last executing test programs: 1m37.518666045s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x80}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="8c8dd26e9fa5ba5546e82bd11b41de96693b023e6c7c", 0x16}, {0x0}, {0x0}], 0x3}, 0x48014) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) (async) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) (async) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000700f9000008b702000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000700f9000008b702000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r11, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r11, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 1m22.438794976s ago: executing program 32 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x80}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="8c8dd26e9fa5ba5546e82bd11b41de96693b023e6c7c", 0x16}, {0x0}, {0x0}], 0x3}, 0x48014) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) (async) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) (async) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000700f9000008b702000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000700f9000008b702000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r11, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r11, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 1m12.467040943s ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000003000000003800003f00000011000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f58c3fe88b9db475ca457919eb22bdb6eb58479341e554a9397b07000000dbecf952bceafa6b4e8c8b85c3a33c24e565bd141685c8f3c29f578786349399043ec9ad25b6ac110590817eaa7326f743ae1a4ebd7153d3418973a254e66ea85f8ced89"], 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000700)) socket(0x80000000000000a, 0x1, 0xfffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x8, 0xa, 0xcb, r5}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x84}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x180}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x8044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b5250441f9a72fff5ea6033e3a99bbf174ee723e4e31df213f3ef95", 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x20050800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m11.906951659s ago: executing program 3 (id=245): syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20040) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xffffffff}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x9, 0xf989, "43ecdca921"}, @generic={0x2, 0xd, "a6e77f98ea5ecbfd3fa9b3"}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190a010200000000000000000000fffe0900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 58.760747227s ago: executing program 3 (id=245): syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20040) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xffffffff}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x9, 0xf989, "43ecdca921"}, @generic={0x2, 0xd, "a6e77f98ea5ecbfd3fa9b3"}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190a010200000000000000000000fffe0900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 43.524620002s ago: executing program 3 (id=245): syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20040) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xffffffff}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x9, 0xf989, "43ecdca921"}, @generic={0x2, 0xd, "a6e77f98ea5ecbfd3fa9b3"}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190a010200000000000000000000fffe0900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 33.704172111s ago: executing program 0 (id=482): sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x98, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc800}, 0x40) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282100f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$unix(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140408c1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="768839b9", 0x4}], 0x1, 0x0, 0x0, 0x4000081}}], 0x57, 0x40) 33.500714725s ago: executing program 0 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000300)=""/243, 0xf3}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) r7 = socket(0xf, 0x6, 0xc9dc) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x1}, 0x4001) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3f8, 0x800, 0x70bd2a, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r11 = socket(0x18, 0x6, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xffff}}]}}]}, 0x48}}, 0x0) 32.034183608s ago: executing program 5 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002480)=@can_delroute={0x44, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0xd, {{{}, 0x0, 0x0, 0x0, 0x0, "dc6a6bd5fe03d26c"}}}, @CGW_MOD_OR={0x7178e4f82e21f3f3, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "0ffca929cf7e5abe"}}}]}, 0x44}}, 0x0) 31.547431169s ago: executing program 5 (id=491): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x3a56d1d73074455) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000030ff090000001900eeffffff0100000008000200c6bd4fd61b9fd03335adbcee0f6d70b810cc4e9e192fef47af13b26f94a659d4d318babd7a", @ANYRES32, @ANYBLOB="86f9448939576e49f358657dab335606598215b65ae7d12d0e746b9068ed2ca4d508be1f0caf3e48ffdb7919e49a464a30af83c6c2f5166e987898cd4789c013c63946cdc37fa4fd3ecfcee91f7eadf7a501a084ca7939151ad5eda287488494f64065e55af159881155a491791e9757964d6ac7c70849326a2d5417e7cfeffd7afc059771ffd432bf00"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f0000001080)) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) socket$inet(0x2, 0xa, 0x0) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r10 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000240)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) r13 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r13, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) sendmmsg(r0, &(0x7f0000001380), 0x0, 0x4004094) 31.520603613s ago: executing program 0 (id=492): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000180)="e0eec642348666939f7defa9fea63ab4baa6a5082e1cd14a7f618304baa009eec3ab94f2c059c636a7e30616b3b7fa38c46e4a549eed4f96ae3f44c71b330deff5513d125f2554ea5bb2414b56631b7532e8e61e81a3d72fb6879e1a2b57bb485038b0f2bd9cb3f72c4bf9349dd4b4ae10051f91ebaf0bf48c1ec95336ce030699cdf2476dce6c8335192e6c4f02ba2f0fc8d699c463c1df770c1c8ce197d548f1f66b35e8994cbaaa9f713adf95d1cef50b6d4555c06d6da75e5ac587650c704c643436bd3a20649333db96bf88428d7d5104f95250b95f28") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000020850000002d000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xff, @empty, 0x4}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfc}]}, 0x3c}}, 0x40004) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0xa, 0x4e21, 0x4, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0xc8}, 0x24008000) 30.994002661s ago: executing program 0 (id=496): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) writev(r3, &(0x7f0000002840)=[{&(0x7f0000000440)="30bca90dfbbde0e8fe0a47a40a3c77e052f2a38ae7c19642a2057fc39448936b07fd71041d20e23a6472f17d949da0aa2cecbe49a8da6ebeaea8728b6735dc25a6b40b00f6", 0x45}], 0x1000000000000213) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "634a274e559af603", "211467d513c84265f6c4c963a6a2efb4fe7be352ebf6dcf154daedf47f12262d", "ac8335aa", "3f591eb161c74566"}, 0x38) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x44}}], 0x101d0, 0x0) 30.409827043s ago: executing program 5 (id=499): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000140)={0x2, 0x1ea, @broadcast}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000380)="f9aa59484634648285dad7cd62e8cd8c167b98e26ba6f2f56777be8616099cb31b33bc2a85acf7b65d53f8cdccfc0e4e2bb8dba8a90046b6c49260108f92c9054969539cf0aa05b7daccdce94d9c27c7eff8da17a640895bc084a34a39fb70a6c33c82bedb723578c953561aa0c8f49532e3b37772e4557292df633354e5d4c781c7abba5477ea12cfff", 0x8a}, {&(0x7f0000000440)="8a62d7e80d73b3b8c7b4225e4fc495325b0fb42622782d0eb20038641d9daa8dcbb4d55921c40ab8ed485fd40a0bcd7b5823704a91b3bdd1285edfcaa0c8a15cf1c2c5149e2256debe4b1d4190abb1113e0511aca5408a8118ae364f3fa5fc41e5e1c979a05b583d88999d2bb656f2a7599d84a0d7b6ad90ea141bae0e7144d7954a9b3d9b299f0b06a9f7f9b4ad0b65aed9b8", 0x93}, {&(0x7f0000000180)}, {&(0x7f0000000540)="a53410f16b720e3e6550022032c564969fe3472f9d66cf5f31527f5784b8c73520fbd572ad0546868343580a2ad56d25bd00e6c5d0965ff0ec5dba073c4eb0b6221e553ceab2b4645fa1e5a53dc8e6d1c87ed91647e4f5a27b2e3a3a73029999a081a785ed7776a290fbdfd513abe4779356f5c9afb8fb7d423a05b521bf1545481a2bd1d64088b7aad49f3d992d8f1f1398d69afe5134d8987bb614ef87c53c901c86ce6f5bc117", 0xa8}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f00000002c0)="698b616b1bae23fce901c44095def974a82644955a062c3174121e758ae5dccdab3e143b37443335f7f2e03381da5e1cd923c060ed2b6744bb6be8ee153b2499d1d91b7564e9da7d7ff59851877541b860a656b154e206653e794240555aca", 0x5f}, {&(0x7f0000000740)="2ee2bcd36efd4c5c3cf524a673d1ba72fa9854fd7c5a856f32b3801b25c5d233d7afbcecf77294f3d72a769bb4bdb875f18c8ededb1f7f974c1d8c644e1817515e77b4caa0f688c9f8e158e552b134b0bb509ad7bd7bee84d13f22a11b990768345814c1cf567037b37312566ffe6cceaa5323da25d8c10cdc038c82ffe48f08df2912e91534f36813ec4180ff396f2f7d7e22bdf6468981d0739b9a43134eeae146694270f43310a9429658a705d26c25fb0c9d55a9ea617866d190becf88530abb29b1fbf5e02c0e9bb7c5eb9103000000000000000b377a97de55799cb5", 0xdf}, {&(0x7f0000000840)="73860101420da0c18791f13888589f57068170a8eddbb6afca3472ada77e164a0e866bb0f029a25033169255d950624fb7a107cbab24ce612e1d0769836860ed9b7a1c3db5a9d0977ef829f5275a4f62b52f611f8f8e57db219d479e43416cf4c85454b205ce2ae2d36b1fd7683bc115a4216a4b203fe98da7845f3a2ab355827db5b72f6cd02523eb4718f5342f8b8423cf00cf854111ca88f858385e0e476e8034e8784d494fa4140970b1370013b2d055c4d3c726e64069435952231724202aac5309098b3e218b166fe6e3105fbfcd8f1541d847f1ad323d40bde8f06f", 0xdf}], 0x9, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x20040c80) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e20, 0x0, @mcast2, 0x40000}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200", 0x55}], 0x1) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {}, {0xc}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {}, {0xc}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r7, 0x8b1a, &(0x7f0000000040)) sendmmsg$unix(r6, 0x0, 0x0, 0x4000) socket$isdn(0x22, 0x3, 0x2) (async) socket$isdn(0x22, 0x3, 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x11, 0x20, 0x0, 0xffffff49) r8 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x3) connect$unix(r6, &(0x7f0000000240)=@file={0x0, './file1\x00'}, 0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 30.00258777s ago: executing program 0 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.freeze\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x58, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004000}, 0x4000002) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r6, @ANYRES32], 0x1c}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r8, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) 29.804161389s ago: executing program 5 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x8800}, 0x40048c0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x33, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0800450000250000000000119078000000000300ffff00004e20001190785fb31c3f9a610900dd000000000000"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x680000b, 0x30, 0xffffffffffffffff, 0x540e2000) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000399d00000000000000000100b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bf000007010001f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r10 = openat$cgroup_int(r9, &(0x7f0000001240)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRESDEC=r10, @ANYBLOB='f'], 0x6a) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2d, 0x8, 0xb, 0x1bc8606b, 0x2c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x0, 0xffffff7a, 0xad}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x90}, 0x4004000) 29.69033623s ago: executing program 3 (id=245): syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20040) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xffffffff}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x9, 0xf989, "43ecdca921"}, @generic={0x2, 0xd, "a6e77f98ea5ecbfd3fa9b3"}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190a010200000000000000000000fffe0900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 29.684009282s ago: executing program 5 (id=504): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x7, &(0x7f0000001580)=[@ip_pktinfo={{0xffffffffffffff10, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101}}}], 0x20}, 0x8044) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc7, &(0x7f0000000000), &(0x7f0000000240)=0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000c40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045000014000000000067907800000000ffffffff040090780000000045000000000000000000000000000000ffffffff"], 0x0) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001640)="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", 0x5c1}], 0x1}, 0x800) 28.760304546s ago: executing program 0 (id=505): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20008000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20}, 