last executing test programs: 1m26.383438607s ago: executing program 4 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{@fixed}, {}, {@fixed}, {@none}, {}, {@fixed}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x4000000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket(0x1f, 0x6, 0xffffffff) 1m26.108077576s ago: executing program 4 (id=247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0xd8, 0x1403, 0x400, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 1m25.676699336s ago: executing program 4 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 1m9.996394789s ago: executing program 4 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 24.165791213s ago: executing program 2 (id=901): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x190, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x164, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x148, 0x1, [@m_xt={0x144, 0xa, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'mangle\x00', 0xc, 0x3, "3154a51d9cb4d30000000090c5cdc85fc650f5250cf065f49a9039a2fbc00ce686e5fa956d23bd94f51e414301af8079b9a2cc"}}]}, {0x69, 0x6, "b02aff89fcb734ba3a7e4bbe7dbf80c9a578cea6f50e70b62c55c42e0420d8c5c688a7cd0b82ff660cc3f662c705e961800970f1285c53934973ac141cc9f45366c1b500c5ef5cf4034b294d4651a863b0842a90625ee18c1d91b04ca14f29de60a80dd028"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 23.99300446s ago: executing program 2 (id=904): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x9, 0x0, &(0x7f0000001580)) r5 = socket(0x10, 0x3, 0x0) accept4$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0xc00) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x78, 0x31, 0x912, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200480f}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="02"], 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000380)=0x5, 0x4) sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001400)=ANY=[@ANYBLOB="20000000120001000000020000000000070001"], 0x20}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "e6c548", 0x30, 0x11, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x4e24, 0x4e21, 0x30, 0x0, @wg=@data={0x4, 0x9, 0x7, "0ce1e752c588ed4ad551ef3d16954e9d02a22669782e7813"}}}}}}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) splice(r5, &(0x7f0000000300)=0x6, r7, &(0x7f0000000340)=0x4, 0x7, 0xd) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08000a00d2"], 0x44}}, 0x20008040) 23.661689696s ago: executing program 2 (id=908): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0xfffffffffffffffe) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="d95ca6bf8726951ee388cee0b4cebd93753d6f648eeaee2f36b22f7bb7591a6f7350a3dee1e77c7d43eab4d1649d591a2d39065d21e0a1b46315e391b2c57e009d363fad43bdcfb9154a8a4aa894fde282494f45c3741b1c5821e2e50e608fe1b5ace3d4da3c60bfdf94b25a4af29d0835bdbcae160026809ad3b711bc0def26e2a871c9043077847a035aaafe9978233f03d8b17d9d085dc91eca7857d802491773e08598835f439aa7a108703088e8dbbc07b0842b4f2e8cb9658a4b1264e42bc17edfbbfc46876544f252929b767044014ca521ed298c793c6aeb205327467bf066999dbc44f5803d55cd7c8463f9816d80707186f26fe95ae6dca51b797013ae55ab57d0ec70eef66eeb2849640929f9c703fb4afe7f32447626475533d89d74d70552c9cede892762ab82fa1f124383c437e7b8c03a82a72056b5fbc8bb20137e8851aec14f32c15cde0adc84893cb80cc51a2c7b42b2823d7454e740bce74efa3bc435c75f56aea0c051fd71bcfbbcf2f737f5799d0ffbb647a7ccf664a1a4b2c1b15920ef8aca250a354e99e4bf1198842a14f6680a544fdd785aa780eec710c72eb414fd027bbcdd94cc5994060bdd50c00df373ad0ed6f5945810e8121a94fcf487559c2d62d2164e669a0310cca344d86c08dbd421716c92e5864dcf3658d51d5e51ba2ff9dd75064a9437b3380a138ce50c3aaa4453513c1b99c7d94af8c1493de03681f279dfc9df5034efe508e17d7f1c2a252be6413de5d07c785a563c233cc4bf166538ddd7787c215d85f63935c698f75063f94e4a4f6892dc470ce46aa23a594f2bd4419c5795e13ee04078e3aec615d9a9943407ff935ee6e37793ecb04a5fca8063f143117ab5fa57b28925b364fe11852a58196c6de50c9e9bd3dfb373bd87c4cd1ae400e7239da802d4a2530d84046d5bd7d0b44f371afebedc41f9cd0bb2959ef771763d2ac93e0dd43b4ad16d1fe461cb3d23ad0e41e9dfb88d20cdd207606921e7316146a5cfc8aafc1b08ef70e4738e243d8c7dab8296a87550f182de2fcb70050b08c550a7e8d57225bc1bd8fa71354e0894acab93bda296eb28a7e24b4cc481c5037584e0fa7ded986b6defe77cc5f12ec37cf66dc5c3dec306816e187d79ddb456157dc4ff772a4dc83efb81515831ffbff711c31f93f679bb1835a63075d3ae49e9005cb77e6b5c1224b335077a5c15c7a990938b9749d01fb50b4894bc7d6c09bd57aee673deea307da440a6ab4677ea182ad15c0452f392ee257431ac52387eb168d1d5828c9fedf664a71a8216adbc08371b30538263a24045614c66b4553d8bef26c4d908bd3c7f8eef09f2dfb1322479c479d20903a9281bc0a4b2c8afe0a9ca33e116ae07bedccebea710eede9502ea589179041d0a92ba96efa9ddbd224c8f4406c0bc6bb8fcd62d0c44caad8bf78d606e168a8722be9694d80501a79d9bb889e47eb0895ed6b5b841e01d92ad168f18ddee04423599cfc2fecb2b8c31d44999b29e30e69fdba3e084105e6301254bd59a1cd57c07f837d8f657a3c63672301cd6ab7903b3665d89f76d916c752234f81e00bb4b9394162d15d159ad4ab78f9974091765fa45e1f28ad2a24ee88217adea0aafa3a946e2dc1e7e24c398479e200a91cbeaebe3511ec27cfcbbcb5bf874b54025c7f83d2238e9b6daac8ffae87794130249797ceada95546547b3246f67bab089521c0600f1e14d0459672c7c2b4d9e866e01bbae4618be1e3694ed476506c0ca22c445a09cd88c11d50133aaec2d33cc11a10f00156dc05d2df53d4a4e2148b98a776b9174257dba08d855359a35aa615cf441a3f85f1528afb6de849841729f7d5c66361ed929127ed853e557c3da090c31a67e43502208b80add56df4227ee21697e0a6e518a1b672951cd34aa0c429197e0f3a80e44603773e206eebf6d96a2aa95b2a94d783294e1fa032e750b9927b9837c92f207ff1d2a4025545c52cd1ee7685d5f6b6786f86366461624155778e2a4c83335507de3baaa0abdb4010b870320898294962a45a5cbb8b0f2209d38ebac732ab346cca2551f8d740fdee321ff84c47f9613c16e040ad255da989ab9d0c147a79c28c4ee7291fed8309f92185c2630dff36bf79de8fdbe1de8935fb81828ecbb1fef39cddd394fdb40af976f52e7704d7c22159bb9e5640e272905f50a055b9b67042fed2c5119af6d3ead0b84100148aa28c50958811165aff07a5d5a2b24de2fc808a881c3ab76d1c7f7149feb3c6eed2ee02b0499225d9ffe93a61d40ab16b31c38a75eb7b23c4a359365502e74cbad0fecfdd22b6beb6c6ff7f478604ef48a6a0adfaa7113e01c7a4dcfc088457a5d1d9330f273dad7f28c396cf98a49e26fc9cb871eaf3be133fa915e70197dbf8bd816b455ebc6e1682d04bfee60a980ef2503a068d9c4d6b1ae6c31cc01d988fb0df41659e5b8017d2643de66e0774f513862a9f01cb8bc60893c4400b39e6626c1eb5d3510b2096afb897dfbad44f35bef26c2f8e072735e0e5a58f53a61d672f99bc8c7c6b1e3ee43f910eb3dc106a1e16ac9bf284c1ebeb17c22fc0bf63ce96b5d971aa87d664ef3acaec632561a06c95f5af6a0e7182679123ea2fbc7fd6a409d09db2cb0d9aa9ed999239f01aa2e4b5bd5684ee843a559890a12afb5d1946d2410fc9452e7e7ac9188a7f326d4e1d6bfa2dc57c3ad5d0ced535baf7e281d9ce9e23390c8d7ba26877f753fcc969c66d59e0e49521cfee1aea2ea04f99a6d8a30f4d8ece3e6ee768c293e63c28c04eb108a965bd9854efecfae55a009f7f822bae59a6b073ae24ad525b44894cb8ffb2a1e577e3a15544a442b46c43fe2b6d731c6103733dcd2b7011ee9c9e7d3b6a3a4a60740cd660a76838d9e852fd9898635cb8eb0916494fb4645046865141c3e9cf1e8553ac0c1d264f995b0bc581a62506fd3927d27b7596b4de343b29365ad59d0291881ad06e00c08d5f7124985fd674757b4bdd0ab86312b678fb7e6eca30d7b432a07f188410d2c8094ec7dcd43e714bacc5d0f6daa4e94106d4b1cd5c45a51621643bf2694b71598a93bd1fda7e01723edbd729dd769487f7f8daef025446aa6df07999eb23a266bb2adbac47d92d93730a6f11b9287cce2961aacb6a5318fab8b282e1b82dbdc57b32f709bf0e9e3b5024646f445f3480ea494946202016456ae4c24b4301a96aef9c3f1e8222b1d9131562da28db73eb690a7afab825e50754b1966d763167238678872accd58f991cd2136940f3571ed47051ffe8c269ea452874213012c1346ddf060211055f6d7a157b7e705b0cbd90cff0d907c0c418b8c4fdeb0f39e6b0081aad854500b8fe0db21eca9905d08b619ea6d39abc05f28c9281bde05de2666c86529e0886cd541f40ef6348251f969429a8e5f370da63c07eb1cc1e9cd4b9f06aa3487335c75f9df7d91b2d2437e48efc3429a5d01d6b80b06e3ecb0160c43467df7ee8e2f209656b8b138784b5ec66d5cdc062052fa281f734c4aa49d9a7b9767af1adab62e23fd720fdaac0a82d07e8811475b93c53a79b0a452e2994ef88dccb2304ce535f51e85074a3baf90d57b905f58bdc13967e44d550e502fa142b02a1439dc76373c593207dc638c54d6faf38c5dbc57ef556b526f3463bd8b11f73ffe41b871c10aab8c698de826e15cdba87f5b4c2fac7511b7ab022c31f79019eeb6e5c2421c79be692195b2128834e755607cf9f612cfae422c622c1dfb8de6f273f36e764e10b92ebd17254be38ecbdd82687d7a552a7cb5d0c8997be6aa259ab5f1afa7e039ba2ea2762c36b08f529a0fe1e103858d7b8d8372bfdb19755a39484001a5588b75dbb16a1ddb7d9bfb2d6a9bfc09734a9e4740f246a4ccf2b3eb2920ed350dc7852fe0f79939ad07c6b43d74752b184567bd98a492c2a32b0b4f86b82773b7b3f8ec4d7cbc2a18ce853cbcd875b68b14fcb824ba85621b42833655ddea96f86a0dd669e7961c12385d5de1ba6b6b22c364874d89b83fe408066a8f7d46a00df19cb147b528accc2fa68ba100431dc86f56cf4099a77fd5da1fcd90a2876ac1decb3e5938b96ae78737c899384313b86892254084ab254aefbd59012dd4f288e0f1e4d63b989e0b439305f1001a0d1ba098fc41be443892c07f2bff93bd7351f681339cd6796555f2aa332b31fdf1326d8898df9614983732392bef5fec70e361af673614d0c792325fc772f40061cd21b391bab74844414601240ef207d24b6759947bc343400e0e8d414a612d947214b3a1f1cac4e5d8b4b1fa3c70d0ea25f7c3f96f6be8100a92ee4eeae3b9fd2bc2b9dbd8fe92c86e5f4b7d2a4b07954de2ccadf09c06e328889f603c7530e5be18dd5a210e843098aa9f0c77bc709a8f20357462f9933a0f629017b1ea100cda87a140042a4e77a45afc59bcede67812e7f45e1a7c493755516b7f254e63c1d1a62b204ca9685bad97b24c0276af7b4f119a9902a31100fc44e34ab7be85c348f33260193af924af03829146aa72db17c62d01892ae525946d69fe874cc36ae862ad2d35c90771f56ee06118ee741a6af1d6a92e92a99ccd1e8899a7e856ff4092a3dcca6332cc547825d3bbe16b4f72875070a8df022cd30d23848d8b6d5cfcc71c2a5d153e2aea33a94232fa080ecd2d4256181d0175742b4ec0dc1d735678a184476b2f47018564cb378eec881288a09d6a46f6d91064698cb51827547ae0ec290d9f3741d2d5db73c98029ab3dad4448be51bb4731375f5edc81ece789e0f6ddce19f4bb37661bb216cfd95ec8bfd273efbdc05566462a96b93132a4728c0e9f19189fde6479d887c05c10e55c2bdf7c9507e2c67a930af494076ee1d23eb499e723bae3f50802af73c7fe5e93b5e4a47a1641e7c653568f24928ac73a4a6e966d9b30a9ba00b43af9a10fb68448b3a10665ef34eff92d377a9a5c012d82fd17162edab7f38c8a7889c77cdbdfdf31767a1763013d0fe77e17d3d6ee86f00b84912fed1894ec523922174afebe537efbb900d77a931c9567d47430eb3b7b55c621ec2cb538a8ad563e20c98e57b72809bb5b3cf6da34e52b3e2c8f4d56333c3258228f3a1b56668e9ba820f9a0e23a80a5d0e3774fe1621dbe2aadbd1d5260e6398816a020e5e95a9a4d51d70d81a3f04d3a0104c5c954699cfa88d6898a78ae4ced5089c3c591a7c10439c7f25458bc90b51f8307ed1939c3358cf6a37509399ea38c135e2533176c50780870f27429fce1b6f5f2589919615dd80a391a5725a9a564b98b2150af4b117802da213fcdb0eae467fe0b6b33604805d087", 0xebd}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000240)=""/118, 0x76}], 0x2}, 0x0) 23.494632524s ago: executing program 2 (id=911): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FRA_FLOW={0x8, 0xb, 0xccb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24048080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x8, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r7, 0x809, 0x70bd27, 0x3, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x20040010) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000180)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'xfrm0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000003fd010000008008000100ac1414cdd15c82fca312d95bf7883cd308fe789aa8e1ae37e2ec243f30c2c970594a663dc7f225fc4e596f4edaa21ac814400326fcd5633b278237b4e6935df193d999a205609468518310dea03a7519559f005132736384d4a20e3a3317328cfc99c4b7d9dc9c681f8ff83ef112c33fb08f3349a0a758898309d3d910524e2585354137bac96559fc1f3f34e5df17acf4c466313431a8ddfe108f41d1cffab41c7811ce1f27e7a96f450d36b245e0c2338d80", @ANYRES32=r3, @ANYRES8=0x0, @ANYRES64=r3, @ANYRES8=r1, @ANYRES8=r2, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x6}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 20.277992668s ago: executing program 4 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 13.600291407s ago: executing program 2 (id=911): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FRA_FLOW={0x8, 0xb, 0xccb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24048080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x8, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r7, 0x809, 0x70bd27, 0x3, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x20040010) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000180)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'xfrm0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000003fd010000008008000100ac1414cdd15c82fca312d95bf7883cd308fe789aa8e1ae37e2ec243f30c2c970594a663dc7f225fc4e596f4edaa21ac814400326fcd5633b278237b4e6935df193d999a205609468518310dea03a7519559f005132736384d4a20e3a3317328cfc99c4b7d9dc9c681f8ff83ef112c33fb08f3349a0a758898309d3d910524e2585354137bac96559fc1f3f34e5df17acf4c466313431a8ddfe108f41d1cffab41c7811ce1f27e7a96f450d36b245e0c2338d80", @ANYRES32=r3, @ANYRES8=0x0, @ANYRES64=r3, @ANYRES8=r1, @ANYRES8=r2, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x6}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 8.99574906s ago: executing program 4 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) 2.530639106s ago: executing program 2 (id=911): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FRA_FLOW={0x8, 0xb, 0xccb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24048080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x8, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r7, 0x809, 0x70bd27, 0x3, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x20040010) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000180)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'xfrm0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000003fd010000008008000100ac1414cdd15c82fca312d95bf7883cd308fe789aa8e1ae37e2ec243f30c2c970594a663dc7f225fc4e596f4edaa21ac814400326fcd5633b278237b4e6935df193d999a205609468518310dea03a7519559f005132736384d4a20e3a3317328cfc99c4b7d9dc9c681f8ff83ef112c33fb08f3349a0a758898309d3d910524e2585354137bac96559fc1f3f34e5df17acf4c466313431a8ddfe108f41d1cffab41c7811ce1f27e7a96f450d36b245e0c2338d80", @ANYRES32=r3, @ANYRES8=0x0, @ANYRES64=r3, @ANYRES8=r1, @ANYRES8=r2, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x6}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.738367286s ago: executing program 0 (id=1119): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_crypto(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x8, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008890}, 0x100) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', r1, 0x8, 0x700, 0x7, 0x4, {{0x1f, 0x4, 0x0, 0x4, 0x7c, 0x68, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ae46c7df17"}]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x5, [0x401, 0x5f]}, @ssrr={0x89, 0xf, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x7, 0x91, [@remote]}, @lsrr={0x83, 0x1b, 0xec, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @multicast1, @loopback]}, @timestamp={0x44, 0x1c, 0xa6, 0x0, 0xe, [0xe0, 0xfffffff8, 0x1, 0x9, 0xd, 0xe5]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) ppoll(&(0x7f0000000440)=[{r0, 0x1000}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000004c0)={[0x8001]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000540)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_FILS_KEK={0x12, 0xf2, "177a387b09b7ea297ccc59ebfec6"}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000840)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000880)={r9, 0x6, 0x20}, 0xc) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r10, &(0x7f00000008c0)={0x23, 0x3, 0x7a, 0x5}, 0x10) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000900)={0x4}) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000940)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f00000009c0)={@remote, 0xfffffff7, r1}) r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a00)={0x9, @remote}, &(0x7f0000000a40)=0x12, 0x800) ioctl$SIOCX25SSUBSCRIP(r12, 0x89e1, &(0x7f0000000a80)={'netdevsim0\x00', 0x90d6, 0xf71a}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000b80)={@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @remote, 0x9, 0x6, 0x905, 0x400, 0x7, 0x88420041, r5}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r13, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x33721f4a94633049) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc8, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa74, 0x7a}}}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10, 0x8, 0x7b33, 0x85a, 0x4, 0xc0]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xce51}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x800]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x9, 0xc, 0x9, 0x7fff, 0x3, 0x1000, 0x3, 0x200, 0x22, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x200480c0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x70, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc6}]}, 0x70}, 0x1, 0x0, 0x0, 0x44804}, 0x4008010) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x9c, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d22f8e0bdf"}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d6fe9e46ec"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "fb1056"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ff86ddd5cd"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.552278847s ago: executing program 3 (id=1121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="98010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000033000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000059000100636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffffffffffff0000000000000088000000b6f3e543e3ff15c934decfda52def2c9f200"/336], 0x198}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000000500a9b54ca56f303e6089ec99d24f1200000200006148db2e73a760ce40c022987fd9a69c0007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000000000380050800800030006ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) 1.488051082s ago: executing program 0 (id=1122): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 1.452348447s ago: executing program 1 (id=1123): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x1800, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1.358904465s ago: executing program 0 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180090001006c617374000000001800028008000140000000090c0002400000fbff000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080)="743952a43aef4680eb4694002ff081661998890155571e6e18ad150ad7ca085fd4aa7fb1b0ba177217c6ff017dd15bb86c0e612691951f0b3e09d9811392f95dbb2752b5f9693c67d7e53d974a1640e4e1b398b3c751091424d3983e74a4fe51752ef0ad08c969c6a716019cadd064fe4a08846c9885ed37941793b94b5ca2258f83c0696968acf447bc5ebbb00b47befcc6a78a973c927c0b276bc6eadefbec4ddf9954d9bb605d27dfe51a0a5eef69c67df46d9fe3daf2b695b1d1e8daa97b1e1e2245e3b5bf1d7a032687ada367ffa2ba439ca71636f621ff354410f7298356240d765032bffcb524caa1e876", &(0x7f0000000180)=""/7, 0x4}, 0x20) 1.20792384s ago: executing program 1 (id=1125): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000040)=0x80, 0x800) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) read$alg(r1, &(0x7f0000001880)=""/4096, 0x1000) 1.158682911s ago: executing program 3 (id=1126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0x68, 0x32, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78c}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x68}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18f, 0x0, &(0x7f0000000800)="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", 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r10, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)="7de834ee1adccfbf4eeaec38a0c896a0c3555751aa71b18ee3478f", 0x1b}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fe436bf7a", 0x7e}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) sendmsg$alg(r10, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1}, 0x5}], 0x3fffe7d, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000000)="e8ff0000e0ff25000202475400f6a133b100000086dd4803b5101256d6004bb972cb3f2393246497f33f1826f377f13eb21fec5ea8302b618db356feb4cb1f6fe337de147953075190f8c74c95b2c64e44fc29281f377553317a116b875e72db04fe43faf2819079aee2df8590973370dfc544390c692758ad9f34371b05c8499746bcff92709a0f9fe8784b27ed54db9a3fd6ac14eada12355be163d01b70dfe8157d8d617660acc8ce81bc39", 0xffffffffffffff1b, 0x188a0, &(0x7f0000000180)={0x11, 0x6, r8}, 0x14) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) 1.115969485s ago: executing program 0 (id=1127): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x6}], 0x5c) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x400000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) r1 = socket(0x0, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r5, @ANYBLOB="1c002f800c00026c000203aaaaaaaaaaaa0c"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @remote}]}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r10, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r11, 0x10c, 0x2, &(0x7f0000000000)=0xffffffe1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) 963.571173ms ago: executing program 1 (id=1128): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x1}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000010000000000000300000014000180060001"], 0x28}}, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x9f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x5}], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000ffdbdf2501000000080005000100000008000700914efb1a1400020077673200000000000000000000000000080005000000000008000500010000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000"], 0x74}, 0x1, 0x0, 0x0, 0x24000020}, 0x4) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000000), 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x1}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000010000000000000300000014000180060001"], 0x28}}, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) getsockopt$inet_int(r5, 0x10d, 0x9f, &(0x7f0000000000), &(0x7f0000000240)=0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x5}], 0x48) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r6, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r6) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000ffdbdf2501000000080005000100000008000700914efb1a1400020077673200000000000000000000000000080005000000000008000500010000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000"], 0x74}, 0x1, 0x0, 0x0, 0x24000020}, 0x4) (async) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000000), 0x10) (async) 787.393973ms ago: executing program 3 (id=1129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000020c0)=0x0) r4 = getgid() sendmsg$netlink(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)={0x1378, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x2a3, 0x1a, 0x0, 0x1, [@generic="b96b", @nested={0x4, 0x118}, @nested={0x4, 0x141}, @generic="7c81fbef229ae91d55a56150c00505463593d5c75cd03902c066b63f67b00e7db87b29e4ed65f65176689c98c7441a4a32994e918c0f93ddaee952863faaeb715d76b7dd7cbe308203f2302961b86a7e5800d60e3ec41f7a2c4c0eda74e35cfcfa65eff6458374781ce86038f3063c2ce79d2e35feb76f84b3b8f743a2ead639dc222e3129eab2b5587c2370adc1495605d290a938e6f5d6f62001611c3beaf2", @nested={0x4, 0x22}, @generic="09cbdaec97a731e053a468a01be3b2fb31023b01efacd754ac6e0e58a59ebf293ac34376b4518d31c45a8560b3c4634b11ca8faba6070d02561edbfd8c78498e66c37ad84e082787ddb2db88190124177d3c09bb1fb261ecf3", @typed={0x8, 0xeb, 0x0, 0x0, @fd=r0}, @generic="06333716cb176a694442c2dfea797d81851d318f1268f41783b87557c023029259213a0fe98ef7055920e03978f92076b990ca45044082f2bc6249d56d408f62c844d11ee262c500fd271e291015a33ff63b941cc38cce5cba7f556a9f01eb8754e74df843f31f7fbfbb2427e8a53ce83f3dff4f3f5b1397dde11a0629618a540755ef10d449e6bf89dfbeb541171453fb62aa806ad1d34df29b41ca5c50a909931a03a95e9a247a", @generic="7ecb27d0ebde713404e7122664dd91de7de0b31e2cbdda800301cc26a05228bca69279c8aa7f575120c5a8ba1a14f16504d959482511dd030b189341d24fdf3e6561a910d6a72ee63a7b0cc6e46ff0405e9d5edd6c8f419c001b3b0a2db2d9b9f50138658e5ca0097798c745a3cd9ff6694e27daa9f24e35bb0dc521b8dad19c8a5a7a8f7db8918ef286dfd7699cff1de1f3f62287b2a3661162a5bc04eeac84e3be8a9535c41804d623289858d5c483ef6213d509f536a2452a41454a859f6dba60f0785424edae92128e26b8ce514733bbc654253bc67da93ab1b8894fba5dd937ab647c8431b7"]}, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x7}, @nested={0x1004, 0x11b, 0x0, 0x1, [@generic="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"]}, @generic="45692bf7250425", @generic="b3f4c1ffaf7d4ec5a5e411180cea2142bcb88a3f7df3a058706d73e7cddbaada4a07d6e9d83e35e50ee4cd67f470c498410c6c6efbcde3290d07c679edb5e990acca044c8ddc736f2370f1f531b98953c2b9776af11e4679461df109b26499b941a1355e9724416a273be312ca0f3d67980248e6a8e6f19711223b08f8810ed13887f6605a4355a9efd88796077f623926d867bab57631889a615e409e8ef4d89f7e2e9cc1536b38cd2765b526c4b8"]}, 0x1378}, {&(0x7f0000000000)={0x1d4, 0x1c, 0x10b9e9ad9a85df6f, 0x70bd27, 0x25dfdbfb, "", [@generic="40db04f896b8afed940592cc17cc5c8975a4d69efc453e23f1ce8f92059f9e61d0fd5ea0236676a7ce5e883c16cc39fe18f81bd4c4b6ac761966f0a02280573c21c160912521861291b531d9513d079c245d7fb08c49fdb2f41ca6ba8be2a77065ad82c918926ae55ac84bd856efa98aeec2f390442bb13080e682b14a580f3ea08511e35acb5ec42b1fe12972b281096f556607b82f7bfd388cd65b6d73c2f26e5f2d0a51d2edfb25a98f7d87adaaf576abd51c052e3b33a6dc8f51f9362c4da80d61fc67ed9d68cc29b0ddedf61b95f0b0f71a434d7528675940159ed98994", @generic="48e5bd5df692188ff755b330abe17f4b13ae1e4f67194160cf41a3c5ce096da6f384b6650a37e129edf497c865a0001603e5d7acf2d152944fc7e79fd21035c0789141cca5c7c755584ae83de0afb105b70aef75fa268ca36fa0210a228be63c1583a09fcd07db53a4f66d8ce3c13e435294ad2871e4524fc1f385e640cce38eabec6182959f6582cd9a985732db4910081eb4860c744b84a846a5ee8e00235d56bc4b701a5b780c86d6faa7bef295461092d819236a1030fa365dd4c4c628e0a584acd0d36da5ffbd29481e9d3c753617e38f07d3090977f772f871433782184417"]}, 0x1d4}, {&(0x7f0000000200)={0x2f4, 0x26, 0x100, 0x70bd29, 0x25dfdbfb, "", [@typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @nested={0xcc, 0xa6, 0x0, 0x1, [@nested={0x4, 0x2a}, @nested={0x4, 0xfe}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="5b08358d32b0d5ed56dc78728e645d39e5ad0473ef2d0b7e0ea040b666a18b47ecf7cdb50639ad57437d736befe43ec24eb8d39094835438c54dcdbfc537da0b449abd77771e668e500e5be4a2818bf12a8573632ff7886c38fa282f3aea336e955b546bfc889a747fa407871bf7210d68c289814c182f062e36c88053266c3219ebabd99bea81373df9f82145d96dee825ec4f014608b9fd1b9834abe3f4ea94d75629c54e2cee61b8260062a135c6fc903914cc35fee60"]}, @typed={0x4, 0x9}, @typed={0x5, 0x65, 0x0, 0x0, @str='\x00'}, @generic="a203d0a912cd052371ad4b844e6c5a674319ffcd60f8c8b7c3098d779ff5105aa4698dcbf3eb2fd838aaed56b61009eab18392ab1d2e836f8ece484eae76ea019a54d7491a97db3f1d02e682beaeba81bf027a50aa9654100f16d67b501d1186e112e268f52758efb4b98177eb002bedcdd5c91cb1b7376c0f0bc6e54e2d231f91a51a13ccbdd04d3bb9874270aa19a9da35f1f423e38f82e00f6c28bc7ea22feec4307ac2ac36ca64d4f10f9c9311f707c3a5bb195a8bcffe295ddd071e7ec6dcb0f1c5ce7017fe2973e1fa24f70394cd5ac65d02305ae9ad20fd2973d5aa8383", @nested={0x42, 0x59, 0x0, 0x1, [@typed={0x4, 0x6e}, @nested={0x4, 0x132}, @generic="8c615bcc727a020900db273057d81ab3391aa00f2de9a5bd7cc0b092e95b5d179f715d09656611cc26bfb30acdb617170f54f8bc1554"]}, @nested={0xdc, 0x27, 0x0, 0x1, [@generic="170f5122b9c0c7f294b654195ff90d1aa3a8e7ae46fe64873336e4bb7dcd4c8c7e9f3e03b4181645193030003652ff1d7a76ebe501b76635a68177b9edc49fbfe0b33c2aa595adf50254f879c2433c68c4065011eacf107cc039e11ab045891abdc36b39f20e1ed202f2c97a7fc65ee82929d5e960d0bd3e9db1ffb41702461c90eb2e157963685d3be2f054e47b2d21fb4d331e1f32ceb78d34f25e84c5e635bb71a918dc319e7b858e396a6965ab228851641fd08d337df64d032f3fe60e88de9fdae52577bdf11352b8eb254be0d206a2daba5f72ef97"]}]}, 0x2f4}, {&(0x7f0000000500)={0x40c, 0x37, 0x200, 0x70bd2d, 0x4, "", [@nested={0x18f, 0x42, 0x0, 0x1, [@generic="1e46bb76266b7d9837d390d59945045bc3979ca783593cd1a7599ef21542168a176454942eac7240d7d9031e944e5d5881a3100d1b60d96efced733086f4cfb33bf9e0c4", @typed={0x8, 0x116, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x10f}, @generic="8acc6bd0352abf5b60960ee17dbfd321003bf71a216a3380e05f152900d72da6865b4f693620270d0d02de1951350b088371079fc0a12034b5636cf74cc7f967c0acb11882e165d5525e77f04b47caf5cef6473a6f34ce3a9c3224e47516d850d9380fa88eff3d0f6c65e5bd58ac0127aeb7e2c3cfea4fbec2cc2a9add4e2dccb5f429f45b982a5d61382b608282a41a3ece5fadc4010d0317fb3c7a27f5d680310e68250d8b7e819118ced5e3273fe9827c47d78137ef123add90b0c1765c34dd4bd5c124696abb4c161bb3c6d5ffe5757b", @typed={0x8, 0x41, 0x0, 0x0, @fd=r0}, @generic="131cefc24cea72670554648d2098ec76cced1d53aaf75fb1e3e7f2337e3b93354bcdc7faeacbd231fb09f73106c1b1264e03764cda00d5119596d5183a306bf850746950fa564afa2bb83e624d08d20856fbc0e7eec03e08bfe6e2000ad76a8162"]}, @generic="7de21cd77528fa8dcbc9c76b809216c9b0e25a659df7c1bfc1ba3693b663c6070e4546d417ee8b38c4c091465a9f5894fb37bb145f6291a836a84a1770ba10ff48b90f1de45aeae78879217e5f19d2e1443db420209fcd07ca172aad308b695f5b4bb42953767f119765f39a066031f3b4fb5be531fcd43433fccd18c219ddb74a103366f35ba14c843e61cd7a73d8ee1ad47d92fd9d435c970936839dfb5abf3f5c3e6e4f332bbb394237456ba5f579228e4973", @nested={0x1b5, 0x55, 0x0, 0x1, [@typed={0xf1, 0x13c, 0x0, 0x0, @binary="721c752099dce0154785215c869aef5e998fda5050f894236eee187929474cccd1bf7057c42bdd3ec9dff4374212b7ce31d28da7f57dea6533ffd0673f27c33e3b424aff757b70bf108cee624293cac2f68822cc17a0f7476fb57b66d8efdbe12bedb6731678ef07e573ec5b723df56ee5e89f535d7d71e53043c498d16a3168d7c97fcdd426084c10b377de910b02696adef7d1be90c22d8b07a9ef16e60777ffe6644a62af4ed4722305038b8627a096a303076c46ef4c60fd8294e9de98041d4c8bdb8e437794993d001be78596a81c68bf2eb39f39719d7997d1cbfdf12099163a9b9837d5e73432be9f5d"}, @generic="d78474cb5d49ce33f626906e418fe4775fce7430521c117489d6a6e7e356ddd7c236b490a6ea476b96d77ba07c147136c3f57ad5dc7c9afeb13449a95fe8c181bc423693e3932d6d14d02f8884bb4f26389e542fce4d26334fa2d35d0e0c023d34cb47ac6bc908bdf423f3ba18c66dd5fdccecb18ddd45ceb69644e72b55953eb1ca61731bc024d63a6345464b69a5cf8d139b8630cc1343cf6f3bec936db452778888a4ea69e829a0d81ed7cb31d55f89e88741a488f1a4a1", @nested={0x4, 0x13a}]}]}, 0x40c}, {&(0x7f0000000940)={0x10, 0x3a, 0x20, 0x70bd27, 0x25dfdbff, "", [@generic]}, 0x10}, {&(0x7f0000001f40)={0x15c, 0x1a, 0x20, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x124, 0x0, 0x0, @u32=0x81}, @generic="2a222a254424574a9a25cf64237d4509da3412a9b3970f311eb5b9321aebea31ddf083ec972e2d27b2bb58222d07d8b5ac90877de9e14009b82ffae40ef8b0037562c0cf2b8123d611ab5df4f0ea64448f135153a7a1bd25f5600f207bf5bff7fee210b9eac5ec03dca7a03dfab45b194c1b13771ef74dc40bfe01b9309d7b83f6327927d5b7b4c7f3f948b476584a6b33a2e1cd5454a1762adfceb05a04577d908bb8d3af6405b3400070a30607a2ad31833230d0d1305b21d0e6726acc0d2d4f56faec09ce03916cf3db9ce41b96", @typed={0x6c, 0x151, 0x0, 0x0, @binary="c4c36e7eceadb01da64ac7efaf91a97552cc0643a16111bb4610c95abf67345ff7c489c43ac3e90f6360e2b79a8335d4b41a597f869dec54c0cb478d04520aead4976dddbb4e1006cb55acc0ed32a869f39dee65d98b48cc2eb848ad5006b19b7d18a2f060feff46"}]}, 0x15c}], 0x6, &(0x7f0000002100)=[@rights={{0x34, 0x1, 0x1, [r0, r2, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}], 0x58, 0x4821}, 0x8008050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x41, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c005}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) 689.935099ms ago: executing program 1 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0xcd8, 0x9a0, 0x9a0, 0x0, 0xb48, 0xa38, 0xc40, 0xc40, 0xc40, 0xc40, 0xc40, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x850, 0x890, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {[], [{}, {}, {}, {0x0, 0xffff21b4}]}, {}, {}, {}, {}, {[], [], 0x80}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}]}], 0xb}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xe, 0x1}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd38) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) 639.31789ms ago: executing program 3 (id=1131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 601.676332ms ago: executing program 1 (id=1132): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r1], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r1], 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) (async) 407.509185ms ago: executing program 3 (id=1133): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f00000002c0)="d96167ce869e32915e0d45e3a6911050cdc2be7aefe327491b16ec3bb6724a02ba69c8e7cf97c02fd10ce9c6d0b131f41ca1bec7dd8ec806ffd6fb6443bb37108200792c8e6d6afd5761032886bfb9b737d047ee5d396f14d5dd0913376062975590de927badd96d5fb72af8057ae862b846638b2b828223fea948918a36459994182400faadac43aa10e08e8027bcc35e817302d56e97981f18ecbb64c26ab9022fc0fa211b44dfa02f6b6ce46f1857132966c5b3b09afd994543dc315dca24312e840f68692b6df4b0b55137fb89207f9ea519ce03", &(0x7f00000003c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x79, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x66, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001940)={0xffffffffffffffff, 0x20, &(0x7f0000001900)={&(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000001880)=""/102, 0x66}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x10}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x42, &(0x7f00000004c0)=""/66, 0x41000, 0x1, '\x00', r4, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x5, 0x2, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001980)=[{0x5, 0x3, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x6}, {0x0, 0x1, 0xb, 0x9}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x2, 0x5, 0x5}], 0x10, 0x1, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000001ac0)={r2, 0xfb, "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"}, &(0x7f0000001c00)=0x103) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000001c40)={r2, 0xc447, 0x20}, &(0x7f0000001c80)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001cc0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r10, 0x0, 0x1000, 0x7d, &(0x7f0000001d00)="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", &(0x7f0000002d00)=""/125, 0x7, 0x0, 0xc5, 0x20, &(0x7f0000002d80)="f59f9f5c191399aa8064046766425a8dbb1ef870932bc7f141ef8a6deb9e4ca886f234808074a5dd96e22b0255a7af61a332e8b848005dc0aaed71792ba834de7675f4d430be54b633ac90307622bf26d2e7de3e99bba01492fc005ec224574fefd0f58351b6bf6eddd7ae4a2d51a026de03181a4f87378b48fa10499d5eaaa50e5c964d49abd2ac51dc21319c4a6471a8ed274cbe28ded0fd3bdfaeffda1ed4b9dab3b1421ec9596d3d40c8be75519b76548b6a6d5d6272998175bc7bb246216c0b37b737", &(0x7f0000002e80)="64c4155d39d46f2f28737c5e5365e5f38c5ce24efc10c56c0621c0c1741b3049", 0x4}, 0x50) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000002f40)=0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000002f80)={'bond_slave_1\x00', {0x2, 0x0, @multicast1}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002fc0)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000003000)={r8, 0x1, 0x1}, 0x8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x34, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x40) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000003180)={r2, 0x4}, &(0x7f00000031c0)=0x8) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_FLUSH_DEVICE(r13, 0x4008f50a, &(0x7f0000003200)={0x3}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000003240)=""/202, &(0x7f0000003340)=0xca) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r10, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48850}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003a00)=@bpf_tracing={0x1a, 0x34, &(0x7f0000003480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0xc, 0x8, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0xfd, 0xc, 0xb, 0x4, 0xffffffff}, @ldst={0x2, 0x3, 0x3, 0x4, 0x7, 0xffffffffffffffc0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a2e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003640)='GPL\x00', 0x2, 0xfe, &(0x7f0000003680)=""/254, 0x41100, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000003840)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003880)={0x0, 0x9, 0x40, 0x81f6}, 0x10, 0x30067, r6, 0xa, &(0x7f0000003900)=[r10, r3, r10, r10, r10, 0xffffffffffffffff, r10], &(0x7f0000003940)=[{0x5, 0x3, 0xb, 0x1}, {0x0, 0x1, 0x0, 0xa}, {0x3, 0x5, 0x7, 0x1}, {0x0, 0x5, 0xa, 0xc}, {0x1, 0x3, 0x1, 0x7}, {0x1, 0x1, 0x4, 0x6}, {0x3, 0x1, 0x4, 0xb}, {0x4, 0x2, 0x8, 0xb}, {0x1, 0x4, 0x9, 0x1}, {0x5, 0x1, 0x5}], 0x10, 0x1, @void, @value}, 0x94) 343.810996ms ago: executing program 1 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'dummy0\x00', 0x3}, 0x18) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x48}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000540)="a39b01180a1e342aa9cc1eaee837cf53369f9c9f", 0x14) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 64) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xd, 0xbb4c, 0x5, 0xff, 0xe, 0x0, 0x878, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xa, 0x8, 0x3, 0x7}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={r7, 0x3, 0x8, [0x5, 0x0, 0x0, 0x5, 0x7e, 0xffff, 0x165d, 0x5]}, &(0x7f0000000500)=0x18) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, 0x0, 0x2, 0x0) write$cgroup_devices(r9, 0x0, 0xa) (async) r10 = openat$cgroup_devices(r8, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="611503"], 0x8) (async) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x138, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffe5bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x481b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24044080}, 0x140) 171.346153ms ago: executing program 0 (id=1135): r0 = socket(0x10, 0x3, 