last executing test programs: 3.402732431s ago: executing program 0 (id=822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 3.150351882s ago: executing program 0 (id=827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@op={0x18}], 0x18}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x194, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.465866213s ago: executing program 4 (id=839): r0 = socket(0x8, 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', r1, 0x29, 0x5, 0xff, 0x200, 0x50, @private2, @empty, 0x8, 0x7, 0x1, 0x800}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x0, 0x210, 0xffffffff, 0x120, 0x358, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2f, 0x13, 0x2, 0x5, 0x0, 0x521, 0x20}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xc, @ipv6=@loopback, @ipv4=@local, @port=0x4e23, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id=0x66, @gre_key=0x5}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0x0, 0xff000000], 'veth0_to_hsr\x00', 'hsr0\x00', {0xff}, {}, 0x62, 0x6, 0x3, 0x3e}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x32, 0xa, 0x9, 0x3, 0x7, 0x0, 0x200a}}, @common=@icmp6={{0x28}, {0x12, "d978", 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1b, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@loopback, @icmp_id=0x66, @gre_key=0xfffc}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x2000200, 0x2, 0x1, [0xfff8, 0x4, 0x44b, 0x81, 0xa6a, 0x3, 0x2, 0x7, 0x0, 0x582, 0x8, 0xffff, 0x2, 0x6, 0x456], 0xf}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @icmp_id=0x68, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x110000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000780)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x280, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xc30d}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x900}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4cf7}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x75}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0xffff}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x48811) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000c40)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r3) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000d00), &(0x7f0000000d40)=0x8) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000e80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xa) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x440c0}, 0x20010010) r8 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000001180)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x54, {0x2, 0x4e20, @empty}, 'hsr0\x00'}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001200)=0x6, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'ip6_vti0\x00', r5, 0x2f, 0xfb, 0x7, 0x9, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x3, 0x6}}) write$binfmt_misc(r0, &(0x7f0000001300)={'syz0', "8b55a5b10ef290dc23be75a43bcfd20bef7042a35d07543687d87ca98b277a77a908"}, 0x26) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000001340)={0xab, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg(r3, &(0x7f0000002a40)={&(0x7f0000002380)=@caif=@dgm={0x25, 0x1, 0xf7}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002400)="b472024a1781039b8ab074db1b22f7983ba1", 0x12}, {&(0x7f0000002440)="e0546f4b78826767813721cea1d670af37e011d74e63a1d5cd128744715b2315d8bf8020529e19c02ce5a317b34899429ca442ae19ef0a1b3907c4a2dc867012a5981bd4c60dc44bb199bc701c96ea2eabb9a264da1ce43231760c9bca0dc924c8c9deccb1fa70c20a91c4e1e9148147dfc51bb1ee7d05fb9efd9b521a3920313d9038678ac9c6f4a9c97bab62ab963215338dabefc0ae3969e84f7bb8387b28ca0a3bf033c43212c732c608fd5cce6a4121daae79336f9a6ef564c7b038f5", 0xbf}, {&(0x7f0000002500)="874cfe3fe30058b15bbe7144eee48c799226ef7fbc0bfcea46064558d98084e6addb33d49ac6822d3926d79c20e0c1d45fdce0910d96ba3a3df8c67c09949e6cf0027835b0be3a115423f4e35d55982407fdd388ecc5061fca9ffe84cdb4d582757ac76970eadc233c41e13f818596eb9c945dc6ea00dc4ef104322cd9b60b03d8f02fc7f661f00a9994c467dc16c3b38bacb1e9cc39efec698e7b0b072dd208c0f69b62f560dcbd9d86137316005ce026e8aa912002b5f75a986c7743aa3c8dc70d0f4256f1a153b716b87f44eefcb99d1094b350e984e0af1a1fb355a3e8959d56c2bd63f6e3a4dad994b4be49d175c6d0fe5ec65257", 0xf7}, {&(0x7f0000002600)="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", 0xff}], 0x4, &(0x7f0000002740)=[{0x30, 0x1, 0x5, "f0ca14f56b4e015df14962f02352cacae9506adf50f0c8b00ececbb3"}, {0x88, 0x6, 0x1, "489061b2ed60d28a742d3588685af50c94fe98006cea05c54016aefdd29ba03392f6e9d3a7c065f165a47d5f1f224558693c4540094ce9f1701ff511fd1100612ef63dbcf25c5c5b42fb7ed18ce02eaa7a89c6fc469a630dc32b5792cbbf3d02eff43951728cf35c49d4e8c8e01011e1c7aaa906be"}, {0x88, 0x10a, 0x1, "bfe07230d28c1bde576d3cb1b98f33a091c0825ea778ca2615e7b0a5e34d64bc20da5c715e3e71c32e9bd95c413ababcc5e3266e6ba8f47c4e9a92fab9fb793e559e12c53f4de992eeedeccfccd7b837b4091d8195da6908cc5309765318fc5f35663998ec09eb71d6c83eb55d4157a0a7"}, {0x98, 0x11, 0x8, "e1a1cfafcd4da965c0a3821c9d17d140593fe0b862ee0ae6e624705156b62f4f07ca3d26a3c6825ace975f323c5dd42116212042d7e273eddcd4fc5b8c93889bd53b7ed359beffad3e32df5014ad653ad61fe55c270317f224ef5513e83a14132b5d9ece6af15247317df045a7b3b3c4a124c8bd30583d49688a1cf5fc3212f8bb"}, {0x100, 0x104, 0x8, "57d38e54ca66cf56f2d5d6d6ade4d123eb7394cff870b867b5c67c7c89f45e4403601845a2de433f8e7e527e4b3ef0bae17f5a1e9e3c63be7e15776b71afd3768a0cd5d7e0cdbcd62235a9889e16f4589d3703ffa8f734b893f74498e92cdbd2132c7c2f5518588aa2eb1f1267b21faf5b38592ed84c9664fb37ee2617a9691be948da2a9b157eca619a556637c9defc801d2058210c0a49c2b8bf79045e5acb60e7c2a66ff4ed2817adb676c4d299077f03207ac5eb2a178b91d84064363ec420ae575e72eb401bcfc3226e0d7c09e67241a5ec856739deebd1709478a4124f289e5d684a9b93b793dbfeefeb479d"}], 0x2d8}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002a80)='syz1\x00', 0x200002, 0x0) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002b00)=@o_path={&(0x7f0000002ac0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002c80)={@cgroup=r10, r11, 0x8, 0x28}, 0x20) 2.236247162s ago: executing program 4 (id=841): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @broadcast, @local}, &(0x7f0000000640)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x0, 0xca, {{0x3d, 0x4, 0x2, 0x3, 0xf4, 0x65, 0x0, 0xd, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@rr={0x7, 0x17, 0xa7, [@empty, @broadcast, @empty, @empty, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xe7, 0x0, 0x7, [0x2, 0x1000, 0x1, 0x8, 0x5, 0xc4, 0x7b9, 0x9]}, @cipso={0x86, 0x62, 0xfffffffffffffffc, [{0x5, 0x4, "7697"}, {0x6, 0x6, "2d02b8f5"}, {0x2, 0x10, "1cf4e536b6e7f72c72678a116ce9"}, {0x0, 0x8, "1c27286bdbe1"}, {0x1, 0x7, "2753e8d23e"}, {0x6, 0xb, "e3df88b052c412d115"}, {0x0, 0x9, "7e73bb43068c1b"}, {0x1, 0x3, "e6"}, {0x2, 0x10, "05efc8b452c0944f14313b5b1103"}, {0x5, 0xc, "f9ab2af47b0956167073"}]}, @rr={0x7, 0x1b, 0x62, [@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp={0x44, 0x20, 0x1d, 0x0, 0x2, [0x400, 0x0, 0x0, 0x6, 0x0, 0x2, 0xb96]}, @ra={0x94, 0x4, 0x1}]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="400003"], 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c00002803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040018f075c300000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001407000008000600", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000100008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000104000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffff000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x6f0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f00000002c0)) 2.198223742s ago: executing program 0 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x840000000002, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000001c40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001b80)=[{{&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)=""/240, 0xf0}], 0x1, &(0x7f0000000540)=""/154, 0x9a}, 0x3}, {{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f00000007c0)=""/23, 0x17}], 0x4, &(0x7f0000000840)=""/247, 0xf7}, 0x2}, {{&(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/37, 0x25}, {&(0x7f0000001a00)=""/147, 0x93}], 0x3, &(0x7f0000001b00)=""/75, 0x4b}, 0x6}], 0x3, 0x20, &(0x7f0000001c80)={r2, r3+60000000}) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r7, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\x00 \x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000300)=0x4, 0x4) 2.083912812s ago: executing program 4 (id=843): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d40)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @multicast1}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r6, 0x6}, 0x8) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.027023858s ago: executing program 4 (id=845): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) recvmsg$can_bcm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/148, 0x94}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000b80)=""/140, 0x8c}], 0x3}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fe47, 0x0, {}, {0x0, 0xea60}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) socket$packet(0x11, 0x0, 0x300) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYRES16=r4], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 1.827688583s ago: executing program 4 (id=847): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="c60a0000000000006b112c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x80, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x32b, 0x0, 0x0, {0x2, 0x3f}}, 0x18}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000480)={@val={0x4}, @void, @eth={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}}}}}}, 0x82) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x0) poll(&(0x7f0000000040)=[{r8, 0x2124}, {r8, 0xb0c4}], 0x2, 0x11ff) shutdown(r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000013c0)={'sit0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x0, 0x7800, 0xa43, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0xd, 0x0, 0x4, 0x0, @local, @dev}}}}) 1.816031794s ago: executing program 1 (id=848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$inet6(r0, &(0x7f0000000680)="ab5124b8f26d9f3706466875734f7cc2eef57f5ddac85a85a68ed899eb93946e942f116cbe6d5786d76c72f29c580d698ff18b0b23c07112b267394b9ec07668fcc1e5c9b61c7274f67b2c60cd04e88827fd7b3b97fa97ec369d757cdb5a430954a5f4077a4490a5aad0958ae16d765fc5dd2f1cb8b5838526673164b06153179c42171a5f9c05c41ea4c2f4b1d02878e79125efb4b55412febec54c226d984ada39306a0ba365d8a184399c39e5b3f8fb5b01feeeeccba8f50c38c733663ccf10e1235998104711ea359bf7fef4a461361e54b8bbeaea2c21520b5d0805", 0xde, 0x4048004, &(0x7f00000003c0)={0xa, 0x4e23, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7ff}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000680)="ab5124b8f26d9f3706466875734f7cc2eef57f5ddac85a85a68ed899eb93946e942f116cbe6d5786d76c72f29c580d698ff18b0b23c07112b267394b9ec07668fcc1e5c9b61c7274f67b2c60cd04e88827fd7b3b97fa97ec369d757cdb5a430954a5f4077a4490a5aad0958ae16d765fc5dd2f1cb8b5838526673164b06153179c42171a5f9c05c41ea4c2f4b1d02878e79125efb4b55412febec54c226d984ada39306a0ba365d8a184399c39e5b3f8fb5b01feeeeccba8f50c38c733663ccf10e1235998104711ea359bf7fef4a461361e54b8bbeaea2c21520b5d0805", 0xde, 0x4048004, &(0x7f00000003c0)={0xa, 0x4e23, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7ff}, 0x1c) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x0) (async) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000280)={0xfffd, 0x2001}, 0x4) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000280)={0xfffd, 0x2001}, 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) r9 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000000)="003400000081003400000081f360", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.733864889s ago: executing program 1 (id=849): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c20000000000000002907800000000e000000111009078e0000002000000020000000000000000"], 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008002e000000008108002e000300000008002500040000000500110009000000080004000004000008000f00ff01000008001c"], 0x6c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x5, 0x8000000000000001, 0xfffffffffffffffc, 0x8246, 0x5f4, 0x3e2, 0x8, 0x7fffffff, 0x9, 0x7b9d, 0xc, 0x2, 0x400, 0x0, 0x3]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={r6, @in={{0x2, 0x4e23, @local}}, 0x7, 0x7ec2, 0x3, 0xff, 0x8}, &(0x7f00000006c0)=0x98) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000080007"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x1378, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3404fbdbdf2580142008000b00040000c8380008000100ffffffff069858f658000000e881dff558ba4229f90987edbb7bb063ddcafe11cfe2c5b2dc2215b8cd5e9a099be038c1aec793609f4c83c3dc5dc55e47100f6e35a099df00"/105], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_GET_COALESCE(r8, 0x0, 0x40000d8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$inet(0x2, 0x2, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 1.564052531s ago: executing program 1 (id=851): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000010201080000000000000000001098280992dfe70000000600074000000000"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', r0}, 0x90) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5501, &(0x7f00000000c0)={{}, "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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x22}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002a00090000000000000000000400002c45001180"], 0x5c}, 0x1, 0x3000000}, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x0, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000500), 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8, 0x700, 0x3, 