0x20}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x40800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5001000016000100000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f000050001100fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000005001b0000000000"], 0x150}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYRES32], 0x398}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 28.542428662s ago: executing program 33 (id=505): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20008000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20}, 0x20}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x40800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5001000016000100000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f000050001100fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000005001b0000000000"], 0x150}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYRES32], 0x398}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 28.535052001s ago: executing program 5 (id=507): syz_emit_ethernet(0x4ba, &(0x7f00000004c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "f5cb6f", 0x484, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x29, 0xa, 0x4, 0x5, 0x1, 0x68, 0x6eb, [@remote, @mcast1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @dstopts={0x1d, 0x1d, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x67, 0x2, [0x2, 0x8, 0x3, 0x9, 0x1, 0x1, 0x7fffffffffffffff, 0x3, 0x80, 0x5]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x30, {0x0, 0xa, 0x96, 0x5, [0x7, 0x5, 0x4, 0xffffffffffffffc8, 0x6]}}, @generic={0x4, 0x33, "48cc3231ca3564a4f91827dedc8b9d3371a101ac278a01784ef08d7dc5000aa2a51472858fa691d0183136a98f404e7d412236"}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xff}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x11, 0x6, 0x2, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote]}, @routing={0x29, 0x4, 0x1, 0x2, 0x0, [@local, @remote]}, @dstopts={0x3a, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}]}, @routing={0x89, 0xe, 0x0, 0x1, 0x0, [@remote, @private1, @empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private0]}, @dstopts={0x5e, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0xc, 0x1d, '\x00', [@generic={0x10, 0x89, "e0a4bb280ea3b073d0186290918e518d51a00c1a53d480553a0f5f2c5f41979868872e450c4d998f362d84495dec14ce8aa25ddbc4a8e962bc7f5ba227ef03ebb1bc60aa83f823d7ee54e13d93108a3585104dd141d1ed2081bfe8fef5bb1d1c8d915d8f8e9da2f790cc2b9c0ab3cf646dd6f9fca1dcc4adad9e262ad26d374114b7da5b4f43c96e90"}, @enc_lim, @generic={0x0, 0x32, "2df97c2bda00b5ee06ada8d5e4b44269374d42ea0a5148c1b067854a8b3f37ac196a379a9f2e727fedcd823cabef989d7b21"}, @ra={0x5, 0x2, 0xc0}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}]}], @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1ff, 0x4, 0x4e20, 0x4e20, 0x2, 0x3, 0x0, 0x0, 0x1}, [{0xe, 0x6, 0x8001, 0x2, 0x5, 0xabd, 0x5, 0x7}, {0x71ad, 0x991a, 0xfffffff7, 0x1, 0xfffffff5, 0x0, 0x7, 0x2}, {0x9, 0x6, 0x18800000, 0x7bc, 0x0, 0xfffffffc, 0x4, 0x9}, {0x2, 0x7, 0xc, 0x3, 0x7f, 0x101, 0x5, 0xf2}, {0x94, 0x1, 0xb, 0x6, 0x10, 0x8, 0x5}, {0x401, 0x2020, 0x1000, 0x6, 0x2, 0x3, 0x1, 0x6}, {0x1000, 0x3, 0x7, 0x0, 0x1000, 0x8, 0x4, 0x5}, {0x0, 0x4, 0xc4, 0x7, 0x2, 0x6, 0x5, 0x6}, {0x2, 0xd, 0x1000, 0x81, 0x3, 0x401, 0x8, 0x5d}]}}}}}}, 0x0) 28.531513596s ago: executing program 34 (id=507): syz_emit_ethernet(0x4ba, &(0x7f00000004c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "f5cb6f", 0x484, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x29, 0xa, 0x4, 0x5, 0x1, 0x68, 0x6eb, [@remote, @mcast1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @dstopts={0x1d, 0x1d, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x67, 0x2, [0x2, 0x8, 0x3, 0x9, 0x1, 0x1, 0x7fffffffffffffff, 0x3, 0x80, 0x5]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x30, {0x0, 0xa, 0x96, 0x5, [0x7, 0x5, 0x4, 0xffffffffffffffc8, 0x6]}}, @generic={0x4, 0x33, "48cc3231ca3564a4f91827dedc8b9d3371a101ac278a01784ef08d7dc5000aa2a51472858fa691d0183136a98f404e7d412236"}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xff}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x11, 0x6, 0x2, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote]}, @routing={0x29, 0x4, 0x1, 0x2, 0x0, [@local, @remote]}, @dstopts={0x3a, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}]}, @routing={0x89, 0xe, 0x0, 0x1, 0x0, [@remote, @private1, @empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private0]}, @dstopts={0x5e, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0xc, 0x1d, '\x00', [@generic={0x10, 0x89, "e0a4bb280ea3b073d0186290918e518d51a00c1a53d480553a0f5f2c5f41979868872e450c4d998f362d84495dec14ce8aa25ddbc4a8e962bc7f5ba227ef03ebb1bc60aa83f823d7ee54e13d93108a3585104dd141d1ed2081bfe8fef5bb1d1c8d915d8f8e9da2f790cc2b9c0ab3cf646dd6f9fca1dcc4adad9e262ad26d374114b7da5b4f43c96e90"}, @enc_lim, @generic={0x0, 0x32, "2df97c2bda00b5ee06ada8d5e4b44269374d42ea0a5148c1b067854a8b3f37ac196a379a9f2e727fedcd823cabef989d7b21"}, @ra={0x5, 0x2, 0xc0}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}]}], @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1ff, 0x4, 0x4e20, 0x4e20, 0x2, 0x3, 0x0, 0x0, 0x1}, [{0xe, 0x6, 0x8001, 0x2, 0x5, 0xabd, 0x5, 0x7}, {0x71ad, 0x991a, 0xfffffff7, 0x1, 0xfffffff5, 0x0, 0x7, 0x2}, {0x9, 0x6, 0x18800000, 0x7bc, 0x0, 0xfffffffc, 0x4, 0x9}, {0x2, 0x7, 0xc, 0x3, 0x7f, 0x101, 0x5, 0xf2}, {0x94, 0x1, 0xb, 0x6, 0x10, 0x8, 0x5}, {0x401, 0x2020, 0x1000, 0x6, 0x2, 0x3, 0x1, 0x6}, {0x1000, 0x3, 0x7, 0x0, 0x1000, 0x8, 0x4, 0x5}, {0x0, 0x4, 0xc4, 0x7, 0x2, 0x6, 0x5, 0x6}, {0x2, 0xd, 0x1000, 0x81, 0x3, 0x401, 0x8, 0x5d}]}}}}}}, 0x0) 10.355285773s ago: executing program 3 (id=245): syz_emit_ethernet(0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20040) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xffffffff}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x9, 0xf989, "43ecdca921"}, @generic={0x2, 0xd, "a6e77f98ea5ecbfd3fa9b3"}]}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190a010200000000000000000000fffe0900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 4.163329674s ago: executing program 7 (id=601): r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0xd8}}, 0x800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001800000229bd7000fddbdf251c200052f804c801000f000005001a00070000002328780560591f5d85cc8dee6c984b8ba398710725ae431da2db0105000000000000000a3a43b47fcef4fcbae2826c0f311e97bee9dac8b4622aa3eeaf7e22617e267de27bfd77f0b9071ca2992e1a70654fbb7cc661a61108d2867a2b0a5d3a073498247638cfb909a758fb1508fb2aa3ea9dc4c402c9cdf8d933b5a8d076426903b3b17cb2c3322f4f5594cba0917469302e87996cfb62d885ae54bb6c"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x44010) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5c1, 0x2, 0x1, 0x8, 0x9, 0x8}, &(0x7f0000000040)=0x20) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e21, 0xd295, @private0, 0x8}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000e00000a54000000060a090400000000070000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000000f140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x44) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000006c0)={r5, r3, 0xb, 0xe2, &(0x7f00000005c0)="11c5e3cad871e76a86ed3a702309fad2bf53d00ad51078152400ae13ff5436b674f13844442b1b7333e8bc8af884f7b523f26c41b95f5572691e8c6a6e0336f22d8b9578d300d17594602cc46390877daa410b1dce40723b864e5f5363ffab651ef015831f9917214e5138082b1c1b2d043f0f601f1988cd4dac5d00f5d0ddcb0ec63f12a4a83503feeaa02e62c159da9f72b8acac6fd29592c73f7ac3d53da3b04ffd8edea31263e437b1b02049a6a664eb8da19f45de00d460f7be347528e5c925a308950a9cf0680b00a300f1d1355f59a00d982e48e2d90b848af855d56d2f2a", 0x2, 0x4, 0x8001, 0xffff, 0x6, 0x1, 0x7fffffff, 'syz1\x00'}) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000540), &(0x7f0000000580)=0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000180)={0x4}) 3.449751867s ago: executing program 6 (id=605): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/93) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '\\\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008f0}, 0x10004) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 3.316256319s ago: executing program 2 (id=606): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x2a020480) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = socket(0xf, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000001100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0x4}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000fb00740000007400000009000000030000000000000c010000000800000000000011020000000900000010000000000000110100000005000000008000000000000700000000000000000600000d000000000700000001000000000000000200000002000000010000000c0000000100000001000000040000000700000000000000002e002e0061713000"], &(0x7f00000000c0)=""/76, 0x95, 0x4c, 0x0, 0x3, 0x10000, @value=r6}, 0x28) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000580)=0x400, 0x4) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000005c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000490000000e0001006e657464657673696d0000000f000200"], 0x64}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400", @ANYRES16=r9, @ANYRESDEC=r9], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) 2.980181051s ago: executing program 2 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000001000f1000000000000063000000000000009500e1383ed914b001f821f0ac96f79196050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a) sendmsg$nl_route(r0, 0x0, 0x4048044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd2d, 0x0, {0x1e}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x6679fb74bcda4679}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1f6}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) ioctl$TUNSETLINK(r5, 0x400454cd, 0x324) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="010000000000000028"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r6, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x5, 0x0, 0x20}, @ipv4=@udp={{0x9, 0x4, 0x3, 0x1b, 0x62, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp={0x44, 0x10, 0x23, 0x0, 0x6, [0x8001, 0x0, 0x4]}]}}, {0x4e20, 0x4e22, 0x3e, 0x0, @gue={{0x2, 0x1, 0x2, 0x7, 0x0, @val=0x80}, "4729c5ac91f6b098e0a4f9b061d31ca2dd62f42cac76c0cf93418d4a988751d398b4e0af225c8428ab4ac91a70bc"}}}}, 0x70) 2.913110995s ago: executing program 6 (id=610): r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001114010028bd7000000000000800010000000000080003000400000008004a000000000008004b0013d532"], 0x30}}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendto$inet6(r0, &(0x7f0000000280)="2bb2a617efec1381178168d60ec2a9", 0xf, 0x10, &(0x7f0000000440)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}, 0x1c) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2.874037085s ago: executing program 7 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x55c}, 0x18) 2.446864202s ago: executing program 7 (id=613): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2, {0x2}}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r10 = accept$alg(r8, 0x0, 0x0) read$alg(r10, &(0x7f0000000280)=""/241, 0xf1) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r2, 0x0, 0x0, 0x80000) recvmmsg(r11, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x1}}, 0x10) 2.299838021s ago: executing program 2 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) (async, rerun: 32) r3 = socket$kcm(0x23, 0x2, 0x0) (rerun: 32) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0x3ff, 0xffffffffffffffff, 0xc, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0xa, 0x6}, 0x0, 0x0, 0xf, 0x3, 0xd2c2, 0x1, 0x9, 0xffffffffffffffe0}}], 0xb0, 0x20008011}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000030400000000fcdbdf2500000400", @ANYRES32=r2, @ANYBLOB="08130000800000003000128009000100766c616e0000000020000280100004"], 0x50}, 0x1, 0x0, 0x0, 0x3040}, 0x0) (rerun: 64) 1.810445549s ago: executing program 6 (id=617): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x6}, 0x18) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xa002a008}) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x28, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x36) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB="080004"], 0x4c}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.676828523s ago: executing program 2 (id=618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x80yync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x5, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01da98711608aa78", 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x67, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}], @llc={@snap={0xaa, 0x0, "8069", "43cf12", 0x888e, "06f459c5042a2b40a5088879cb7e190eaaa18067305516a1f2762e35837da37be72e732f46e50a9f735ee0cf30bf29917fb2f3b4fad1f6ed3f298c98410168ab96d0bbc2"}}}}}}, &(0x7f0000000100)={0x0, 0x4, [0xc78, 0x729, 0x18e, 0xa77]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) 1.496315723s ago: executing program 7 (id=619): syz_extract_tcp_res(0x0, 0x9, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010000", 0x7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @local, @void, {@canfd={0xd, {{0x4}, 0x1e, 0x3, 0x0, 