0x1ff) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) 44.702944ms ago: executing program 0 (id=1136): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 0s ago: executing program 3 (id=1137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=r0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): 29/0xd10 [ 230.058457][ T6757] ? ksys_write+0x24e/0x2d0 [ 230.058487][ T6757] ? __mutex_unlock_slowpath+0x229/0x800 [ 230.058554][ T6757] ? ksys_write+0x275/0x2d0 [ 230.058594][ T6757] __x64_sys_sendmmsg+0xa0/0xb0 [ 230.058629][ T6757] do_syscall_64+0xf3/0x230 [ 230.058657][ T6757] ? clear_bhb_loop+0x45/0xa0 [ 230.058684][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.058712][ T6757] RIP: 0033:0x7f5103d8d169 [ 230.058737][ T6757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.058754][ T6757] RSP: 002b:00007f5104b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 230.058787][ T6757] RAX: ffffffffffffffda RBX: 00007f5103fa5fa0 RCX: 00007f5103d8d169 [ 230.058803][ T6757] RDX: 0000000000000001 RSI: 0000200000006bc0 RDI: 0000000000000003 [ 230.058817][ T6757] RBP: 00007f5104b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.058831][ T6757] R10: 0000000004040001 R11: 0000000000000246 R12: 0000000000000002 [ 230.058845][ T6757] R13: 0000000000000000 R14: 00007f5103fa5fa0 R15: 00007fff059c0668 [ 230.058881][ T6757] [ 230.409228][ T6585] bridge_slave_0: entered allmulticast mode [ 230.424648][ T6585] bridge_slave_0: entered promiscuous mode [ 230.433853][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.441260][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.448527][ T6585] bridge_slave_1: entered allmulticast mode [ 230.450611][ T6767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.309'. [ 230.468892][ T6585] bridge_slave_1: entered promiscuous mode [ 230.632789][ T6585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.648702][ T6773] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.670910][ T6585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.873821][ T6585] team0: Port device team_slave_0 added [ 230.935470][ T6585] team0: Port device team_slave_1 added [ 230.964953][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 231.047185][ T6786] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.313'. [ 231.061063][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.082715][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.228443][ T55] Bluetooth: hci4: command tx timeout [ 231.239869][ T6585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.262939][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.270031][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.297454][ T6585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.561764][ T6804] FAULT_INJECTION: forcing a failure. [ 231.561764][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 231.574691][ T6804] CPU: 1 UID: 0 PID: 6804 Comm: syz.0.321 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 231.574729][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.574742][ T6804] Call Trace: [ 231.574750][ T6804] [ 231.574758][ T6804] dump_stack_lvl+0x241/0x360 [ 231.574798][ T6804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.574827][ T6804] ? __pfx__printk+0x10/0x10 [ 231.574872][ T6804] should_fail_ex+0x424/0x570 [ 231.574901][ T6804] should_failslab+0xac/0x100 [ 231.574944][ T6804] __kmalloc_cache_noprof+0x73/0x370 [ 231.574973][ T6804] ? sctp_add_bind_addr+0x89/0x3a0 [ 231.575007][ T6804] sctp_add_bind_addr+0x89/0x3a0 [ 231.575039][ T6804] sctp_copy_local_addr_list+0x313/0x500 [ 231.575070][ T6804] ? sctp_copy_local_addr_list+0xad/0x500 [ 231.575098][ T6804] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 231.575128][ T6804] ? sctp_v6_is_any+0x60/0x70 [ 231.575158][ T6804] ? sctp_copy_one_addr+0x94/0x360 [ 231.575188][ T6804] sctp_bind_addr_copy+0xad/0x3b0 [ 231.575216][ T6804] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 231.575244][ T6804] sctp_connect_new_asoc+0x337/0x700 [ 231.575269][ T6804] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 231.575288][ T6804] ? sctp_sendmsg+0xf30/0x3620 [ 231.575327][ T6804] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 231.575346][ T6804] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 231.575373][ T6804] sctp_sendmsg+0x2009/0x3620 [ 231.575428][ T6804] ? __pfx_sctp_sendmsg+0x10/0x10 [ 231.575464][ T6804] ? aa_sk_perm+0x96f/0xac0 [ 231.575509][ T6804] ? inet_sendmsg+0x330/0x390 [ 231.575535][ T6804] __sock_sendmsg+0x1a6/0x270 [ 231.575568][ T6804] ____sys_sendmsg+0x523/0x860 [ 231.575600][ T6804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.575619][ T6804] ? __fget_files+0x2a/0x420 [ 231.575643][ T6804] ? __fget_files+0x2a/0x420 [ 231.575672][ T6804] __sys_sendmmsg+0x3a0/0x7b0 [ 231.575721][ T6804] ? __pfx___sys_sendmmsg+0x10/0x10 [ 231.575784][ T6804] ? rcu_read_lock_any_held+0xbb/0x160 [ 231.575811][ T6804] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 231.575842][ T6804] ? vfs_write+0xb29/0xd10 [ 231.575877][ T6804] ? ksys_write+0x24e/0x2d0 [ 231.575904][ T6804] ? __mutex_unlock_slowpath+0x229/0x800 [ 231.575965][ T6804] ? ksys_write+0x275/0x2d0 [ 231.576000][ T6804] __x64_sys_sendmmsg+0xa0/0xb0 [ 231.576024][ T6804] do_syscall_64+0xf3/0x230 [ 231.576050][ T6804] ? clear_bhb_loop+0x45/0xa0 [ 231.576075][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.576096][ T6804] RIP: 0033:0x7f1c0eb8d169 [ 231.576115][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.576131][ T6804] RSP: 002b:00007f1c0fa5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 231.576154][ T6804] RAX: ffffffffffffffda RBX: 00007f1c0eda5fa0 RCX: 00007f1c0eb8d169 [ 231.576169][ T6804] RDX: 0000000000000001 RSI: 0000200000006bc0 RDI: 0000000000000003 [ 231.576181][ T6804] RBP: 00007f1c0fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.576194][ T6804] R10: 0000000004040001 R11: 0000000000000246 R12: 0000000000000002 [ 231.576206][ T6804] R13: 0000000000000000 R14: 00007f1c0eda5fa0 R15: 00007fff2e459a68 [ 231.576240][ T6804] [ 231.908254][ T6585] hsr_slave_0: entered promiscuous mode [ 231.915192][ T6585] hsr_slave_1: entered promiscuous mode [ 231.921714][ T6585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.929499][ T6585] Cannot create hsr debugfs directory [ 232.011155][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 232.064434][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 232.378682][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.395159][ T6829] netlink: 'syz.2.327': attribute type 13 has an invalid length. [ 232.405655][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 232.416129][ T6816] bridge0: port 3(bond1) entered blocking state [ 232.422893][ T6816] bridge0: port 3(bond1) entered disabled state [ 232.429625][ T6816] bond1: entered allmulticast mode [ 232.448808][ T6816] bond1: entered promiscuous mode [ 232.492487][ T6816] bridge0: port 3(bond1) entered blocking state [ 232.493171][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 232.499521][ T6816] bridge0: port 3(bond1) entered forwarding state [ 232.573149][ T6829] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 232.851144][ T6847] syz_tun: entered allmulticast mode [ 232.909649][ T6846] syz_tun: left allmulticast mode [ 233.035459][ T6856] FAULT_INJECTION: forcing a failure. [ 233.035459][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.104432][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.3.332 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 233.104463][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.104475][ T6856] Call Trace: [ 233.104483][ T6856] [ 233.104491][ T6856] dump_stack_lvl+0x241/0x360 [ 233.104530][ T6856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.104559][ T6856] ? __pfx__printk+0x10/0x10 [ 233.104600][ T6856] should_fail_ex+0x424/0x570 [ 233.104627][ T6856] _copy_from_iter+0x211/0x1c70 [ 233.104663][ T6856] ? alloc_pages_mpol+0x4e6/0x690 [ 233.104698][ T6856] ? __pfx__copy_from_iter+0x10/0x10 [ 233.104731][ T6856] ? set_page_refcounted+0xa1/0x1e0 [ 233.104760][ T6856] ? alloc_pages_noprof+0x136/0x190 [ 233.104786][ T6856] ? page_copy_sane+0x46/0x260 [ 233.104814][ T6856] copy_page_from_iter+0x7a/0x100 [ 233.104844][ T6856] tun_get_user+0x1f6c/0x47c0 [ 233.104869][ T6856] ? tun_get_user+0x852/0x47c0 [ 233.104904][ T6856] ? aa_file_perm+0x139/0xf60 [ 233.104936][ T6856] ? aa_file_perm+0x3f1/0xf60 [ 233.104966][ T6856] ? __pfx_tun_get_user+0x10/0x10 [ 233.105007][ T6856] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 233.105050][ T6856] ? tun_get+0x1e/0x2f0 [ 233.105082][ T6856] ? tun_get+0x1e/0x2f0 [ 233.105112][ T6856] ? tun_get+0x27d/0x2f0 [ 233.105145][ T6856] tun_chr_write_iter+0x10d/0x1f0 [ 233.105182][ T6856] vfs_write+0x70f/0xd10 [ 233.105214][ T6856] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 233.105248][ T6856] ? __pfx_vfs_write+0x10/0x10 [ 233.105275][ T6856] ? __fget_files+0x2a/0x420 [ 233.105306][ T6856] ? __fget_files+0x2a/0x420 [ 233.105334][ T6856] ksys_write+0x19d/0x2d0 [ 233.105360][ T6856] ? __pfx_ksys_write+0x10/0x10 [ 233.105391][ T6856] ? do_syscall_64+0xb6/0x230 [ 233.105420][ T6856] do_syscall_64+0xf3/0x230 [ 233.105446][ T6856] ? clear_bhb_loop+0x45/0xa0 [ 233.105472][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.105493][ T6856] RIP: 0033:0x7fabd9d8bc1f [ 233.105512][ T6856] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 233.105528][ T6856] RSP: 002b:00007fabdac9b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 233.105550][ T6856] RAX: ffffffffffffffda RBX: 00007fabd9fa5fa0 RCX: 00007fabd9d8bc1f [ 233.105567][ T6856] RDX: 000000000000004e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 233.105580][ T6856] RBP: 00007fabdac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 233.105593][ T6856] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 233.105605][ T6856] R13: 0000000000000000 R14: 00007fabd9fa5fa0 R15: 00007ffe17995548 [ 233.105638][ T6856] [ 233.392560][ T55] Bluetooth: hci4: command tx timeout [ 233.514072][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.630090][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 233.713262][ T1147] bridge0: port 3(bond1) entered disabled state [ 233.733130][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.742715][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.787810][ T30] audit: type=1804 audit(1744674778.599:2): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.336" name="/newroot/76/cgroup.controllers" dev="tmpfs" ino=404 res=1 errno=0 [ 233.816454][ T6871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.840390][ T30] audit: type=1800 audit(1744674778.609:3): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.336" name="cgroup.controllers" dev="tmpfs" ino=404 res=0 errno=0 [ 234.310470][ T6585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.329422][ T6585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.376191][ T6585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.413270][ T6585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.768982][ T6585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.874838][ T6585] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.895149][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.902423][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.917956][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.925268][ T6614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.116460][ T6585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.595203][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 235.606240][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 235.659531][ T6922] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 235.685396][ T6917] xt_CT: No such helper "netbios-ns" [ 235.696976][ T6925] xt_policy: neither incoming nor outgoing policy selected [ 235.705901][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 235.728499][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.748584][ T6922] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 235.934827][ T6922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.008249][ T6932] netlink: 72 bytes leftover after parsing attributes in process `syz.3.349'. [ 236.045082][ T6928] bond1: (slave gretap1): making interface the new active one [ 236.057476][ T6928] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 236.315683][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 236.329403][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 236.829041][ T6585] veth0_vlan: entered promiscuous mode [ 236.867570][ T6585] veth1_vlan: entered promiscuous mode [ 236.984607][ T6585] veth0_macvtap: entered promiscuous mode [ 237.027931][ T6585] veth1_macvtap: entered promiscuous mode [ 237.069281][ T6974] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 237.086506][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.128652][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.140924][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.160783][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.189516][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.215513][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.254818][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.322033][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.339504][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.350265][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.368711][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.393391][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.431461][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.467545][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.553479][ T6585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.596375][ T6585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.609387][ T6585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.650226][ T6585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.848631][ T7002] netlink: 88 bytes leftover after parsing attributes in process `syz.3.364'. [ 237.887317][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 237.915385][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'. [ 237.918364][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 238.035983][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.060676][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.192823][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.225266][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.207989][ T7063] pim6reg1: entered promiscuous mode [ 240.240524][ T7063] pim6reg1: entered allmulticast mode [ 240.365749][ T7075] FAULT_INJECTION: forcing a failure. [ 240.365749][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.410503][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.2.380 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 240.410535][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.410548][ T7075] Call Trace: [ 240.410557][ T7075] [ 240.410577][ T7075] dump_stack_lvl+0x241/0x360 [ 240.410617][ T7075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.410648][ T7075] ? __pfx__printk+0x10/0x10 [ 240.410692][ T7075] should_fail_ex+0x424/0x570 [ 240.410725][ T7075] _copy_from_iter+0x211/0x1c70 [ 240.410760][ T7075] ? alloc_pages_mpol+0x4e6/0x690 [ 240.410795][ T7075] ? __pfx__copy_from_iter+0x10/0x10 [ 240.410830][ T7075] ? set_page_refcounted+0xa1/0x1e0 [ 240.410860][ T7075] ? alloc_pages_noprof+0x136/0x190 [ 240.410886][ T7075] ? page_copy_sane+0x46/0x260 [ 240.410915][ T7075] copy_page_from_iter+0x7a/0x100 [ 240.410945][ T7075] tun_get_user+0x1f6c/0x47c0 [ 240.410969][ T7075] ? tun_get_user+0x852/0x47c0 [ 240.411006][ T7075] ? aa_file_perm+0x139/0xf60 [ 240.411037][ T7075] ? aa_file_perm+0x3f1/0xf60 [ 240.411066][ T7075] ? __pfx_tun_get_user+0x10/0x10 [ 240.411107][ T7075] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 240.411149][ T7075] ? tun_get+0x1e/0x2f0 [ 240.411181][ T7075] ? tun_get+0x1e/0x2f0 [ 240.411209][ T7075] ? tun_get+0x27d/0x2f0 [ 240.411241][ T7075] tun_chr_write_iter+0x10d/0x1f0 [ 240.411270][ T7075] vfs_write+0x70f/0xd10 [ 240.411295][ T7075] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 240.411323][ T7075] ? __pfx_vfs_write+0x10/0x10 [ 240.411344][ T7075] ? __fget_files+0x2a/0x420 [ 240.411362][ T7075] ? __fget_files+0x2a/0x420 [ 240.411385][ T7075] ksys_write+0x19d/0x2d0 [ 240.411406][ T7075] ? __pfx_ksys_write+0x10/0x10 [ 240.411430][ T7075] ? do_syscall_64+0xb6/0x230 [ 240.411454][ T7075] do_syscall_64+0xf3/0x230 [ 240.411483][ T7075] ? clear_bhb_loop+0x45/0xa0 [ 240.411504][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.411520][ T7075] RIP: 0033:0x7f5103d8bc1f [ 240.411535][ T7075] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 240.411550][ T7075] RSP: 002b:00007f5104b6e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 240.411632][ T7075] RAX: ffffffffffffffda RBX: 00007f5103fa5fa0 RCX: 00007f5103d8bc1f [ 240.411644][ T7075] RDX: 000000000000003a RSI: 0000200000002100 RDI: 00000000000000c8 [ 240.411655][ T7075] RBP: 00007f5104b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 240.411665][ T7075] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 240.411674][ T7075] R13: 0000000000000000 R14: 00007f5103fa5fa0 R15: 00007fff059c0668 [ 240.411700][ T7075] [ 240.479617][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.703224][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.711543][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.721129][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.728956][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.304113][ T7106] FAULT_INJECTION: forcing a failure. [ 241.304113][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 241.317104][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.0.387 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 241.317133][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.317145][ T7106] Call Trace: [ 241.317154][ T7106] [ 241.317163][ T7106] dump_stack_lvl+0x241/0x360 [ 241.317204][ T7106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.317236][ T7106] ? __pfx__printk+0x10/0x10 [ 241.317268][ T7106] ? fib6_table_lookup+0xb98/0xbf0 [ 241.317304][ T7106] should_fail_ex+0x424/0x570 [ 241.317330][ T7106] ? __pfx_ip6_dst_gc+0x10/0x10 [ 241.317353][ T7106] should_failslab+0xac/0x100 [ 241.317385][ T7106] kmem_cache_alloc_noprof+0x78/0x390 [ 241.317425][ T7106] ? dst_alloc+0x12b/0x190 [ 241.317451][ T7106] ? __pfx_ip6_dst_gc+0x10/0x10 [ 241.317474][ T7106] dst_alloc+0x12b/0x190 [ 241.317503][ T7106] ip6_pol_route+0xb96/0x15f0 [ 241.317534][ T7106] ? ip6_pol_route+0x192/0x15f0 [ 241.317562][ T7106] ? __pfx_ip6_pol_route+0x10/0x10 [ 241.317585][ T7106] ? 