0x4, {{0x17, 0x4, 0x1, 0x2a, 0x5c, 0x65, 0x0, 0x3, 0x2f, 0x0, @remote, @loopback, {[@noop, @ssrr={0x89, 0x23, 0x41, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010102, @broadcast, @multicast2, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @rr={0x7, 0x3, 0x68}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @local, @multicast2]}, @lsrr={0x83, 0x7, 0x5, [@local]}]}}}}}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80100009}, 0xc, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910600000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=0x1, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.319883028s ago: executing program 1 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2640], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r4, 0x10d, 0xaa, 0x0, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 1.27764148s ago: executing program 3 (id=854): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f00)={0x1c, 0x1e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="14"]}, 0x1c}], 0x1}, 0x0) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1ad26339e696d8cfd156180cbc07ee00e761eab00ded89bf1ee52bf7faa18032e7809074de647483e6f8d89643ad1c7643bc284be91c46405c91cd5aad368fa0bf05e0514f420e26b29bbba5a1f2fbdd5d44864db46eeb09e49da4b3ea0e671c2e8ad26cedd269", 0x67}, {&(0x7f0000000140)="ce8da56bc6d88931d7f6fed434e2d5c04b45db8b44d174521f28b471024ac8497751c86d0b41c4481a8f66f3e5660beedc3ccb91c134d900535cce12e02cd2d6575383d38e82beafd91ad327388afef659d3a76bb3876055a70ad4b5ebd9f2523fa4251bb83a93e35161678edd5221a359362b073cccbf6347ce5683ffe6e821a3b00facf001f7a5e85c4d8f7218646dbd2e79ca95a49cdb82ce312ba30d96a26b3591e91ae66b7544a52af521f764977f8e607eda13d29d", 0xb8}, {&(0x7f0000000200)="951e8853b4bb9fbc79f174d6ffca61de099ccb602e95d03f0a61103fe2709071907f07d4e6398c96144dd31a394e9422ac0873fe1b9217fafd7050a2b3bb9f0ebe8d9d13576fd486fb32a43f8c94cb00671cb147817ea11819294764cc39b04bfbf769f5f3bbc9d5661f54cd5837716e2408bf033f53805e7f2d54f73b2175d84cbef28a13c2f89940e7b5851ec4b81bff5437eae33090bc028bbae917d0c38da9", 0xa1}, {&(0x7f00000002c0)="184293631478bbe6537b77eac77d8ff11bcbe055edc52f472ae4427c8eabd66a5f9ddfba4eee9e7cfaa1ebc1e022d6ec545fa9424c90ee286c4cf392f9c973aae581adf7713bbfa9541132623e91b2addaf4c3161f3a4a86e455bed6076cdea89330730ee698cf0e297c5b15fd021d0dd55d8a1c222d577f6f32f60a971b741ff810b7b3fe0d65484d76dcc56dd1361f0be7f73c4d7c68a57e73352afb7cd9c916284e1ee8fe57b28d63c98c977eac833e4f6976062d1924d000", 0xba}, {&(0x7f0000000380)="eb02aa2018c24f358f6d048c1722cd913c53fac24e68ff6507df5aaea986b47c4aba5abee4f573595c8a997e89d6e3c455a28f2fc7ad06015c1640578ab18a8432bef0b971d6fb83db14ebc00ecf98c18b5d33055d1e1ea8e5ec0d057c2fe9ed1246d9696c944d612f8a7761b94b3562f4b6c4469c", 0x75}], 0x5) 1.252401456s ago: executing program 2 (id=855): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x28, 0x0, 0xc541602fd9566611, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000280)=0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYBLOB="9731801554159e88c439731c78ca9c4ea05d7330c79bf4bb4e29d1c5d9eaaca4c7e47b4eb2413850637e1f07ea02390144671fdee2e98a8654ee9e7b40a344031fb577e76d998e38cb11bfbfcdba3e1aab8b6269188550fac6228b6ce1761663c24e079353c82d67953f28"], 0x6c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="38002f80200003801400038006000100000000001800020000000000040001000000000008000100000000000c"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x90, r11, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5c52917dea08cd530a8baf244457d1dcb514d28e5acb69658b3c879170e46d82"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x24000095) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_xfrm(0x10, 0x3, 0x6) 1.187837733s ago: executing program 1 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x2c, r2, 0x20, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}]}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c000000180001801400020067656e65766531000000006e000000000c000380080001"], 0x38}}, 0x0) 1.181295758s ago: executing program 0 (id=857): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4404c000) epoll_create1(0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000540)=ANY=[@ANYBLOB='5\x00\x00\x00\a'], 0xd) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r9, 0x0, 0xfe46) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/247, 0xf7}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="980300", @ANYRES16=r3, @ANYBLOB="0100280570", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x1a8, 0xa8, 0xfeffffff, 0x1a8, 0x2b0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@icmp={{0x28}, {0x0, "f947"}}, @common=@addrtype={{0x30}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@ecn={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 1.057763645s ago: executing program 1 (id=858): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x1, 0x1, 0x10000, 0x0, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11020000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x84, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x2}, 0x10) socket$packet(0x11, 0xa, 0x300) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000400)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4c1b16df09411fc0f4f743d11e66dcad1823edb5572eec93", "956fcb3786cee452642440e7458474a9b65a28a66a1549b2c140ef12a6bb6db8"}}}}}}}, 0x0) 1.015142078s ago: executing program 3 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001480)=[{{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000700)=""/14, 0xe}, {&(0x7f00000009c0)=""/214, 0xd6}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000ac0)=""/202, 0xca}}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000bc0)=""/141, 0x8d}], 0x1, &(0x7f0000000240)=""/111, 0x6f}}, {{&(0x7f0000000d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000e80)=""/40, 0x28}, {&(0x7f0000000ec0)=""/82, 0x52}, {&(0x7f0000001600)=""/73, 0x49}, {&(0x7f0000000fc0)=""/226, 0xe2}], 0x4, &(0x7f0000001100)=""/82, 0x52}}, {{&(0x7f0000001180)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/93, 0x5d}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/152, 0x98}, {&(0x7f0000000080)=""/161, 0xa1}], 0x4, &(0x7f0000000540)=""/34, 0x22}}], 0x4, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', r2, 0x29, 0x8, 0xcf, 0x8, 0x2c, @local, @private0, 0x7, 0x40, 0x6, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000037c0)={0x12cc, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "d36722d61018b57e44aaea5c64eec6db765af2c48c96cff2aa6ed3ec96036d81b22ec5d33780afd3ce6b7e0923bddeac2d525d80653305a323bc2faaa22eb3c81b4bf52bd863376438b0362a7a7e91dae9711d06bddb8c7708d99d22475ce4b8d90eebd3b3a1734766a1da9569cbba114aff8688a34a70338d35e89ba26a85191193fe91de3e9d7d8837272798c991d55d1321a193897ff8c4ec3170f94fc364added5c791457f8daa0a358e99c98e7abae681c3ddde7b50efb172c84e0badb78ff5ed954b94888b175632e30e38549e7e3fa48bf8592a10f002"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!.(:\xa6]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0000000}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "616ac4a32f6405d0cbd769fa4fe4ddbb51832b8eb0013f0162787a327a1d855eff082cf90857759b5e02a52f6121"}, @ETHTOOL_A_BITSET_MASK={0x62, 0x5, "41a59fb6d9d3ae86256794f10c24ce701654f4c75a60037a7d5609e70087926d3b29bbdf76b87ea682b8d1d2d6c456824588e6f665b1c1892889d15e741482e211c5778ed85d958d257dc532e032eb9e40cf9a2a56fa76556bd85cf533f9"}]}]}, 0x12cc}, 0x1, 0x0, 0x0, 0x400c4}, 0x4008080) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005780)={0x34, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) accept4$inet6(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x1c, 0x800) 859.826533ms ago: executing program 2 (id=860): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x0, 0x8f}, 0xe) shutdown(r1, 0x0) (async, rerun: 32) r2 = socket$kcm(0x29, 0x5, 0x0) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x2, 0x0, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={r6, 0x0, 0x20}, &(0x7f00000000c0)=0x18) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000140)=@phonet={0x23, 0x6, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="11609e0eeba80b21f084d9efc37241c20baa7202c3b6a062051d0f8cc24859fc541486c6cdc6281f173d25b6bb976b04ea62ea0d272da9209c26febe1d2a8f1c56d5bbf4866464a3d62b67e1dd654d434a9f5be929f547555990cf7d9bf87d2967ae77aa41f026c1c9895e711e2e833f4e67ff2a856486b343ffc52c6d84afa22709171337a834030aaf93ee20c36c35dfd258a930c876e215ef20d2bbfd1c74fe76dd5dace29ce9a00f56b82b3547a14ddebb3cd75ca7da4964", 0xba}, {&(0x7f0000000280)="8901f9e6890d438554ac3fdeff1cdb8517a10ad8cb9bf2a53fe55439fa8379d4c37a9c42ea0b698f6c3c383bdb58b4d55a4fe8151bbcf42591423f2637519969027e1ba96405d4bf830ca047fff1dd8c00ac4ec8819ef5ce9033742a7d6e3d92f1ce51d7abf42c580314ec70c3c3508d4997819ce03e5dec11285fdee3e7646a401cc302d7b18e141cb11442236cad9304f880aeb5ba", 0x96}, {&(0x7f0000000340)="8c85c420af0c7c168d8b14718a77d327e38a1aa65567bff8ac6eb5c6b9f2aae2505a1606134dbcb666d732b6c20f88a4e16aa67aef0344cffd2285def1b0eba37c7830225420e508bd1c89c61166852220577535026c1628faa1969ae0bc069ebc8022ed7376a0dbe9a4acadeae18c7e8541aff12d020b040e91314b4f0fa02a371809bf7adda12a01559dc95e163c77d4e32da1e45f6b429d1054f690a4e3295ef77598857e8e0f", 0xa8}], 0x3}, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) (async) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) shutdown(r8, 0x1) (async) recvmmsg(r8, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) 857.453293ms ago: executing program 0 (id=861): socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x8, 0x0, 0x4, 0x20000001, 0x361, 0x1, 0xfffffffe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af84000000000bfa200000000000007020000f8fffffff0b9000000000000b7f800000000000085", @ANYBLOB="2e7263936469ce49ca2316e820e135c3b6f37db818262e920180def20335228ad5f756163efa872e5605742556c62646e6c3c3e46bf438659eca0ef01541f4f1dd18a0d89ae6dfe3d1f7bbe10ccd8a9f19ba99cc991242b4f4bbd003d6fc34686ceb6cdff5ca896cfd181c042f11eb1794bffee51be86b3c7a532c34597fe88fb5fb2ed868b3733354955216abb4ffa3eace763cb2630e3454c18146dd70ded04aa1ee83d0827859fb621964f262434c"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaeaaaaaaa0800450000700000000000019078ac1e0001ac1414aa0300907803000000450000000000000000890000ac1414bbac1414aa441c0003ac1e000100000000ac14140000000000ac1414aa00000000860600000000441c00"/126], 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4}, 0x48) r4 = socket(0x22, 0x2, 0x3) close(r2) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="10000900bbbbbbbbbbbb000000000000bbbbbbbbd1bbdfc256ddc480aaaaaaaaaaaaaaaaaaaaaaaa00000000000059416e4e7632000000000000"]) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x0, 0x7, 0x2a44}) socket$igmp(0x2, 0x3, 0x2) 769.649957ms ago: executing program 4 (id=862): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=0xffffffffffffffff], 0x70}}, 0x0) syz_emit_ethernet(0x29a, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x264, 0x3a, 0x0, @dev, @dev, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x8, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8b"}, {0x0, 0x34, "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"}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x7}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000fdffffff95"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x2000000b) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r8, 0x0) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, 0x0, 0x0) read(r7, 0x0, 0x0) close(r7) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac141400000000000000000000000026fc79b32740033500000000000000000000000000000000000a0065"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e9ff0200000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 726.647403ms ago: executing program 3 (id=863): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000feffffffffffffff00000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c000280080005400000000008000140000000030800044000000003080003400000000408000240000000120900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r6, 0x119, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x8, 0x2}}}, 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 627.592457ms ago: executing program 2 (id=864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000cf2b000f7b775368f60cd7e04780088d328bd6fee9c5ab52bad9aa0836094c4c174d13f32a1ba77eded14d86be24f19926d1ec9f191d639c001accfbcd00bf61f822d3d94c824d66120dd8d38d2aff76adafb56e4327185b31cb407ae6c7adbb8166ca96442ac05fc266f0598c5f55fbf7c15ab4cbde3ab3dabd540dcfc263a94284e2af4926c40837ed6483475ddfe7420474e66a524562133a0a60a30f8dc581e7ee490863c6ed91c4bb909c14acf9df1be5bc0e5e1856b6cd1a22001b23100a5444024f7b7ee04de0c3ff984", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0002000000"], 0x3c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000011c0)=ANY=[@ANYBLOB='\x00\x00\x00R4\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRESDEC=r1, @ANYBLOB="0a00340001010101010100000a0006000802110000010000050018011b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0200007b83b188545d179a339087e160c2c7f4aa43aeb6c800f3e43552e8202fcd09c27780b7621b940ac4087f4c3c1cf41785331392d67473abbcb55235ffcf7bb431d922cb28a29a5035901c9ce7f2cb33d00000010000000000f76ec6c0c4b6131ab706a1bc45412bfe919f8975e373ae8dd2e3e9febfb13033b4d07467613e5b3850f833212b4326b7a9849609000000000000001e", @ANYRES16=0x0, @ANYBLOB="210300000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x22c}}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffffe4fa60b46d0494568ff94c52664c5a37c4cf76db4dcff61671eb0aad5965356c74a8b341feb710cca3edae4f3f31415303ecc85c48c3892201dfd3be695dab93bf1f15977900d50ec921d9879739ea95f11189db5ddcc125842498c4e90da25f2cbc1081f5dd6f1a6dceb67fb42b3468f910485107dec73dbdf118a466b37d1de128d6df"], 