0x0, "4b3c78d7055f947e6574244ba4a325d27bdd16d9775a4e7608080873d74eedfa5fc20ff7a0ab9814ddab3be11565f7c4b14209b129be599be4f8cace499da255"}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @private=0xa010102}, 0xc) 1.477297242s ago: executing program 6 (id=620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0xfffffffb, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) (async) close(r5) pipe(&(0x7f0000000100)) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x3, 0x5b}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x3}}}}}, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x88a8ffad}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) (async) pipe(0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 1.240151728s ago: executing program 7 (id=621): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x220, 0x220, 0x220, 0x330, 0x220, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'netpci0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}, @IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x8054) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c80)=ANY=[], 0x590) (async) close(0x3) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) (rerun: 32) 1.080481234s ago: executing program 2 (id=622): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60122d9200283afffe880000000000000000000000000001ff02001d0000000000000000000000018900907800000000feffffff0000000000000001ff0000aafc0200"/94], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 1.050054635s ago: executing program 1 (id=623): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'dummy0\x00', 0x0}) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000000000c5b444a6d416", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050007000100000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 830.790906ms ago: executing program 2 (id=624): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000003d0007012bbd700004433000000000027c00000400000047504ce1342f0725aaf71a692a25b413da744900950b3593d5b0adf6220d36ae6899345b6f1a61eb92b41b294a3f1321452568083adccd95cebe900000524c1919010000000000ff14616d02c5e5c6baefb5e069acab58989be9adb5ed090c8072545bf276367bae96e530311b906a0a"], 0x18}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840) recvmsg$can_j1939(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x24008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getpeername$inet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r7, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) 779.381315ms ago: executing program 1 (id=625): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800}, 0x20) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x101a901, 0x2) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100100, 0x4) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYRES64=r3, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESDEC=r6, @ANYRES16, @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff7b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="add7a5fc635ad1e08eca1a25d9657a68fc587bafb5f0c81dd0d0f87f07c779bde7ccf6811ea31e873a3dd8013642a1aac499b3a450b6b3b706e6c0a7e70b020bb72bd0994ae4215f1f3eeba59b6c2b02b8d6ed", @ANYRES16=r8], 0x10) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0200fa222616755b9e3b0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0235428ec12e14c25511bcc90000000200000000000000", @ANYRESOCT=r5, @ANYRESDEC=r1, @ANYRES64=0x0], 0x10) socketpair(0x2, 0x3, 0x2, &(0x7f0000000380)) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='ext4_es_shrink_scan_exit\x00', r13}, 0x18) (async) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x0, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) 591.703902ms ago: executing program 1 (id=626): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x68}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10008004}, 0x40044) 537.269037ms ago: executing program 7 (id=627): r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001114010028bd7000000000000800010000000000080003000400000008004a000000000008004b0013d532"], 0x30}}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendto$inet6(r0, &(0x7f0000000280)="2bb2a617efec1381178168d60ec2a9", 0xf, 0x10, &(0x7f0000000440)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}, 0x1c) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 463.698478ms ago: executing program 6 (id=628): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x804) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x2, 0x3, 0x2, 0x6}, {0x5, 0xb, 0x8, 0x401}, {0x4, 0x5, 0x7, 0xfb7d}, {0x3, 0x9, 0x58, 0x9}, {0x0, 0x9, 0x5, 0x8}]}, 0x10) ppoll(&(0x7f0000000440)=[{r0, 0xebc00d067c01b353}, {r0, 0x2070}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x8000}], 0x4, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000340), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x8}, 0x8) accept4(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000240)=0x80, 0x80000) bind$can_raw(r3, &(0x7f0000000280), 0x10) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000480)="92931f6e32e1ffa94914674af600", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x4}, 0x50) 450.902061ms ago: executing program 1 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000100)="966174a6c636dec09832a75c977b0f0936cf40828501fbda0c7d7a0d2d0fa0a24863b5b7b3065614c88d5ef19239e6200c072168395b3b02bdd0081263cd84fc00cc3e9ddafad9b4d7559e332e840039f982ef6cac8e26a012387d0961d734a701190c4262a98181b8b49ec9ce82b4", 0x6f}, {&(0x7f0000000200)="532997705455676c1db7c8022499", 0xe}, {&(0x7f0000000240)="72e24424f58210bba1e9d14153c1817d2f37b1afc25686c3bb2da8fc82b633d400ff99ee581f84dbae709b372ab6a47eb2effe8f469208443292cac39ae0a62440a58ad0b6242818c370fe3f1e76f3683f19c13cd5d40d3d23e72dc7b4fae3be98420be9df58f27f4b504554844ac97a9a70126ad7c3a78ba24a2fcd1ea3aadba81fed338d74871e3adc283e45ef9edc3c457a1274132de33ec9ab2ca5072e869ce3a236d174e2734a866d5314c7a146cbe65a0f9c4d7b35b2b40429a028f7e8687a38f21258", 0xc6}, {&(0x7f0000000340)="a54ab72aad9485e922cfb041bc08b926042f2fda0f9d12db475a5edddf90c027a5d084cefb69c593303004b2ae877a44d8ad5da379242fbdec07a3b6b84b013f0527bbf08bb8ea8f0dbd0366f750aaada84623bfd25018f58ba3629cc1e1c6f6e61cfa6154b83f6fb4a5c4a642185ba116ae28a0eb3887f6ca1833c1a4e17beaa1b010c929fd21593a9d45f3c7a4a04db418d586bd17ed8fff643c75b6e9bf719b13ac2d8ebe793ecbc91ab410b5e7ef9b2c545a27ed3df423f3621924", 0xbd}, {&(0x7f0000000700)="8fbdf52063ba941b6ec071b2dca0774895a3d44324099c810d480b52b146c8beb93f3503765a87565247cec1189cc4dd065964eea4f5d6a7b29054309d9eff56a78ecb782a19f07d61", 0x49}, {&(0x7f0000001840)="83f0f3f7092b2da69d0d7528a8abcf79b8f70d503a4ef9d19a65d5a3a3fe025cb243ff4b28fde15387162fca135d405c14ab958c5e60c9127a666f5f7af59fbfde2aec94f0dcafee5d7e26b68d23603a9edec431bfd7b7b976bf4b04529f6d33188401ea85d6b797f2b9f35b86371dbe94bdf267ca82025347ba9cc44d648e4c77ce7cb04219f5fa216f78ec92e748808bc433edc93a9b", 0x97}, {&(0x7f0000000440)="2a62d4c7b4c0640074b328599e59240deb9f6539657dfdfbff0700000000000010", 0x21}, {&(0x7f0000001940)="bca02add9161", 0x6}], 0x8}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001b40)="aea22d13b492a3b5d3cfe265b6ea361d1a9377802eb1a035e0ce94bf3e208d261d6dd6c8075081f7b6cb2a9767e35e66ff7382ca35ff7bd457aa60c8a18ab19a1897f8c0c91461055c3d4dae651590f4eeef4c765283d08fa02cc7957f9157f525b5078f12fbb1678528b7c6", 0x6c}, {&(0x7f0000001bc0)="b980b9ba419ba3a38b221728fca679ed052eae3cd17cbcac7c416548ccb4ef34fb8eff8b82d849250aca6012d42ced78905942f8a798943c90973e7b4c8000a8b9adae2107b4508c234348ba857d900d9398c43fc4f4ca3f638e373e9bc4e92fcdf8b599dd519c8aee57a0471fe4def783ae38ed5542cc35a3403a04fc29fd84e1dd514bdf220bcffcb61bae0ccee9f711f39997b36194e90b19c03bce9e99a0be1c9d00ac3a6b20c7150e6dc12ae8a90dd5d30a37cc330440a313e619c128a563ddb4608fbc62d6b9157460e789cfade16853bb3d", 0xd5}, {&(0x7f0000001d40)="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", 0x179}], 0x3}}], 0x2, 0x80c0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x81, 0x96b6, 0x400, 0x5, 0x8, r6}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000280)=0x7fff, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, r6}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x34, 0x12, 0x1, 0x0, 0x8000, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x34}], 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044005}, 0x20048000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="c67f0d80b0", 0x5}], 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0x2, {0xa, 0x4e21, 0x1, @empty, 0x7fff}}}, 0x32) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x10, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x4048b, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x1000, 0x10020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4808) 250.024762ms ago: executing program 1 (id=630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000004851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a000004000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x8e, &(0x7f0000002240)=""/142, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000a0000000000000604000000222e0030415f61612e5f00"], 0x0, 0x2f, 0x0, 0x1, 0xfffffbff, 0x0, @void, @value}, 0x28) 159.481886ms ago: executing program 6 (id=631): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000390400"/20, @ANYBLOB="8308000000000000380012800b000100697036746e6c0000280002800500090004000000140003"], 0x58}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4d, 0x0, @opaque="f2eee374dc40c8c74aded76eadb89719eacf6745b300c9b9d418299ffff94a2067a1d75f0e1d15ad2153ffdcf3466cee885446eb60f86db32de1c92c01d33a732592bb1f97"}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) unshare(0x68060200) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000340)={'raw\x00', 0x2, [{}, {}]}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000080)={{0x2f, @remote, 0x0, 0x3, 'wrr\x00'}, {@multicast1, 0x0, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000080)={0x24, @long}, 0xe) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='ipvlan1\x00', 0x10) connect$phonet_pipe(r9, &(0x7f0000000200), 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x20, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x5, 0x8, 0x10, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=632): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@exit, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000004c0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x0, 0x5, 0xe, 0x7}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='module_free\x00', r7}, 0x18) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) kernel console output (not intermixed with test programs): d promiscuous mode [ 84.795129][ T5834] veth0_macvtap: entered promiscuous mode [ 84.821024][ T5834] veth1_macvtap: entered promiscuous mode [ 84.841163][ T5832] veth0_macvtap: entered promiscuous mode [ 84.867198][ T5831] veth0_vlan: entered promiscuous mode [ 84.876826][ T5832] veth1_macvtap: entered promiscuous mode [ 84.890232][ T5839] veth1_vlan: entered promiscuous mode [ 84.931167][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.931504][ T5831] veth1_vlan: entered promiscuous mode [ 84.940621][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.964001][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.977457][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.990203][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.999511][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.010613][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.020762][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.031531][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.044215][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.079851][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.082395][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.098879][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.107458][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.110669][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.127023][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.137937][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.148330][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.159139][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.170252][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.203917][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.217125][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.227011][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.235980][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.262056][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.275284][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.295821][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.305006][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.321426][ T5831] veth0_macvtap: entered promiscuous mode [ 85.334962][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.347171][ T5839] veth0_macvtap: entered promiscuous mode [ 85.382414][ T5831] veth1_macvtap: entered promiscuous mode [ 85.406788][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.420326][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.454121][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.470509][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.481200][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.492040][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.503520][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.519977][ T5839] veth1_macvtap: entered promiscuous mode [ 85.555737][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.569975][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.584738][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.603337][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.628893][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.646410][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.659034][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.709975][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.724238][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.733926][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.743193][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.800955][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.812491][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.822927][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.834544][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.845244][ T5841] Bluetooth: hci2: command tx timeout [ 85.850753][ T5849] Bluetooth: hci0: command tx timeout [ 85.856388][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.867240][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.877653][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.888554][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.899787][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.917870][ T5849] Bluetooth: hci3: command tx timeout [ 85.918055][ T5850] Bluetooth: hci1: command tx timeout [ 85.923438][ T5841] Bluetooth: hci4: command tx timeout [ 85.944813][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.960360][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.968853][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.971114][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.989551][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.000635][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.010557][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.021085][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.030999][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.041802][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.052943][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.067619][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.077928][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.086773][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.096046][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.163979][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.172555][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.210326][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.223716][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.276279][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.299326][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.313017][ T1858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.333395][ T1858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.422158][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.450846][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.466050][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.482676][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.607993][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.615891][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.766817][ T5938] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 86.909370][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 86.929439][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 86.972995][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 87.094872][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.104104][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 87.126168][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 87.145771][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 87.157245][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.416533][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 87.460452][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 87.671009][ T5969] netlink: 'syz.3.13': attribute type 11 has an invalid length. [ 87.841825][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.937437][ T5841] Bluetooth: hci2: command tx timeout [ 87.937472][ T5850] Bluetooth: hci0: command tx timeout [ 87.972880][ T5977] IPv4: Oversized IP packet from 127.202.26.0 [ 88.007395][ T5850] Bluetooth: hci1: command tx timeout [ 88.007417][ T5841] Bluetooth: hci4: command tx timeout [ 88.007454][ T5841] Bluetooth: hci3: command tx timeout [ 88.388047][ T5992] netlink: 'syz.2.19': attribute type 4 has an invalid length. [ 88.946872][ T6005] Zero length message leads to an empty skb [ 89.243119][ T6018] netlink: 'syz.1.27': attribute type 16 has an invalid length. [ 89.251489][ T6018] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 89.669654][ T6028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 89.736810][ T6028] netlink: 'syz.3.31': attribute type 4 has an invalid length. [ 89.985876][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.002986][ T6039] tipc: Enabling of bearer rejected, media not registered [ 90.561069][ T6060] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.959780][ T6069] bond0: Unable to set down delay as MII monitoring is disabled [ 91.357244][ T6082] syzkaller0: entered promiscuous mode [ 91.384049][ T6082] syzkaller0: entered allmulticast mode [ 91.960710][ T6111] __nla_validate_parse: 10 callbacks suppressed [ 91.960733][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 91.990628][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 92.015105][ T6111] netlink: 30 bytes leftover after parsing attributes in process `syz.1.53'. [ 92.031044][ T6113] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 92.036753][ T6111] nbd: socks must be embedded in a SOCK_ITEM attr [ 92.325178][ T47] cfg80211: failed to load regulatory.db [ 93.142785][ T6109] bridge_slave_0: invalid flags given to default FDB implementation [ 93.640635][ T6129] netlink: 'syz.1.60': attribute type 11 has an invalid length. [ 93.980950][ T6138] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 94.005923][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 94.397599][ T6147] ip6gretap1: entered promiscuous mode [ 94.403263][ T6147] ip6gretap1: entered allmulticast mode [ 94.572888][ T6155] netlink: 'syz.1.67': attribute type 16 has an invalid length. [ 94.584607][ T6155] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.67'. [ 94.855169][ T6160] ip6gretap1: entered promiscuous mode [ 94.897373][ T6160] ip6gretap1: entered allmulticast mode [ 95.594683][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 95.766411][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 95.846677][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 95.850252][ T6196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.874706][ T6203] netlink: 'syz.1.83': attribute type 4 has an invalid length. [ 95.891267][ T6204] netlink: 'syz.1.83': attribute type 4 has an invalid length. [ 95.990678][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 96.431570][ T6225] xt_hashlimit: size too large, truncated to 1048576 [ 96.838836][ T6246] netlink: 168 bytes leftover after parsing attributes in process `syz.0.92'. [ 97.117022][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 97.245731][ T6258] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 97.290345][ T6258] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 97.437562][ T5841] Bluetooth: hci2: command tx timeout [ 97.702920][ T6280] bridge_slave_0: left allmulticast mode [ 97.727607][ T6280] bridge_slave_0: left promiscuous mode [ 97.734128][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.778164][ T6280] bridge_slave_1: left allmulticast mode [ 97.783972][ T6280] bridge_slave_1: left promiscuous mode [ 97.799494][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.827957][ T6280] bond0: (slave bond_slave_0): Releasing backup interface [ 97.854211][ T6280] bond0: (slave bond_slave_1): Releasing backup interface [ 97.899464][ T6280] team0: Port device team_slave_0 removed [ 97.921076][ T6280] team0: Port device team_slave_1 removed [ 97.938073][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.945753][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.963433][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.973924][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.051676][ T6285] team0: Mode changed to "activebackup" [ 98.379427][ T6306] Illegal XDP return value 2602963045 on prog (id 40) dev N/A, expect packet loss! [ 98.455473][ T6316] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 98.480967][ T6317] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.108'. [ 98.515120][ T6317] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.967241][ T6371] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 100.398041][ T6378] veth5: entered promiscuous mode [ 100.602512][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'. [ 100.972072][ T6402] netlink: 'syz.1.127': attribute type 11 has an invalid length. [ 101.047644][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 101.056596][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 101.622385][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 102.451766][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 102.864905][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.878725][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.888281][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.912831][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.926312][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.934815][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.325202][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.714831][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 103.842491][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 104.156152][ T6520] netlink: 108 bytes leftover after parsing attributes in process `syz.2.162'. [ 104.236696][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.257746][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.265083][ T6472] bridge_slave_0: entered allmulticast mode [ 104.281797][ T6522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.288740][ T6472] bridge_slave_0: entered promiscuous mode [ 104.309644][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.319583][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.326891][ T6472] bridge_slave_1: entered allmulticast mode [ 104.359700][ T6472] bridge_slave_1: entered promiscuous mode [ 104.418395][ T6523] Cannot find add_set index 0 as target [ 104.439889][ T6522] netlink: 'syz.0.164': attribute type 12 has an invalid length. [ 104.456567][ T6525] delete_channel: no stack [ 104.471880][ T6522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.506524][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.537173][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.755021][ T6472] team0: Port device team_slave_0 added [ 104.790065][ T6472] team0: Port device team_slave_1 added [ 104.795989][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 104.846518][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 104.879030][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 105.010326][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.026095][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.038566][ T5849] Bluetooth: hci5: command tx timeout [ 105.071121][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.086353][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 105.113883][ T6548] dummy0: entered promiscuous mode [ 105.149401][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.156737][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.183856][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.376602][ T6472] hsr_slave_0: entered promiscuous mode [ 105.410839][ T6472] hsr_slave_1: entered promiscuous mode [ 105.426155][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.456001][ T6472] Cannot create hsr debugfs directory [ 105.676372][ T6569] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 106.030477][ T6472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.071447][ T6472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.118692][ T6582] netlink: 17 bytes leftover after parsing attributes in process `syz.1.182'. [ 106.131644][ T6472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.185138][ T6472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.500400][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.579881][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.613862][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.621062][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.689208][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.697329][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.062912][ T6616] sctp: [Deprecated]: syz.2.191 (pid 6616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.062912][ T6616] Use struct sctp_sack_info instead [ 107.118789][ T5849] Bluetooth: hci5: command tx timeout [ 107.252229][ T6620] erspan0: entered