0xffffffffa0000948 [ 241.317611][ T7106] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.317644][ T7106] ? kernel_text_address+0xa7/0xe0 [ 241.317665][ T7106] ? __kernel_text_address+0xd/0x40 [ 241.317684][ T7106] ? unwind_get_return_address+0x4d/0x90 [ 241.317717][ T7106] fib6_rule_lookup+0x3c4/0x7a0 [ 241.317756][ T7106] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 241.317783][ T7106] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 241.317828][ T7106] ? dev_get_by_index_rcu+0xef/0x110 [ 241.317855][ T7106] ? ip6_route_output_flags+0x30/0x610 [ 241.317880][ T7106] ? l3mdev_link_scope_lookup+0x112/0x1c0 [ 241.317912][ T7106] ? ip6_route_output_flags+0x30/0x610 [ 241.317937][ T7106] ip6_route_output_flags+0x38e/0x610 [ 241.317972][ T7106] ip6_dst_lookup_tail+0x292/0x1510 [ 241.318019][ T7106] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 241.318051][ T7106] ? __pfx_mod_objcg_state+0x10/0x10 [ 241.318086][ T7106] ? __lock_acquire+0xad5/0xd80 [ 241.318117][ T7106] ip6_dst_lookup_flow+0xbb/0x180 [ 241.318150][ T7106] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 241.318184][ T7106] ? inet6_csk_route_req+0x348/0x6d0 [ 241.318210][ T7106] inet6_csk_route_req+0x4aa/0x6d0 [ 241.318234][ T7106] ? __pfx_inet6_csk_route_req+0x10/0x10 [ 241.318252][ T7106] ? security_inet_conn_request+0x79/0x2a0 [ 241.318291][ T7106] subflow_v6_route_req+0x1c0/0x4b0 [ 241.318330][ T7106] tcp_conn_request+0xd3f/0x3580 [ 241.318378][ T7106] ? __lock_acquire+0xad5/0xd80 [ 241.318407][ T7106] ? __pfx_tcp_conn_request+0x10/0x10 [ 241.318438][ T7106] ? __lock_acquire+0xad5/0xd80 [ 241.318484][ T7106] ? subflow_v6_conn_request+0x274/0x3b0 [ 241.318516][ T7106] ? tcp_rcv_state_process+0xb01/0x47d0 [ 241.318541][ T7106] tcp_rcv_state_process+0x2133/0x47d0 [ 241.318578][ T7106] ? sk_filter_trim_cap+0x1b4/0xac0 [ 241.318602][ T7106] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 241.318629][ T7106] ? sk_filter_trim_cap+0x6bd/0xac0 [ 241.318659][ T7106] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 241.318688][ T7106] ? sk_filter_trim_cap+0x1b4/0xac0 [ 241.318714][ T7106] tcp_v6_do_rcv+0x8f2/0x13d0 [ 241.318758][ T7106] tcp_v6_rcv+0x236c/0x3160 [ 241.318829][ T7106] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 241.318848][ T7106] ? nf_nat_ipv6_fn+0x129/0x3f0 [ 241.318883][ T7106] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 241.318904][ T7106] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 241.318924][ T7106] ip6_protocol_deliver_rcu+0xc79/0x1580 [ 241.318988][ T7106] ip6_input_finish+0xdd/0x190 [ 241.319026][ T7106] NF_HOOK+0x3a0/0x450 [ 241.319060][ T7106] ? __pfx_ip6_input_finish+0x10/0x10 [ 241.319091][ T7106] ? NF_HOOK+0x9e/0x450 [ 241.319120][ T7106] ? __pfx_NF_HOOK+0x10/0x10 [ 241.319154][ T7106] ? __pfx_ip6_input_finish+0x10/0x10 [ 241.319206][ T7106] ip6_input+0x169/0x270 [ 241.319236][ T7106] ? ip6_input+0x23/0x270 [ 241.319271][ T7106] NF_HOOK+0x3a0/0x450 [ 241.319300][ T7106] ? skb_orphan+0x4b/0xd0 [ 241.319319][ T7106] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 241.319350][ T7106] ? NF_HOOK+0x9e/0x450 [ 241.319380][ T7106] ? __pfx_NF_HOOK+0x10/0x10 [ 241.319414][ T7106] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 241.319460][ T7106] __netif_receive_skb+0x1ef/0x670 [ 241.319497][ T7106] ? __pfx___netif_receive_skb+0x10/0x10 [ 241.319552][ T7106] ? netif_receive_skb+0x133/0x890 [ 241.319579][ T7106] ? netif_receive_skb+0x133/0x890 [ 241.319606][ T7106] netif_receive_skb+0x1ea/0x890 [ 241.319633][ T7106] ? tun_rx_batched+0x14b/0x8d0 [ 241.319654][ T7106] ? __pfx_netif_receive_skb+0x10/0x10 [ 241.319693][ T7106] ? tun_rx_batched+0x14b/0x8d0 [ 241.319712][ T7106] tun_rx_batched+0x1a4/0x8d0 [ 241.319744][ T7106] ? __lock_acquire+0xad5/0xd80 [ 241.319776][ T7106] ? __pfx_tun_rx_batched+0x10/0x10 [ 241.319815][ T7106] ? tun_get_user+0x2a99/0x47c0 [ 241.319832][ T7106] ? tun_get_user+0x2a99/0x47c0 [ 241.319849][ T7106] tun_get_user+0x2fec/0x47c0 [ 241.319872][ T7106] ? tun_get_user+0x852/0x47c0 [ 241.319923][ T7106] ? aa_file_perm+0x139/0xf60 [ 241.319956][ T7106] ? aa_file_perm+0x3f1/0xf60 [ 241.319985][ T7106] ? __pfx_tun_get_user+0x10/0x10 [ 241.320025][ T7106] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 241.320074][ T7106] ? tun_get+0x1e/0x2f0 [ 241.320112][ T7106] ? tun_get+0x1e/0x2f0 [ 241.320140][ T7106] ? tun_get+0x27d/0x2f0 [ 241.320172][ T7106] tun_chr_write_iter+0x10d/0x1f0 [ 241.320207][ T7106] vfs_write+0x70f/0xd10 [ 241.320240][ T7106] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 241.320275][ T7106] ? __pfx_vfs_write+0x10/0x10 [ 241.320303][ T7106] ? __fget_files+0x2a/0x420 [ 241.320327][ T7106] ? __fget_files+0x2a/0x420 [ 241.320358][ T7106] ksys_write+0x19d/0x2d0 [ 241.320386][ T7106] ? __pfx_ksys_write+0x10/0x10 [ 241.320418][ T7106] ? do_syscall_64+0xb6/0x230 [ 241.320448][ T7106] do_syscall_64+0xf3/0x230 [ 241.320472][ T7106] ? clear_bhb_loop+0x45/0xa0 [ 241.320498][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.320518][ T7106] RIP: 0033:0x7f1c0eb8bc1f [ 241.320537][ T7106] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 241.320553][ T7106] RSP: 002b:00007f1c0fa5f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 241.320575][ T7106] RAX: ffffffffffffffda RBX: 00007f1c0eda5fa0 RCX: 00007f1c0eb8bc1f [ 241.320589][ T7106] RDX: 000000000000004e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 241.320600][ T7106] RBP: 00007f1c0fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.320612][ T7106] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 241.320624][ T7106] R13: 0000000000000000 R14: 00007f1c0eda5fa0 R15: 00007fff2e459a68 [ 241.320655][ T7106] [ 242.174332][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 242.506119][ T7127] ip6gre1: entered allmulticast mode [ 242.563675][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.571201][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.578537][ T7076] bridge_slave_0: entered allmulticast mode [ 242.588406][ T7076] bridge_slave_0: entered promiscuous mode [ 242.599266][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.606862][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.614538][ T7076] bridge_slave_1: entered allmulticast mode [ 242.622528][ T7076] bridge_slave_1: entered promiscuous mode [ 242.709011][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.748667][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.820421][ T5867] Bluetooth: hci4: command tx timeout [ 242.831652][ T7138] xt_CT: No such helper "pptp" [ 242.883935][ T7076] team0: Port device team_slave_0 added [ 242.895127][ T7076] team0: Port device team_slave_1 added [ 242.964064][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.976442][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.012556][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.038831][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.046627][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.095698][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.282663][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 243.347690][ T7076] hsr_slave_0: entered promiscuous mode [ 243.362052][ T7076] hsr_slave_1: entered promiscuous mode [ 243.368760][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.382820][ T7076] Cannot create hsr debugfs directory [ 243.445637][ T7163] FAULT_INJECTION: forcing a failure. [ 243.445637][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 243.459271][ T7163] CPU: 1 UID: 0 PID: 7163 Comm: syz.2.402 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 243.459313][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.459336][ T7163] Call Trace: [ 243.459346][ T7163] [ 243.459355][ T7163] dump_stack_lvl+0x241/0x360 [ 243.459396][ T7163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.459428][ T7163] ? __pfx__printk+0x10/0x10 [ 243.459458][ T7163] ? unwind_get_return_address+0x4d/0x90 [ 243.459489][ T7163] ? arch_stack_walk+0xff/0x150 [ 243.459537][ T7163] should_fail_ex+0x424/0x570 [ 243.459567][ T7163] should_failslab+0xac/0x100 [ 243.459598][ T7163] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 243.459627][ T7163] ? __alloc_skb+0x1c2/0x480 [ 243.459651][ T7163] __alloc_skb+0x1c2/0x480 [ 243.459678][ T7163] ? __pfx___alloc_skb+0x10/0x10 [ 243.459711][ T7163] ndisc_alloc_skb+0xa2/0x480 [ 243.459736][ T7163] ndisc_ns_create+0x26d/0x690 [ 243.459756][ T7163] ? __ipv6_chk_addr_and_flags+0x17c/0x7c0 [ 243.459784][ T7163] ? __pfx_ndisc_ns_create+0x10/0x10 [ 243.459820][ T7163] ndisc_solicit+0x3a4/0x6b0 [ 243.459850][ T7163] ? __pfx_ndisc_solicit+0x10/0x10 [ 243.459885][ T7163] ? __neigh_event_send+0xe90/0x15d0 [ 243.459914][ T7163] ? __pfx_ndisc_solicit+0x10/0x10 [ 243.459940][ T7163] __neigh_event_send+0xef5/0x15d0 [ 243.459983][ T7163] neigh_resolve_output+0x1b5/0x740 [ 243.460014][ T7163] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 243.460059][ T7163] ip6_finish_output2+0x1296/0x1750 [ 243.460094][ T7163] ? ip6_finish_output2+0x701/0x1750 [ 243.460141][ T7163] ? __pfx_ip6_finish_output2+0x10/0x10 [ 243.460174][ T7163] ? ip6_mtu+0x81/0x3f0 [ 243.460200][ T7163] ? ip6_mtu+0x81/0x3f0 [ 243.460229][ T7163] ip6_finish_output+0x421/0x840 [ 243.460265][ T7163] ip6_xmit+0x1111/0x1a30 [ 243.460320][ T7163] ? __pfx_ip6_xmit+0x10/0x10 [ 243.460374][ T7163] tcp_v6_send_synack+0x882/0xf50 [ 243.460395][ T7163] ? tcp_v6_send_synack+0x6a8/0xf50 [ 243.460422][ T7163] ? __pfx_tcp_v6_send_synack+0x10/0x10 [ 243.460441][ T7163] ? inet_csk_reqsk_queue_hash_add+0x178/0x200 [ 243.460483][ T7163] tcp_conn_request+0x2025/0x3580 [ 243.460531][ T7163] ? find_match+0xa60/0xc10 [ 243.460557][ T7163] ? __pfx_tcp_conn_request+0x10/0x10 [ 243.460588][ T7163] ? __lock_acquire+0xad5/0xd80 [ 243.460636][ T7163] ? subflow_v6_conn_request+0x274/0x3b0 [ 243.460668][ T7163] ? tcp_rcv_state_process+0xb01/0x47d0 [ 243.460693][ T7163] tcp_rcv_state_process+0x2133/0x47d0 [ 243.460730][ T7163] ? sk_filter_trim_cap+0x1b4/0xac0 [ 243.460753][ T7163] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 243.460778][ T7163] ? sk_filter_trim_cap+0x6bd/0xac0 [ 243.460807][ T7163] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 243.460836][ T7163] ? sk_filter_trim_cap+0x1b4/0xac0 [ 243.460862][ T7163] tcp_v6_do_rcv+0x8f2/0x13d0 [ 243.460895][ T7163] tcp_v6_rcv+0x236c/0x3160 [ 243.460960][ T7163] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 243.460978][ T7163] ? nf_nat_ipv6_fn+0x129/0x3f0 [ 243.461011][ T7163] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 243.461032][ T7163] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 243.461051][ T7163] ip6_protocol_deliver_rcu+0xc79/0x1580 [ 243.461132][ T7163] ip6_input_finish+0xdd/0x190 [ 243.461170][ T7163] NF_HOOK+0x3a0/0x450 [ 243.461202][ T7163] ? __pfx_ip6_input_finish+0x10/0x10 [ 243.461233][ T7163] ? NF_HOOK+0x9e/0x450 [ 243.461262][ T7163] ? __pfx_NF_HOOK+0x10/0x10 [ 243.461303][ T7163] ? __pfx_ip6_input_finish+0x10/0x10 [ 243.461346][ T7163] ip6_input+0x169/0x270 [ 243.461376][ T7163] ? ip6_input+0x23/0x270 [ 243.461409][ T7163] NF_HOOK+0x3a0/0x450 [ 243.461437][ T7163] ? skb_orphan+0x4b/0xd0 [ 243.461457][ T7163] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 243.461487][ T7163] ? NF_HOOK+0x9e/0x450 [ 243.461516][ T7163] ? __pfx_NF_HOOK+0x10/0x10 [ 243.461550][ T7163] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 243.461594][ T7163] __netif_receive_skb+0x1ef/0x670 [ 243.461632][ T7163] ? __pfx___netif_receive_skb+0x10/0x10 [ 243.461678][ T7163] ? netif_receive_skb+0x133/0x890 [ 243.461704][ T7163] ? netif_receive_skb+0x133/0x890 [ 243.461731][ T7163] netif_receive_skb+0x1ea/0x890 [ 243.461758][ T7163] ? tun_rx_batched+0x14b/0x8d0 [ 243.461778][ T7163] ? __pfx_netif_receive_skb+0x10/0x10 [ 243.461818][ T7163] ? tun_rx_batched+0x14b/0x8d0 [ 243.461837][ T7163] tun_rx_batched+0x1a4/0x8d0 [ 243.461862][ T7163] ? __lock_acquire+0xad5/0xd80 [ 243.461889][ T7163] ? __pfx_tun_rx_batched+0x10/0x10 [ 243.461926][ T7163] ? tun_get_user+0x2a99/0x47c0 [ 243.461944][ T7163] ? tun_get_user+0x2a99/0x47c0 [ 243.461962][ T7163] tun_get_user+0x2fec/0x47c0 [ 243.461984][ T7163] ? tun_get_user+0x852/0x47c0 [ 243.462020][ T7163] ? aa_file_perm+0x139/0xf60 [ 243.462051][ T7163] ? aa_file_perm+0x3f1/0xf60 [ 243.462080][ T7163] ? __pfx_tun_get_user+0x10/0x10 [ 243.462124][ T7163] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 243.462170][ T7163] ? tun_get+0x1e/0x2f0 [ 243.462203][ T7163] ? tun_get+0x1e/0x2f0 [ 243.462233][ T7163] ? tun_get+0x27d/0x2f0 [ 243.462267][ T7163] tun_chr_write_iter+0x10d/0x1f0 [ 243.462313][ T7163] vfs_write+0x70f/0xd10 [ 243.462346][ T7163] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.462377][ T7163] ? __pfx_vfs_write+0x10/0x10 [ 243.462404][ T7163] ? __fget_files+0x2a/0x420 [ 243.462426][ T7163] ? __fget_files+0x2a/0x420 [ 243.462456][ T7163] ksys_write+0x19d/0x2d0 [ 243.462483][ T7163] ? __pfx_ksys_write+0x10/0x10 [ 243.462515][ T7163] ? do_syscall_64+0xb6/0x230 [ 243.462546][ T7163] do_syscall_64+0xf3/0x230 [ 243.462572][ T7163] ? clear_bhb_loop+0x45/0xa0 [ 243.462599][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.462630][ T7163] RIP: 0033:0x7f5103d8bc1f [ 243.462650][ T7163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.462666][ T7163] RSP: 002b:00007f5104b6e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.462688][ T7163] RAX: ffffffffffffffda RBX: 00007f5103fa5fa0 RCX: 00007f5103d8bc1f [ 243.462702][ T7163] RDX: 000000000000004e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 243.462715][ T7163] RBP: 00007f5104b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 243.462727][ T7163] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 243.462738][ T7163] R13: 0000000000000000 R14: 00007f5103fa5fa0 R15: 00007fff059c0668 [ 243.462772][ T7163] [ 244.481662][ T7076] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.517155][ T7182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.617429][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 244.651179][ T7076] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.688681][ T7188] veth1_to_hsr: entered promiscuous mode [ 244.802834][ T7076] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.819142][ T7187] veth1_to_hsr: left promiscuous mode [ 244.877050][ T7076] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.901501][ T5867] Bluetooth: hci4: command tx timeout [ 245.044037][ T7076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.058460][ T7076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.097667][ T7076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.129400][ T7076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.168443][ T7206] xt_l2tp: invalid flags combination: c [ 245.177225][ T7206] Cannot find del_set index 3 as target [ 245.360532][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.399039][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.423840][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.431200][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.464112][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.471379][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.611205][ T7214] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 245.806136][ T7217] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 245.906734][ T7227] FAULT_INJECTION: forcing a failure. [ 245.906734][ T7227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.995427][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.0.422 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 245.995458][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.995471][ T7227] Call Trace: [ 245.995479][ T7227] [ 245.995488][ T7227] dump_stack_lvl+0x241/0x360 [ 245.995529][ T7227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.995561][ T7227] ? __pfx__printk+0x10/0x10 [ 245.995603][ T7227] should_fail_ex+0x424/0x570 [ 245.995633][ T7227] _copy_to_user+0x31/0xb0 [ 245.995681][ T7227] simple_read_from_buffer+0xc4/0x170 [ 245.995719][ T7227] proc_fail_nth_read+0x1ef/0x260 [ 245.995746][ T7227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.995772][ T7227] ? rw_verify_area+0x246/0x630 [ 245.995794][ T7227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.995818][ T7227] vfs_read+0x21f/0xb90 [ 245.995848][ T7227] ? __pfx___mutex_lock+0x10/0x10 [ 245.995876][ T7227] ? __pfx_vfs_read+0x10/0x10 [ 245.995904][ T7227] ? __fget_files+0x2a/0x420 [ 245.995925][ T7227] ? __fget_files+0x39d/0x420 [ 245.995942][ T7227] ? __fget_files+0x2a/0x420 [ 245.995972][ T7227] ksys_read+0x19d/0x2d0 [ 245.995999][ T7227] ? __pfx_ksys_read+0x10/0x10 [ 245.996029][ T7227] ? do_syscall_64+0xb6/0x230 [ 245.996059][ T7227] do_syscall_64+0xf3/0x230 [ 245.996085][ T7227] ? clear_bhb_loop+0x45/0xa0 [ 245.996110][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.996131][ T7227] RIP: 0033:0x7f1c0eb8bb7c [ 245.996150][ T7227] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.996166][ T7227] RSP: 002b:00007f1c0fa5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.996188][ T7227] RAX: ffffffffffffffda RBX: 00007f1c0eda5fa0 RCX: 00007f1c0eb8bb7c [ 245.996203][ T7227] RDX: 000000000000000f RSI: 00007f1c0fa5f0a0 RDI: 0000000000000004 [ 245.996216][ T7227] RBP: 00007f1c0fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.996229][ T7227] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 245.996241][ T7227] R13: 0000000000000000 R14: 00007f1c0eda5fa0 R15: 00007fff2e459a68 [ 245.996281][ T7227] [ 246.289203][ T7230] xt_bpf: check failed: parse error [ 246.297077][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.444983][ T7244] IPVS: length: 24 != 984 [ 246.643676][ T7252] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.662707][ T7254] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 246.787036][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 246.854305][ T7256] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.865119][ T7256] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.874651][ T7256] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.887397][ T7256] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.906373][ T7256] bond1: (slave geneve2): making interface the new active one [ 246.925639][ T7256] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 246.939188][ T7257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.986955][ T5867] Bluetooth: hci4: command tx timeout [ 247.047614][ T30] audit: type=1800 