0x398}}, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001500)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) (async) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 531.932147ms ago: executing program 0 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000550000000c0099000000000000000000464119414258606f9dac1f06590db5624e5a2801dc5e7e29b464de241396d2a1e616db563c69b827a324f9e454456a8194ce7c48fbd6c6746168a2c1262ced95c3b61d91b42e8a3ef3fef25f903399fef9c4730ae40621926323554a797df3597fac25024633cef51eab82fbc9c7e96982b76ea8d4038228ea0f3cc740652865d7302876332b5bb0fec83cc6bec57721dc3b93a7a9058d6d1dafbe93ef006174561b1b598a0f6deaa89b11c835b31918ce3ca6174cbb16cc7bbae28f01005b3e39d83f3b768b2e20ee7423e3f7c23f131915b3e95ac67a2469027878b2"], 0x20}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, {0x0, 0x1}}}}]}, 0x78}}, 0x0) getsockname$unix(r4, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) r6 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x9, 0x7e76, 0x0, 0xfff7, 0xfffa, 0x7, 0xd, {0x0, @in6={{0xa, 0x4e24, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4000a2}}, 0x80000004, 0x8000, 0x10, 0x400006, 0x7}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x8000, 0x401, 0x8, r9}, 0x10) 502.260262ms ago: executing program 2 (id=866): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xf778, 0x800, 0xf, 0x101, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, 0x90) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240), 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xdd12}], 0x1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYRES8, @ANYRES8=r8, @ANYRES16, @ANYBLOB="02f483bcb84f5bdec80a228dbaa0206ef01a1384142b743f0a356b0c574d955e325a73266cbcc4e4eeb6fd2bf7500c72767f747da23862daa897cc8447ac3d0e9d537c9d7a39649cb1adc6d9ffe0590a07d6942e97cf62d3e49b32a6158e9f7a64dd077b8c31a76b776fba9995531080db769e2912e2d8f5e2617eeb0fdaf27457f01e3ffef32988af4c581e2303545c20b9b8c0cd17ab"], 0x38}}, 0x20000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x3}, 0xcf) pipe(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) 364.02846ms ago: executing program 3 (id=867): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000f104000400000000000900020073797a31000000000c000706000015000000000005000547ce298649a17bd59787546d05a3f3000a000000050001000600000065"], 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r2, @ANYBLOB="00000a00100000801c001a800837df60071a4ee82e0e6b273cb27f64255e536804d5e4e1219830db6b3ffba922982c2248e43eef15669ad7d6e5a1c8705969561247ef11ba58fbfa15863979a2"], 0x44}, 0x1, 0x10000000, 0x0, 0x4000010}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 363.058651ms ago: executing program 2 (id=868): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2}, 0x90) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000003300000000000071104300000000dcf87769fd673f6fcd0000000000003db31259c5f3c06a7612ff20622046ad23e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x0, 0x7fe2, 0x800001}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@nat={'nat\x00', 0x1b, 0x5, 0x1548, 0x13f8, 0x13f8, 0xffffffff, 0x13f8, 0x0, 0x14b0, 0x14b0, 0xffffffff, 0x14b0, 0x14b0, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x9, {0x3}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x66, @gre_key=0x7}}}, {{@ip={@empty, @rand_addr=0x64010101, 0x0, 0xffffff00, 'vlan0\x00', 'geneve0\x00', {0xff}, {}, 0x8, 0x2, 0xab6fd8109cf610da}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0xb4e84995eeb61ae1, 0x7, 0x7, 0x6, 0x3], 0x5, 0x41be071b7dc1ed50}}}, @common=@inet=@ipcomp={{0x30}, {[0x4d4, 0x4d2], 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x5, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @port=0x4e21, @icmp_id=0x66}}}}, {{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0xff, 0xff000000, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x13}, 0x0, 0x1c0, 0x1f8, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@addrtype={{0x30}, {0x182, 0x41, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @port=0x4e24, @icmp_id=0x66}}}}, {{@ip={@broadcast, @local, 0xff000000, 0xffffff00, 'veth0_to_bridge\x00', 'ip6_vti0\x00', {}, {}, 0x67, 0x1, 0x61}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x800, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x15a8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x4}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xfffffffffffffebc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 271.812311ms ago: executing program 3 (id=869): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e2"}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x28}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async, rerun: 64) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007800010600000000000000000700000047"], 0x18}], 0x1}, 0x0) 93.015845ms ago: executing program 3 (id=870): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x4000000) 0s ago: executing program 2 (id=871): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 51.454434][ T5214] cgroup: Unknown subsys name 'net' [ 51.594442][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.930376][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.181896][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.190955][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.199228][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.207381][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.209317][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.215341][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.223499][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.229268][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.236604][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.255623][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.263628][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.271134][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.294964][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.309870][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.318717][ T4621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.327054][ T4621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.335769][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.344364][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.352215][ T4621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.352778][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.366996][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.374759][ T4621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.380414][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.390054][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.398562][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.406878][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.414712][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.422949][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.431611][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.439083][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.720523][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 55.947843][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.955658][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.963892][ T5224] bridge_slave_0: entered allmulticast mode [ 55.970855][ T5224] bridge_slave_0: entered promiscuous mode [ 56.008630][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.018764][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.025847][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.033477][ T5224] bridge_slave_1: entered allmulticast mode [ 56.040289][ T5224] bridge_slave_1: entered promiscuous mode [ 56.157103][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 56.177655][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.201512][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.260732][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.273428][ T5224] team0: Port device team_slave_0 added [ 56.280118][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 56.318401][ T5224] team0: Port device team_slave_1 added [ 56.355263][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.362941][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.371123][ T5229] bridge_slave_0: entered allmulticast mode [ 56.378023][ T5229] bridge_slave_0: entered promiscuous mode [ 56.420888][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.428791][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.435912][ T5229] bridge_slave_1: entered allmulticast mode [ 56.443183][ T5229] bridge_slave_1: entered promiscuous mode [ 56.461732][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.468950][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.494972][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.508358][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.515338][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.541801][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.596011][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.613973][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.685521][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.693492][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.700794][ T5232] bridge_slave_0: entered allmulticast mode [ 56.708281][ T5232] bridge_slave_0: entered promiscuous mode [ 56.731782][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.739161][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.746664][ T5236] bridge_slave_0: entered allmulticast mode [ 56.753360][ T5236] bridge_slave_0: entered promiscuous mode [ 56.774418][ T5229] team0: Port device team_slave_0 added [ 56.780506][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.788015][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.795186][ T5235] bridge_slave_0: entered allmulticast mode [ 56.802230][ T5235] bridge_slave_0: entered promiscuous mode [ 56.809855][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.817487][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.824625][ T5232] bridge_slave_1: entered allmulticast mode [ 56.831520][ T5232] bridge_slave_1: entered promiscuous mode [ 56.864102][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.871313][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.878537][ T5236] bridge_slave_1: entered allmulticast mode [ 56.885598][ T5236] bridge_slave_1: entered promiscuous mode [ 56.897122][ T5229] team0: Port device team_slave_1 added [ 56.903097][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.910315][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.917549][ T5235] bridge_slave_1: entered allmulticast mode [ 56.924201][ T5235] bridge_slave_1: entered promiscuous mode [ 56.962396][ T5224] hsr_slave_0: entered promiscuous mode [ 56.969275][ T5224] hsr_slave_1: entered promiscuous mode [ 57.008530][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.020832][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.058293][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.092471][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.103993][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.113835][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.121218][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.147819][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.160708][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.167797][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.193774][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.207858][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.247901][ T5232] team0: Port device team_slave_0 added [ 57.278478][ T5236] team0: Port device team_slave_0 added [ 57.298265][ T5235] team0: Port device team_slave_0 added [ 57.318626][ T5232] team0: Port device team_slave_1 added [ 57.327037][ T5241] Bluetooth: hci1: command tx timeout [ 57.327050][ T4621] Bluetooth: hci0: command tx timeout [ 57.354562][ T5236] team0: Port device team_slave_1 added [ 57.374162][ T5235] team0: Port device team_slave_1 added [ 57.405688][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.412682][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.439099][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.476384][ T5241] Bluetooth: hci4: command tx timeout [ 57.476402][ T4621] Bluetooth: hci2: command tx timeout [ 57.476658][ T4621] Bluetooth: hci3: command tx timeout [ 57.514218][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.521543][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.548004][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.562804][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.571202][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.598531][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.611576][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.618776][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.644949][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.656702][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.663652][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.689915][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.705030][ T5229] hsr_slave_0: entered promiscuous mode [ 57.712277][ T5229] hsr_slave_1: entered promiscuous mode [ 57.719473][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.730340][ T5229] Cannot create hsr debugfs directory [ 57.754340][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.761657][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.787759][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.933320][ T5232] hsr_slave_0: entered promiscuous mode [ 57.939676][ T5232] hsr_slave_1: entered promiscuous mode [ 57.946530][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.954110][ T5232] Cannot create hsr debugfs directory [ 57.963806][ T5236] hsr_slave_0: entered promiscuous mode [ 57.970719][ T5236] hsr_slave_1: entered promiscuous mode [ 57.977574][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.985123][ T5236] Cannot create hsr debugfs directory [ 58.001159][ T5235] hsr_slave_0: entered promiscuous mode [ 58.010961][ T5235] hsr_slave_1: entered promiscuous mode [ 58.017717][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.025271][ T5235] Cannot create hsr debugfs directory [ 58.389531][ T5224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.412071][ T5224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.422943][ T5224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.442569][ T5224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.479972][ T5229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.500220][ T5229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.519106][ T5229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.538566][ T5229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.597884][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.610967][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.636302][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.651876][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.739769][ T5235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.762320][ T5235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.775452][ T5235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.809924][ T5235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.889217][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.940427][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.948923][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.962124][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.972526][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.983350][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.029172][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.087265][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.094778][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.105729][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.112846][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.139941][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.170186][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.177356][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.198904][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.206039][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.224507][ T5229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.236862][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.392266][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.398997][ T4621] Bluetooth: hci1: command tx timeout [ 59.406762][ T4621] Bluetooth: hci0: command tx timeout [ 59.448178][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.500720][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.543463][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.558945][ T4621] Bluetooth: hci4: command tx timeout [ 59.559354][ T5231] Bluetooth: hci2: command tx timeout [ 59.564368][ T4621] Bluetooth: hci3: command tx timeout [ 59.614736][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.624409][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.631593][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.643041][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.650165][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.669279][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.729656][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.736856][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.751363][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.774722][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.781844][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.832144][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.874178][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.881378][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.914933][ T5229] veth0_vlan: entered promiscuous mode [ 59.936003][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.957230][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.964375][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.042241][ T5229] veth1_vlan: entered promiscuous mode [ 60.130881][ T5232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.149576][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.190937][ T5224] veth0_vlan: entered promiscuous mode [ 60.225161][ T5229] veth0_macvtap: entered promiscuous mode [ 60.239992][ T5224] veth1_vlan: entered promiscuous mode [ 60.279031][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.308462][ T5229] veth1_macvtap: entered promiscuous mode [ 60.384115][ T5224] veth0_macvtap: entered promiscuous mode [ 60.409590][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.434013][ T5224] veth1_macvtap: entered promiscuous mode [ 60.453809][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.470856][ T5229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.481608][ T5229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491608][ T5229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.501537][ T5229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.571814][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.599938][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.615432][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.635323][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.652291][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.663459][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.676977][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.744299][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.770941][ T5224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.780312][ T5224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.789250][ T5224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.798905][ T5224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973475][ T1295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.989140][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.990550][ T5235] veth0_vlan: entered promiscuous mode [ 61.003917][ T1295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.010710][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.070965][ T1295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.075334][ T5235] veth1_vlan: entered promiscuous mode [ 61.086690][ T1295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.150946][ T5236] veth0_vlan: entered promiscuous mode [ 61.167706][ T5232] veth0_vlan: entered promiscuous mode [ 61.173981][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.188979][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.191327][ T5232] veth1_vlan: entered promiscuous mode [ 61.232178][ T5236] veth1_vlan: entered promiscuous mode [ 61.310181][ T5232] veth0_macvtap: entered promiscuous mode [ 61.363060][ T5235] veth0_macvtap: entered promiscuous mode [ 61.400493][ T5232] veth1_macvtap: entered promiscuous mode [ 61.451682][ T5235] veth1_macvtap: entered promiscuous mode [ 61.475752][ T5236] veth0_macvtap: entered promiscuous mode [ 61.486882][ T4621] Bluetooth: hci0: command tx timeout [ 61.487073][ T5241] Bluetooth: hci1: command tx timeout [ 61.562010][ T5236] veth1_macvtap: entered promiscuous mode [ 61.595039][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.609554][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.621948][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.636873][ T5241] Bluetooth: hci2: command tx timeout [ 61.637190][ T4621] Bluetooth: hci4: command tx timeout [ 61.642285][ T5241] Bluetooth: hci3: command tx timeout [ 61.649805][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.675618][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.694233][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.712970][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.735796][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.753321][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.763392][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.787402][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.808619][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.818495][ T5322] xt_TCPMSS: Only works on TCP SYN packets [ 61.835914][ T5320] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6'. [ 61.863212][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.884228][ T5325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.887962][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.912804][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.923447][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.938233][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.950002][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.962469][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.973875][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.984552][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.994492][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.005102][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.017788][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.062388][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.099028][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.116696][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.134527][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.165012][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.180971][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.193483][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.213646][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.230133][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.245415][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.256166][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.267025][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.290825][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.312590][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.337339][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.357938][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.372035][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.386747][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.406745][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.427851][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.448327][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.469848][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.482581][ T5235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.498580][ T5235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.510266][ T5235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.520046][ T5235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.557418][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.591042][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.601115][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.615711][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.845522][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.854119][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.929276][ T1295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.943568][ T1295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.998274][ T1295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.008728][ T1295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.051034][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.062119][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.121403][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.147638][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.186283][ T1295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.237115][ T1295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.553669][ T5349] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.561770][ T4621] Bluetooth: hci1: command tx timeout [ 63.567426][ T5231] Bluetooth: hci0: command tx timeout [ 63.640542][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 63.717034][ T5231] Bluetooth: hci2: command tx timeout [ 63.717110][ T5241] Bluetooth: hci4: command tx timeout [ 63.723047][ T4621] Bluetooth: hci3: command tx timeout [ 63.875170][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 63.916355][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 64.001824][ T5370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.337510][ T5400] FAULT_INJECTION: forcing a failure. [ 64.337510][ T5400] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.443073][ T5400] CPU: 1 UID: 0 PID: 5400 Comm: syz.1.24 Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 64.453627][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.463710][ T5400] Call Trace: [ 64.467007][ T5400] [ 64.469953][ T5400] dump_stack_lvl+0x241/0x360 [ 64.474672][ T5400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.479901][ T5400] ? __pfx__printk+0x10/0x10 [ 64.484518][ T5400] ? __pfx_lock_release+0x10/0x10 [ 64.489923][ T5400] ? __lock_acquire+0x137a/0x2040 [ 64.494975][ T5400] should_fail_ex+0x3b0/0x4e0 [ 64.499687][ T5400] _copy_from_user+0x2f/0xe0 [ 64.504306][ T5400] do_ipv6_setsockopt+0x2f1/0x3630 [ 64.509453][ T5400] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 64.515041][ T5400] ? __pfx___might_resched+0x10/0x10 [ 64.520355][ T5400] ? __lock_acquire+0x137a/0x2040 [ 64.525452][ T5400] ? aa_sk_perm+0x967/0xab0 [ 64.529992][ T5400] ? __pfx_aa_sk_perm+0x10/0x10 [ 64.534876][ T5400] ? __pfx_lock_acquire+0x10/0x10 [ 64.539934][ T5400] ipv6_setsockopt+0x5c/0x1a0 [ 64.544647][ T5400] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.550568][ T5400] do_sock_setsockopt+0x3af/0x720 [ 64.555636][ T5400] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 64.561213][ T5400] ? __fget_files+0x29/0x470 [ 64.565839][ T5400] ? __fget_files+0x3f6/0x470 [ 64.570556][ T5400] __sys_setsockopt+0x1ae/0x250 [ 64.575421][ T5400] __x64_sys_setsockopt+0xb5/0xd0 [ 64.580618][ T5400] do_syscall_64+0xf3/0x230 [ 64.585118][ T5400] ? clear_bhb_loop+0x35/0x90 [ 64.589789][ T5400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.595687][ T5400] RIP: 0033:0x7f25d39779f9 [ 64.600101][ T5400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.620070][ T5400] RSP: 002b:00007f25d33ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.628487][ T5400] RAX: ffffffffffffffda RBX: 00007f25d3b06058 RCX: 00007f25d39779f9 [ 64.636463][ T5400] RDX: 0000000000000031 RSI: 0000000000000029 RDI: 0000000000000003 [ 64.644419][ T5400] RBP: 00007f25d33ff0a0 R08: 0000000000000004 R09: 0000000000000000 [ 64.652374][ T5400] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 64.660352][ T5400] R13: 000000000000006e R14: 00007f25d3b06058 R15: 00007ffe5eb82278 [ 64.668512][ T5400] [ 64.732650][ T5407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 64.988815][ T5414] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 65.052305][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 65.294916][ T5428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 65.540213][ T5439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.705178][ T5447] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 65.710640][ T5449] FAULT_INJECTION: forcing a failure. [ 65.710640][ T5449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.745423][ T5449] CPU: 0 UID: 0 PID: 5449 Comm: syz.4.39 Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 65.755973][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 65.756358][ T5451] sctp: [Deprecated]: syz.0.41 (pid 5451) Use of int in max_burst socket option deprecated. [ 65.756358][ T5451] Use struct sctp_assoc_value instead [ 65.766021][ T5449] Call Trace: [ 65.766036][ T5449] [ 65.766045][ T5449] dump_stack_lvl+0x241/0x360 [ 65.766075][ T5449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.766097][ T5449] ? __pfx__printk+0x10/0x10 [ 65.766125][ T5449] ? snprintf+0xda/0x120 [ 65.766151][ T5449] should_fail_ex+0x3b0/0x4e0 [ 65.766181][ T5449] _copy_to_user+0x2f/0xb0 [ 65.815754][ T5449] simple_read_from_buffer+0xca/0x150 [ 65.821130][ T5449] proc_fail_nth_read+0x1e9/0x250 [ 65.826165][ T5449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.831729][ T5449] ? rw_verify_area+0x520/0x6b0 [ 65.836581][ T5449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.842153][ T5449] vfs_read+0x204/0xbc0 [ 65.846337][ T5449] ? __pfx_lock_release+0x10/0x10 [ 65.851371][ T5449] ? do_sock_setsockopt+0x3e2/0x720 [ 65.856583][ T5449] ? __pfx_vfs_read+0x10/0x10 [ 65.861274][ T5449] ? ipv6_setsockopt+0xe5/0x1a0 [ 65.866132][ T5449] ? __fget_files+0x29/0x470 [ 65.870741][ T5449] ? __fget_files+0x3f6/0x470 [ 65.875438][ T5449] ksys_read+0x1a0/0x2c0 [ 65.879680][ T5449] ? __pfx_ksys_read+0x10/0x10 [ 65.884500][ T5449] ? do_syscall_64+0x100/0x230 [ 65.889290][ T5449] ? do_syscall_64+0xb6/0x230 [ 65.893995][ T5449] do_syscall_64+0xf3/0x230 [ 65.898607][ T5449] ? clear_bhb_loop+0x35/0x90 [ 65.903287][ T5449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.909711][ T5449] RIP: 0033:0x7f086a37643c [ 65.914142][ T5449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 65.933754][ T5449] RSP: 002b:00007f086b1d9040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.942184][ T5449] RAX: ffffffffffffffda RBX: 00007f086a506058 RCX: 00007f086a37643c [ 65.950176][ T5449] RDX: 000000000000000f RSI: 00007f086b1d90b0 RDI: 0000000000000004 [ 65.958143][ T5449] RBP: 00007f086b1d90a0 R08: 0000000000000000 R09: 0000000000000000 [ 65.966140][ T5449] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 65.974130][ T5449] R13: 000000000000006e R14: 00007f086a506058 R15: 00007ffefadb6db8 [ 65.982206][ T5449] [ 66.335855][ T5470] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.45'. [ 66.495335][ T5476] tap0: tun_chr_ioctl cmd 2147767521 [ 66.612290][ T5478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 66.653173][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 66.685407][ T5478] ip6t_rpfilter: unknown options [ 66.730704][ T5482] Zero length message leads to an empty skb [ 66.965347][ T5490] __nla_validate_parse: 3 callbacks suppressed [ 66.965366][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 67.012402][ T5491] netlink: 48 bytes leftover after parsing attributes in process `syz.0.54'. [ 67.234832][ T5499] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.535838][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 68.019858][ T5543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 68.072558][ T5546] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 68.122619][ T5546] netlink: 244 bytes leftover after parsing attributes in process `syz.3.69'. [ 68.482520][ T5553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.72'. [ 68.659034][ T5560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.74'. [ 68.894689][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.938794][ T5568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'. [ 68.977354][ T5570] netlink: 72 bytes leftover after parsing attributes in process `syz.1.75'. [ 69.083017][ T5567] sit0: entered promiscuous mode [ 69.089541][ T5567] sit0: entered allmulticast mode [ 69.165131][ T5580] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 69.181757][ T5583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 69.380664][ T5589] @ÿ: renamed from veth0_vlan (while UP) [ 69.743895][ T5605] xt_TCPMSS: Only works on TCP SYN packets [ 71.178078][ T5624] netlink: 'syz.1.95': attribute type 33 has an invalid length. [ 71.187971][ T5624] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 71.449000][ T5645] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.513543][ T5645] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 71.579119][ T5645] bridge_slave_0: default FDB implementation only supports local addresses [ 71.803250][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.811991][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.929444][ T5674] wg2: entered promiscuous mode [ 71.951131][ T5674] wg2: entered allmulticast mode [ 71.982722][ T5678] netlink: 'syz.3.110': attribute type 2 has an invalid length. [ 72.026674][ T5678] netlink: 'syz.3.110': attribute type 8 has an invalid length. [ 72.055029][ T5678] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 72.101864][ T5678] __nla_validate_parse: 6 callbacks suppressed [ 72.101922][ T5678] netlink: 80 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.128406][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.150944][ T5682] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.168293][ T5688] netlink: 148 bytes leftover after parsing attributes in process `syz.0.115'. [ 72.180521][ T5682] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.191796][ T5684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.113'. [ 72.191818][ T5688] netlink: 'syz.0.115': attribute type 30 has an invalid length. [ 72.287459][ T5695] tipc: Started in network mode [ 72.313201][ T5695] tipc: Node identity 9e773b238fe, cluster identity 4711 [ 72.359463][ T5695] tipc: Enabled bearer , priority 10 [ 72.470172][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 72.496269][ T5704] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.670728][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.711458][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 72.720524][ T5717] bridge_slave_1: left allmulticast mode [ 72.736164][ T5717] bridge_slave_1: left promiscuous mode [ 72.742695][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.764033][ T5717] bridge_slave_0: left allmulticast mode [ 72.782710][ T5717] bridge_slave_0: left promiscuous mode [ 72.799532][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.490819][ T944] tipc: Node number set to 295123747 [ 73.778990][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 73.791036][ T5770] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.307123][ T5798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.146'. [ 74.325678][ T5800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.147'. [ 74.339991][ T5798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.146'. [ 74.904688][ T5831] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 75.036834][ T5839] netlink: 'syz.0.160': attribute type 3 has an invalid length. [ 75.078099][ T5839] netlink: 'syz.0.160': attribute type 3 has an invalid length. [ 75.083724][ T5834] warning: `syz.1.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.822760][ T5896] syz.0.176[5896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.822911][ T5896] syz.0.176[5896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.934399][ T58] cfg80211: failed to load regulatory.db [ 78.811017][ T5871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.232021][ T5906] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.274228][ T5918] __nla_validate_parse: 7 callbacks suppressed [ 79.274247][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 79.329953][ T5906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.395329][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 79.435115][ T5932] netlink: 26 bytes leftover after parsing attributes in process `syz.1.184'. [ 79.472069][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 79.501054][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 79.521534][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 79.677009][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.685227][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.744619][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 79.846017][ T5941] syzkaller0: entered promiscuous mode [ 79.856772][ T5941] syzkaller0: entered allmulticast mode [ 81.305727][ T5976] ip6t_rpfilter: unknown options [ 81.411643][ T5983] Cannot find add_set index 0 as target [ 81.558447][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 81.576009][ T5989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.200'. [ 81.605593][ T8] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 81.687599][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.200'. [ 83.229898][ T6073] netlink: 'syz.0.218': attribute type 29 has an invalid length. [ 83.272126][ T6073] netlink: 'syz.0.218': attribute type 29 has an invalid length. [ 83.353935][ T6078] ip6tnl1: entered promiscuous mode [ 83.392088][ T6078] ip6tnl1: entered allmulticast mode [ 84.391635][ T6136] __nla_validate_parse: 6 callbacks suppressed [ 84.391654][ T6136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.233'. [ 85.190433][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 85.219807][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 85.396987][ T6177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.473225][ T6177] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.531189][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 85.749450][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 85.770070][ T6205] netlink: 52 bytes leftover after parsing attributes in process `syz.1.250'. [ 85.822273][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.251'. [ 85.835940][ T6206] netlink: 148 bytes leftover after parsing attributes in process `syz.4.249'. [ 86.007121][ T6208] syzkaller0: entered promiscuous mode [ 86.063842][ T6208] syzkaller0 (unregistering): left promiscuous mode [ 86.264240][ T6234] x_tables: duplicate underflow at hook 1 [ 86.535834][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 86.683778][ T6255] ɶƣ0GC¦: entered promiscuous mode [ 86.831111][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 87.149839][ T6277] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 87.676937][ T6315] netlink: 'syz.3.275': attribute type 3 has an invalid length. [ 87.923270][ T6321] IPVS: set_ctl: invalid protocol: 0 100.0.1.1:0 [ 87.931481][ T25] IPVS: starting estimator thread 0... [ 88.046850][ T6327] IPVS: using max 17 ests per chain, 40800 per kthread [ 88.113072][ T6333] netlink: 'syz.3.284': attribute type 15 has an invalid length. [ 88.441919][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.732217][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.923370][ T6419] x_tables: duplicate underflow at hook 2 [ 90.252337][ T6434] __nla_validate_parse: 10 callbacks suppressed [ 90.252356][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 91.054106][ T6471] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.317'. [ 91.064915][ T6466] syz_tun: entered promiscuous mode [ 91.073885][ T6463] netlink: 224 bytes leftover after parsing attributes in process `syz.2.315'. [ 91.104726][ T6471] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 91.153823][ T6466] batadv_slave_0: entered promiscuous mode [ 91.200835][ T6466] syz_tun: left promiscuous mode [ 91.208543][ T6466] batadv_slave_0: left promiscuous mode [ 91.251356][ T6480] netlink: 19 bytes leftover after parsing attributes in process `syz.1.320'. [ 91.685704][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.717955][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.828067][ T6510] macvlan2: entered promiscuous mode [ 91.847406][ T6510] vlan1: entered promiscuous mode [ 91.890761][ T6510] team0: Port device macvlan2 added [ 91.932249][ T6517] xt_CT: No such helper "snmp_trap" [ 91.954103][ T6512] netlink: 92 bytes leftover after parsing attributes in process `syz.3.329'. [ 