promiscuous mode [ 107.289826][ T6620] vlan2: entered promiscuous mode [ 107.322178][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.423719][ T6626] netlink: 'syz.0.195': attribute type 39 has an invalid length. [ 107.641984][ T6632] __nla_validate_parse: 1 callbacks suppressed [ 107.642009][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 107.998955][ T6647] netlink: 104 bytes leftover after parsing attributes in process `syz.0.202'. [ 108.035733][ T6472] veth0_vlan: entered promiscuous mode [ 108.087335][ T6472] veth1_vlan: entered promiscuous mode [ 108.219769][ T6652] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 108.299173][ T6472] veth0_macvtap: entered promiscuous mode [ 108.326738][ T6472] veth1_macvtap: entered promiscuous mode [ 108.399912][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.434387][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.461302][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.481772][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.493920][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.504593][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.515722][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.526741][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.539625][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.556192][ T6663] netlink: 'syz.2.205': attribute type 26 has an invalid length. [ 108.592882][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.614551][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.626649][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.638796][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.648737][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.665728][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.677012][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.687770][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.737051][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.828692][ T6472] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.851987][ T6472] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.887537][ T6472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.907673][ T6472] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.940847][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 108.984571][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 109.000112][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 109.096419][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.197833][ T5849] Bluetooth: hci5: command tx timeout [ 109.249018][ T6690] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 109.259331][ T5885] IPVS: starting estimator thread 0... [ 109.287818][ T6683] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 109.321275][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.361037][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.388911][ T6692] IPVS: using max 20 ests per chain, 48000 per kthread [ 109.415681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.424750][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.563018][ T6700] netlink: 'syz.0.214': attribute type 15 has an invalid length. [ 109.597132][ T6700] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 110.107947][ T6718] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 110.201576][ T6718] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 110.234746][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 110.253702][ T6721] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 110.571525][ T6735] netlink: 156 bytes leftover after parsing attributes in process `syz.5.225'. [ 110.758320][ T6733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.810704][ T6740] syzkaller0: entered promiscuous mode [ 110.816328][ T6733] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 110.826508][ T5837] hid-generic 0005:16C0:0A0E.0001: item fetching failed at offset 0/1 [ 110.850793][ T5837] hid-generic 0005:16C0:0A0E.0001: probe with driver hid-generic failed with error -22 [ 110.882433][ T6740] syzkaller0: entered allmulticast mode [ 110.980865][ T6748] netlink: 'syz.5.229': attribute type 25 has an invalid length. [ 110.998451][ T6748] netlink: 184 bytes leftover after parsing attributes in process `syz.5.229'. [ 111.030123][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.229'. [ 111.043525][ T6748] netlink: 404 bytes leftover after parsing attributes in process `syz.5.229'. [ 111.278913][ T5849] Bluetooth: hci5: command tx timeout [ 111.428456][ T6761] vlan0: entered promiscuous mode [ 111.513783][ T6761] vlan0: entered allmulticast mode [ 111.549462][ T6761] veth0_vlan: entered allmulticast mode [ 111.657614][ T6761] team0: Port device vlan0 added [ 112.184154][ T6769] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.225453][ T6769] netlink: 'syz.1.237': attribute type 10 has an invalid length. [ 112.266826][ T6769] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 112.291359][ T6769] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.349716][ T6769] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 112.991694][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.075019][ T6803] __nla_validate_parse: 4 callbacks suppressed [ 113.075041][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 113.150140][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 113.173454][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.542611][ T6819] netlink: 72 bytes leftover after parsing attributes in process `syz.5.251'. [ 113.636407][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'. [ 113.655760][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.666379][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.666809][ T6803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.683185][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.694717][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.702670][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.710327][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.720114][ T6803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.743885][ T6803] bond0 (unregistering): Released all slaves [ 113.785042][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.991196][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.296628][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 114.330602][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 114.342556][ T6842] openvswitch: netlink: IP tunnel dst address not specified [ 114.469187][ T6851] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.260'. [ 114.613052][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.260'. [ 114.729005][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 114.842150][ T6865] netlink: 148 bytes leftover after parsing attributes in process `syz.5.263'. [ 115.061653][ T6873] netlink: 'syz.5.265': attribute type 1 has an invalid length. [ 115.240810][ T1145] bond0 (unregistering): Released all slaves [ 115.380382][ T1145] bond1 (unregistering): Released all slaves [ 115.395279][ T1145] bond2 (unregistering): Released all slaves [ 115.437055][ T6875] bridge1: entered promiscuous mode [ 115.568959][ T6880] openvswitch: netlink: Message has 2 unknown bytes. [ 115.774427][ T5841] Bluetooth: hci0: command tx timeout [ 115.965717][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 116.235862][ T6902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.364335][ T6902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.475884][ T1145] hsr_slave_0: left promiscuous mode [ 116.497550][ T1145] hsr_slave_1: left promiscuous mode [ 116.530936][ T1145] veth1_macvtap: left promiscuous mode [ 116.536998][ T1145] veth0_macvtap: left promiscuous mode [ 116.561104][ T6920] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.570483][ T1145] veth1_vlan: left promiscuous mode [ 116.576105][ T1145] veth0_vlan: left allmulticast mode [ 116.602383][ T1145] veth0_vlan: left promiscuous mode [ 116.800824][ T6930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.019407][ T6907] xt_hashlimit: size too large, truncated to 1048576 [ 117.105455][ T1145] team0 (unregistering): Port device vlan0 removed [ 117.808544][ T6902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.836181][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.846070][ T5841] Bluetooth: hci0: command tx timeout [ 117.851807][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.864962][ T6825] bridge_slave_0: entered allmulticast mode [ 117.872337][ T6825] bridge_slave_0: entered promiscuous mode [ 118.084428][ T6902] bond0: (slave netdevsim0): Releasing backup interface [ 118.106214][ T6902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.138439][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.152383][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.163219][ T6825] bridge_slave_1: entered allmulticast mode [ 118.170943][ T6825] bridge_slave_1: entered promiscuous mode [ 118.317949][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.360421][ T6953] IPv6: addrconf: prefix option has invalid lifetime [ 118.457050][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.516505][ T6961] __nla_validate_parse: 11 callbacks suppressed [ 118.516528][ T6961] netlink: 277 bytes leftover after parsing attributes in process `syz.2.284'. [ 118.575358][ T6825] team0: Port device team_slave_0 added [ 118.641428][ T6902] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.710073][ T6902] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.726624][ T6825] team0: Port device team_slave_1 added [ 118.743004][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.286'. [ 118.775662][ T6965] openvswitch: netlink: Tunnel attr 9 has unexpected len 5032 expected 2 [ 118.797006][ T6902] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.894843][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.947378][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.029421][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.058472][ T6902] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.110713][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.138694][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.212528][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.262861][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.290'. [ 119.278610][ T6979] netlink: 44 bytes leftover after parsing attributes in process `syz.1.289'. [ 119.319685][ T6825] hsr_slave_0: entered promiscuous mode [ 119.333896][ T6825] hsr_slave_1: entered promiscuous mode [ 119.341020][ T6825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.361079][ T6825] Cannot create hsr debugfs directory [ 119.460300][ T6979] bond0: (slave bond_slave_0): Releasing backup interface [ 119.624254][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.293'. [ 119.634693][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'. [ 119.917413][ T5849] Bluetooth: hci0: command tx timeout [ 120.609150][ T7020] netlink: 'syz.1.301': attribute type 3 has an invalid length. [ 120.848801][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 120.900447][ T6825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.927040][ T6825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.957056][ T6825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.012813][ T6825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.429568][ T7043] netlink: 268 bytes leftover after parsing attributes in process `syz.1.306'. [ 121.664502][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.804404][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.849151][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.856425][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.872237][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.879467][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.000144][ T5849] Bluetooth: hci0: command 0x0419 tx timeout [ 122.353115][ T7065] syz.2.309: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.373364][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.2.309 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 122.373391][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.373406][ T7065] Call Trace: [ 122.373413][ T7065] [ 122.373422][ T7065] dump_stack_lvl+0x241/0x360 [ 122.373462][ T7065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.373485][ T7065] ? __pfx__printk+0x10/0x10 [ 122.373510][ T7065] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 122.373537][ T7065] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 122.373565][ T7065] warn_alloc+0x278/0x410 [ 122.373593][ T7065] ? __pfx_warn_alloc+0x10/0x10 [ 122.373621][ T7065] ? xskq_create+0xb6/0x170 [ 122.373641][ T7065] ? __get_vm_area_node+0x1c8/0x2d0 [ 122.373666][ T7065] ? __get_vm_area_node+0x25c/0x2d0 [ 122.373697][ T7065] __vmalloc_node_range_noprof+0x62f/0x1380 [ 122.373737][ T7065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.373758][ T7065] ? __kasan_kmalloc+0x98/0xb0 [ 122.373782][ T7065] vmalloc_user_noprof+0x74/0x80 [ 122.373799][ T7065] ? xskq_create+0xb6/0x170 [ 122.373813][ T7065] xskq_create+0xb6/0x170 [ 122.373830][ T7065] xsk_init_queue+0xa1/0x100 [ 122.373848][ T7065] xsk_setsockopt+0x560/0x810 [ 122.373878][ T7065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.373904][ T7065] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.373930][ T7065] ? __pfx_lock_acquire+0x10/0x10 [ 122.373963][ T7065] ? aa_sock_opt_perm+0x79/0x120 [ 122.373993][ T7065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.374018][ T7065] do_sock_setsockopt+0x3af/0x720 [ 122.374042][ T7065] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 122.374066][ T7065] ? __fget_files+0x395/0x410 [ 122.374090][ T7065] ? __fget_files+0x2a/0x410 [ 122.374121][ T7065] __x64_sys_setsockopt+0x1ee/0x280 [ 122.374148][ T7065] do_syscall_64+0xf3/0x230 [ 122.374171][ T7065] ? clear_bhb_loop+0x35/0x90 [ 122.374197][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.374230][ T7065] RIP: 0033:0x7fa33398d169 [ 122.374250][ T7065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.374263][ T7065] RSP: 002b:00007fa33477e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.374283][ T7065] RAX: ffffffffffffffda RBX: 00007fa333ba6080 RCX: 00007fa33398d169 [ 122.374295][ T7065] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 122.374305][ T7065] RBP: 00007fa333a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 122.374315][ T7065] R10: 00004000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 122.374326][ T7065] R13: 0000000000000000 R14: 00007fa333ba6080 R15: 00007ffcd8144268 [ 122.374357][ T7065] [ 122.374451][ T7065] Mem-Info: [ 122.380580][ T7059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.391625][ T7065] active_anon:5373 inactive_anon:0 isolated_anon:0 [ 122.391625][ T7065] active_file:1411 inactive_file:38315 isolated_file:0 [ 122.391625][ T7065] unevictable:768 dirty:123 writeback:0 [ 122.391625][ T7065] slab_reclaimable:10204 slab_unreclaimable:99762 [ 122.391625][ T7065] mapped:33821 shmem:1437 pagetables:837 [ 122.391625][ T7065] sec_pagetables:0 bounce:0 [ 122.391625][ T7065] kernel_misc_reclaimable:0 [ 122.391625][ T7065] free:1325774 free_pcp:945 free_cma:0 [ 122.703299][ T7065] Node 0 active_anon:21592kB inactive_anon:0kB active_file:5644kB inactive_file:153184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139284kB dirty:488kB writeback:0kB shmem:4212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11224kB pagetables:3448kB sec_pagetables:0kB all_unreclaimable? no [ 122.745112][ T7065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 122.777176][ T7065] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.809458][ T7065] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 122.815522][ T7065] Node 0 DMA32 free:1379784kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:21552kB inactive_anon:0kB active_file:5644kB inactive_file:152868kB unevictable:1536kB writepending:484kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:1884kB local_pcp:924kB free_cma:0kB [ 122.852759][ T7065] lowmem_reserve[]: 0 0 0 0 0 [ 122.858266][ T7065] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 122.887140][ T7065] lowmem_reserve[]: 0 0 0 0 0 [ 122.893210][ T7065] Node 1 Normal free:3909388kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 122.927437][ T7065] lowmem_reserve[]: 0 0 0 0 0 [ 122.932255][ T7065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.945231][ T7065] Node 0 DMA32: 0*4kB 5*8kB (E) 1*16kB (E) 110*32kB (UME) 82*64kB (UME) 36*128kB (UM) 28*256kB (UME) 10*512kB (UME) 8*1024kB (UME) 9*2048kB (UME) 324*4096kB (UM) = 1379448kB [ 122.974397][ T7065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.986346][ T7065] Node 1 Normal: 233*4kB (UM) 59*8kB (UME) 39*16kB (UME) 221*32kB (UME) 108*64kB (UME) 31*128kB (UME) 17*256kB (UME) 8*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3909388kB [ 123.007831][ T7074] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 123.015531][ T7074] netlink: 224 bytes leftover after parsing attributes in process `syz.0.311'. [ 123.068134][ T7065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.092796][ T7065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.122204][ T7059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.125476][ T7065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.153802][ T7065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.163688][ T7065] 41163 total pagecache pages [ 123.202058][ T7065] 0 pages in swap cache [ 123.206435][ T7065] Free swap = 124996kB [ 123.219775][ T7065] Total swap = 124996kB [ 123.224008][ T7065] 2097051 pages RAM [ 123.232486][ T7065] 0 pages HighMem/MovableOnly [ 123.241815][ T7065] 427900 pages reserved [ 123.252008][ T7065] 0 pages cma reserved [ 123.270357][ T7059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.351394][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.497064][ T7059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.578855][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.314'. [ 123.709116][ T6825] veth0_vlan: entered promiscuous mode [ 123.743734][ T7059] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.755024][ T6825] veth1_vlan: entered promiscuous mode [ 123.798871][ T7098] nr0: entered promiscuous mode [ 123.850529][ T7059] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.895240][ T7059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.961932][ T7059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.017176][ T6825] veth0_macvtap: entered promiscuous mode [ 124.044503][ T6825] veth1_macvtap: entered promiscuous mode [ 124.100514][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.134604][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.157863][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.187490][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.212023][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.222874][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.240410][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.251289][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.262034][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.273325][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.286991][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.368316][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.398054][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.416581][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.434197][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.462145][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.507418][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.533691][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.564291][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.590378][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.611261][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.652089][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.676200][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 124.714843][ T6825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.740094][ T6825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.759829][ T6825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.789410][ T6825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.833486][ T7128] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 124.889598][ T7129] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.025172][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.050509][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.171023][ T7095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.182250][ T7095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.203474][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 125.218829][ T7139] IPv6: addrconf: prefix option has invalid lifetime [ 125.261370][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 125.289202][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.329'. [ 125.551319][ T7142] syzkaller0: entered promiscuous mode [ 125.557051][ T7142] syzkaller0: entered allmulticast mode [ 125.831979][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 125.903663][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 126.411829][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.429506][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.444820][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.458238][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.478835][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 126.493446][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.756923][ T7148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.764543][ T7148] IPv6: NLM_F_CREATE should be set when creating new route [ 127.771921][ T7148] IPv6: NLM_F_CREATE should be set when creating new route [ 128.002624][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.217107][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.372091][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 128.428545][ T7173] syzkaller0: entered promiscuous mode [ 128.448193][ T7173] syzkaller0: entered allmulticast mode [ 128.558780][ T5849] Bluetooth: hci6: command tx timeout [ 128.836968][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.915289][ T7200] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 130.179684][ T7222] xt_bpf: check failed: parse error [ 130.641651][ T5849] Bluetooth: hci6: command tx timeout [ 131.300117][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.510248][ T7226] netlink: 'syz.5.356': attribute type 39 has an invalid length. [ 131.675649][ T7158] chnl_net:caif_netlink_parms(): no params data found [ 131.848045][ T1145] bridge_slave_1: left allmulticast mode [ 131.874027][ T1145] bridge_slave_1: left promiscuous mode [ 131.898238][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.938532][ T1145] bridge_slave_0: left allmulticast mode [ 131.944465][ T1145] bridge_slave_0: left promiscuous mode [ 131.954794][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.492979][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.506723][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.519700][ T1145] bond0 (unregistering): Released all slaves [ 132.717734][ T5849] Bluetooth: hci6: command tx timeout [ 132.769047][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 132.789675][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.369'. [ 132.790291][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.846924][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.854940][ T7158] bridge_slave_0: entered allmulticast mode [ 132.883228][ T7158] bridge_slave_0: entered promiscuous mode [ 132.893721][ T7273] bridge0: port 3(syz_tun) entered blocking state [ 132.901923][ T7273] bridge0: port 3(syz_tun) entered disabled state [ 132.909698][ T7273] syz_tun: entered allmulticast mode [ 132.919575][ T7273] syz_tun: entered promiscuous mode [ 132.928367][ T7273] bridge0: port 3(syz_tun) entered blocking state [ 132.936163][ T7273] bridge0: port 3(syz_tun) entered forwarding state [ 133.053283][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.063968][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.107593][ T7158] bridge_slave_1: entered allmulticast mode [ 133.137576][ T7158] bridge_slave_1: entered promiscuous mode [ 133.269799][ T7300] netlink: 'syz.2.373': attribute type 3 has an invalid length. [ 133.300723][ T7300] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.373'. [ 133.386064][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 133.517973][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.580272][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.717409][ T1145] hsr_slave_0: left promiscuous mode [ 133.734329][ T1145] hsr_slave_1: left promiscuous mode [ 133.742267][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.751045][ T7325] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.760083][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.791977][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.811157][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.855254][ T1145] veth1_macvtap: left promiscuous mode [ 133.865221][ T1145] veth0_macvtap: left promiscuous mode [ 133.871980][ T1145] veth1_vlan: left promiscuous mode [ 133.878475][ T1145] veth0_vlan: left promiscuous mode [ 134.112005][ T7314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.585487][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 134.631668][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 134.807595][ T5849] Bluetooth: hci6: command tx timeout [ 135.057137][ T7321] unknown channel width for channel at 909000KHz? [ 135.089622][ T7158] team0: Port device team_slave_0 added [ 135.173527][ T7158] team0: Port device team_slave_1 added [ 135.345586][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.361809][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.414907][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.471278][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 135.505346][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'. [ 135.535830][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.565402][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.626569][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.852248][ T7158] hsr_slave_0: entered promiscuous mode [ 135.898472][ T7158] hsr_slave_1: entered promiscuous mode [ 135.905771][ T7158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.947907][ T7158] Cannot create hsr debugfs directory [ 136.139450][ T7381] bridge0: port 3(vlan2) entered blocking