][ T7004] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.805210][ T7004] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.943102][ T7107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.175576][ T7107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.268885][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.329741][ T7107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.480007][ T7114] netlink: 96 bytes leftover after parsing attributes in process `syz.2.302'. [ 109.536680][ T7115] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 109.581824][ T7114] vlan2: entered allmulticast mode [ 109.629716][ T7114] ip6gretap0: entered allmulticast mode [ 109.743996][ T7107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.827091][ T7119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.848283][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.903630][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.910799][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.951832][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.959387][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.114738][ T7107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.185821][ T7107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.262226][ T7107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.417092][ T7107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.434786][ T7132] tipc: Started in network mode [ 110.439844][ T7132] tipc: Node identity ffff0000000000000080ffffffffffff, cluster identity 4711 [ 110.629357][ T7143] FAULT_INJECTION: forcing a failure. [ 110.629357][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 110.784552][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.0.309 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 110.795290][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.805364][ T7143] Call Trace: [ 110.808660][ T7143] [ 110.811609][ T7143] dump_stack_lvl+0x241/0x360 [ 110.816332][ T7143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.821807][ T7143] ? __pfx__printk+0x10/0x10 [ 110.826415][ T7143] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 110.832412][ T7143] ? __pfx___might_resched+0x10/0x10 [ 110.837718][ T7143] should_fail_ex+0x3b0/0x4e0 [ 110.842414][ T7143] should_failslab+0xac/0x100 [ 110.847112][ T7143] kmem_cache_alloc_node_noprof+0x77/0x380 [ 110.852942][ T7143] ? __alloc_skb+0x1c3/0x440 [ 110.857554][ T7143] __alloc_skb+0x1c3/0x440 [ 110.861989][ T7143] ? __pfx___alloc_skb+0x10/0x10 [ 110.866955][ T7143] ? netlink_ack_tlv_len+0x6e/0x200 [ 110.872169][ T7143] netlink_ack+0x145/0xa50 [ 110.876595][ T7143] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 110.881983][ T7143] ? __pfx_nl80211_post_doit+0x10/0x10 [ 110.887458][ T7143] ? __pfx___might_resched+0x10/0x10 [ 110.892770][ T7143] netlink_rcv_skb+0x262/0x430 [ 110.897557][ T7143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.902605][ T7143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.908000][ T7143] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 110.913478][ T7143] genl_rcv+0x28/0x40 [ 110.917474][ T7143] netlink_unicast+0x7f6/0x990 [ 110.922257][ T7143] ? __pfx_netlink_unicast+0x10/0x10 [ 110.927548][ T7143] ? __virt_addr_valid+0x45f/0x530 [ 110.932680][ T7143] ? __phys_addr_symbol+0x2f/0x70 [ 110.937724][ T7143] ? __check_object_size+0x47a/0x730 [ 110.943029][ T7143] netlink_sendmsg+0x8e4/0xcb0 [ 110.947817][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.953114][ T7143] ? aa_sock_msg_perm+0x91/0x160 [ 110.958071][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.963372][ T7143] __sock_sendmsg+0x221/0x270 [ 110.968073][ T7143] ____sys_sendmsg+0x52a/0x7e0 [ 110.972855][ T7143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.978150][ T7143] ? __fget_files+0x2a/0x410 [ 110.982786][ T7143] ? __fget_files+0x2a/0x410 [ 110.987487][ T7143] __sys_sendmsg+0x269/0x350 [ 110.992096][ T7143] ? __pfx_lock_release+0x10/0x10 [ 110.997150][ T7143] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.002383][ T7143] ? __pfx_vfs_write+0x10/0x10 [ 111.007191][ T7143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.013544][ T7143] ? do_syscall_64+0x100/0x230 [ 111.018326][ T7143] ? do_syscall_64+0xb6/0x230 [ 111.023024][ T7143] do_syscall_64+0xf3/0x230 [ 111.027541][ T7143] ? clear_bhb_loop+0x35/0x90 [ 111.032242][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.038147][ T7143] RIP: 0033:0x7f21acd85d29 [ 111.042576][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.062197][ T7143] RSP: 002b:00007f21adbf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.070630][ T7143] RAX: ffffffffffffffda RBX: 00007f21acf75fa0 RCX: 00007f21acd85d29 [ 111.078610][ T7143] RDX: 0000000000000800 RSI: 0000000020000100 RDI: 0000000000000003 [ 111.086591][ T7143] RBP: 00007f21adbf4090 R08: 0000000000000000 R09: 0000000000000000 [ 111.094572][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.102994][ T7143] R13: 0000000000000000 R14: 00007f21acf75fa0 R15: 00007ffcdb045cd8 [ 111.111004][ T7143] [ 111.146225][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 111.171871][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 111.612685][ T7004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.967020][ T7164] trusted_key: syz.0.316 sent an empty control message without MSG_MORE. [ 112.497275][ T7186] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.318'. [ 112.642689][ T7192] netlink: 'syz.0.320': attribute type 2 has an invalid length. [ 112.746752][ T7192] Tq€!7: entered promiscuous mode [ 112.988631][ T7004] veth0_vlan: entered promiscuous mode [ 113.055827][ T7004] veth1_vlan: entered promiscuous mode [ 113.165212][ T7004] veth0_macvtap: entered promiscuous mode [ 113.194405][ T7004] veth1_macvtap: entered promiscuous mode [ 113.270510][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.282099][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.293221][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.311396][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.331892][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.354469][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.379007][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.411134][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.459205][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.512889][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.560245][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.586641][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.610505][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.638896][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.662936][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.679095][ T7004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.689787][ T7004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.707319][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.752886][ T7004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.780211][ T7004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.798173][ T7004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.816980][ T7004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.843167][ T7229] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 113.857320][ T7229] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 113.930462][ T7230] netlink: 148 bytes leftover after parsing attributes in process `syz.0.332'. [ 113.939740][ T7230] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 114.132953][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.145507][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.537577][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.576020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.605660][ T7248] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.336'. [ 115.665893][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 115.748485][ T7282] xt_bpf: check failed: parse error [ 115.978434][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'. [ 116.316354][ T7296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.573402][ T7296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.627576][ T7306] netlink: 'syz.0.354': attribute type 4 has an invalid length. [ 116.651788][ T7306] netlink: 152 bytes leftover after parsing attributes in process `syz.0.354'. [ 116.778803][ T7296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.818758][ T7313] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.355'. [ 116.901232][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.356'. [ 116.947898][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.356'. [ 116.983799][ T7296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.005682][ T7317] netlink: zone id is out of range [ 117.024908][ T7317] netlink: zone id is out of range [ 117.055388][ T7317] netlink: zone id is out of range [ 117.101603][ T7317] netlink: set zone limit has 8 unknown bytes [ 117.190997][ T7308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.438107][ T7296] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.471057][ T7324] xt_l2tp: invalid flags combination: 4 [ 117.598895][ T7296] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.709233][ T7296] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.788546][ T7296] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.041936][ T7334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.362'. [ 118.054965][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.362'. [ 118.795771][ T7355] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.370'. [ 118.807681][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.371'. [ 118.866463][ T7353] veth1: entered allmulticast mode [ 119.142845][ T7368] netlink: 80 bytes leftover after parsing attributes in process `syz.3.376'. [ 119.260276][ T7370] netlink: 'syz.2.377': attribute type 11 has an invalid length. [ 119.283749][ T7370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.377'. [ 119.439103][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 119.479299][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.556231][ T7377] sctp: [Deprecated]: syz.0.380 (pid 7377) Use of int in max_burst socket option. [ 119.556231][ T7377] Use struct sctp_assoc_value instead [ 119.668027][ T7385] netlink: zone id is out of range [ 119.673289][ T7385] netlink: zone id is out of range [ 119.683268][ T7385] netlink: zone id is out of range [ 119.688667][ T7385] netlink: get zone limit has 8 unknown bytes [ 120.056295][ T7402] pimreg: entered allmulticast mode [ 120.891073][ T7411] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.136066][ T7411] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.562968][ T7411] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.644079][ T7454] tipc: Enabling of bearer rejected, failed to enable media [ 121.680465][ T7461] pimreg: entered allmulticast mode [ 121.952538][ T7411] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.068457][ T7472] __nla_validate_parse: 7 callbacks suppressed [ 122.068480][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.406'. [ 122.139354][ T7457] pimreg: left allmulticast mode [ 122.236328][ T7476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'. [ 122.536129][ T7411] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.632664][ T7411] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.770644][ T7411] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.800506][ T7490] No such timeout policy "syz0" [ 122.888534][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 122.916249][ T7411] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.561667][ T7503] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.413'. [ 123.737558][ T5999] IPVS: starting estimator thread 0... [ 123.784465][ T7508] netlink: 'syz.2.414': attribute type 39 has an invalid length. [ 123.853986][ T7510] IPVS: using max 20 ests per chain, 48000 per kthread [ 124.174409][ T7516] bridge_slave_0: left allmulticast mode [ 124.196002][ T7516] bridge_slave_0: left promiscuous mode [ 124.227914][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.320474][ T7516] bridge_slave_1: left allmulticast mode [ 124.406166][ T7516] bridge_slave_1: left promiscuous mode [ 124.439903][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.491909][ T7516] bond0: (slave bond_slave_0): Releasing backup interface [ 124.531545][ T7516] bond0: (slave bond_slave_1): Releasing backup interface [ 124.589372][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.419'. [ 124.612570][ T7516] team0: Port device team_slave_0 removed [ 124.636503][ T7516] team0: Port device team_slave_1 removed [ 124.650079][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.419'. [ 124.670250][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.698221][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.735695][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.752155][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.843082][ T7513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.907482][ T7513] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.468198][ T7547] netlink: 560 bytes leftover after parsing attributes in process `syz.1.424'. [ 125.514241][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.424'. [ 125.549279][ T7553] GUP no longer grows the stack in syz.2.426 (7553): 20006000-2000a000 (20005000) [ 125.569724][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 125.612398][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz.2.426 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 125.623047][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.633114][ T7553] Call Trace: [ 125.636408][ T7553] [ 125.639350][ T7553] dump_stack_lvl+0x241/0x360 [ 125.644081][ T7553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.649317][ T7553] ? __pfx__printk+0x10/0x10 [ 125.653930][ T7553] ? find_vma+0xf9/0x170 [ 125.658214][ T7553] ? vma_is_secretmem+0xd/0x50 [ 125.662991][ T7553] ? check_vma_flags+0x52b/0x5a0 [ 125.667943][ T7553] __get_user_pages+0x4385/0x49e0 [ 125.672995][ T7553] ? 0xffffffffa0003b40 [ 125.677204][ T7553] ? __pfx___get_user_pages+0x10/0x10 [ 125.682625][ T7553] __gup_longterm_locked+0x49a/0x17f0 [ 125.688010][ T7553] ? __pfx___might_resched+0x10/0x10 [ 125.693322][ T7553] ? __pfx___gup_longterm_locked+0x10/0x10 [ 125.699138][ T7553] ? down_read+0x82b/0xa40 [ 125.703577][ T7553] ? is_valid_gup_args+0x124/0x200 [ 125.708700][ T7553] pin_user_pages+0x137/0x1f0 [ 125.713388][ T7553] ? __pfx_pin_user_pages+0x10/0x10 [ 125.718595][ T7553] ? trace_kmalloc+0x1f/0xd0 [ 125.723213][ T7553] xdp_umem_create+0x978/0xf30 [ 125.728014][ T7553] xsk_setsockopt+0x732/0x950 [ 125.732709][ T7553] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.737929][ T7553] ? __pfx_lock_acquire+0x10/0x10 [ 125.742964][ T7553] ? aa_sock_opt_perm+0x79/0x120 [ 125.747933][ T7553] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.753150][ T7553] do_sock_setsockopt+0x3af/0x720 [ 125.758206][ T7553] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 125.763771][ T7553] ? __fget_files+0x395/0x410 [ 125.768462][ T7553] ? __fget_files+0x2a/0x410 [ 125.773076][ T7553] __x64_sys_setsockopt+0x1ee/0x280 [ 125.778293][ T7553] do_syscall_64+0xf3/0x230 [ 125.782810][ T7553] ? clear_bhb_loop+0x35/0x90 [ 125.787501][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.793406][ T7553] RIP: 0033:0x7f31c1f85d29 [ 125.797833][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.817457][ T7553] RSP: 002b:00007f31c2d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.825900][ T7553] RAX: ffffffffffffffda RBX: 00007f31c2175fa0 RCX: 00007f31c1f85d29 [ 125.833887][ T7553] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 125.841864][ T7553] RBP: 00007f31c2001aa8 R08: 0000000000000020 R09: 0000000000000000 [ 125.849859][ T7553] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 125.857847][ T7553] R13: 0000000000000000 R14: 00007f31c2175fa0 R15: 00007ffc16be64a8 [ 125.865849][ T7553] [ 125.883518][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 125.901785][ T7552] netlink: 'syz.3.427': attribute type 20 has an invalid length. [ 127.325078][ T7591] __nla_validate_parse: 5 callbacks suppressed [ 127.325109][ T7591] netlink: 31 bytes leftover after parsing attributes in process `syz.1.439'. [ 127.367875][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 127.405512][ T7600] IPVS: Error joining to the multicast group [ 127.977364][ T7605] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.442'. [ 128.127240][ T7608] netlink: 'syz.5.441': attribute type 13 has an invalid length. [ 128.162660][ T7608] macvtap0: entered promiscuous mode [ 128.221972][ T7609] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 128.237935][ T7609] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.443'. [ 128.247180][ T7609] openvswitch: netlink: Flow key attr not present in new flow. [ 128.257058][ T7609] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 128.265133][ T7609] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.443'. [ 128.278881][ T7609] openvswitch: netlink: Flow key attr not present in new flow. [ 128.381574][ T7608] macvtap0: refused to change device tx_queue_len [ 129.054797][ T7639] ebt_among: dst integrity fail: 101 [ 129.081917][ T7639] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 129.136291][ T7641] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 129.236298][ T7639] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.293244][ T7641] batman_adv: batadv0: Adding interface: wlan0 [ 129.320801][ T7641] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.370179][ T7641] batman_adv: batadv0: Interface activated: wlan0 [ 129.488268][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 129.498571][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 130.057886][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.456'. [ 130.379500][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 130.545482][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 130.581204][ T7662] IPVS: Unknown mcast interface: batadv0 [ 130.780795][ T7671] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 131.164897][ T7678] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 131.317507][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.391611][ T7678] bond0: (slave team0): Enslaving as an active interface with an up link [ 131.434543][ T7687] dccp_invalid_packet: invalid packet type [ 132.180175][ T7706] smc: net device bond0 applied user defined pnetid SYZ0 [ 132.744436][ T7720] __nla_validate_parse: 4 callbacks suppressed [ 132.744458][ T7720] netlink: 11 bytes leftover after parsing attributes in process `syz.3.475'. [ 133.105985][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.450916][ T7744] af_packet: tpacket_rcv: packet too big, clamped from 1500 to 4294967272. macoff=96 [ 133.475994][ T7748] dccp_invalid_packet: invalid packet type [ 133.504890][ T7748] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.485'. [ 133.607733][ T7751] netlink: 