91.970255][ T6520] netlink: 'syz.3.329': attribute type 33 has an invalid length. [ 91.986529][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 92.008356][ T6520] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 92.041296][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.329'. [ 92.143221][ T6528] IPVS: set_ctl: invalid protocol: 47 172.20.20.5:20002 [ 92.151968][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.332'. [ 92.213932][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.332'. [ 92.428732][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.332'. [ 92.710987][ T6552] raw_sendmsg: syz.2.339 forgot to set AF_INET. Fix it! [ 92.838737][ T6557] dummy0: entered promiscuous mode [ 92.851755][ T6557] vlan2: entered promiscuous mode [ 92.912421][ T6557] dummy0: left promiscuous mode [ 93.515540][ T6594] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 93.637604][ T6598] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 93.902570][ T6614] veth3: entered allmulticast mode [ 94.124361][ T6628] veth1_to_bridge: entered allmulticast mode [ 94.138476][ T6628] veth1_to_bridge: left allmulticast mode [ 94.353142][ T6636] netlink: 'syz.2.358': attribute type 2 has an invalid length. [ 96.033859][ T6704] __nla_validate_parse: 9 callbacks suppressed [ 96.033879][ T6704] netlink: 19 bytes leftover after parsing attributes in process `syz.1.377'. [ 96.554466][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 96.872530][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 96.896242][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 96.925705][ T6729] ipvlan2: entered allmulticast mode [ 96.947985][ T6729] veth0_vlan: entered allmulticast mode [ 97.636746][ T6751] netlink: 19 bytes leftover after parsing attributes in process `syz.0.389'. [ 97.824323][ T6756] netlink: 19 bytes leftover after parsing attributes in process `syz.0.391'. [ 97.981940][ T6765] syzkaller1: entered promiscuous mode [ 98.006591][ T6765] syzkaller1: entered allmulticast mode [ 98.014122][ T6767] netlink: 84 bytes leftover after parsing attributes in process `syz.2.395'. [ 98.038196][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.095458][ T6767] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.548367][ T6788] batadv_slave_0: mtu less than device minimum [ 98.681835][ T6808] netlink: 19 bytes leftover after parsing attributes in process `syz.0.404'. [ 98.843518][ T6811] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.856332][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'. [ 98.925361][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 99.779272][ T6854] IPv6: addrconf: prefix option has invalid lifetime [ 99.799280][ T6854] pimreg: entered allmulticast mode [ 99.807024][ T6854] pimreg: left allmulticast mode [ 99.894309][ T6859] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 100.205666][ T6871] netlink: 'syz.4.421': attribute type 11 has an invalid length. [ 100.224886][ T6876] netlink: 'syz.3.422': attribute type 178 has an invalid length. [ 100.260063][ T6869] dccp_v6_rcv: dropped packet with invalid checksum [ 100.272818][ T6874] batman_adv: batadv1: Adding interface: netdevsim0 [ 100.296802][ T6874] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.355105][ T6874] batman_adv: batadv1: Interface activated: netdevsim0 [ 100.928522][ T6902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.074135][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.595572][ T6921] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 101.924753][ T6937] __nla_validate_parse: 8 callbacks suppressed [ 101.924769][ T6937] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.441'. [ 101.942127][ T6937] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.441'. [ 101.951767][ T6937] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.441'. [ 102.477996][ T6952] ipip0: entered promiscuous mode [ 102.538390][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 102.607666][ T6958] netlink: 324 bytes leftover after parsing attributes in process `syz.4.448'. [ 103.237654][ T6987] sctp: [Deprecated]: syz.1.455 (pid 6987) Use of int in max_burst socket option. [ 103.237654][ T6987] Use struct sctp_assoc_value instead [ 103.469393][ T6997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.458'. [ 103.651585][ T7007] pimreg: entered allmulticast mode [ 103.693032][ T7007] netlink: 188 bytes leftover after parsing attributes in process `syz.0.460'. [ 103.801215][ T6018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.031013][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 104.065956][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.468'. [ 104.102993][ T7027] Bluetooth: MGMT ver 1.23 [ 104.131864][ T7031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.466'. [ 104.161539][ T7031] netem: unknown loss type 13 [ 104.176112][ T7031] netem: change failed [ 104.328727][ T7035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.388644][ T7035] team0: Port device bond0 added [ 104.719301][ T7050] syzkaller0: entered promiscuous mode [ 104.734187][ T7050] syzkaller0: entered allmulticast mode [ 105.025391][ T7062] syz.3.479: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 105.064223][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.3.479 Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 105.074857][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 105.077362][ T6021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.084994][ T7062] Call Trace: [ 105.085023][ T7062] [ 105.085032][ T7062] dump_stack_lvl+0x241/0x360 [ 105.085064][ T7062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.111925][ T7062] ? __pfx__printk+0x10/0x10 [ 105.116553][ T7062] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 105.122994][ T7062] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 105.129518][ T7062] warn_alloc+0x278/0x410 [ 105.133902][ T7062] ? __pfx_warn_alloc+0x10/0x10 [ 105.138788][ T7062] ? packet_set_ring+0x6da/0x2450 [ 105.143844][ T7062] ? __get_vm_area_node+0x23d/0x270 [ 105.149087][ T7062] __vmalloc_node_range_noprof+0x69f/0x1460 [ 105.155006][ T7062] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 105.160776][ T7062] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.167124][ T7062] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 105.173129][ T7062] ? packet_set_ring+0x62b/0x2450 [ 105.178168][ T7062] ? rcu_is_watching+0x15/0xb0 [ 105.182957][ T7062] ? packet_set_ring+0x6da/0x2450 [ 105.187999][ T7062] vzalloc_noprof+0x79/0x90 [ 105.192524][ T7062] ? packet_set_ring+0x6da/0x2450 [ 105.197564][ T7062] packet_set_ring+0x6da/0x2450 [ 105.202470][ T7062] ? __pfx_packet_set_ring+0x10/0x10 [ 105.207786][ T7062] ? __might_fault+0xaa/0x120 [ 105.212488][ T7062] ? __might_fault+0xc6/0x120 [ 105.217197][ T7062] packet_setsockopt+0x1140/0x1970 [ 105.222328][ T7062] ? __pfx___might_resched+0x10/0x10 [ 105.227636][ T7062] ? __pfx_packet_setsockopt+0x10/0x10 [ 105.233125][ T7062] ? aa_sk_perm+0x967/0xab0 [ 105.237652][ T7062] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.242520][ T7062] ? __pfx_lock_acquire+0x10/0x10 [ 105.247567][ T7062] ? aa_sock_opt_perm+0x79/0x120 [ 105.252526][ T7062] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 105.258095][ T7062] ? security_socket_setsockopt+0x87/0xb0 [ 105.263847][ T7062] ? __pfx_packet_setsockopt+0x10/0x10 [ 105.269324][ T7062] do_sock_setsockopt+0x3af/0x720 [ 105.274397][ T7062] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.279967][ T7062] ? __fget_files+0x29/0x470 [ 105.284583][ T7062] ? __fget_files+0x3f6/0x470 [ 105.289322][ T7062] __sys_setsockopt+0x1ae/0x250 [ 105.294205][ T7062] __x64_sys_setsockopt+0xb5/0xd0 [ 105.299256][ T7062] do_syscall_64+0xf3/0x230 [ 105.303784][ T7062] ? clear_bhb_loop+0x35/0x90 [ 105.308476][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.314393][ T7062] RIP: 0033:0x7fdc69f779f9 [ 105.318819][ T7062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.338530][ T7062] RSP: 002b:00007fdc6acf6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.346973][ T7062] RAX: ffffffffffffffda RBX: 00007fdc6a105f80 RCX: 00007fdc69f779f9 [ 105.355100][ T7062] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000008 [ 105.363091][ T7062] RBP: 00007fdc69fe58ee R08: 000000000000001c R09: 0000000000000000 [ 105.371171][ T7062] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 105.379160][ T7062] R13: 000000000000000b R14: 00007fdc6a105f80 R15: 00007fffb0d1a2f8 [ 105.387160][ T7062] [ 105.536290][ T7062] Mem-Info: [ 105.539464][ T7062] active_anon:4165 inactive_anon:0 isolated_anon:0 [ 105.539464][ T7062] active_file:1424 inactive_file:38149 isolated_file:0 [ 105.539464][ T7062] unevictable:768 dirty:220 writeback:0 [ 105.539464][ T7062] slab_reclaimable:8685 slab_unreclaimable:99164 [ 105.539464][ T7062] mapped:21555 shmem:1253 pagetables:791 [ 105.539464][ T7062] sec_pagetables:0 bounce:0 [ 105.539464][ T7062] kernel_misc_reclaimable:0 [ 105.539464][ T7062] free:1388436 free_pcp:804 free_cma:0 [ 105.610708][ T7062] Node 0 active_anon:16460kB inactive_anon:0kB active_file:5696kB inactive_file:152524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86220kB dirty:880kB writeback:0kB shmem:3476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10440kB pagetables:3264kB sec_pagetables:0kB all_unreclaimable? no [ 105.648106][ T7062] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 105.724930][ T7062] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.785194][ T7062] lowmem_reserve[]: 0 2561 2562 0 0 [ 105.792488][ T7062] Node 0 DMA32 free:1587288kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:16508kB inactive_anon:0kB active_file:5696kB inactive_file:151204kB unevictable:1536kB writepending:880kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:1944kB local_pcp:1108kB free_cma:0kB [ 105.825579][ T7062] lowmem_reserve[]: 0 0 1 0 0 [ 105.834957][ T7062] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 105.865653][ T7062] lowmem_reserve[]: 0 0 0 0 0 [ 105.872107][ T7062] Node 1 Normal free:3952420kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:908kB local_pcp:908kB free_cma:0kB [ 105.903202][ T7062] lowmem_reserve[]: 0 0 0 0 0 [ 105.908226][ T7062] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.921361][ T7062] Node 0 DMA32: 2*4kB (UE) 7*8kB (UE) 7*16kB (ME) 75*32kB (UME) 129*64kB (UME) 126*128kB (UME) 48*256kB (UME) 10*512kB (UME) 6*1024kB (ME) 6*2048kB (UME) 372*4096kB (ME) = 1586512kB [ 105.940078][ T7062] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 105.952338][ T7062] Node 1 Normal: 4*4kB (UM) 9*8kB (UM) 6*16kB (UM) 9*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (U) 3*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3952472kB [ 105.977938][ T7062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.988828][ T7062] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.000349][ T7062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.010798][ T7062] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.020966][ T7062] 40826 total pagecache pages [ 106.025932][ T7062] 0 pages in swap cache [ 106.032913][ T7062] Free swap = 124996kB [ 106.038030][ T7062] Total swap = 124996kB [ 106.042208][ T7062] 2097051 pages RAM [ 106.047572][ T7062] 0 pages HighMem/MovableOnly [ 106.052262][ T7062] 402772 pages reserved [ 106.058104][ T7062] 0 pages cma reserved [ 107.987733][ T7104] __nla_validate_parse: 4 callbacks suppressed [ 107.987753][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 109.186046][ T7178] ebt_among: dst integrity fail: 200 [ 109.370212][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 109.556727][ T1290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.656383][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 109.670050][ T7208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 109.686715][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 109.687985][ T7208] vlan2: entered allmulticast mode [ 109.709430][ T7208] macvlan0: entered allmulticast mode [ 109.714896][ T7208] veth1_vlan: entered allmulticast mode [ 110.687527][ T7272] No such timeout policy "syz0" [ 110.856597][ T6018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.203310][ T7299] netlink: 'syz.0.537': attribute type 8 has an invalid length. [ 111.354691][ T7314] Bluetooth: MGMT ver 1.23 [ 111.537465][ T7320] mac80211_hwsim hwsim10 syzkaller0: renamed from wlan1 (while UP) [ 111.671309][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.544'. [ 111.708913][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 111.757311][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 111.826825][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 111.884785][ T7333] vxcan3: entered promiscuous mode [ 111.933177][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 112.214872][ T7331] syz.3.546 (7331) used greatest stack depth: 18288 bytes left [ 112.337940][ T7365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.623717][ T7380] Bluetooth: hci3: invalid len left 7, exp >= 26 [ 112.946498][ T7393] macvlan0: entered allmulticast mode [ 112.952273][ T7393] veth1_vlan: entered allmulticast mode [ 112.994472][ T7393] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 113.477634][ T5241] Bluetooth: hci0: command 0x0401 tx timeout [ 113.479246][ T4621] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 114.235161][ T7444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.259548][ T7445] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.731865][ T7468] __nla_validate_parse: 4 callbacks suppressed [ 114.731884][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 114.805416][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 114.845758][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.582'. [ 