state [ 136.145866][ T7381] bridge0: port 3(vlan2) entered disabled state [ 136.157232][ T7381] vlan2: entered allmulticast mode [ 136.169742][ T7382] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 136.172070][ T7381] dummy0: entered allmulticast mode [ 136.191577][ T7381] vlan2: entered promiscuous mode [ 136.201662][ T7381] dummy0: entered promiscuous mode [ 136.209053][ T7378] netlink: 68 bytes leftover after parsing attributes in process `syz.5.390'. [ 136.212151][ T7381] bridge0: port 3(vlan2) entered blocking state [ 136.224681][ T7381] bridge0: port 3(vlan2) entered forwarding state [ 136.829238][ T7158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.850698][ T7158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.876082][ T7158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.950984][ T7158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.076203][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 137.086170][ T7403] tipc: Started in network mode [ 137.091751][ T7403] tipc: Node identity 7f000001, cluster identity 1 [ 137.116926][ T7403] tipc: Enabled bearer , priority 10 [ 137.480641][ T7421] FAULT_INJECTION: forcing a failure. [ 137.480641][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.512827][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.527599][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.2.400 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 137.527629][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.527642][ T7421] Call Trace: [ 137.527649][ T7421] [ 137.527658][ T7421] dump_stack_lvl+0x241/0x360 [ 137.527689][ T7421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.527712][ T7421] ? __pfx__printk+0x10/0x10 [ 137.527735][ T7421] ? __pfx_lock_release+0x10/0x10 [ 137.527776][ T7421] should_fail_ex+0x40a/0x550 [ 137.527813][ T7421] _copy_from_user+0x2d/0xb0 [ 137.527843][ T7421] __sys_bpf+0x1be/0x820 [ 137.527875][ T7421] ? __pfx___sys_bpf+0x10/0x10 [ 137.527918][ T7421] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.527950][ T7421] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.527981][ T7421] ? do_syscall_64+0x100/0x230 [ 137.528013][ T7421] __x64_sys_bpf+0x7c/0x90 [ 137.528040][ T7421] do_syscall_64+0xf3/0x230 [ 137.528066][ T7421] ? clear_bhb_loop+0x35/0x90 [ 137.528097][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.528124][ T7421] RIP: 0033:0x7fa33398d169 [ 137.528143][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.528159][ T7421] RSP: 002b:00007fa33479f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.528180][ T7421] RAX: ffffffffffffffda RBX: 00007fa333ba5fa0 RCX: 00007fa33398d169 [ 137.528195][ T7421] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 137.528208][ T7421] RBP: 00007fa33479f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.528221][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.528232][ T7421] R13: 0000000000000000 R14: 00007fa333ba5fa0 R15: 00007ffcd8144268 [ 137.528263][ T7421] [ 137.533102][ T7424] veth0_to_batadv: entered promiscuous mode [ 137.727898][ T7424] veth0_to_batadv: entered allmulticast mode [ 137.755788][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.763678][ T7428] tipc: Started in network mode [ 137.797941][ T7428] tipc: Node identity , cluster identity 4711 [ 137.805506][ T7428] tipc: Failed to obtain node identity [ 137.811748][ T7428] tipc: Enabling of bearer rejected, failed to enable media [ 137.842996][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.850164][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.893802][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.901108][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.082512][ T7442] netlink: 88 bytes leftover after parsing attributes in process `syz.2.406'. [ 138.113035][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.406'. [ 138.167490][ T5841] Bluetooth: hci6: command 0x0405 tx timeout [ 138.203190][ T7158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.236314][ T7158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.248911][ T969] tipc: Node number set to 2130706433 [ 138.256311][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 138.316449][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.0.408'. [ 138.406767][ T7452] sctp: [Deprecated]: syz.1.410 (pid 7452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.406767][ T7452] Use struct sctp_sack_info instead [ 138.687438][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.413'. [ 138.707726][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.895904][ T7158] veth0_vlan: entered promiscuous mode [ 138.935916][ T7158] veth1_vlan: entered promiscuous mode [ 139.004638][ T7474] tipc: Enabling of bearer rejected, failed to enable media [ 139.051552][ T7158] veth0_macvtap: entered promiscuous mode [ 139.086807][ T7158] veth1_macvtap: entered promiscuous mode [ 139.125363][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.157538][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.194012][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.232154][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.263975][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.285700][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.317607][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.352474][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.366977][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'. [ 139.374540][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.398094][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.413575][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.425168][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.438136][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.448845][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.467113][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.478483][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.489734][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.501807][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.512962][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.527766][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.543393][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.555316][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.571361][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'. [ 139.770512][ T7493] team0 (unregistering): Port device team_slave_0 removed [ 139.798888][ T7493] team0 (unregistering): Port device team_slave_1 removed [ 139.841994][ T7158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.860818][ T7158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.879025][ T7158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.897607][ T7158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.112994][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.153475][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.274796][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.288241][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.853920][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 140.909352][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 141.380094][ T1858] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.609635][ T1858] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.649866][ T7553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.924360][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.5.440'. [ 142.285189][ T1858] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.482594][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.499162][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.508574][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.525277][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.538787][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.553448][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.561872][ T7580] FAULT_INJECTION: forcing a failure. [ 142.561872][ T7580] name failslab, interval 1, probability 0, space 0, times 1 [ 142.625826][ T1858] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.642591][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.1.448 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 142.642621][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.642634][ T7580] Call Trace: [ 142.642641][ T7580] [ 142.642650][ T7580] dump_stack_lvl+0x241/0x360 [ 142.642681][ T7580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.642705][ T7580] ? __pfx__printk+0x10/0x10 [ 142.642728][ T7580] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 142.642772][ T7580] ? __pfx___might_resched+0x10/0x10 [ 142.642804][ T7580] should_fail_ex+0x40a/0x550 [ 142.642841][ T7580] should_failslab+0xac/0x100 [ 142.642872][ T7580] __kmalloc_node_noprof+0xe1/0x4d0 [ 142.642901][ T7580] ? __kvmalloc_node_noprof+0x72/0x190 [ 142.642940][ T7580] __kvmalloc_node_noprof+0x72/0x190 [ 142.642975][ T7580] bpf_test_run_xdp_live+0x290/0x2220 [ 142.643007][ T7580] ? __pfx_lock_release+0x10/0x10 [ 142.643042][ T7580] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 142.643062][ T7580] ? __pfx___might_resched+0x10/0x10 [ 142.643086][ T7580] ? __mutex_unlock_slowpath+0x227/0x800 [ 142.643116][ T7580] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 142.643139][ T7580] ? synchronize_rcu+0x11b/0x360 [ 142.643159][ T7580] ? __pfx_synchronize_rcu+0x10/0x10 [ 142.643195][ T7580] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 142.643219][ T7580] ? 0xffffffffa0001ed8 [ 142.643249][ T7580] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 142.643288][ T7580] ? _copy_from_user+0x95/0xb0 [ 142.643311][ T7580] ? bpf_test_init+0x137/0x160 [ 142.643333][ T7580] ? xdp_convert_md_to_buff+0x5b/0x330 [ 142.643360][ T7580] bpf_prog_test_run_xdp+0x805/0x11e0 [ 142.643390][ T7580] ? __pfx_lock_release+0x10/0x10 [ 142.643422][ T7580] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.643447][ T7580] ? __fget_files+0x2a/0x410 [ 142.643475][ T7580] ? __fget_files+0x2a/0x410 [ 142.643502][ T7580] ? fput+0x21b/0x290 [ 142.643525][ T7580] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.643554][ T7580] bpf_prog_test_run+0x2e4/0x360 [ 142.643582][ T7580] __sys_bpf+0x487/0x820 [ 142.643607][ T7580] ? __pfx___sys_bpf+0x10/0x10 [ 142.643640][ T7580] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.643668][ T7580] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.643694][ T7580] ? do_syscall_64+0x100/0x230 [ 142.643719][ T7580] __x64_sys_bpf+0x7c/0x90 [ 142.643748][ T7580] do_syscall_64+0xf3/0x230 [ 142.643769][ T7580] ? clear_bhb_loop+0x35/0x90 [ 142.643795][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.643817][ T7580] RIP: 0033:0x7f6a3258d169 [ 142.643831][ T7580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.643844][ T7580] RSP: 002b:00007f6a33323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.643862][ T7580] RAX: ffffffffffffffda RBX: 00007f6a327a5fa0 RCX: 00007f6a3258d169 [ 142.643874][ T7580] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 142.643884][ T7580] RBP: 00007f6a33323090 R08: 0000000000000000 R09: 0000000000000000 [ 142.643894][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.643904][ T7580] R13: 0000000000000000 R14: 00007f6a327a5fa0 R15: 00007ffc84f33f48 [ 142.643927][ T7580] [ 143.166460][ T7583] __nla_validate_parse: 3 callbacks suppressed [ 143.166481][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 143.492231][ T7600] netlink: 152 bytes leftover after parsing attributes in process `syz.1.454'. [ 143.503832][ T1858] bridge_slave_1: left allmulticast mode [ 143.510370][ T1858] bridge_slave_1: left promiscuous mode [ 143.525084][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.608247][ T1858] bridge_slave_0: left allmulticast mode [ 143.629512][ T1858] bridge_slave_0: left promiscuous mode [ 143.648323][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.638239][ T5849] Bluetooth: hci0: command tx timeout [ 144.752209][ T1858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.771680][ T1858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.782857][ T1858] bond0 (unregistering): Released all slaves [ 145.219460][ T1858] hsr_slave_0: left promiscuous mode [ 145.225486][ T1858] hsr_slave_1: left promiscuous mode [ 145.237505][ T1858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.244972][ T1858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.253197][ T1858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.260839][ T1858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.281721][ T1858] veth1_macvtap: left promiscuous mode [ 145.287507][ T1858] veth0_macvtap: left promiscuous mode [ 145.293254][ T1858] veth1_vlan: left promiscuous mode [ 145.298888][ T1858] veth0_vlan: left promiscuous mode [ 145.768868][ T1858] team0 (unregistering): Port device team_slave_1 removed [ 145.868376][ T1858] team0 (unregistering): Port device team_slave_0 removed [ 146.440635][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 146.617617][ T7639] FAULT_INJECTION: forcing a failure. [ 146.617617][ T7639] name failslab, interval 1, probability 0, space 0, times 0 [ 146.630976][ T7639] CPU: 1 UID: 0 PID: 7639 Comm: syz.1.461 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 146.631004][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.631017][ T7639] Call Trace: [ 146.631025][ T7639] [ 146.631033][ T7639] dump_stack_lvl+0x241/0x360 [ 146.631065][ T7639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.631088][ T7639] ? __pfx__printk+0x10/0x10 [ 146.631111][ T7639] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 146.631142][ T7639] ? __pfx___might_resched+0x10/0x10 [ 146.631174][ T7639] should_fail_ex+0x40a/0x550 [ 146.631210][ T7639] should_failslab+0xac/0x100 [ 146.631240][ T7639] __kmalloc_node_noprof+0xe1/0x4d0 [ 146.631269][ T7639] ? __kvmalloc_node_noprof+0x72/0x190 [ 146.631310][ T7639] __kvmalloc_node_noprof+0x72/0x190 [ 146.631344][ T7639] bpf_test_run_xdp_live+0x290/0x2220 [ 146.631376][ T7639] ? __pfx_lock_release+0x10/0x10 [ 146.631418][ T7639] ? __pfx___might_resched+0x10/0x10 [ 146.631450][ T7639] ? __mutex_unlock_slowpath+0x227/0x800 [ 146.631486][ T7639] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 146.631516][ T7639] ? synchronize_rcu+0x11b/0x360 [ 146.631548][ T7639] ? __pfx_synchronize_rcu+0x10/0x10 [ 146.631595][ T7639] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 146.631625][ T7639] ? 