'syz.5.487': attribute type 1 has an invalid length. [ 133.648224][ T7752] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 134.044047][ T7764] netlink: 256 bytes leftover after parsing attributes in process `syz.0.491'. [ 134.078992][ T7764] netlink: 72 bytes leftover after parsing attributes in process `syz.0.491'. [ 134.107711][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'. [ 134.218768][ T7769] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 134.513993][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 134.541077][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 134.674415][ T7782] netlink: 'syz.1.497': attribute type 7 has an invalid length. [ 135.247867][ T7801] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.273846][ T7799] netlink: 'syz.1.499': attribute type 39 has an invalid length. [ 135.993843][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 139.457624][ T7791] smc: net device wg0 applied user defined pnetid SYZ0 [ 139.727128][ T7799] smc: removing net device wg0 with user defined pnetid SYZ0 [ 139.803774][ T7822] netlink: 'syz.0.505': attribute type 2 has an invalid length. [ 139.821971][ T7822] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 139.831288][ T7828] dccp_invalid_packet: invalid packet type [ 139.853816][ T7828] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.506'. [ 140.116210][ T7837] bridge3: entered promiscuous mode [ 140.158800][ T7837] bridge3: entered allmulticast mode [ 140.211330][ T7841] netlink: 'syz.3.510': attribute type 10 has an invalid length. [ 140.312719][ T7837] team0: Port device bridge3 added [ 140.391002][ T7841] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.453645][ T7837] bridge0: port 1(ip6gretap0) entered blocking state [ 140.501254][ T7837] bridge0: port 1(ip6gretap0) entered disabled state [ 140.527666][ T7837] ip6gretap0: entered allmulticast mode [ 140.562279][ T7837] ip6gretap0: entered promiscuous mode [ 140.571978][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 140.614015][ T7837] bridge0: port 1(ip6gretap0) entered blocking state [ 140.621967][ T7837] bridge0: port 1(ip6gretap0) entered forwarding state [ 140.715282][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 141.589144][ T7865] netlink: 'syz.5.518': attribute type 4 has an invalid length. [ 141.960977][ T7887] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 141.975405][ T7889] dccp_invalid_packet: invalid packet type [ 142.006249][ T7889] netlink: 1260 bytes leftover after parsing attributes in process `syz.5.524'. [ 142.048547][ T7887] netlink: 'syz.2.525': attribute type 8 has an invalid length. [ 142.088483][ T7887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'. [ 142.421247][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 142.595452][ T7908] sctp: [Deprecated]: syz.2.528 (pid 7908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.595452][ T7908] Use struct sctp_sack_info instead [ 142.660240][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 142.782103][ T7913] tipc: Failed to obtain node identity [ 142.823138][ T7913] tipc: Enabling of bearer rejected, failed to enable media [ 142.935835][ T7913] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.075713][ T7913] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.205873][ T7913] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.368496][ T7913] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.428426][ T7924] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 143.473365][ T7924] netlink: 224 bytes leftover after parsing attributes in process `syz.3.535'. [ 143.580791][ T7913] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.639147][ T7913] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.740306][ T7913] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.811302][ T7913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.144152][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.548'. [ 145.206168][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.548'. [ 145.215579][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 145.249660][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 145.379817][ T7962] erspan0: entered promiscuous mode [ 145.442654][ T7962] erspan0: left promiscuous mode [ 145.487079][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 145.528822][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 145.811766][ T7980] netlink: 'syz.5.552': attribute type 10 has an invalid length. [ 145.838592][ T7984] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 145.867068][ T7980] netlink: 40 bytes leftover after parsing attributes in process `syz.5.552'. [ 145.894616][ T7980] bridge0: port 3(macvlan1) entered blocking state [ 145.901510][ T7980] bridge0: port 3(macvlan1) entered disabled state [ 145.908793][ T7980] macvlan1: entered allmulticast mode [ 145.914266][ T7980] veth1_vlan: entered allmulticast mode [ 145.921849][ T7980] macvlan1: entered promiscuous mode [ 145.929203][ T7980] bridge0: port 3(macvlan1) entered blocking state [ 145.935882][ T7980] bridge0: port 3(macvlan1) entered forwarding state [ 146.014910][ T7982] siw: device registration error -23 [ 146.128064][ T7999] pim6reg: entered allmulticast mode [ 146.134653][ T8002] pim6reg: left allmulticast mode [ 146.348866][ T8007] tipc: Started in network mode [ 146.374153][ T8007] tipc: Node identity 080211, cluster identity 4711 [ 146.381280][ T8007] tipc: Enabled bearer , priority 0 [ 146.390299][ T8007] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 146.399590][ T8007] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 146.815649][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 146.967907][ T8021] ipvlan2: entered promiscuous mode [ 147.495343][ T1217] tipc: Node number set to 134353152 [ 147.984555][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.039113][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 148.078750][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 148.501797][ T8057] block nbd0: not configured, cannot reconfigure [ 149.240330][ T8083] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 149.306561][ T8083] team0: Device ipvlan1 failed to register rx_handler [ 149.661004][ T8088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.697932][ T8088] bridge: RTM_NEWNEIGH with unconfigured vlan 149 on bridge0 [ 150.213357][ T8100] __nla_validate_parse: 5 callbacks suppressed [ 150.213382][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.588'. [ 150.368255][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.589'. [ 150.663862][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.591'. [ 151.268491][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 151.333689][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.597'. [ 151.563221][ T8090] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.779409][ T8090] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.901709][ T8090] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.945874][ T8146] FAULT_INJECTION: forcing a failure. [ 151.945874][ T8146] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.032480][ T8090] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.097155][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.0.601 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 152.107811][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.118321][ T8146] Call Trace: [ 152.121608][ T8146] [ 152.124553][ T8146] dump_stack_lvl+0x241/0x360 [ 152.129260][ T8146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.134477][ T8146] ? __pfx__printk+0x10/0x10 [ 152.139081][ T8146] ? __pfx_lock_release+0x10/0x10 [ 152.144126][ T8146] should_fail_ex+0x3b0/0x4e0 [ 152.148833][ T8146] _copy_from_user+0x2f/0xc0 [ 152.153440][ T8146] copy_msghdr_from_user+0xae/0x680 [ 152.158667][ T8146] ? __lock_acquire+0x1397/0x2100 [ 152.163712][ T8146] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 152.169536][ T8146] ? __fget_files+0x2a/0x410 [ 152.174145][ T8146] ? __fget_files+0x2a/0x410 [ 152.178755][ T8146] do_recvmmsg+0x3bd/0xab0 [ 152.183200][ T8146] ? __pfx_do_recvmmsg+0x10/0x10 [ 152.188171][ T8146] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 152.194083][ T8146] ? ksys_write+0x22a/0x2b0 [ 152.198602][ T8146] ? __pfx_lock_release+0x10/0x10 [ 152.203650][ T8146] ? vfs_write+0x730/0xd30 [ 152.208087][ T8146] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.214088][ T8146] ? __fget_files+0x2a/0x410 [ 152.218796][ T8146] __x64_sys_recvmmsg+0x199/0x250 [ 152.223837][ T8146] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 152.229398][ T8146] ? do_syscall_64+0x100/0x230 [ 152.234179][ T8146] ? do_syscall_64+0xb6/0x230 [ 152.238880][ T8146] do_syscall_64+0xf3/0x230 [ 152.243400][ T8146] ? clear_bhb_loop+0x35/0x90 [ 152.248095][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.254003][ T8146] RIP: 0033:0x7f21acd85d29 [ 152.258445][ T8146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.278074][ T8146] RSP: 002b:00007f21adbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 152.286507][ T8146] RAX: ffffffffffffffda RBX: 00007f21acf76080 RCX: 00007f21acd85d29 [ 152.294488][ T8146] RDX: 0000000000000001 RSI: 0000000020002400 RDI: 0000000000000003 [ 152.302464][ T8146] RBP: 00007f21adbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 152.310534][ T8146] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 152.318517][ T8146] R13: 0000000000000001 R14: 00007f21acf76080 R15: 00007ffcdb045cd8 [ 152.326608][ T8146] [ 152.415860][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.603'. [ 