audit(1744674791.879:4): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.430" name=D6 dev="tmpfs" ino=518 res=0 errno=0 [ 247.169277][ T7076] veth0_vlan: entered promiscuous mode [ 247.217024][ T7076] veth1_vlan: entered promiscuous mode [ 247.244022][ T7275] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 247.289893][ T7076] veth0_macvtap: entered promiscuous mode [ 247.325831][ T7076] veth1_macvtap: entered promiscuous mode [ 247.389799][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.407620][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.417902][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.429434][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.440310][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.451739][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.465638][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.479487][ T7280] netlink: 'syz.0.438': attribute type 11 has an invalid length. [ 247.491051][ T7280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.438'. [ 247.504972][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.518962][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.562247][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.590266][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.631717][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.657948][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.675551][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.687225][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.703670][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.718039][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.736682][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.756552][ T7289] unsupported nla_type 52263 [ 247.864340][ T7076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.892464][ T7076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.926676][ T7076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.943011][ T7076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.974431][ T7291] netlink: 140 bytes leftover after parsing attributes in process `syz.2.442'. [ 248.028622][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 248.039413][ T7297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.443'. [ 248.251971][ T7301] netlink: 72 bytes leftover after parsing attributes in process `syz.3.446'. [ 248.288877][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.312892][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.324772][ T7302] tap0: tun_chr_ioctl cmd 2148553947 [ 248.386500][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 248.403404][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.440097][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.016413][ T7336] netlink: ct family unspecified [ 249.025934][ T7336] openvswitch: netlink: Actions may not be safe on all matching packets [ 249.046266][ T7336] delete_channel: no stack [ 249.060415][ T55] Bluetooth: hci4: command tx timeout [ 249.667933][ T7351] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 250.050639][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 250.244427][ T7360] team0 (unregistering): Port device team_slave_0 removed [ 250.258087][ T7360] team0 (unregistering): Port device team_slave_1 removed [ 250.325074][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 250.371068][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 250.380707][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 251.223004][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 252.055595][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 252.088183][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 252.111117][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 252.165645][ T5905] IPVS: starting estimator thread 0... [ 252.263692][ T7438] IPVS: using max 27 ests per chain, 64800 per kthread [ 253.033554][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.049809][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.064645][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.082565][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.101604][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.305359][ T7460] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 253.674034][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 254.010619][ T7482] warning: `syz.3.505' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 254.092003][ T7486] FAULT_INJECTION: forcing a failure. [ 254.092003][ T7486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.135309][ T7486] CPU: 0 UID: 0 PID: 7486 Comm: syz.2.507 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 254.135338][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.135351][ T7486] Call Trace: [ 254.135359][ T7486] [ 254.135368][ T7486] dump_stack_lvl+0x241/0x360 [ 254.135407][ T7486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.135437][ T7486] ? __pfx__printk+0x10/0x10 [ 254.135479][ T7486] should_fail_ex+0x424/0x570 [ 254.135507][ T7486] _copy_from_user+0x2d/0xb0 [ 254.135537][ T7486] copy_msghdr_from_user+0xb3/0x580 [ 254.135571][ T7486] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 254.135595][ T7486] ? __fget_files+0x2a/0x420 [ 254.135618][ T7486] ? __fget_files+0x2a/0x420 [ 254.135648][ T7486] __sys_sendmmsg+0x361/0x7b0 [ 254.135684][ T7486] ? __pfx___sys_sendmmsg+0x10/0x10 [ 254.135744][ T7486] ? rcu_read_lock_any_held+0xbb/0x160 [ 254.135774][ T7486] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 254.135806][ T7486] ? vfs_write+0xb29/0xd10 [ 254.135839][ T7486] ? ksys_write+0x24e/0x2d0 [ 254.135866][ T7486] ? __mutex_unlock_slowpath+0x229/0x800 [ 254.135925][ T7486] ? ksys_write+0x275/0x2d0 [ 254.135962][ T7486] __x64_sys_sendmmsg+0xa0/0xb0 [ 254.135987][ T7486] do_syscall_64+0xf3/0x230 [ 254.136013][ T7486] ? clear_bhb_loop+0x45/0xa0 [ 254.136038][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.136057][ T7486] RIP: 0033:0x7f5103d8d169 [ 254.136076][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.136092][ T7486] RSP: 002b:00007f5104b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.136114][ T7486] RAX: ffffffffffffffda RBX: 00007f5103fa5fa0 RCX: 00007f5103d8d169 [ 254.136128][ T7486] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 254.136141][ T7486] RBP: 00007f5104b6e090 R08: 0000000000000000 R09: 0000000000000000 [ 254.136154][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.136166][ T7486] R13: 0000000000000000 R14: 00007f5103fa5fa0 R15: 00007fff059c0668 [ 254.136198][ T7486] [ 255.357070][ T7524] FAULT_INJECTION: forcing a failure. [ 255.357070][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 255.372196][ T7523] netlink: 9 bytes leftover after parsing attributes in process `syz.3.521'. [ 255.390412][ T7523] ï‰Oܼ: renamed from hsr0 (while UP) [ 255.406910][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.0.520 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 255.406943][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.406955][ T7524] Call Trace: [ 255.406964][ T7524] [ 255.406973][ T7524] dump_stack_lvl+0x241/0x360 [ 255.407011][ T7524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.407043][ T7524] ? __pfx__printk+0x10/0x10 [ 255.407076][ T7524] ? __pfx___might_resched+0x10/0x10 [ 255.407117][ T7524] should_fail_ex+0x424/0x570 [ 255.407146][ T7524] should_failslab+0xac/0x100 [ 255.407178][ T7524] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 255.407208][ T7524] ? __alloc_skb+0x1c2/0x480 [ 255.407233][ T7524] __alloc_skb+0x1c2/0x480 [ 255.407259][ T7524] ? __pfx___alloc_skb+0x10/0x10 [ 255.407275][ T7524] ? __local_bh_enable_ip+0x168/0x200 [ 255.407297][ T7524] ? pppoe_sendmsg+0xb5/0x8d0 [ 255.407325][ T7524] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.407353][ T7524] sock_wmalloc+0xab/0x120 [ 255.407381][ T7524] pppoe_sendmsg+0x313/0x8d0 [ 255.407418][ T7524] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 255.407446][ T7524] ? aa_sock_msg_perm+0x91/0x160 [ 255.407483][ T7524] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 255.407508][ T7524] __sock_sendmsg+0x221/0x270 [ 255.407539][ T7524] ____sys_sendmsg+0x523/0x860 [ 255.407573][ T7524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.407593][ T7524] ? __fget_files+0x2a/0x420 [ 255.407616][ T7524] ? __fget_files+0x2a/0x420 [ 255.407645][ T7524] __sys_sendmmsg+0x3a0/0x7b0 [ 255.407682][ T7524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.407747][ T7524] ? rcu_read_lock_any_held+0xbb/0x160 [ 255.407775][ T7524] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 255.407808][ T7524] ? vfs_write+0xb29/0xd10 [ 255.407843][ T7524] ? ksys_write+0x24e/0x2d0 [ 255.407870][ T7524] ? __mutex_unlock_slowpath+0x229/0x800 [ 255.407930][ T7524] ? ksys_write+0x275/0x2d0 [ 255.407969][ T7524] __x64_sys_sendmmsg+0xa0/0xb0 [ 255.407994][ T7524] do_syscall_64+0xf3/0x230 [ 255.408021][ T7524] ? clear_bhb_loop+0x45/0xa0 [ 255.408045][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.408066][ T7524] RIP: 0033:0x7f1c0eb8d169 [ 255.408086][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.408110][ T7524] RSP: 002b:00007f1c0fa5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.408132][ T7524] RAX: ffffffffffffffda RBX: 00007f1c0eda5fa0 RCX: 00007f1c0eb8d169 [ 255.408148][ T7524] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 255.408161][ T7524] RBP: 00007f1c0fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 255.408173][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.408184][ T7524] R13: 0000000000000000 R14: 00007f1c0eda5fa0 R15: 00007fff2e459a68 [ 255.408218][ T7524] [ 255.753619][ T7523] ï‰Oܼ: entered promiscuous mode [ 255.759120][ T7523] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 255.878905][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.885428][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.151280][ T7536] IPVS: Scheduler module ip_vs_sip not found [ 256.167397][ T7546] netlink: 10 bytes leftover after parsing attributes in process `syz.2.529'. [ 256.848154][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.032214][ T7578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.541'. [ 257.051490][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 257.061406][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 257.205470][ T7586] FAULT_INJECTION: forcing a failure. [ 257.205470][ T7586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.225507][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.1.545 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 257.225540][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.225553][ T7586] Call Trace: [ 257.225562][ T7586] [ 257.225571][ T7586] dump_stack_lvl+0x241/0x360 [ 257.225611][ T7586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.225641][ T7586] ? __pfx__printk+0x10/0x10 [ 257.225686][ T7586] should_fail_ex+0x424/0x570 [ 257.225714][ T7586] _copy_from_user+0x2d/0xb0 [ 257.225745][ T7586] copy_msghdr_from_user+0xb3/0x580 [ 257.225782][ T7586] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 257.225829][ T7586] __sys_sendmmsg+0x361/0x7b0 [ 257.225875][ T7586] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.225934][ T7586] ? rcu_read_lock_any_held+0xbb/0x160 [ 257.225962][ T7586] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 257.225992][ T7586] ? vfs_write+0xb29/0xd10 [ 257.226027][ T7586] ? ksys_write+0x24e/0x2d0 [ 257.226053][ T7586] ? __mutex_unlock_slowpath+0x229/0x800 [ 257.226111][ T7586] ? ksys_write+0x275/0x2d0 [ 257.226146][ T7586] __x64_sys_sendmmsg+0xa0/0xb0 [ 257.226170][ T7586] do_syscall_64+0xf3/0x230 [ 257.226195][ T7586] ? clear_bhb_loop+0x45/0xa0 [ 257.226220][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.226240][ T7586] RIP: 0033:0x7f539f38d169 [ 257.226259][ T7586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.226275][ T7586] RSP: 002b:00007f539d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.226297][ T7586] RAX: ffffffffffffffda RBX: 00007f539f5a5fa0 RCX: 00007f539f38d169 [ 257.226311][ T7586] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 257.226324][ T7586] RBP: 00007f539d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.226336][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.226347][ T7586] R13: 0000000000000000 R14: 00007f539f5a5fa0 R15: 00007fffb912a5c8 [ 257.226380][ T7586] [ 257.876105][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'. [ 257.978697][ T7619] team0: entered promiscuous mode [ 257.987208][ T7619] team_slave_0: entered promiscuous mode [ 257.994572][ T7619] team_slave_1: entered promiscuous mode [ 258.003189][ T7619] batadv_slave_1: entered promiscuous mode [ 258.237711][ T7630] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.251274][ T7630] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.259778][ T7630] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.270609][ T7630] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.293636][ T7630] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.391807][ T7640] FAULT_INJECTION: forcing a failure. [ 258.391807][ T7640] name failslab, interval 1, probability 0, space 0, times 0 [ 258.408840][ T7640] CPU: 1 UID: 0 PID: 7640 Comm: syz.1.556 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 258.408872][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.408885][ T7640] Call Trace: [ 258.408893][ T7640] [ 258.408903][ T7640] dump_stack_lvl+0x241/0x360 [ 258.408944][ T7640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.408974][ T7640] ? __pfx__printk+0x10/0x10 [ 258.409009][ T7640] ? __pfx___might_resched+0x10/0x10 [ 258.409040][ T7640] should_fail_ex+0x424/0x570 [ 258.409145][ T7640] should_failslab+0xac/0x100 [ 258.409183][ T7640] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 258.409221][ T7640] ? __alloc_skb+0x1c2/0x480 [ 258.409246][ T7640] __alloc_skb+0x1c2/0x480 [ 258.409273][ T7640] ? __pfx___alloc_skb+0x10/0x10 [ 258.409290][ T7640] ? __local_bh_enable_ip+0x168/0x200 [ 258.409313][ T7640] ? pppoe_sendmsg+0xb5/0x8d0 [ 258.409341][ T7640] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 258.409370][ T7640] sock_wmalloc+0xab/0x120 [ 258.409397][ T7640] pppoe_sendmsg+0x313/0x8d0 [ 258.409439][ T7640] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 258.409474][ T7640] ? aa_sock_msg_perm+0x91/0x160 [ 258.409513][ T7640] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 258.409538][ T7640] __sock_sendmsg+0x221/0x270 [ 258.409571][ T7640] ____sys_sendmsg+0x523/0x860 [ 258.409605][ T7640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.409648][ T7640] __sys_sendmmsg+0x3a0/0x7b0 [ 258.409685][ T7640] ? __pfx___sys_sendmmsg+0x10/0x10 [ 258.409751][ T7640] ? rcu_read_lock_any_held+0xbb/0x160 [ 258.409782][ T7640] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 258.409816][ T7640] ? vfs_write+0xb29/0xd10 [ 258.409858][ T7640] ? ksys_write+0x24e/0x2d0 [ 258.409888][ T7640] ? __mutex_unlock_slowpath+0x229/0x800 [ 258.409952][ T7640] ? ksys_write+0x275/0x2d0 [ 258.409990][ T7640] __x64_sys_sendmmsg+0xa0/0xb0 [ 258.410016][ T7640] do_syscall_64+0xf3/0x230 [ 258.410044][ T7640] ? clear_bhb_loop+0x45/0xa0 [ 258.410080][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.410102][ T7640] RIP: 0033:0x7f539f38d169 [ 258.410122][ T7640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.410138][ T7640] RSP: 002b:00007f539d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 258.410161][ T7640] RAX: ffffffffffffffda RBX: 00007f539f5a5fa0 RCX: 00007f539f38d169 [ 258.410176][ T7640] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 258.410189][ T7640] RBP: 00007f539d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.410201][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.410215][ T7640] R13: 0000000000000000 R14: 00007f539f5a5fa0 R15: 00007fffb912a5c8 [ 258.410248][ T7640] [ 258.689594][ T7600] syz.0.547 (7600) used greatest stack depth: 18744 bytes left [ 258.775635][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 258.855730][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.560'. [ 259.251322][ T7669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'. [ 259.427677][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 259.456428][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 259.701680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.206282][ T7717] FAULT_INJECTION: forcing a failure. [ 260.206282][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.227264][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.0.580 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 260.227297][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.227311][ T7717] Call Trace: [ 260.227319][ T7717] [ 260.227328][ T7717] dump_stack_lvl+0x241/0x360 [ 260.227367][ T7717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.227398][ T7717] ? __pfx__printk+0x10/0x10 [ 260.227440][ T7717] should_fail_ex+0x424/0x570 [ 260.227469][ T7717] _copy_from_user+0x2d/0xb0 [ 260.227501][ T7717] copy_msghdr_from_user+0xb3/0x580 [ 260.227538][ T7717] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.227587][ T7717] __sys_sendmmsg+0x361/0x7b0 [ 260.227623][ T7717] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.227688][ T7717] ? rcu_read_lock_any_held+0xbb/0x160 [ 260.227718][ T7717] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 260.227751][ T7717] ? vfs_write+0xb29/0xd10 [ 260.227787][ T7717] ? ksys_write+0x24e/0x2d0 [ 260.227816][ T7717] ? __mutex_unlock_slowpath+0x229/0x800 [ 260.227904][ T7717] __x64_sys_sendmmsg+0xa0/0xb0 [ 260.227929][ T7717] do_syscall_64+0xf3/0x230 [ 260.227955][ T7717] ? clear_bhb_loop+0x45/0xa0 [ 260.227981][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.228001][ T7717] RIP: 0033:0x7f1c0eb8d169 [ 260.228021][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.228037][ T7717] RSP: 002b:00007f1c0fa5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.228059][ T7717] RAX: ffffffffffffffda RBX: 00007f1c0eda5fa0 RCX: 00007f1c0eb8d169 [ 260.228074][ T7717] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 260.228087][ T7717] RBP: 00007f1c0fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.228099][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.228111][ T7717] R13: 0000000000000000 R14: 00007f1c0eda5fa0 R15: 00007fff2e459a68 [ 260.228145][ T7717] [ 261.021120][ T7747] xt_CT: No such helper "pptp" [ 261.159339][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 261.177073][ T7759] netlink: 272 bytes leftover after parsing attributes in process `syz.1.593'. [ 261.187060][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 261.288142][ T7763] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 261.349499][ T7770] erspan0: mtu less than device minimum [ 261.361936][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 261.477176][ T7776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 261.647705][ T7783] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.603'. [ 263.739520][ T7844] netlink: 'syz.0.626': attribute type 2 has an invalid length. [ 263.775297][ T7844] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 263.799119][ T7844] __nla_validate_parse: 4 callbacks suppressed [ 263.799139][ T7844] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.626'. [ 264.065036][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 264.106594][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 264.235097][ T7858] Driver unsupported XDP return value 0 on prog (id 78) dev N/A, expect packet loss! [ 264.507915][ T7872] team0: Device is already in use. [ 264.565405][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 264.583708][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 264.623155][ T7876] netlink: 'syz.0.639': attribute type 11 has an invalid length. [ 264.781810][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 264.839727][ T7892] vlan2: entered allmulticast mode [ 264.846376][ T7892] bond0: entered allmulticast mode [ 264.859655][ T7892] bond_slave_0: entered allmulticast mode [ 264.866347][ T7892] bond_slave_1: entered allmulticast mode [ 265.262567][ T7911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 265.725229][ T7930] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.754642][ T7932] FAULT_INJECTION: forcing a failure. [ 265.754642][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.768605][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.652 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 265.768635][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.768647][ T7932] Call Trace: [ 265.768656][ T7932] [ 265.768664][ T7932] dump_stack_lvl+0x241/0x360 [ 265.768704][ T7932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.768734][ T7932] ? __pfx__printk+0x10/0x10 [ 265.768778][ T7932] should_fail_ex+0x424/0x570 [ 265.768805][ T7932] _copy_from_user+0x2d/0xb0 [ 265.768836][ T7932] copy_msghdr_from_user+0xb3/0x580 [ 265.768872][ T7932] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 265.768919][ T7932] __sys_sendmmsg+0x361/0x7b0 [ 265.768955][ T7932] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.769017][ T7932] ? rcu_read_lock_any_held+0xbb/0x160 [ 265.769046][ T7932] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 265.769085][ T7932] ? vfs_write+0xb29/0xd10 [ 265.769120][ T7932] ? ksys_write+0x24e/0x2d0 [ 265.769148][ T7932] ? __mutex_unlock_slowpath+0x229/0x800 [ 265.769207][ T7932] ? ksys_write+0x275/0x2d0 [ 265.769244][ T7932] __x64_sys_sendmmsg+0xa0/0xb0 [ 265.769269][ T7932] do_syscall_64+0xf3/0x230 [ 265.769296][ T7932] ? clear_bhb_loop+0x45/0xa0 [ 265.769321][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.769342][ T7932] RIP: 0033:0x7fabd9d8d169 [ 265.769360][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.769376][ T7932] RSP: 002b:00007fabdac9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.769398][ T7932] RAX: ffffffffffffffda RBX: 00007fabd9fa5fa0 RCX: 00007fabd9d8d169 [ 265.769413][ T7932] RDX: 0000000000034000 RSI: 0000200000001640 RDI: 0000000000000003 [ 265.769426][ T7932] RBP: 00007fabdac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 265.769439][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.769451][ T7932] R13: 0000000000000000 R14: 00007fabd9fa5fa0 R15: 00007ffe17995548 [ 265.769483][ T7932] [ 266.050449][ T7935] netlink: 666 bytes leftover after parsing attributes in process `syz.1.653'. [ 266.076688][ T7936] netlink: 666 bytes leftover after parsing attributes in process `syz.1.653'. [ 266.130593][ T7935] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 266.219917][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 266.259993][ T7935] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.280733][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 266.729836][ T7964] netlink: 'syz.1.665': attribute type 29 has an invalid length. [ 267.885297][ T8000] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 267.936722][ T8000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.247095][ T8016] syz.0.681 uses old SIOCAX25GETINFO [ 268.548930][ T8036] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 269.008289][ T8050] __nla_validate_parse: 4 callbacks suppressed [ 269.008313][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 269.540311][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 269.782036][ T8088] C: renamed from team_slave_0 [ 269.793289][ T8088] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 269.801437][ T8088] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.018525][ T8082] syz.1.705: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 270.041191][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.1.705 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 270.041221][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.041234][ T8082] Call Trace: [ 270.041243][ T8082] [ 270.041252][ T8082] dump_stack_lvl+0x241/0x360 [ 270.041291][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.041321][ T8082] ? __pfx__printk+0x10/0x10 [ 270.041350][ T8082] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 270.041385][ T8082] ? __rcu_read_unlock+0xa1/0x110 [ 270.041410][ T8082] warn_alloc+0x27c/0x410 [ 270.041438][ T8082] ? __pfx_warn_alloc+0x10/0x10 [ 270.041467][ T8082] ? __do_replace+0xce/0xc60 [ 270.041497][ T8082] ? __get_vm_area_node+0x1c8/0x2d0 [ 270.041526][ T8082] ? __get_vm_area_node+0x25c/0x2d0 [ 270.041565][ T8082] __vmalloc_node_range_noprof+0x634/0x1390 [ 270.041585][ T8082] ? stack_depot_save_flags+0x44/0x940 [ 270.041641][ T8082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.041682][ T8082] ? __do_replace+0xce/0xc60 [ 270.041712][ T8082] vzalloc_noprof+0x79/0x90 [ 270.041731][ T8082] ? __do_replace+0xce/0xc60 [ 270.041761][ T8082] __do_replace+0xce/0xc60 [ 270.041796][ T8082] ? __pfx_translate_table+0x10/0x10 [ 270.041834][ T8082] ? __pfx___do_replace+0x10/0x10 [ 270.041879][ T8082] ? copy_from_sockptr_offset+0x60/0xb0 [ 270.041915][ T8082] do_arpt_set_ctl+0x10dd/0x1650 [ 270.041955][ T8082] ? __mutex_trylock_common+0x184/0x2e0 [ 270.041982][ T8082] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 270.042018][ T8082] ? __pfx___mutex_trylock_common+0x10/0x10 [ 270.042075][ T8082] ? __mutex_unlock_slowpath+0x229/0x800 [ 270.042113][ T8082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.042137][ T8082] ? aa_sk_perm+0x96f/0xac0 [ 270.042174][ T8082] ? __pfx_aa_sk_perm+0x10/0x10 [ 270.042205][ T8082] nf_setsockopt+0x295/0x2c0 [ 270.042243][ T8082] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 270.042272][ T8082] do_sock_setsockopt+0x3b1/0x710 [ 270.042301][ T8082] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 270.042320][ T8082] ? __fget_files+0x2a/0x420 [ 270.042344][ T8082] ? __fget_files+0x39d/0x420 [ 270.042360][ T8082] ? __fget_files+0x2a/0x420 [ 270.042390][ T8082] __x64_sys_setsockopt+0x1ee/0x280 [ 270.042419][ T8082] do_syscall_64+0xf3/0x230 [ 270.042445][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 270.042471][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.042491][ T8082] RIP: 0033:0x7f539f38d169 [ 270.042509][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.042525][ T8082] RSP: 002b:00007f539d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 270.042547][ T8082] RAX: ffffffffffffffda RBX: 00007f539f5a6080 RCX: 00007f539f38d169 [ 270.042562][ T8082] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 270.042573][ T8082] RBP: 00007f539f40e990 R08: 0000000000000068 R09: 0000000000000000 [ 270.042586][ T8082] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 270.042598][ T8082] R13: 0000000000000000 R14: 00007f539f5a6080 R15: 00007fffb912a5c8 [ 270.042632][ T8082] [ 270.042751][ T8082] Mem-Info: [ 270.374781][ T8082] active_anon:4890 inactive_anon:0 isolated_anon:0 [ 270.374781][ T8082] active_file:1348 inactive_file:38342 isolated_file:0 [ 270.374781][ T8082] unevictable:768 dirty:83 writeback:0 [ 270.374781][ T8082] slab_reclaimable:9984 slab_unreclaimable:102168 [ 270.374781][ T8082] mapped:28552 shmem:1409 pagetables:824 [ 270.374781][ T8082] sec_pagetables:0 bounce:0 [ 270.374781][ T8082] kernel_misc_reclaimable:0 [ 270.374781][ T8082] free:1329614 free_pcp:1606 free_cma:0 [ 270.456608][ T8082] Node 0 active_anon:19460kB inactive_anon:0kB active_file:5392kB inactive_file:153296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114208kB dirty:328kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11048kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 270.493289][ T8082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 270.557291][ T8082] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.597586][ T8082] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 270.606742][ T8082] Node 0 DMA32 free:1402556kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19452kB inactive_anon:0kB active_file:5392kB inactive_file:153204kB unevictable:1536kB writepending:324kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:4736kB local_pcp:4052kB free_cma:0kB [ 270.651230][ T8082] lowmem_reserve[]: 0 0 0 0 0 [ 270.664619][ T8082] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 270.728936][ T8082] lowmem_reserve[]: 0 0 0 0 0 [ 270.761506][ T8082] Node 1 Normal free:3903288kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.890229][ T8082] lowmem_reserve[]: 0 0 0 0 0 [ 270.895280][ T8082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.934654][ T8082] Node 0 DMA32: 116*4kB (UME) 146*8kB (UME) 105*16kB (UME) 47*32kB (UME) 39*64kB (UME) 28*128kB (UM) 22*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 4*2048kB (UME) 335*4096kB (M) = 1406096kB [ 271.027109][ T8082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 271.095719][ T8082] Node 1 Normal: 246*4kB (UME) 48*8kB (UME) 40*16kB (UME) 223*32kB (UME) 106*64kB (UME) 36*128kB (UME) 17*256kB (UME) 15*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 942*4096kB (M) = 3903288kB [ 271.126537][ T8082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.136482][ T8082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.157630][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'. [ 271.178178][ T8123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'. [ 271.210456][ T8082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.252306][ T8082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.277286][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 271.307001][ T8082] 41102 total pagecache pages [ 271.320507][ T8082] 0 pages in swap cache [ 271.324862][ T8082] Free swap = 124996kB [ 271.357493][ T8082] Total swap = 124996kB [ 271.372313][ T8082] 2097051 pages RAM [ 271.376339][ T8082] 0 pages HighMem/MovableOnly [ 271.386931][ T8082] 428585 pages reserved [ 271.393382][ T8082] 0 pages cma reserved [ 271.881953][ T8142] netlink: 'syz.2.728': attribute type 58 has an invalid length. [ 271.889800][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'. [ 272.000455][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 272.181767][ T8155] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 272.205992][ T8155] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.733'. [ 272.465582][ T8165] netlink: 'syz.3.737': attribute type 4 has an invalid length. [ 272.628144][ T8165] netlink: 'syz.3.737': attribute type 4 has an invalid length. [ 272.726299][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.756123][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 272.785341][ T8176] netlink: 76 bytes leftover after parsing attributes in process `syz.0.739'. [ 272.953839][ T5913] IPVS: starting estimator thread 0... [ 273.058771][ T8191] IPVS: using max 24 ests per chain, 57600 per kthread [ 273.348102][ T8211] xt_hashlimit: size too large, truncated to 1048576 [ 274.028331][ T8237] tipc: Invalid UDP bearer configuration [ 274.028395][ T8237] tipc: Enabling of bearer rejected, failed to enable media [ 274.116397][ T8229] syzkaller0: entered promiscuous mode [ 274.142074][ T8229] syzkaller0: entered allmulticast mode [ 274.167314][ T8237] __nla_validate_parse: 2 callbacks suppressed [ 274.167337][ T8237] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.759'. [ 274.281895][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 274.526825][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 274.539656][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 276.273207][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 276.907898][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 277.023948][ T8306] netlink: 'syz.3.780': attribute type 3 has an invalid length. [ 277.047512][ T8306] netlink: 766 bytes leftover after parsing attributes in process `syz.3.780'. [ 277.069018][ T8307] netlink: 'syz.3.780': attribute type 3 has an invalid length. [ 277.095333][ T8307] netlink: 766 bytes leftover after parsing attributes in process `syz.3.780'. [ 277.238713][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 277.264028][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.271321][ T8314] netlink: 'syz.0.783': attribute type 30 has an invalid length. [ 277.327870][ T8314] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.337096][ T8314] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.346282][ T8314] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.355184][ T8314] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.357126][ T8321] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 277.384084][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 277.507465][ T8326] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.585744][ T8329] vlan0: entered promiscuous mode [ 277.604048][ T8329] bridge0: entered promiscuous mode [ 277.618749][ T8329] vlan0: entered allmulticast mode [ 277.626003][ T8329] bridge0: entered allmulticast mode [ 278.085910][ T8349] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 278.137990][ T8349] netlink: 'syz.0.792': attribute type 2 has an invalid length. [ 279.190024][ T8391] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.390824][ T8402] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 279.572473][ T8411] __nla_validate_parse: 4 callbacks suppressed [ 279.572496][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 280.084458][ T8439] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 280.132564][ T8439] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.334408][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 280.347980][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 280.365773][ T8451] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 280.617273][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 280.837412][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 281.012415][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 281.217183][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'. [ 281.244710][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'. [ 281.304939][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.838'. [ 281.358873][ T8503] netlink: 'syz.2.841': attribute type 64 has an invalid length. [ 281.387534][ T8503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.841'. [ 282.975684][ T8571] xt_ecn: cannot match TCP bits for non-tcp packets [ 284.242087][ T8618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 284.901903][ T8653] __nla_validate_parse: 9 callbacks suppressed [ 284.901926][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 285.094544][ T8664] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 285.106638][ T8664] macsec1: entered allmulticast mode [ 285.113851][ T8664] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 285.131230][ T8664] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 285.150397][ T8664] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 285.247688][ T8667] vlan1: entered allmulticast mode [ 285.260318][ T8667] bond0: entered allmulticast mode [ 285.271082][ T8667] bond_slave_0: entered allmulticast mode [ 285.291443][ T8667] bond_slave_1: entered allmulticast mode [ 285.316054][ T8667] bridge0: port 3(vlan1) entered blocking state [ 285.338424][ T8667] bridge0: port 3(vlan1) entered disabled state [ 285.363654][ T8667] vlan1: entered promiscuous mode [ 285.368880][ T8667] bond0: entered promiscuous mode [ 285.393261][ T8667] bond_slave_0: entered promiscuous mode [ 285.415345][ T8667] bond_slave_1: entered promiscuous mode [ 285.422848][ T8667] bridge0: port 3(vlan1) entered blocking state [ 285.429471][ T8667] bridge0: port 3(vlan1) entered forwarding state [ 285.666341][ T8682] bridge0: port 3(vlan1) entered disabled state [ 285.695983][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.706193][ T8682] bridge0: port 3(vlan1) entered blocking state [ 285.712845][ T8682] bridge0: port 3(vlan1) entered forwarding state [ 285.743972][ T8682] team0: Port device bond0 added [ 286.495535][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.506721][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.518828][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a89c00: rx timeout, send abort [ 286.529522][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.539104][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.548575][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.588299][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 286.599840][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 286.609360][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 286.706680][ T8750] raw_sendmsg: syz.3.924 forgot to set AF_INET. Fix it! [ 287.018612][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a88c00: rx timeout, send abort [ 287.029075][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a89c00: abort rx timeout. Force session deactivation [ 287.234136][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 287.242035][ T8772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.932'. [ 287.288496][ T8774] netlink: 'syz.0.934': attribute type 26 has an invalid length. [ 287.527051][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a88c00: abort rx timeout. Force session deactivation [ 287.780897][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.791812][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.799241][ T8719] bridge_slave_0: entered allmulticast mode [ 287.808310][ T8719] bridge_slave_0: entered promiscuous mode [ 287.819028][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.827329][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.837166][ T8719] bridge_slave_1: entered allmulticast mode [ 287.855997][ T8719] bridge_slave_1: entered promiscuous mode [ 287.961733][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 287.969451][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.993010][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.119335][ T8719] team0: Port device team_slave_0 added [ 288.137795][ T8719] team0: Port device team_slave_1 added [ 288.266172][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.278416][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.313601][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.329394][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.350485][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.385196][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.584273][ T5867] Bluetooth: hci2: command tx timeout [ 288.616103][ T8719] hsr_slave_0: entered promiscuous mode [ 288.667972][ T8719] hsr_slave_1: entered promiscuous mode [ 289.134124][ T8719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.269252][ T8719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.342261][ T8837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.949'. [ 289.453602][ T8719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.547072][ T8840] netlink: 'syz.1.951': attribute type 4 has an invalid length. [ 289.575057][ T8719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.647209][ T8842] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 289.761407][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.770257][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.782894][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.795602][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.809708][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.831529][ T8847] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 289.839261][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 289.906435][ T8719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.931766][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.953'. [ 289.956043][ T8719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.980893][ T8719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.006430][ T8719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.308472][ T8866] Bluetooth: MGMT ver 1.23 [ 290.394802][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.554354][ T8875] netlink: 'syz.0.964': attribute type 7 has an invalid length. [ 290.556285][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.589321][ T8881] netlink: 'syz.0.964': attribute type 7 has an invalid length. [ 290.635860][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.643140][ T8739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.668313][ T5861] Bluetooth: hci2: command tx timeout [ 290.731679][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.738992][ T8739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.769629][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 291.083559][ T8907] Bluetooth: MGMT ver 1.23 [ 291.199317][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.233894][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.249466][ T8848] bridge_slave_0: entered allmulticast mode [ 291.264644][ T8848] bridge_slave_0: entered promiscuous mode [ 291.306983][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.332496][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.339919][ T8848] bridge_slave_1: entered allmulticast mode [ 291.356073][ T8848] bridge_slave_1: entered promiscuous mode [ 291.443781][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.488136][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.655480][ T8932] FAULT_INJECTION: forcing a failure. [ 291.655480][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 291.657155][ T8848] team0: Port device team_slave_0 added [ 291.668694][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.3.980 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 291.668729][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.668752][ T8932] Call Trace: [ 291.668762][ T8932] [ 291.668781][ T8932] dump_stack_lvl+0x241/0x360 [ 291.668825][ T8932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.668858][ T8932] ? __pfx__printk+0x10/0x10 [ 291.668896][ T8932] ? __pfx___might_resched+0x10/0x10 [ 291.668931][ T8932] should_fail_ex+0x424/0x570 [ 291.668962][ T8932] should_failslab+0xac/0x100 [ 291.668996][ T8932] __kmalloc_noprof+0xdf/0x4d0 [ 291.669027][ T8932] ? security_sk_alloc+0x53/0x360 [ 291.669058][ T8932] security_sk_alloc+0x53/0x360 [ 291.669087][ T8932] sk_prot_alloc+0xfa/0x210 [ 291.669116][ T8932] sk_alloc+0x3e/0x370 [ 291.669144][ T8932] inet_create+0x648/0xea0 [ 291.669171][ T8932] ? inet_create+0x94/0xea0 [ 291.669205][ T8932] __sock_create+0x4c0/0xa30 [ 291.669253][ T8932] mptcp_subflow_create_socket+0x12d/0xd10 [ 291.669298][ T8932] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 291.669337][ T8932] ? aa_label_sk_perm+0x4f4/0x6d0 [ 291.669370][ T8932] __mptcp_nmpc_sk+0x18c/0x830 [ 291.669410][ T8932] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 291.669458][ T8932] mptcp_connect+0x71/0xc30 [ 291.669481][ T8932] ? register_lock_class+0x54/0x330 [ 291.669511][ T8932] __inet_stream_connect+0x2a7/0xfb0 [ 291.669555][ T8932] ? __local_bh_enable_ip+0x168/0x200 [ 291.669577][ T8932] ? lockdep_hardirqs_on+0x9d/0x150 [ 291.669606][ T8932] ? __pfx___inet_stream_connect+0x10/0x10 [ 291.669628][ T8932] ? __local_bh_enable_ip+0x168/0x200 [ 291.669651][ T8932] ? inet_stream_connect+0x50/0xa0 [ 291.669675][ T8932] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.669712][ T8932] inet_stream_connect+0x65/0xa0 [ 291.669742][ T8932] __sys_connect+0x28c/0x2d0 [ 291.669785][ T8932] ? __fget_files+0x2a/0x420 [ 291.669805][ T8932] ? __pfx___sys_connect+0x10/0x10 [ 291.669869][ T8932] __x64_sys_connect+0x7a/0x90 [ 291.669904][ T8932] do_syscall_64+0xf3/0x230 [ 291.669933][ T8932] ? clear_bhb_loop+0x45/0xa0 [ 291.669962][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.669984][ T8932] RIP: 0033:0x7fabd9d8d169 [ 291.670004][ T8932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.670023][ T8932] RSP: 002b:00007fabdac9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 291.670050][ T8932] RAX: ffffffffffffffda RBX: 00007fabd9fa5fa0 RCX: 00007fabd9d8d169 [ 291.670066][ T8932] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 291.670087][ T8932] RBP: 00007fabdac9b090 R08: 0000000000000000 R09: 0000000000000000 [ 291.670102][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.670116][ T8932] R13: 0000000000000000 R14: 00007fabd9fa5fa0 R15: 00007ffe17995548 [ 291.670154][ T8932] [ 291.945844][ T8933] xt_CT: No such helper "pptp" [ 291.954571][ T5861] Bluetooth: hci4: command tx timeout [ 292.033609][ T8848] team0: Port device team_slave_1 added [ 292.396902][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.404419][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.433291][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.456400][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.469079][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.508112][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.629337][ T8848] hsr_slave_0: entered promiscuous mode [ 292.643616][ T8848] hsr_slave_1: entered promiscuous mode [ 292.672560][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.680369][ T8848] Cannot create hsr debugfs directory [ 292.740668][ T5861] Bluetooth: hci2: command tx timeout [ 292.765348][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.998627][ T8966] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 293.000465][ T8848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.112822][ T8848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.138303][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.989'. [ 293.142240][ T8969] netlink: 'syz.1.990': attribute type 9 has an invalid length. [ 293.204750][ T8719] veth0_vlan: entered promiscuous mode [ 293.311561][ T8848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.342293][ T8719] veth1_vlan: entered promiscuous mode [ 293.519699][ T8848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.617102][ T8989] netlink: 68 bytes leftover after parsing attributes in process `syz.1.998'. [ 293.693825][ T8719] veth0_macvtap: entered promiscuous mode [ 293.714806][ T8719] veth1_macvtap: entered promiscuous mode [ 293.762549][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.773808][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.787945][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.824647][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.830641][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 293.835116][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.855394][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.866387][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.878991][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.900241][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.911092][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.925522][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.012603][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.032367][ T5861] Bluetooth: hci4: command tx timeout [ 294.057785][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.068542][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.080056][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.090680][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.104945][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.115139][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.126199][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.136654][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.149071][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.175609][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.204315][ T8719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.239550][ T8719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.254396][ T8719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.274375][ T8719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.547546][ T8848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.599627][ T8848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.640792][ T8721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.679185][ T8721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.696140][ T8848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.715272][ T8848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.784505][ T9034] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 294.798618][ T9034] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 294.827803][ T5861] Bluetooth: hci2: command tx timeout [ 294.841457][ T8734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.854103][ T8734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.902132][ T9039] veth3: entered allmulticast mode [ 295.219728][ T9053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1015'. [ 295.265507][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.327681][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.368622][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.375874][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.399925][ T9059] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1018'. [ 295.428911][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.436251][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.964866][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 296.018807][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 296.049892][ T9069] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1021'. [ 296.100843][ T5861] Bluetooth: hci4: command tx timeout [ 296.143892][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.405583][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 296.463650][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'. [ 296.520599][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 296.542939][ T9094] tc_dump_action: action bad kind [ 296.767778][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.777479][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.786329][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.797286][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.806093][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.072371][ T8848] veth0_vlan: entered promiscuous mode [ 297.135040][ T8848] veth1_vlan: entered promiscuous mode [ 297.282078][ T8848] veth0_macvtap: entered promiscuous mode [ 297.333255][ T8848] veth1_macvtap: entered promiscuous mode [ 297.635856][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.658988][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.679083][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.689897][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.707314][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.732813][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.749714][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.760947][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.771038][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.784284][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.794480][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.805247][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.816987][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.856348][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.890494][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.910521][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.924649][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.938650][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.958588][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.968666][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.982412][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.992407][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.003212][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.014254][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.026200][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.038639][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.088414][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 298.146595][ T8848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.171653][ T8848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.190584][ T5867] Bluetooth: hci4: command tx timeout [ 298.207677][ T8848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.217044][ T8848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.703870][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.723468][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.738673][ T9105] bridge_slave_0: entered allmulticast mode [ 298.751747][ T9105] bridge_slave_0: entered promiscuous mode [ 298.787289][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.796484][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.805697][ T9105] bridge_slave_1: entered allmulticast mode [ 298.814130][ T9105] bridge_slave_1: entered promiscuous mode [ 298.901181][ T5867] Bluetooth: hci2: command tx timeout [ 298.933202][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.995778][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.078075][ T9105] team0: Port device team_slave_0 added [ 299.087895][ T8741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.099087][ T9105] team0: Port device team_slave_1 added [ 299.104852][ T8741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.261709][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.282393][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.327871][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.371618][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.378886][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.409187][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.424647][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 299.453364][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.455355][ T9176] openvswitch: netlink: Message has 8 unknown bytes. [ 299.473454][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.577335][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 299.620686][ T9105] hsr_slave_0: entered promiscuous mode [ 299.627698][ T9105] hsr_slave_1: entered promiscuous mode [ 299.643294][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.662292][ T9105] Cannot create hsr debugfs directory [ 299.770022][ T9184] 0·: renamed from hsr_slave_1 (while UP) [ 299.778214][ T9184] 0·: entered allmulticast mode [ 299.784302][ T9184] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 300.014800][ T9192] syzkaller1: entered promiscuous mode [ 300.040189][ T9192] syzkaller1: entered allmulticast mode [ 300.066433][ T9192] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 300.157829][ T9105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.322441][ T9105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.412562][ T9105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.496759][ T9105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.651174][ T9105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.671748][ T9105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.683692][ T9105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 300.694614][ T9105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 300.907403][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.981152][ T5867] Bluetooth: hci2: command tx timeout [ 301.021965][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.115144][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.122413][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.158599][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.165880][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.446184][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.464156][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.473606][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.485800][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.496046][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.499401][ T9215] IPVS: ip_vs_add_dest(): server weight less than zero [ 301.645572][ T9221] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 301.691242][ T9221] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 301.730726][ T9222] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 301.738537][ T9222] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 301.895781][ T9233] __nla_validate_parse: 2 callbacks suppressed [ 301.895802][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 301.964093][ T9213] chnl_net:caif_netlink_parms(): no params data found [ 302.094305][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.124709][ T9244] rdma_op ffff88807c7851f0 conn xmit_rdma 0000000000000000 [ 302.292205][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.299450][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.322695][ T9213] bridge_slave_0: entered allmulticast mode [ 302.331269][ T9213] bridge_slave_0: entered promiscuous mode [ 302.348145][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.355645][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.363132][ T9213] bridge_slave_1: entered allmulticast mode [ 302.371572][ T9213] bridge_slave_1: entered promiscuous mode [ 302.495061][ T9213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.526316][ T9213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.534200][ T9254] netlink: 'syz.0.1075': attribute type 21 has an invalid length. [ 302.556155][ T9254] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 302.605495][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 302.656957][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 302.703321][ T9213] team0: Port device team_slave_0 added [ 302.762337][ T9213] team0: Port device team_slave_1 added [ 302.844888][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 302.884260][ T9105] veth0_vlan: entered promiscuous mode [ 302.929318][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 302.964973][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.006446][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.053502][ T9274] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1080'. [ 303.074327][ T9213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.080249][ T5861] Bluetooth: hci2: command tx timeout [ 303.144889][ T9105] veth1_vlan: entered promiscuous mode [ 303.169374][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.185300][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.213556][ T9213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.222239][ T9274] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 303.369790][ T9213] hsr_slave_0: entered promiscuous mode [ 303.387705][ T9213] hsr_slave_1: entered promiscuous mode [ 303.419539][ T9213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.438980][ T9213] Cannot create hsr debugfs directory [ 303.541755][ T5861] Bluetooth: hci4: command tx timeout [ 303.655359][ T9105] veth0_macvtap: entered promiscuous mode [ 303.708950][ T9297] veth7: entered allmulticast mode [ 303.833943][ T9105] veth1_macvtap: entered promiscuous mode [ 303.951909][ T9316] FAULT_INJECTION: forcing a failure. [ 303.951909][ T9316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.965385][ T9316] CPU: 0 UID: 0 PID: 9316 Comm: syz.0.1093 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 303.965414][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.965428][ T9316] Call Trace: [ 303.965436][ T9316] [ 303.965445][ T9316] dump_stack_lvl+0x241/0x360 [ 303.965501][ T9316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.965532][ T9316] ? __pfx__printk+0x10/0x10 [ 303.965577][ T9316] should_fail_ex+0x424/0x570 [ 303.965611][ T9316] _copy_from_iter+0x43c/0x1c70 [ 303.965657][ T9316] ? __pfx__copy_from_iter+0x10/0x10 [ 303.965689][ T9316] ? __asan_memset+0x23/0x50 [ 303.965711][ T9316] ? xfrm_lookup_with_ifid+0x19e3/0x1f90 [ 303.965739][ T9316] ? skb_put+0x114/0x1f0 [ 303.965765][ T9316] raw_send_hdrinc+0x9e7/0x17d0 [ 303.965817][ T9316] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 303.965849][ T9316] raw_sendmsg+0x1982/0x2660 [ 303.965898][ T9316] ? __pfx_raw_sendmsg+0x10/0x10 [ 303.965937][ T9316] ? aa_sk_perm+0x96f/0xac0 [ 303.965982][ T9316] ? __pfx_aa_sk_perm+0x10/0x10 [ 303.966015][ T9316] ? inet_sendmsg+0x330/0x390 [ 303.966043][ T9316] __sock_sendmsg+0x1a6/0x270 [ 303.966075][ T9316] ____sys_sendmsg+0x523/0x860 [ 303.966108][ T9316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.966129][ T9316] ? __fget_files+0x2a/0x420 [ 303.966153][ T9316] ? __fget_files+0x2a/0x420 [ 303.966183][ T9316] __sys_sendmmsg+0x3a0/0x7b0 [ 303.966219][ T9316] ? __pfx___sys_sendmmsg+0x10/0x10 [ 303.966324][ T9316] ? rcu_read_lock_any_held+0xbb/0x160 [ 303.966365][ T9316] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 303.966397][ T9316] ? vfs_write+0xb29/0xd10 [ 303.966433][ T9316] ? ksys_write+0x24e/0x2d0 [ 303.966462][ T9316] ? __mutex_unlock_slowpath+0x229/0x800 [ 303.966525][ T9316] ? ksys_write+0x275/0x2d0 [ 303.966589][ T9316] __x64_sys_sendmmsg+0xa0/0xb0 [ 303.966617][ T9316] do_syscall_64+0xf3/0x230 [ 303.966645][ T9316] ? clear_bhb_loop+0x45/0xa0 [ 303.966670][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.966692][ T9316] RIP: 0033:0x7f1c0eb8d169 [ 303.966712][ T9316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.966730][ T9316] RSP: 002b:00007f1c0fa5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.966754][ T9316] RAX: ffffffffffffffda RBX: 00007f1c0eda5fa0 RCX: 00007f1c0eb8d169 [ 303.966770][ T9316] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000003 [ 303.966783][ T9316] RBP: 00007f1c0fa5f090 R08: 0000000000000000 R09: 0000000000000000 [ 303.966798][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.966810][ T9316] R13: 0000000000000000 R14: 00007f1c0eda5fa0 R15: 00007fff2e459a68 [ 303.966844][ T9316] [ 304.314396][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.325170][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.336609][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.347418][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.357879][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.369917][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.380124][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.390999][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.401021][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.411894][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.422303][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.434237][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.444278][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.454866][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.466456][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.540841][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.560208][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.572393][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.583732][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.610417][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.628882][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.642307][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.653604][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.664697][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.682358][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.698898][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.714678][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.725197][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.735977][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.761407][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.862434][ T9338] netlink: 'syz.0.1100': attribute type 21 has an invalid length. [ 304.870604][ T9338] netlink: 'syz.0.1100': attribute type 20 has an invalid length. [ 304.878487][ T9338] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.939667][ T9105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.952908][ T9105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.964094][ T9105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.973091][ T9105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.074451][ T9213] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.108826][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 305.109362][ T9344] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.145606][ T5861] Bluetooth: hci2: command tx timeout [ 305.173033][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 305.187905][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 305.242096][ T9213] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.489692][ T9213] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.596470][ T9213] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.621001][ T5861] Bluetooth: hci4: command tx timeout [ 305.746025][ T8734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.761552][ T8734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.988586][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.005090][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.039561][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1111'. [ 306.074284][ T9213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.097052][ T9213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.127042][ T9213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.153459][ T9213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.164238][ T9385] netlink: 'syz.1.1112': attribute type 13 has an invalid length. [ 306.180910][ T9385] netlink: 'syz.1.1112': attribute type 58 has an invalid length. [ 306.418573][ T9213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.472679][ T9213] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.519267][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.526647][ T8734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.566775][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.574033][ T8721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.092529][ T9213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.267175][ T9414] __nla_validate_parse: 3 callbacks suppressed [ 307.267198][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 307.522408][ T9423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1121'. [ 307.623346][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 307.720483][ T5861] Bluetooth: hci4: command tx timeout [ 307.745012][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.760855][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.786666][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.795579][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.806529][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.910032][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 307.990253][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 308.061458][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 308.073312][ T9213] veth0_vlan: entered promiscuous mode [ 308.078441][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 308.151335][ T9213] veth1_vlan: entered promiscuous mode [ 308.389180][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 308.444136][ T9460] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 308.452777][ T9213] veth0_macvtap: entered promiscuous mode [ 308.458784][ T9213] veth1_macvtap: entered promiscuous mode [ 308.486728][ T9460] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 308.538938][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 308.563445][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.590617][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.607053][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.617697][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.628430][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.641193][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.653999][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.676182][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.696048][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.747334][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.770924][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.794307][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.811408][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.822344][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.832662][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.860405][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.882322][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.022292][ T9477] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI [ 309.034610][ T9477] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 309.044293][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.1136 Not tainted 6.15.0-rc1-syzkaller-00178-gf0433eea4688 #0 PREEMPT(full) [ 309.056363][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.066456][ T9477] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3280 [ 309.072485][ T9477] Code: 80 3c 2f 00 74 08 48 89 df e8 b3 34 54 f6 48 89 5c 24 28 48 8b 1b 48 85 db 0f 84 51 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 88 34 54 f6 48 8b 44 24 18 4c 8d [ 309.092309][ T9477] RSP: 0018:ffffc90004526e80 EFLAGS: 00010206 [ 309.098433][ T9477] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff888030ca1e00 [ 309.106437][ T9477] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 309.114422][ T9477] RBP: ffffc90004527310 R08: ffffffff89fc56b2 R09: 1ffff1100524430b [ 309.122420][ T9477] R10: dffffc0000000000 R11: ffffed100524430c R12: ffff8880599b0000 [ 309.130456][ T9477] R13: dffffc0000000000 R14: ffff888029221800 R15: 1ffff110052443ac [ 309.138453][ T9477] FS: 00007f1c0fa3e6c0(0000) GS:ffff888124f94000(0000) knlGS:0000000000000000 [ 309.147424][ T9477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.154023][ T9477] CR2: 000020000000e000 CR3: 000000007d016000 CR4: 00000000003526f0 [ 309.162014][ T9477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.169998][ T9477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.177978][ T9477] Call Trace: [ 309.181275][ T9477] [ 309.184322][ T9477] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 309.189973][ T9477] ? __phys_addr+0xba/0x170 [ 309.194492][ T9477] ? __kasan_kmalloc_large+0x8c/0xa0 [ 309.199824][ T9477] ? rcu_is_watching+0x15/0xb0 [ 309.204602][ T9477] ? trace_kmalloc+0x1f/0xd0 [ 309.209202][ T9477] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 309.215816][ T9477] ? __build_skb_around+0x247/0x3d0 [ 309.221039][ T9477] ? __alloc_skb+0x298/0x480 [ 309.225643][ T9477] ? __pfx___alloc_skb+0x10/0x10 [ 309.230594][ T9477] smc_diag_dump+0x59/0xa0 [ 309.235052][ T9477] netlink_dump+0x678/0xeb0 [ 309.239589][ T9477] ? __pfx_netlink_dump+0x10/0x10 [ 309.244636][ T9477] ? __netlink_lookup+0x894/0x980 [ 309.249696][ T9477] ? netlink_lookup+0x31/0x200 [ 309.254486][ T9477] __netlink_dump_start+0x5a2/0x790 [ 309.259709][ T9477] smc_diag_handler_dump+0x1ba/0x260 [ 309.265017][ T9477] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 309.270835][ T9477] ? __pfx_smc_diag_dump+0x10/0x10 [ 309.275961][ T9477] ? sock_diag_lock_handler+0x19/0x280 [ 309.281440][ T9477] ? sock_diag_lock_handler+0x19/0x280 [ 309.286922][ T9477] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 309.292744][ T9477] sock_diag_rcv_msg+0x3dc/0x5f0 [ 309.297704][ T9477] netlink_rcv_skb+0x208/0x480 [ 309.302502][ T9477] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 309.307979][ T9477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.313305][ T9477] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.318522][ T9477] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.323850][ T9477] netlink_unicast+0x7f8/0x9a0 [ 309.328765][ T9477] ? __pfx_netlink_unicast+0x10/0x10 [ 309.334080][ T9477] ? skb_put+0x114/0x1f0 [ 309.338341][ T9477] netlink_sendmsg+0x8c3/0xcd0 [ 309.343133][ T9477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.348438][ T9477] ? aa_sock_msg_perm+0x91/0x160 [ 309.353400][ T9477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.358721][ T9477] __sock_sendmsg+0x221/0x270 [ 309.363427][ T9477] ____sys_sendmsg+0x523/0x860 [ 309.368230][ T9477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.373524][ T9477] ? __fget_files+0x2a/0x420 [ 309.378127][ T9477] ? __fget_files+0x2a/0x420 [ 309.382731][ T9477] __sys_sendmsg+0x271/0x360 [ 309.387355][ T9477] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.392590][ T9477] ? do_syscall_64+0xb6/0x230 [ 309.397297][ T9477] do_syscall_64+0xf3/0x230 [ 309.401817][ T9477] ? clear_bhb_loop+0x45/0xa0 [ 309.406506][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.412414][ T9477] RIP: 0033:0x7f1c0eb8d169 [ 309.416842][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.436511][ T9477] RSP: 002b:00007f1c0fa3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.445039][ T9477] RAX: ffffffffffffffda RBX: 00007f1c0eda6080 RCX: 00007f1c0eb8d169 [ 309.453030][ T9477] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000000f [ 309.461051][ T9477] RBP: 00007f1c0ec0e990 R08: 0000000000000000 R09: 0000000000000000 [ 309.469030][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.477009][ T9477] R13: 0000000000000000 R14: 00007f1c0eda6080 R15: 00007fff2e459a68 [ 309.485098][ T9477] [ 309.488125][ T9477] Modules linked in: [ 309.494490][ T9477] ---[ end trace 0000000000000000 ]--- [ 309.500012][ T9477] RIP: 0010:smc_diag_dump_proto+0x6d9/0x3280 [ 309.507628][ T9477] Code: 80 3c 2f 00 74 08 48 89 df e8 b3 34 54 f6 48 89 5c 24 28 48 8b 1b 48 85 db 0f 84 51 02 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 88 34 54 f6 48 8b 44 24 18 4c 8d [ 309.527450][ T9477] RSP: 0018:ffffc90004526e80 EFLAGS: 00010206 [ 309.533692][ T9477] RAX: 00000000000a2403 RBX: 0000000000512018 RCX: ffff888030ca1e00 [ 309.542039][ T9477] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 309.550055][ T9477] RBP: ffffc90004527310 R08: ffffffff89fc56b2 R09: 1ffff1100524430b [ 309.559181][ T9477] R10: dffffc0000000000 R11: ffffed100524430c R12: ffff8880599b0000 [ 309.567987][ T9477] R13: dffffc0000000000 R14: ffff888029221800 R15: 1ffff110052443ac [ 309.576065][ T9477] FS: 00007f1c0fa3e6c0(0000) GS:ffff888124f94000(0000) knlGS:0000000000000000 [ 309.585157][ T9477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.591817][ T9477] CR2: 000020000000e000 CR3: 000000007d016000 CR4: 00000000003526f0 [ 309.599830][ T9477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.607860][ T9477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.616033][ T9477] Kernel panic - not syncing: Fatal exception [ 309.622366][ T9477] Kernel Offset: disabled [ 309.626717][ T9477] Rebooting in 86400 seconds..