114.971633][ T7480] netlink: 188 bytes leftover after parsing attributes in process `syz.2.585'. [ 115.007294][ T7480] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 115.320755][ T6022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.602540][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.182198][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.600'. [ 117.347472][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'. [ 117.354550][ T7539] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 117.512635][ T7542] trusted_key: syz.1.604 sent an empty control message without MSG_MORE. [ 117.554628][ T7544] net veth1_virt_wifi ÿÿÿ: renamed from virt_wifi0 [ 117.577641][ T7542] netlink: 'syz.1.604': attribute type 34 has an invalid length. [ 117.585136][ T7549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.817136][ T7558] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 117.871646][ T7558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.979244][ T7568] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 118.099067][ T7572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.615'. [ 118.362834][ T7589] nbd: must specify at least one socket [ 118.609171][ T7597] dccp_invalid_packet: P.Data Offset(100) too large [ 119.242653][ T7621] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 119.654878][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 119.799724][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.898517][ T7650] xt_l2tp: wrong L2TP version: 0 [ 120.023858][ T7650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.636'. [ 120.381864][ T7665] netlink: 44 bytes leftover after parsing attributes in process `syz.1.640'. [ 120.556895][ T7666] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 121.080731][ T6018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.583859][ T7730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 121.719299][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.912429][ T7743] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 121.958566][ T7743] wlan1: mtu less than device minimum [ 122.098717][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'. [ 122.373725][ T6021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.511396][ T7761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.662831][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'. [ 122.807899][ T7784] netlink: 'syz.2.673': attribute type 4 has an invalid length. [ 122.815587][ T7784] netlink: 152 bytes leftover after parsing attributes in process `syz.2.673'. [ 122.857996][ T7783] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.869996][ T7784] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 122.931401][ T8] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 123.043434][ T7792] netlink: 72 bytes leftover after parsing attributes in process `syz.3.677'. [ 123.057915][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 123.222177][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'. [ 123.294258][ T7808] netlink: 872 bytes leftover after parsing attributes in process `syz.0.678'. [ 123.323882][ T7802] team0: Port device team_slave_0 removed [ 123.384309][ T7802] tipc: Started in network mode [ 123.398522][ T7802] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 123.420344][ T7802] tipc: Enabled bearer , priority 16 [ 123.897492][ T7828] netlink: 'syz.1.686': attribute type 2 has an invalid length. [ 123.956647][ T7832] sctp: [Deprecated]: syz.2.688 (pid 7832) Use of int in max_burst socket option deprecated. [ 123.956647][ T7832] Use struct sctp_assoc_value instead [ 124.207751][ T7845] Cannot find add_set index 0 as target [ 124.295686][ T4621] Bluetooth: hci4: link tx timeout [ 124.302393][ T4621] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.312405][ T5241] Bluetooth: hci4: link tx timeout [ 124.318339][ T5241] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.326831][ T5241] Bluetooth: hci4: link tx timeout [ 124.331973][ T5241] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.341609][ T5241] Bluetooth: hci4: link tx timeout [ 124.347328][ T5241] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.355226][ T5241] Bluetooth: hci4: link tx timeout [ 124.361459][ T5241] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.389555][ T5241] Bluetooth: hci4: link tx timeout [ 124.394711][ T5241] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.404735][ T5241] Bluetooth: hci4: link tx timeout [ 124.412099][ T5241] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.536508][ T5275] tipc: Node number set to 10922666 [ 124.635643][ T7850] veth0_vlan: left promiscuous mode [ 124.814962][ T7842] delete_channel: no stack [ 125.041575][ T7873] __nla_validate_parse: 5 callbacks suppressed [ 125.041594][ T7873] netlink: 6 bytes leftover after parsing attributes in process `syz.3.698'. [ 125.080063][ T7873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.815852][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 126.092329][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.706'. [ 126.113718][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.706'. [ 126.358301][ T5241] Bluetooth: hci4: command 0x0405 tx timeout [ 126.854973][ T6018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.026114][ T7942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.251118][ T7959] netlink: 'syz.1.721': attribute type 11 has an invalid length. [ 127.296636][ T7959] netlink: 'syz.1.721': attribute type 11 has an invalid length. [ 127.375276][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'. [ 127.490276][ T1290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.789035][ T7986] FAULT_INJECTION: forcing a failure. [ 127.789035][ T7986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.815641][ T7986] CPU: 1 UID: 0 PID: 7986 Comm: syz.0.730 Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 127.826364][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 127.836440][ T7986] Call Trace: [ 127.839735][ T7986] [ 127.842682][ T7986] dump_stack_lvl+0x241/0x360 [ 127.847388][ T7986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.852604][ T7986] ? __pfx__printk+0x10/0x10 [ 127.857195][ T7986] ? __pfx_lock_release+0x10/0x10 [ 127.862220][ T7986] should_fail_ex+0x3b0/0x4e0 [ 127.866899][ T7986] _copy_from_iter+0x1f6/0x1960 [ 127.871740][ T7986] ? __virt_addr_valid+0x183/0x530 [ 127.876844][ T7986] ? __pfx_lock_release+0x10/0x10 [ 127.881956][ T7986] ? __alloc_skb+0x28f/0x440 [ 127.886543][ T7986] ? __pfx__copy_from_iter+0x10/0x10 [ 127.891823][ T7986] ? __virt_addr_valid+0x183/0x530 [ 127.896928][ T7986] ? __virt_addr_valid+0x183/0x530 [ 127.902025][ T7986] ? __virt_addr_valid+0x45f/0x530 [ 127.907132][ T7986] ? __check_object_size+0x49c/0x900 [ 127.912407][ T7986] netlink_sendmsg+0x73d/0xcb0 [ 127.917173][ T7986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.922450][ T7986] ? __import_iovec+0x536/0x820 [ 127.927292][ T7986] ? aa_sock_msg_perm+0x91/0x160 [ 127.932220][ T7986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.937496][ T7986] ? security_socket_sendmsg+0x87/0xb0 [ 127.942949][ T7986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.948226][ T7986] __sock_sendmsg+0x221/0x270 [ 127.952922][ T7986] ____sys_sendmsg+0x525/0x7d0 [ 127.957708][ T7986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.963004][ T7986] __sys_sendmsg+0x2b0/0x3a0 [ 127.967587][ T7986] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.972685][ T7986] ? vfs_write+0x7c4/0xc90 [ 127.977122][ T7986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.983447][ T7986] ? do_syscall_64+0x100/0x230 [ 127.988210][ T7986] ? do_syscall_64+0xb6/0x230 [ 127.992881][ T7986] do_syscall_64+0xf3/0x230 [ 127.997382][ T7986] ? clear_bhb_loop+0x35/0x90 [ 128.002313][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.008202][ T7986] RIP: 0033:0x7f2fdff779f9 [ 128.012616][ T7986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.032221][ T7986] RSP: 002b:00007f2fe0cc7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.040650][ T7986] RAX: ffffffffffffffda RBX: 00007f2fe0105f80 RCX: 00007f2fdff779f9 [ 128.048620][ T7986] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 128.056582][ T7986] RBP: 00007f2fe0cc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.064543][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.072504][ T7986] R13: 000000000000000b R14: 00007f2fe0105f80 R15: 00007fff2d597048 [ 128.080480][ T7986] [ 128.456342][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 128.612909][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 129.050826][ T8042] FAULT_INJECTION: forcing a failure. [ 129.050826][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 129.104434][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.3.744 Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 129.115072][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 129.125155][ T8042] Call Trace: [ 129.128453][ T8042] [ 129.131401][ T8042] dump_stack_lvl+0x241/0x360 [ 129.136105][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.141332][ T8042] ? __pfx__printk+0x10/0x10 [ 129.145953][ T8042] ? ref_tracker_alloc+0x332/0x490 [ 129.151094][ T8042] should_fail_ex+0x3b0/0x4e0 [ 129.155816][ T8042] ? skb_clone+0x20c/0x390 [ 129.160255][ T8042] should_failslab+0xac/0x100 [ 129.164960][ T8042] ? skb_clone+0x20c/0x390 [ 129.169398][ T8042] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 129.174815][ T8042] skb_clone+0x20c/0x390 [ 129.179085][ T8042] __netlink_deliver_tap+0x3cc/0x7c0 [ 129.184394][ T8042] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.189600][ T8042] netlink_deliver_tap+0x19d/0x1b0 [ 129.194718][ T8042] netlink_unicast+0x7be/0x990 [ 129.199491][ T8042] ? __pfx_netlink_unicast+0x10/0x10 [ 129.204789][ T8042] ? __virt_addr_valid+0x183/0x530 [ 129.209924][ T8042] ? __check_object_size+0x49c/0x900 [ 129.215215][ T8042] ? bpf_lsm_netlink_send+0x9/0x10 [ 129.220336][ T8042] netlink_sendmsg+0x8e4/0xcb0 [ 129.225113][ T8042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.230418][ T8042] ? __import_iovec+0x536/0x820 [ 129.235278][ T8042] ? aa_sock_msg_perm+0x91/0x160 [ 129.240219][ T8042] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 129.245506][ T8042] ? security_socket_sendmsg+0x87/0xb0 [ 129.250966][ T8042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.256253][ T8042] __sock_sendmsg+0x221/0x270 [ 129.261026][ T8042] ____sys_sendmsg+0x525/0x7d0 [ 129.265789][ T8042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.271074][ T8042] __sys_sendmsg+0x2b0/0x3a0 [ 129.275662][ T8042] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.280785][ T8042] ? vfs_write+0x7c4/0xc90 [ 129.285243][ T8042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.291588][ T8042] ? do_syscall_64+0x100/0x230 [ 129.296791][ T8042] ? do_syscall_64+0xb6/0x230 [ 129.301464][ T8042] do_syscall_64+0xf3/0x230 [ 129.306057][ T8042] ? clear_bhb_loop+0x35/0x90 [ 129.310734][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.316626][ T8042] RIP: 0033:0x7fdc69f779f9 [ 129.321031][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.340631][ T8042] RSP: 002b:00007fdc6acf6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.349051][ T8042] RAX: ffffffffffffffda RBX: 00007fdc6a105f80 RCX: 00007fdc69f779f9 [ 129.357011][ T8042] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 129.364967][ T8042] RBP: 00007fdc6acf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.372925][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.380886][ T8042] R13: 000000000000000b R14: 00007fdc6a105f80 R15: 00007fffb0d1a2f8 [ 129.388859][ T8042] [ 129.604954][ T8061] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 129.613824][ T8061] NCSI netlink: No device for ifindex 0 [ 129.750914][ T8069] Cannot find add_set index 0 as target [ 129.809668][ T8067] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 129.957913][ T8069] vlan1 (unregistering): left promiscuous mode [ 130.115106][ T8069] team0: Port device macvlan2 removed [ 130.171216][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 130.192794][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 130.224276][ T8075] veth0_vlan: left promiscuous mode [ 130.448713][ T8069] delete_channel: no stack [ 130.545182][ T8106] netlink: 172 bytes leftover after parsing attributes in process `syz.4.762'. [ 130.568016][ T8109] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.761'. [ 130.577404][ T8109] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 130.586311][ T8109] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.761'. [ 130.619911][ T8111] x_tables: duplicate underflow at hook 3 [ 130.778026][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'. [ 132.450775][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 132.481358][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 132.513762][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.543662][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.587877][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.601801][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.614055][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.640683][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.731442][ T8202] netlink: 220 bytes leftover after parsing attributes in process `syz.0.786'. [ 132.823302][ T8202] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 132.858915][ T8204] netlink: 'syz.3.788': attribute type 3 has an invalid length. [ 133.239850][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.249424][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.548444][ T8226] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 133.592545][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 