152.444591][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 152.922233][ T8152] vlan2: entered promiscuous mode [ 152.953827][ T8152] vlan2: entered allmulticast mode [ 152.960723][ T8152] vlan0: entered allmulticast mode [ 152.973625][ T8152] veth0_vlan: entered allmulticast mode [ 152.983772][ T8152] vlan0: entered promiscuous mode [ 153.006211][ T8152] team0: Port device vlan2 added [ 153.367374][ T8090] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.449505][ T8090] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.518176][ T8090] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.556217][ T8090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.589877][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 153.681697][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.611'. [ 153.864870][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 154.642867][ T8196] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 154.662183][ T8196] nbd: error processing sock list [ 155.554670][ T8216] __nla_validate_parse: 7 callbacks suppressed [ 155.554694][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 156.557431][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.630'. [ 156.591471][ T8245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.630'. [ 156.622524][ T8245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.630'. [ 156.840048][ T8247] tun0: tun_chr_ioctl cmd 3288896564 [ 156.854684][ T8247] tun0: tun_chr_ioctl cmd 3489698846 [ 156.873687][ T8247] tun0: tun_chr_ioctl cmd 35108 [ 157.418104][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'. [ 157.538195][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.604342][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 157.644071][ T8270] bridge_slave_0 (unregistering): left allmulticast mode [ 157.661611][ T8270] bridge_slave_0 (unregistering): left promiscuous mode [ 157.690527][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.846430][ T8277] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.104785][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 158.161200][ T8292] IPVS: Error joining to the multicast group [ 158.229252][ T8291] netlink: 32 bytes leftover after parsing attributes in process `syz.5.642'. [ 158.240622][ T8292] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 158.281284][ T8292] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 158.322773][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.5.642'. [ 158.335896][ T8292] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 158.354900][ T8291] netlink: 56 bytes leftover after parsing attributes in process `syz.5.642'. [ 158.364778][ T8292] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 158.592364][ T8308] Bluetooth: MGMT ver 1.23 [ 158.788527][ T8319] Cannot find set identified by id 0 to match [ 158.858108][ T8319] pim6reg: entered allmulticast mode [ 158.910185][ T8253] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 39336 - 0 [ 158.933975][ T8253] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 39336 - 0 [ 158.966755][ T8253] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 39336 - 0 [ 158.991975][ T8253] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 39336 - 0 [ 159.003156][ T8253] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 42454 - 0 [ 159.018260][ T8253] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 42454 - 0 [ 159.032296][ T8253] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 42454 - 0 [ 159.047055][ T8253] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 42454 - 0 [ 159.058562][ T8253] geneve2: entered promiscuous mode [ 159.077567][ T8253] geneve2: entered allmulticast mode [ 159.169045][ T8327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.192898][ T8327] batadv_slave_0: entered promiscuous mode [ 159.223162][ T8327] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 160.623091][ T8368] __nla_validate_parse: 11 callbacks suppressed [ 160.623125][ T8368] netlink: 68 bytes leftover after parsing attributes in process `syz.2.662'. [ 160.708211][ T8368] unsupported nla_type 138 [ 160.734564][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 160.756349][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 160.899820][ T8375] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 161.111885][ T8382] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 161.225762][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 161.250581][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 161.287001][ T8348] bridge0: port 3(macvlan1) entered disabled state [ 161.293943][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.302289][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.312881][ T8383] netlink: 'syz.2.665': attribute type 7 has an invalid length. [ 161.335074][ T8383] netlink: 'syz.2.665': attribute type 5 has an invalid length. [ 161.964411][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.267618][ T8348] veth0_vlan: left allmulticast mode [ 162.366439][ T8348] veth1_vlan: left allmulticast mode [ 162.532027][ T8348] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.563890][ T8348] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.586467][ T8348] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.597533][ T8348] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.699285][ T8348] vlan0: left allmulticast mode [ 162.719968][ T8348] vlan0: left promiscuous mode [ 162.738854][ T8372] IPVS: Error joining to the multicast group [ 162.749954][ T8376] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 162.783953][ T8375] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.876380][ T8378] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 162.926713][ T8382] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.095510][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.667'. [ 163.386588][ T8402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.669'. [ 163.410648][ T8407] sctp: [Deprecated]: syz.1.668 (pid 8407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.410648][ T8407] Use struct sctp_sack_info instead [ 163.465264][ T8408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.669'. [ 163.519372][ T8402] netlink: 56 bytes leftover after parsing attributes in process `syz.2.669'. [ 164.286490][ T8436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.678'. [ 164.619561][ T8447] IPVS: Error joining to the multicast group [ 164.685782][ T8447] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 164.725173][ T8446] ip6gretap0: entered promiscuous mode [ 164.781432][ T8446] batadv_slave_0: entered promiscuous mode [ 164.842163][ T8446] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 164.899471][ T8446] Cannot create hsr debugfs directory [ 164.955326][ T8453] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 165.029292][ T8453] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.195642][ T8447] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.660375][ T8461] __nla_validate_parse: 2 callbacks suppressed [ 165.660399][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.715966][ T8465] netlink: 'syz.1.687': attribute type 10 has an invalid length. [ 165.733305][ T8463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.741096][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 165.748418][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 165.776892][ T8467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.821225][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.851226][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.905352][ T8465] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.366604][ T8481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.690'. [ 166.418656][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.690'. [ 166.839931][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 167.238590][ T8511] ip6tnl1: entered allmulticast mode [ 167.376667][ T8514] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 167.599500][ T8515] netlink: 'syz.0.696': attribute type 10 has an invalid length. [ 167.770890][ T8522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.701'. [ 167.848299][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 167.895077][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.5.701'. [ 168.111367][ T8515] veth0_vlan: entered allmulticast mode [ 168.131302][ T8515] bridge0: port 1(veth0_vlan) entered blocking state [ 168.181406][ T8515] bridge0: port 1(veth0_vlan) entered disabled state [ 168.204688][ T8515] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 168.524116][ T8553] x_tables: duplicate underflow at hook 3 [ 169.381221][ T8594] xt_l2tp: unknown flags: 10 [ 170.783760][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 170.811561][ T8619] __nla_validate_parse: 8 callbacks suppressed [ 170.811585][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.726'. [ 170.908523][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.728'. [ 170.929467][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.726'. [ 171.104415][ T8624] sctp: [Deprecated]: syz.5.727 (pid 8624) Use of int in max_burst socket option deprecated. [ 171.104415][ T8624] Use struct sctp_assoc_value instead [ 172.015142][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 175.010987][ T8658] dccp_invalid_packet: invalid packet type [ 175.062233][ T8658] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.736'. [ 175.438076][ T8668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.740'. [ 175.480529][ T8668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.740'. [ 175.818683][ T8677] warning: `syz.0.743' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.354006][ T8690] macvlan1: left allmulticast mode [ 176.359189][ T8690] macvlan1: left promiscuous mode [ 176.412370][ T8690] bridge0: port 3(macvlan1) entered disabled state [ 176.441179][ T8690] bridge_slave_1: left allmulticast mode [ 176.463650][ T8690] bridge_slave_1: left promiscuous mode [ 176.483775][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.511442][ T8690] bridge_slave_0: left allmulticast mode [ 176.527776][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.749'. [ 176.543605][ T8690] bridge_slave_0: left promiscuous mode [ 176.566189][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.644849][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 177.183590][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.753'. [ 177.234460][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.753'. [ 177.632278][ T8715] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 177.667937][ T8713] dccp_invalid_packet: invalid packet type [ 177.692778][ T8723] IPVS: length: 205 != 8 [ 177.721664][ T8720] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.752'. [ 177.849129][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 177.879078][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 177.944832][ T8725] bridge0: port 1(ip6gretap0) entered blocking state [ 177.976604][ T8725] bridge0: port 1(ip6gretap0) entered disabled state [ 178.021103][ T8725] ip6gretap0: entered promiscuous mode [ 178.109077][ T8732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.161972][ T8732] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.191272][ T8732] gretap1: entered promiscuous mode [ 178.226907][ T8732] gretap1: entered allmulticast mode [ 179.764395][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 180.844518][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 181.160431][ T8792] dccp_invalid_packet: invalid packet type [ 181.216473][ T8792] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.771'. [ 182.339032][ T8822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.781'. [ 182.397714][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 183.135617][ T8848] netlink: 'syz.1.788': attribute type 39 has an invalid length. [ 183.817250][ T8866] netlink: 'syz.2.791': attribute type 33 has an invalid length. [ 183.871862][ T8866] netlink: 160 bytes leftover after parsing attributes in process `syz.2.791'. [ 184.135479][ T8875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'. [ 184.169287][ T8876] netlink: 'syz.5.795': attribute type 1 has an invalid length. [ 184.218776][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'. [ 184.264079][ T8880] netlink: set zone limit has 4 unknown bytes [ 184.320510][ T8883] netlink: set zone limit has 4 unknown bytes [ 184.718247][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 184.740604][ T8895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.802'. [ 185.818253][ T8911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.806'. [ 186.077681][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 186.194214][ T8917] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 186.368366][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 186.483730][ T8916] IPVS: Error joining to the multicast group [ 186.493629][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 186.499690][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 186.505919][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 186.511950][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 186.518121][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 186.519501][ T8917] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.593346][ T8924] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 186.601242][ T8924] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.703956][ T8941] FAULT_INJECTION: forcing a failure. [ 186.703956][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 186.716805][ T8941] CPU: 1 UID: 0 PID: 8941 Comm: syz.0.815 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 186.727960][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.738044][ T8941] Call Trace: [ 186.741348][ T8941] [ 186.744312][ T8941] dump_stack_lvl+0x241/0x360 [ 186.749059][ T8941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.754375][ T8941] ? __pfx__printk+0x10/0x10 [ 186.758978][ T8941] should_fail_ex+0x3b0/0x4e0 [ 186.763661][ T8941] should_failslab+0xac/0x100 [ 186.768335][ T8941] ? skb_clone+0x20c/0x390 [ 186.772767][ T8941] kmem_cache_alloc_noprof+0x70/0x380 [ 186.778159][ T8941] skb_clone+0x20c/0x390 [ 186.782406][ T8941] __netlink_deliver_tap+0x3cc/0x7f0 [ 186.787699][ T8941] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.792984][ T8941] netlink_deliver_tap+0x19d/0x1b0 [ 186.798118][ T8941] netlink_unicast+0x7c4/0x990 [ 186.802884][ T8941] ? __pfx_netlink_unicast+0x10/0x10 [ 186.808251][ T8941] ? __virt_addr_valid+0x45f/0x530 [ 186.813374][ T8941] ? __phys_addr_symbol+0x2f/0x70 [ 186.818399][ T8941] ? __check_object_size+0x47a/0x730 [ 186.823687][ T8941] netlink_sendmsg+0x8e4/0xcb0 [ 186.828458][ T8941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.833744][ T8941] ? aa_sock_msg_perm+0x91/0x160 [ 186.838683][ T8941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.843985][ T8941] __sock_sendmsg+0x221/0x270 [ 186.848667][ T8941] ____sys_sendmsg+0x52a/0x7e0 [ 186.853447][ T8941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.858731][ T8941] ? __fget_files+0x2a/0x410 [ 186.863322][ T8941] ? __fget_files+0x2a/0x410 [ 186.867917][ T8941] __sys_sendmsg+0x269/0x350 [ 186.872505][ T8941] ? __pfx_lock_release+0x10/0x10 [ 186.877550][ T8941] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.882679][ T8941] ? __pfx_vfs_write+0x10/0x10 [ 186.887491][ T8941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.893822][ T8941] ? do_syscall_64+0x100/0x230 [ 186.898585][ T8941] ? do_syscall_64+0xb6/0x230 [ 186.903259][ T8941] do_syscall_64+0xf3/0x230 [ 186.907759][ T8941] ? clear_bhb_loop+0x35/0x90 [ 186.912435][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.918324][ T8941] RIP: 0033:0x7f21acd85d29 [ 186.922750][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.942354][ T8941] RSP: 002b:00007f21adbf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.950767][ T8941] RAX: ffffffffffffffda RBX: 00007f21acf75fa0 RCX: 00007f21acd85d29 [ 186.958734][ T8941] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 186.966786][ T8941] RBP: 00007f21adbf4090 R08: 0000000000000000 R09: 0000000000000000 [ 186.974752][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.982718][ T8941] R13: 0000000000000000 R14: 00007f21acf75fa0 R15: 00007ffcdb045cd8 [ 186.990706][ T8941] [ 187.563970][ T8957] sctp: [Deprecated]: syz.5.821 (pid 8957) Use of int in max_burst socket option. [ 187.563970][ T8957] Use struct sctp_assoc_value instead [ 187.719727][ T8964] __nla_validate_parse: 1 callbacks suppressed [ 187.719750][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 187.804780][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 187.933728][ T8970] netlink: 'syz.5.825': attribute type 1 has an invalid length. [ 187.977586][ T8970] netlink: 244 bytes leftover after parsing attributes in process `syz.5.825'. [ 188.038242][ T8970] netlink: 'syz.5.825': attribute type 4 has an invalid length. [ 188.082127][ T8970] netlink: 'syz.5.825': attribute type 4 has an invalid length. [ 188.180831][ T8977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.828'. [ 190.025095][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 190.106595][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'. [ 190.442507][ T9039] netlink: 84 bytes leftover after parsing attributes in process `syz.1.846'. [ 190.556311][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 190.583290][ T9039] netlink: 92 bytes leftover after parsing attributes in process `syz.1.846'. [ 190.606129][ T9043] tun0: tun_chr_ioctl cmd 1074025673 [ 190.630669][ T9039] netlink: 92 bytes leftover after parsing attributes in process `syz.1.846'. [ 190.684071][ T9042] ipvlan2: entered promiscuous mode [ 191.504805][ T9070] FAULT_INJECTION: forcing a failure. [ 191.504805][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 191.592838][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.2.858 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 191.603493][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.613650][ T9070] Call Trace: [ 191.616944][ T9070] [ 191.619985][ T9070] dump_stack_lvl+0x241/0x360 [ 191.624692][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.629905][ T9070] ? __pfx__printk+0x10/0x10 [ 191.634513][ T9070] ? __kmalloc_cache_noprof+0x48/0x390 [ 191.639989][ T9070] ? __pfx___might_resched+0x10/0x10 [ 191.645328][ T9070] should_fail_ex+0x3b0/0x4e0 [ 191.650022][ T9070] should_failslab+0xac/0x100 [ 191.654714][ T9070] __kmalloc_cache_noprof+0x70/0x390 [ 191.660011][ T9070] ? nfnetlink_rcv+0x1265/0x2ab0 [ 191.664968][ T9070] nfnetlink_rcv+0x1265/0x2ab0 [ 191.669780][ T9070] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.674951][ T9070] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.680164][ T9070] ? skb_clone+0x240/0x390 [ 191.684603][ T9070] ? __pfx_lock_release+0x10/0x10 [ 191.689672][ T9070] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.694888][ T9070] netlink_unicast+0x7f6/0x990 [ 191.699673][ T9070] ? __pfx_netlink_unicast+0x10/0x10 [ 191.704968][ T9070] ? __virt_addr_valid+0x45f/0x530 [ 191.710092][ T9070] ? __phys_addr_symbol+0x2f/0x70 [ 191.715132][ T9070] ? __check_object_size+0x47a/0x730 [ 191.720435][ T9070] netlink_sendmsg+0x8e4/0xcb0 [ 191.725232][ T9070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.730554][ T9070] ? aa_sock_msg_perm+0x91/0x160 [ 191.735521][ T9070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.740828][ T9070] __sock_sendmsg+0x221/0x270 [ 191.745532][ T9070] ____sys_sendmsg+0x52a/0x7e0 [ 191.750340][ T9070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.755653][ T9070] ? __fget_files+0x2a/0x410 [ 191.760289][ T9070] ? __fget_files+0x2a/0x410 [ 191.764942][ T9070] __sys_sendmsg+0x269/0x350 [ 191.769578][ T9070] ? __pfx_lock_release+0x10/0x10 [ 191.774646][ T9070] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.779786][ T9070] ? __pfx_vfs_write+0x10/0x10 [ 191.784587][ T9070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.790932][ T9070] ? do_syscall_64+0x100/0x230 [ 191.795715][ T9070] ? do_syscall_64+0xb6/0x230 [ 191.800403][ T9070] do_syscall_64+0xf3/0x230 [ 191.804919][ T9070] ? clear_bhb_loop+0x35/0x90 [ 191.809614][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.815526][ T9070] RIP: 0033:0x7f31c1f85d29 [ 191.819966][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.839861][ T9070] RSP: 002b:00007f31c2d5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.848295][ T9070] RAX: ffffffffffffffda RBX: 00007f31c2175fa0 RCX: 00007f31c1f85d29 [ 191.856291][ T9070] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 191.864533][ T9070] RBP: 00007f31c2d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 191.872508][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.880482][ T9070] R13: 0000000000000000 R14: 00007f31c2175fa0 R15: 00007ffc16be64a8 [ 191.888477][ T9070] [ 192.123984][ T9078] tap0: tun_chr_ioctl cmd 1074025677 [ 192.139753][ T9078] tap0: linktype set to 825 [ 192.150558][ T9078] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 192.382933][ T9086] netlink: 'syz.5.866': attribute type 1 has an invalid length. [ 192.796343][ T9086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.908083][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 192.999322][ T9091] bond1: (slave batadv1): making interface the new active one [ 193.054087][ T9091] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 193.201264][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 193.275129][ T9095] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 193.947667][ T9136] __nla_validate_parse: 5 callbacks suppressed [ 193.947690][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 193.973515][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 194.042491][ T9136] bond1: entered promiscuous mode [ 194.060932][ T9138] xt_l2tp: v2 tid > 0xffff: 150994944 [ 194.071874][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 194.091027][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 194.297720][ T9136] bond1: entered allmulticast mode [ 194.307332][ T9136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.317467][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.879'. [ 195.118822][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.629933][ T9164] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 197.876487][ T9194] netlink: 'syz.3.892': attribute type 21 has an invalid length. [ 197.955088][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.892'. [ 198.112960][ T9206] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 198.580223][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 198.620410][ T9210] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.049486][ T9218] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 199.581706][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 199.645338][ T9231] IPVS: Error joining to the multicast group [ 199.758590][ T9231] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 199.885613][ T9240] SET target dimension over the limit! [ 199.913309][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 199.989050][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.909'. [ 200.066288][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 200.085772][ T9231] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.109526][ T9246] xt_l2tp: v2 doesn't support IP mode [ 200.170376][ T9237] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 200.516263][ T9255] netlink: 256 bytes leftover after parsing attributes in process `syz.5.911'. [ 200.660455][ T9237] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.174034][ T9276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.918'. [ 201.406639][ T9276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 201.486580][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.918'. [ 201.560807][ T9276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 201.631537][ T9276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 201.676736][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 201.751086][ T9292] bridge_slave_1: left allmulticast mode [ 201.793172][ T9292] bridge_slave_1: left promiscuous mode [ 201.840307][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.505009][ T9307] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 202.636116][ T9307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.774813][ T9310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.824792][ T9322] netlink: 'syz.5.928': attribute type 10 has an invalid length. [ 202.860243][ T9310] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 202.963105][ T9310] bond2: (slave vcan1): Error -95 calling set_mac_address [ 203.101262][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.126499][ T9317] bond2: (slave batadv1): making interface the new active one [ 203.150509][ T9317] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 203.201952][ T9322] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.244420][ T9329] netlink: 'syz.5.928': attribute type 10 has an invalid length. [ 203.282124][ T9329] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.417837][ T9344] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 203.448440][ T9346] IPVS: Error joining to the multicast group [ 203.474833][ T9346] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 203.487152][ T9346] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.518153][ T9346] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 203.526743][ T9346] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.532372][ T9405] netlink: 'syz.5.945': attribute type 10 has an invalid length. [ 205.058542][ T9426] __nla_validate_parse: 8 callbacks suppressed [ 205.058564][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.948'. [ 205.111320][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 205.111486][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 205.314130][ T9405] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.382079][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 205.450584][ T9414] netlink: 'syz.5.945': attribute type 10 has an invalid length. [ 205.479164][ T9414] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.519665][ T9425] team0: No ports can be present during mode change [ 205.913073][ T9445] vlan0: entered promiscuous mode [ 206.223601][ T9445] vlan0: entered allmulticast mode [ 206.902655][ T9482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.960'. [ 206.994104][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 207.045253][ T9486] netlink: 'syz.5.963': attribute type 10 has an invalid length. [ 207.073525][ T9487] x_tables: duplicate underflow at hook 2 [ 207.093518][ T9486] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.152387][ T9486] netlink: 'syz.5.963': attribute type 10 has an invalid length. [ 207.183646][ T9486] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.458828][ T9497] bond1: entered promiscuous mode [ 207.464122][ T9497] bond1: entered allmulticast mode [ 207.469663][ T9497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.186105][ T9520] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 208.232467][ T9520] netlink: 'syz.3.973': attribute type 4 has an invalid length. [ 208.278551][ T9520] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.973'. [ 208.305057][ T9523] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 208.489576][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.5.976'. [ 208.595290][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.976'. [ 209.032142][ T9539] ip6tnl1: entered allmulticast mode [ 210.063983][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 210.323650][ T9573] x_tables: duplicate underflow at hook 2 [ 210.784840][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.792388][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.630082][ T9551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.708936][ T9551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.019264][ T9551] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.050686][ T9551] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.067452][ T9551] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.084260][ T9551] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.109928][ T9551] batman_adv: batadv0: Interface deactivated: wlan0 [ 212.496910][ T9588] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 212.541190][ T9588] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 212.603058][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.993'. [ 