133.602435][ T8226] rdma_op ffff88806445d1f0 conn xmit_rdma 0000000000000000 [ 134.242499][ T8273] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 134.714585][ T8290] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 134.751200][ T8290] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 134.767637][ T8290] team0: entered promiscuous mode [ 134.774601][ T8290] team_slave_1: entered promiscuous mode [ 134.784077][ T8290] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.791651][ T8290] bridge0: port 3(team0) entered blocking state [ 134.807336][ T8290] bridge0: port 3(team0) entered disabled state [ 134.832040][ T8290] team0: entered allmulticast mode [ 134.858479][ T8290] team_slave_1: entered allmulticast mode [ 134.878214][ T8290] bridge0: port 3(team0) entered blocking state [ 134.884638][ T8290] bridge0: port 3(team0) entered forwarding state [ 134.950090][ T8290] bridge0: MTU too low for tipc bearer [ 134.955604][ T8290] tipc: Disabling bearer [ 135.104297][ T8306] netlink: 'syz.3.818': attribute type 5 has an invalid length. [ 135.294267][ T8316] __nla_validate_parse: 7 callbacks suppressed [ 135.294286][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 135.316263][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 135.503606][ T8329] netlink: 55 bytes leftover after parsing attributes in process `syz.4.826'. [ 135.714768][ T8341] netlink: 'syz.1.830': attribute type 3 has an invalid length. [ 136.227816][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 136.277849][ T5241] Bluetooth: hci4: command 0x0405 tx timeout [ 136.325694][ T8371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.550779][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 136.560122][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 136.586700][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.842'. [ 136.700534][ T8386] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 136.905258][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.849'. [ 136.939406][ T8398] Êü: entered promiscuous mode [ 137.062759][ T8403] workqueue: name exceeds WQ_NAME_LEN. Truncating to: òÏÒÇlg#åîxÕ”}IãÑ#)MÔÀL&‘ÅІ90G [ 137.453044][ T8418] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 137.492109][ T8419] x_tables: unsorted underflow at hook 2 [ 137.718545][ T1290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.973912][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 138.246833][ T8455] netlink: 'syz.3.867': attribute type 4 has an invalid length. [ 138.356743][ T5241] Bluetooth: hci4: command 0x0405 tx timeout [ 138.378804][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.420047][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'. [ 138.586728][ T5236] ================================================================== [ 138.594824][ T5236] BUG: KASAN: slab-use-after-free in sco_conn_del+0xa5/0x310 [ 138.602227][ T5236] Write of size 4 at addr ffff88802b251080 by task syz-executor/5236 [ 138.610298][ T5236] [ 138.612627][ T5236] CPU: 1 UID: 0 PID: 5236 Comm: syz-executor Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 138.623475][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 138.633545][ T5236] Call Trace: [ 138.636831][ T5236] [ 138.639760][ T5236] dump_stack_lvl+0x241/0x360 [ 138.644448][ T5236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.649655][ T5236] ? __pfx__printk+0x10/0x10 [ 138.654258][ T5236] ? _printk+0xd5/0x120 [ 138.658442][ T5236] ? __virt_addr_valid+0x183/0x530 [ 138.663555][ T5236] ? __virt_addr_valid+0x183/0x530 [ 138.668760][ T5236] print_report+0x169/0x550 [ 138.673367][ T5236] ? __virt_addr_valid+0x183/0x530 [ 138.678483][ T5236] ? __virt_addr_valid+0x183/0x530 [ 138.683601][ T5236] ? __virt_addr_valid+0x45f/0x530 [ 138.688720][ T5236] ? __phys_addr+0xba/0x170 [ 138.693233][ T5236] ? sco_conn_del+0xa5/0x310 [ 138.697930][ T5236] kasan_report+0x143/0x180 [ 138.702448][ T5236] ? sco_conn_del+0xa5/0x310 [ 138.707054][ T5236] kasan_check_range+0x282/0x290 [ 138.712004][ T5236] sco_conn_del+0xa5/0x310 [ 138.716432][ T5236] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 138.721728][ T5236] hci_conn_hash_flush+0xff/0x240 [ 138.726768][ T5236] hci_dev_close_sync+0x9ef/0x11a0 [ 138.731915][ T5236] hci_unregister_dev+0x20b/0x510 [ 138.737474][ T5236] vhci_release+0x83/0xd0 [ 138.741819][ T5236] ? __pfx_vhci_release+0x10/0x10 [ 138.746862][ T5236] __fput+0x24a/0x8a0 [ 138.750944][ T5236] task_work_run+0x24f/0x310 [ 138.755546][ T5236] ? __pfx_task_work_run+0x10/0x10 [ 138.760671][ T5236] ? do_exit+0xa2a/0x27f0 [ 138.765009][ T5236] ? kmem_cache_free+0x145/0x350 [ 138.769963][ T5236] do_exit+0xa2f/0x27f0 [ 138.774138][ T5236] ? __pfx_do_exit+0x10/0x10 [ 138.778743][ T5236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.784743][ T5236] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.791094][ T5236] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.796308][ T5236] ? lockdep_hardirqs_on+0x99/0x150 [ 138.801613][ T5236] do_group_exit+0x207/0x2c0 [ 138.806216][ T5236] __x64_sys_exit_group+0x3f/0x40 [ 138.811253][ T5236] x64_sys_call+0x26c3/0x26d0 [ 138.815948][ T5236] do_syscall_64+0xf3/0x230 [ 138.820468][ T5236] ? clear_bhb_loop+0x35/0x90 [ 138.825158][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.831067][ T5236] RIP: 0033:0x7f086a3779f9 [ 138.835496][ T5236] Code: Unable to access opcode bytes at 0x7f086a3779cf. [ 138.842512][ T5236] RSP: 002b:00007ffefadb6938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 138.850944][ T5236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f086a3779f9 [ 138.858935][ T5236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 138.866917][ T5236] RBP: 00007f086a3d4a30 R08: 00007ffefadb46d7 R09: 0000000000021940 [ 138.874896][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.882875][ T5236] R13: 0000000000021940 R14: 0000000000000000 R15: 00007ffefadb71c0 [ 138.890869][ T5236] [ 138.893885][ T5236] [ 138.896212][ T5236] Allocated by task 8270: [ 138.900535][ T5236] kasan_save_track+0x3f/0x80 [ 138.905248][ T5236] __kasan_kmalloc+0x98/0xb0 [ 138.909858][ T5236] __kmalloc_noprof+0x1fc/0x400 [ 138.914714][ T5236] sk_prot_alloc+0xe0/0x210 [ 138.919231][ T5236] sk_alloc+0x38/0x370 [ 138.923315][ T5236] bt_sock_alloc+0x3c/0x340 [ 138.927825][ T5236] sco_sock_create+0xbb/0x390 [ 138.932603][ T5236] bt_sock_create+0x161/0x230 [ 138.937292][ T5236] __sock_create+0x490/0x920 [ 138.941890][ T5236] __sys_socket+0x150/0x3c0 [ 138.946410][ T5236] __x64_sys_socket+0x7a/0x90 [ 138.951101][ T5236] do_syscall_64+0xf3/0x230 [ 138.955624][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.961543][ T5236] [ 138.963887][ T5236] Freed by task 8271: [ 138.967870][ T5236] kasan_save_track+0x3f/0x80 [ 138.972646][ T5236] kasan_save_free_info+0x40/0x50 [ 138.977716][ T5236] poison_slab_object+0xe0/0x150 [ 138.982672][ T5236] __kasan_slab_free+0x37/0x60 [ 138.987448][ T5236] kfree+0x149/0x360 [ 138.991353][ T5236] __sk_destruct+0x476/0x5f0 [ 138.995951][ T5236] sco_sock_release+0x25e/0x320 [ 139.000817][ T5236] sock_close+0xbc/0x240 [ 139.005068][ T5236] __fput+0x24a/0x8a0 [ 139.009057][ T5236] task_work_run+0x24f/0x310 [ 139.013653][ T5236] do_exit+0xa2f/0x27f0 [ 139.017817][ T5236] do_group_exit+0x207/0x2c0 [ 139.022420][ T5236] get_signal+0x16a1/0x1740 [ 139.026933][ T5236] arch_do_signal_or_restart+0x96/0x860 [ 139.032494][ T5236] syscall_exit_to_user_mode+0xc9/0x370 [ 139.038050][ T5236] do_syscall_64+0x100/0x230 [ 139.042650][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.048554][ T5236] [ 139.050878][ T5236] The buggy address belongs to the object at ffff88802b251000 [ 139.050878][ T5236] which belongs to the cache kmalloc-2k of size 2048 [ 139.064935][ T5236] The buggy address is located 128 bytes inside of [ 139.064935][ T5236] freed 2048-byte region [ffff88802b251000, ffff88802b251800) [ 139.078835][ T5236] [ 139.081166][ T5236] The buggy address belongs to the physical page: [ 139.087592][ T5236] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b250 [ 139.096365][ T5236] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 139.104867][ T5236] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 139.112853][ T5236] page_type: 0xfdffffff(slab) [ 139.117541][ T5236] raw: 00fff00000000040 ffff888015842000 0000000000000000 dead000000000001 [ 139.126134][ T5236] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 139.134731][ T5236] head: 00fff00000000040 ffff888015842000 0000000000000000 dead000000000001 [ 139.143415][ T5236] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 139.152103][ T5236] head: 00fff00000000003 ffffea0000ac9401 ffffffffffffffff 0000000000000000 [ 139.160787][ T5236] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 139.169464][ T5236] page dumped because: kasan: bad access detected [ 139.175890][ T5236] page_owner tracks the page as allocated [ 139.181608][ T5236] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11479188963, free_ts 0 [ 139.201330][ T5236] post_alloc_hook+0x1f3/0x230 [ 139.206126][ T5236] get_page_from_freelist+0x2e4c/0x2f10 [ 139.211693][ T5236] __alloc_pages_noprof+0x256/0x6c0 [ 139.216910][ T5236] alloc_slab_page+0x5f/0x120 [ 139.221604][ T5236] allocate_slab+0x5a/0x2f0 [ 139.226118][ T5236] ___slab_alloc+0xcd1/0x14b0 [ 139.230806][ T5236] __slab_alloc+0x58/0xa0 [ 139.235156][ T5236] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 139.241584][ T5236] kmalloc_reserve+0x111/0x2a0 [ 139.246356][ T5236] __alloc_skb+0x1f3/0x440 [ 139.250778][ T5236] rtmsg_ifinfo_build_skb+0x84/0x260 [ 139.256058][ T5236] rtmsg_ifinfo+0x91/0x1b0 [ 139.260460][ T5236] register_netdevice+0x1774/0x1b00 [ 139.265654][ T5236] register_netdev+0x3b/0x50 [ 139.270233][ T5236] nr_proto_init+0x179/0x830 [ 139.274813][ T5236] do_one_initcall+0x248/0x880 [ 139.279572][ T5236] page_owner free stack trace missing [ 139.284919][ T5236] [ 139.287232][ T5236] Memory state around the buggy address: [ 139.292841][ T5236] ffff88802b250f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.300895][ T5236] ffff88802b251000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.308945][ T5236] >ffff88802b251080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.316986][ T5236] ^ [ 139.321033][ T5236] ffff88802b251100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.329079][ T5236] ffff88802b251180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.337120][ T5236] ================================================================== [ 139.348306][ T5236] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.355520][ T5236] CPU: 1 UID: 0 PID: 5236 Comm: syz-executor Not tainted 6.11.0-rc1-syzkaller-00244-g83044bf90e08 #0 [ 139.366374][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.376434][ T5236] Call Trace: [ 139.379713][ T5236] [ 139.382646][ T5236] dump_stack_lvl+0x241/0x360 [ 139.387341][ T5236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.392545][ T5236] ? __pfx__printk+0x10/0x10 [ 139.397146][ T5236] ? vscnprintf+0x5d/0x90 [ 139.401504][ T5236] panic+0x349/0x860 [ 139.405403][ T5236] ? check_panic_on_warn+0x21/0xb0 [ 139.410517][ T5236] ? __pfx_panic+0x10/0x10 [ 139.414940][ T5236] ? mark_lock+0x9a/0x350 [ 139.419295][ T5236] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 139.425191][ T5236] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 139.431093][ T5236] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.437429][ T5236] ? print_report+0x502/0x550 [ 139.442117][ T5236] check_panic_on_warn+0x86/0xb0 [ 139.447070][ T5236] ? sco_conn_del+0xa5/0x310 [ 139.451672][ T5236] end_report+0x77/0x160 [ 139.455930][ T5236] kasan_report+0x154/0x180 [ 139.460444][ T5236] ? sco_conn_del+0xa5/0x310 [ 139.465053][ T5236] kasan_check_range+0x282/0x290 [ 139.470005][ T5236] sco_conn_del+0xa5/0x310 [ 139.474440][ T5236] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 139.479745][ T5236] hci_conn_hash_flush+0xff/0x240 [ 139.484781][ T5236] hci_dev_close_sync+0x9ef/0x11a0 [ 139.489909][ T5236] hci_unregister_dev+0x20b/0x510 [ 139.494942][ T5236] vhci_release+0x83/0xd0 [ 139.499291][ T5236] ? __pfx_vhci_release+0x10/0x10 [ 139.504314][ T5236] __fput+0x24a/0x8a0 [ 139.508289][ T5236] task_work_run+0x24f/0x310 [ 139.512870][ T5236] ? __pfx_task_work_run+0x10/0x10 [ 139.518072][ T5236] ? do_exit+0xa2a/0x27f0 [ 139.522392][ T5236] ? kmem_cache_free+0x145/0x350 [ 139.527321][ T5236] do_exit+0xa2f/0x27f0 [ 139.531467][ T5236] ? __pfx_do_exit+0x10/0x10 [ 139.536040][ T5236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.542019][ T5236] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.548339][ T5236] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.553531][ T5236] ? lockdep_hardirqs_on+0x99/0x150 [ 139.558732][ T5236] do_group_exit+0x207/0x2c0 [ 139.563316][ T5236] __x64_sys_exit_group+0x3f/0x40 [ 139.568326][ T5236] x64_sys_call+0x26c3/0x26d0 [ 139.572993][ T5236] do_syscall_64+0xf3/0x230 [ 139.577494][ T5236] ? clear_bhb_loop+0x35/0x90 [ 139.582157][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.588047][ T5236] RIP: 0033:0x7f086a3779f9 [ 139.592448][ T5236] Code: Unable to access opcode bytes at 0x7f086a3779cf. [ 139.599450][ T5236] RSP: 002b:00007ffefadb6938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 139.607856][ T5236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f086a3779f9 [ 139.615832][ T5236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 139.623796][ T5236] RBP: 00007f086a3d4a30 R08: 00007ffefadb46d7 R09: 0000000000021940 [ 139.631793][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.639751][ T5236] R13: 0000000000021940 R14: 0000000000000000 R15: 00007ffefadb71c0 [ 139.647718][ T5236] [ 139.650853][ T5236] Kernel Offset: disabled [ 139.655161][ T5236] Rebooting in 86400 seconds..