212.919311][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.994'. [ 212.975908][ T9601] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.033247][ T9601] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.072757][ T9601] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.118167][ T9601] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.595489][ T9623] delete_channel: no stack [ 213.607393][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 213.682861][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 213.875792][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 213.917311][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 214.002574][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 214.263773][ T9637] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 214.293592][ T9639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1006'. [ 214.764058][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1011'. [ 215.370251][ T9682] bridge0: port 3(hsr0) entered blocking state [ 215.385961][ T9682] bridge0: port 3(hsr0) entered disabled state [ 215.430472][ T9682] hsr0: entered allmulticast mode [ 215.435873][ T9682] hsr_slave_0: entered allmulticast mode [ 215.441805][ T9682] hsr_slave_1: entered allmulticast mode [ 215.449630][ T9682] hsr0: entered promiscuous mode [ 215.472604][ T9685] __nla_validate_parse: 1 callbacks suppressed [ 215.472626][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'. [ 216.606507][ T9708] netlink: 432 bytes leftover after parsing attributes in process `syz.2.1024'. [ 217.008136][ T9721] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 217.064095][ T9725] openvswitch: netlink: Missing valid actions attribute. [ 217.115025][ T9721] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1027'. [ 217.161873][ T9725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.274941][ T9733] netlink: 'syz.5.1031': attribute type 1 has an invalid length. [ 218.131688][ T9755] veth0_to_team: entered promiscuous mode [ 218.158230][ T9755] veth0_to_team: entered allmulticast mode [ 218.745413][ T9773] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1039'. [ 219.038370][ T9783] x_tables: duplicate underflow at hook 1 [ 220.196634][ T9820] IPVS: set_ctl: invalid protocol: 25140 172.30.4.6:20001 [ 220.738767][ T9845] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002 [ 220.967894][ T9850] bond0: (slave team0): Releasing backup interface [ 221.002441][ T9850] bond0: (slave dummy0): Releasing backup interface [ 221.048763][ T9850] bridge_slave_0: left allmulticast mode [ 221.096639][ T9850] bridge_slave_0: left promiscuous mode [ 221.102594][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.714666][ T9850] bridge_slave_1: left allmulticast mode [ 222.033532][ T9850] bridge_slave_1: left promiscuous mode [ 222.101075][ T9870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1065'. [ 222.155380][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.164303][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 222.192996][ T9850] bond0: (slave bond_slave_0): Releasing backup interface [ 222.216342][ T9850] bond0: (slave bond_slave_1): Releasing backup interface [ 222.235532][ T9850] team0: Port device team_slave_0 removed [ 222.245006][ T9850] team0: Port device team_slave_1 removed [ 222.251214][ T9850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.269671][ T9850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.283160][ T9850] hsr0: left allmulticast mode [ 222.293191][ T9850] hsr_slave_0: left allmulticast mode [ 222.305085][ T9850] hsr_slave_1: left allmulticast mode [ 222.311340][ T9850] hsr0: left promiscuous mode [ 222.326359][ T9850] bridge0: port 3(hsr0) entered disabled state [ 222.336991][ T9850] batman_adv: batadv0: Removing interface: wlan0 [ 222.348451][ T9850] bond0: (slave wlan1): Releasing backup interface [ 222.654283][ T9884] netlink: 'syz.0.1069': attribute type 7 has an invalid length. [ 222.934275][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 222.995257][ T9892] IPVS: Error joining to the multicast group [ 223.080012][ T9895] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 223.199762][ T9892] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 223.258241][ T9895] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.356291][ T9895] bond0: (slave lo): Enslaving as an active interface with an up link [ 224.374899][ T9926] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 224.409876][ T9927] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 224.447418][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1078'. [ 224.493454][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1078'. [ 225.321555][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 225.379243][ T9946] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 225.450259][ T9949] team0: Device gtp0 is of different type [ 225.474823][ T9952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.856053][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1088'. [ 225.892623][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 225.906312][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 225.944257][ T9959] IPVS: Error joining to the multicast group [ 225.987989][ T9959] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 226.152218][ T9968] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 226.630835][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 226.659437][ T9982] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 228.456935][T10012] __nla_validate_parse: 1 callbacks suppressed [ 228.456958][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1104'. [ 228.606549][T10012] IPVS: Error joining to the multicast group [ 228.660815][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 228.684427][T10012] netlink: 'syz.5.1104': attribute type 10 has an invalid length. [ 228.719474][T10012] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.977184][T10012] netlink: 'syz.5.1104': attribute type 10 has an invalid length. [ 229.015924][T10012] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 230.184179][T10014] nbd: socks must be embedded in a SOCK_ITEM attr [ 230.567504][T10023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1105'. [ 230.888793][T10029] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 230.970313][T10029] bond0: (slave netdevsim0): Releasing backup interface [ 231.057127][T10029] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 231.089234][T10029] team0: Failed to send options change via netlink (err -105) [ 231.153644][T10029] team0: Port device netdevsim0 added [ 231.248437][T10038] tipc: Enabling of bearer rejected, failed to enable media [ 231.321684][T10041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1112'. [ 231.414202][T10045] netlink: 'syz.1.1113': attribute type 10 has an invalid length. [ 231.788109][T10051] atomic_op ffff88807f8ff998 conn xmit_atomic 0000000000000000 [ 231.837756][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 231.932547][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 231.981892][T10058] IPVS: Error joining to the multicast group [ 232.030083][T10058] netlink: 'syz.5.1118': attribute type 10 has an invalid length. [ 232.068163][T10058] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.141658][T10058] netlink: 'syz.5.1118': attribute type 10 has an invalid length. [ 232.182764][T10058] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.551938][T10072] netlink: 'syz.2.1122': attribute type 64 has an invalid length. [ 232.639573][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 232.683494][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 233.031023][T10081] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1125'. [ 235.641360][T10104] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 236.330532][T10122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1136'. [ 239.987578][ T30] INFO: task syz.4.191:6692 blocked for more than 143 seconds. [ 240.003569][ T30] Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 240.037905][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.057680][ T30] task:syz.4.191 state:D stack:26136 pid:6692 tgid:6691 ppid:5833 flags:0x00000004 [ 240.082689][ T30] Call Trace: [ 240.088330][ T30] [ 240.091658][ T30] __schedule+0x1850/0x4c30 [ 240.102215][T10152] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 240.103517][ T30] ? __pfx___schedule+0x10/0x10 [ 240.124262][ T30] ? __pfx_lock_release+0x10/0x10 [ 240.129489][ T30] ? __lock_sock+0x1c8/0x330 [ 240.134489][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 240.140420][ T30] ? schedule+0x90/0x320 [ 240.144957][ T30] schedule+0x14b/0x320 [ 240.149165][ T30] __lock_sock+0x1cd/0x330 [ 240.153737][ T30] ? __pfx___lock_sock+0x10/0x10 [ 240.158772][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 240.164949][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.170351][ T30] ? schedule+0x155/0x320 [ 240.174810][ T30] ? futex_wait_queue+0x27/0x1d0 [ 240.179826][ T30] ? lock_sock_nested+0x6a/0x100 [ 240.184899][T10152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.191572][ T30] lock_sock_nested+0x9e/0x100 [ 240.196467][ T30] do_tcp_setsockopt+0x954/0x2540 [ 240.201539][ T30] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 240.207102][ T30] ? __pfx___might_resched+0x10/0x10 [ 240.212427][ T30] ? __lock_acquire+0x1397/0x2100 [ 240.217598][ T30] ? tcp_setsockopt+0x3e/0xf0 [ 240.222308][ T30] tls_setsockopt+0x17a/0x15d0 [ 240.227434][ T30] ? __pfx_tls_setsockopt+0x10/0x10 [ 240.232678][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.238985][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 240.244132][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 240.249108][ T30] ? sock_common_setsockopt+0x37/0xc0 [ 240.254611][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 240.260548][ T30] do_sock_setsockopt+0x3af/0x720 [ 240.265688][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 240.271275][ T30] ? __fget_files+0x395/0x410 [ 240.276091][ T30] ? __fget_files+0x2a/0x410 [ 240.280727][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 240.286018][ T30] do_syscall_64+0xf3/0x230 [ 240.290557][ T30] ? clear_bhb_loop+0x35/0x90 [ 240.295504][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.301448][ T30] RIP: 0033:0x7fcc24385d29 [ 240.306037][ T30] RSP: 002b:00007fcc25238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.314596][ T30] RAX: ffffffffffffffda RBX: 00007fcc24575fa0 RCX: 00007fcc24385d29 [ 240.322595][ T30] RDX: 0000000000000014 RSI: 0000000000000006 RDI: 0000000000000005 [ 240.330882][ T30] RBP: 00007fcc24401aa8 R08: 0000000000000004 R09: 0000000000000000 [ 240.338982][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 240.347038][ T30] R13: 0000000000000000 R14: 00007fcc24575fa0 R15: 00007fff26790068 [ 240.355217][ T30] [ 240.358652][ T30] [ 240.358652][ T30] Showing all locks held in the system: [ 240.366534][ T30] 1 lock held by khungtaskd/30: [ 240.371410][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 240.381578][ T30] 3 locks held by kworker/u8:4/62: [ 240.388638][ T30] 3 locks held by kworker/u8:8/3497: [ 240.403616][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 240.423095][ T30] #1: ffffc9000d317d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 240.443185][ T30] #2: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 240.452456][ T30] 2 locks held by getty/5591: [ 240.457347][ T30] #0: ffff888031aee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 240.477448][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 240.493332][ T30] 1 lock held by syz.4.191/6692: [ 240.501758][ T30] #0: ffff88803508aad8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_tcp_setsockopt+0x954/0x2540 [ 240.512339][ T30] 2 locks held by syz.4.191/6693: [ 240.517700][ T30] 2 locks held by kworker/u8:16/9678: [ 240.523214][ T30] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 240.541193][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 240.555091][ T30] 1 lock held by syz.3.1138/10131: [ 240.560239][ T30] #0: ffff8880757dc408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 240.579538][ T30] 2 locks held by syz.0.1141/10143: [ 240.587083][ T30] #0: ffffffff8fca7450 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 240.603051][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 240.623135][ T30] 2 locks held by syz.1.1144/10152: [ 240.629366][ T30] #0: ffffffff901c3b50 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 240.649430][ T30] #1: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 240.660877][ T30] 2 locks held by syz.1.1144/10154: [ 240.672591][ T30] #0: ffffffff8f45cb20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 240.690816][ T30] #1: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 240.700127][ T30] 2 locks held by syz.1.1144/10155: [ 240.705503][ T30] #0: ffffffff901c3b50 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 240.715226][ T30] #1: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 240.733588][ T30] [ 240.737855][ T30] ============================================= [ 240.737855][ T30] [ 240.756699][ T30] NMI backtrace for cpu 1 [ 240.761069][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 240.771589][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.781755][ T30] Call Trace: [ 240.785065][ T30] [ 240.788010][ T30] dump_stack_lvl+0x241/0x360 [ 240.792802][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.798027][ T30] ? __pfx__printk+0x10/0x10 [ 240.802654][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 240.807629][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.813111][ T30] ? _printk+0xd5/0x120 [ 240.817284][ T30] ? __pfx__printk+0x10/0x10 [ 240.821876][ T30] ? __wake_up_klogd+0xcc/0x110 [ 240.826728][ T30] ? __pfx__printk+0x10/0x10 [ 240.831319][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 240.836342][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 240.842317][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 240.848306][ T30] watchdog+0xff6/0x1040 [ 240.852554][ T30] ? watchdog+0x1ea/0x1040 [ 240.856970][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.861642][ T30] kthread+0x2f0/0x390 [ 240.865710][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.870383][ T30] ? __pfx_kthread+0x10/0x10 [ 240.874968][ T30] ret_from_fork+0x4b/0x80 [ 240.879377][ T30] ? __pfx_kthread+0x10/0x10 [ 240.883963][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.888838][ T30] [ 240.892425][ T30] Sending NMI from CPU 1 to CPUs 0: [ 240.897847][ C0] NMI backtrace for cpu 0 [ 240.897860][ C0] CPU: 0 UID: 0 PID: 3524 Comm: kworker/u8:9 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 240.897879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.897889][ C0] Workqueue: bat_events batadv_nc_worker [ 240.897913][ C0] RIP: 0010:batadv_nc_worker+0x18c/0x610 [ 240.897935][ C0] Code: 53 03 00 00 48 c7 c2 40 49 2e 8d e8 7e 5a e4 f5 48 89 e8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 ef e8 d8 18 6f f6 48 8b 6d 00 <48> 85 ed 74 51 48 81 c5 38 fe ff ff 74 48 4c 89 e7 48 89 ee 48 c7 [ 240.897948][ C0] RSP: 0018:ffffc9000d6d7b58 EFLAGS: 00000246 [ 240.897961][ C0] RAX: 1ffff11006a61950 RBX: ffff888020eb2e00 RCX: ffff888032860000 [ 240.897973][ C0] RDX: 0000000000000000 RSI: ffffffff8c5faec0 RDI: ffffffff8c5fae80 [ 240.897984][ C0] RBP: 0000000000000000 R08: ffffffff8b96bac1 R09: 1ffffffff2857510 [ 240.897995][ C0] R10: dffffc0000000000 R11: fffffbfff2857511 R12: ffff88807e690d80 [ 240.898007][ C0] R13: 0000000000000150 R14: ffff888020eb2e00 R15: dffffc0000000000 [ 240.898019][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 240.898032][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.898043][ C0] CR2: 00007f75b0b452d8 CR3: 0000000034b20000 CR4: 00000000003526f0 [ 240.898058][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.898067][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.898077][ C0] Call Trace: [ 240.898083][ C0] [ 240.898090][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 240.898111][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 240.898130][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.898149][ C0] ? nmi_handle+0x2a/0x5a0 [ 240.898173][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 240.898188][ C0] ? nmi_handle+0x14f/0x5a0 [ 240.898204][ C0] ? nmi_handle+0x2a/0x5a0 [ 240.898222][ C0] ? batadv_nc_worker+0x18c/0x610 [ 240.898239][ C0] ? default_do_nmi+0x63/0x160 [ 240.898258][ C0] ? exc_nmi+0x123/0x1f0 [ 240.898277][ C0] ? end_repeat_nmi+0xf/0x53 [ 240.898297][ C0] ? batadv_nc_worker+0x101/0x610 [ 240.898316][ C0] ? batadv_nc_worker+0x18c/0x610 [ 240.898335][ C0] ? batadv_nc_worker+0x18c/0x610 [ 240.898353][ C0] ? batadv_nc_worker+0x18c/0x610 [ 240.898372][ C0] [ 240.898377][ C0] [ 240.898383][ C0] ? batadv_nc_worker+0xcb/0x610 [ 240.898401][ C0] ? process_scheduled_works+0x976/0x1840 [ 240.898418][ C0] process_scheduled_works+0xa66/0x1840 [ 240.898444][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.898463][ C0] ? assign_work+0x364/0x3d0 [ 240.898480][ C0] worker_thread+0x870/0xd30 [ 240.898501][ C0] ? __kthread_parkme+0x169/0x1d0 [ 240.898519][ C0] ? __pfx_worker_thread+0x10/0x10 [ 240.898534][ C0] kthread+0x2f0/0x390 [ 240.898550][ C0] ? __pfx_worker_thread+0x10/0x10 [ 240.898565][ C0] ? __pfx_kthread+0x10/0x10 [ 240.898582][ C0] ret_from_fork+0x4b/0x80 [ 240.898596][ C0] ? __pfx_kthread+0x10/0x10 [ 240.898612][ C0] ret_from_fork_asm+0x1a/0x30 [ 240.898633][ C0] [ 240.932875][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 240.932895][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 240.932917][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.932928][ T30] Call Trace: [ 240.932936][ T30] [ 240.932945][ T30] dump_stack_lvl+0x241/0x360 [ 240.932976][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.933000][ T30] ? __pfx__printk+0x10/0x10 [ 240.933020][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.933048][ T30] ? vscnprintf+0x5d/0x90 [ 240.933073][ T30] panic+0x349/0x880 [ 240.933096][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.933122][ T30] ? __pfx_panic+0x10/0x10 [ 240.933141][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 240.933167][ T30] ? __irq_work_queue_local+0x137/0x410 [ 240.933189][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 240.933210][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.933234][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 240.933260][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 240.933287][ T30] watchdog+0x1035/0x1040 [ 240.933309][ T30] ? watchdog+0x1ea/0x1040 [ 240.933334][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.933354][ T30] kthread+0x2f0/0x390 [ 240.933374][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.933397][ T30] ? __pfx_kthread+0x10/0x10 [ 240.933418][ T30] ret_from_fork+0x4b/0x80 [ 240.933436][ T30] ? __pfx_kthread+0x10/0x10 [ 240.933457][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.933485][ T30] [ 241.351955][ T30] Kernel Offset: disabled [ 241.356285][ T30] Rebooting in 86400 seconds..