0xffffffffa0001ad8 [ 146.631663][ T7639] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 146.631712][ T7639] ? _copy_from_user+0x95/0xb0 [ 146.631742][ T7639] ? bpf_test_init+0x137/0x160 [ 146.631769][ T7639] ? xdp_convert_md_to_buff+0x5b/0x330 [ 146.631803][ T7639] bpf_prog_test_run_xdp+0x805/0x11e0 [ 146.631840][ T7639] ? __pfx_lock_release+0x10/0x10 [ 146.631881][ T7639] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 146.631913][ T7639] ? __fget_files+0x2a/0x410 [ 146.631947][ T7639] ? __fget_files+0x2a/0x410 [ 146.631981][ T7639] ? fput+0x21b/0x290 [ 146.632010][ T7639] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 146.632043][ T7639] bpf_prog_test_run+0x2e4/0x360 [ 146.632079][ T7639] __sys_bpf+0x487/0x820 [ 146.632110][ T7639] ? __pfx___sys_bpf+0x10/0x10 [ 146.632152][ T7639] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.632187][ T7639] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.632220][ T7639] ? do_syscall_64+0x100/0x230 [ 146.632251][ T7639] __x64_sys_bpf+0x7c/0x90 [ 146.632279][ T7639] do_syscall_64+0xf3/0x230 [ 146.632305][ T7639] ? clear_bhb_loop+0x35/0x90 [ 146.632337][ T7639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.632364][ T7639] RIP: 0033:0x7f6a3258d169 [ 146.632381][ T7639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.632396][ T7639] RSP: 002b:00007f6a33323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.632417][ T7639] RAX: ffffffffffffffda RBX: 00007f6a327a5fa0 RCX: 00007f6a3258d169 [ 146.632431][ T7639] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 146.632444][ T7639] RBP: 00007f6a33323090 R08: 0000000000000000 R09: 0000000000000000 [ 146.632457][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.632468][ T7639] R13: 0000000000000000 R14: 00007f6a327a5fa0 R15: 00007ffc84f33f48 [ 146.632496][ T7639] [ 146.969757][ T5849] Bluetooth: hci0: command tx timeout [ 147.099135][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.106391][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.159243][ T7576] bridge_slave_0: entered allmulticast mode [ 147.166567][ T7576] bridge_slave_0: entered promiscuous mode [ 147.176380][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.184829][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.192273][ T7576] bridge_slave_1: entered allmulticast mode [ 147.199545][ T7576] bridge_slave_1: entered promiscuous mode [ 147.377028][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.462'. [ 147.405564][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.462'. [ 147.419597][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.462'. [ 147.432968][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.466394][ T7653] netlink: 'syz.2.462': attribute type 2 has an invalid length. [ 147.506684][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.635737][ T7576] team0: Port device team_slave_0 added [ 147.670814][ T7576] team0: Port device team_slave_1 added [ 147.796287][ T5917] IPVS: starting estimator thread 0... [ 147.837711][ T7668] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 147.865648][ T7664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.887923][ T7665] IPVS: using max 20 ests per chain, 48000 per kthread [ 147.910504][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 148.082137][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.089586][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.120246][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.133048][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.146834][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.174346][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.188902][ T7668] lo speed is unknown, defaulting to 1000 [ 148.226026][ T7668] lo speed is unknown, defaulting to 1000 [ 148.322673][ T7668] lo speed is unknown, defaulting to 1000 [ 148.340387][ T7668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.365595][ T7576] hsr_slave_0: entered promiscuous mode [ 148.383717][ T7668] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.387916][ T7576] hsr_slave_1: entered promiscuous mode [ 148.434563][ T7576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.474471][ T7576] Cannot create hsr debugfs directory [ 148.509710][ T7668] lo speed is unknown, defaulting to 1000 [ 148.654465][ T7668] lo speed is unknown, defaulting to 1000 [ 148.754726][ T7668] lo speed is unknown, defaulting to 1000 [ 148.802536][ T7668] lo speed is unknown, defaulting to 1000 [ 148.830815][ T7697] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 148.871400][ T7695] lo speed is unknown, defaulting to 1000 [ 148.971582][ T7668] lo speed is unknown, defaulting to 1000 [ 149.068296][ T7668] lo speed is unknown, defaulting to 1000 [ 149.392157][ T7708] lo speed is unknown, defaulting to 1000 [ 149.642671][ T7712] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.977016][ T7576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.030862][ T7576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.108848][ T7708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.478'. [ 150.168548][ T7576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.266056][ T7576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.002161][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.078762][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.123018][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.130215][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.198948][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.206116][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.295453][ T7736] Cannot find del_set index 2 as target [ 151.479074][ T7739] netlink: 44 bytes leftover after parsing attributes in process `syz.2.486'. [ 152.138280][ T31] audit: type=1800 audit(1742074111.715:2): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.485" name="memory.events" dev="tmpfs" ino=390 res=0 errno=0 [ 152.358408][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.564867][ T7576] veth0_vlan: entered promiscuous mode [ 152.628584][ T7750] netlink: 'syz.5.488': attribute type 13 has an invalid length. [ 152.645017][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.488'. [ 152.658055][ T7576] veth1_vlan: entered promiscuous mode [ 152.856854][ T7576] veth0_macvtap: entered promiscuous mode [ 152.891345][ T7756] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.927730][ T7576] veth1_macvtap: entered promiscuous mode [ 152.985093][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.038363][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.088533][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.106064][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.141991][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.178972][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.202888][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.224262][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.235279][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.282588][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.360013][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.450298][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.455165][ T7776] trusted_key: syz.1.494 sent an empty control message without MSG_MORE. [ 153.497420][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.545450][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.566519][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.584938][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.609267][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.622614][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.634332][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.644988][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.655923][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.668114][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.701383][ T7576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.720567][ T7576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.827454][ T7576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.838891][ T7576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.852623][ T7786] netlink: 'syz.2.497': attribute type 4 has an invalid length. [ 154.062105][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.092185][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.180199][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.202189][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.647957][ T7799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.696865][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'. [ 154.744006][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.501'. [ 154.766475][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'. [ 154.779190][ T7802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'. [ 155.002525][ T7799] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 155.054244][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.284588][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.357084][ T5833] bridge0: port 3(syz_tun) entered disabled state [ 155.413472][ T5833] syz_tun (unregistering): left allmulticast mode [ 155.428429][ T5833] syz_tun (unregistering): left promiscuous mode [ 155.436141][ T5833] bridge0: port 3(syz_tun) entered disabled state [ 155.464789][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.659148][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.905870][ T30] bridge_slave_1: left allmulticast mode [ 155.927669][ T30] bridge_slave_1: left promiscuous mode [ 155.947740][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.008404][ T30] bridge_slave_0: left allmulticast mode [ 156.014135][ T30] bridge_slave_0: left promiscuous mode [ 156.050654][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.302296][ T7823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.839211][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.854345][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.879930][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.940082][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.958837][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.969711][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.073415][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.086779][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.109476][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.128724][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.137650][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.146016][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.194297][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.210828][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.224023][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.234654][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.244348][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.252745][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.521664][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.533622][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.553815][ T30] bond0 (unregistering): Released all slaves [ 157.596105][ T7821] lo speed is unknown, defaulting to 1000 [ 157.796538][ T7832] lo speed is unknown, defaulting to 1000 [ 157.852555][ T7829] lo speed is unknown, defaulting to 1000 [ 157.966715][ T7834] lo speed is unknown, defaulting to 1000 [ 158.035518][ T30] hsr_slave_0: left promiscuous mode [ 158.073236][ T30] hsr_slave_1: left promiscuous mode [ 158.083066][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.091475][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.101246][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.109276][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.143021][ T30] veth1_macvtap: left promiscuous mode [ 158.148924][ T30] veth0_macvtap: left promiscuous mode [ 158.154554][ T30] veth1_vlan: left promiscuous mode [ 158.160855][ T30] veth0_vlan: left promiscuous mode [ 158.637209][ T30] team0 (unregistering): Port device team_slave_1 removed [ 158.687554][ T30] team0 (unregistering): Port device team_slave_0 removed [ 159.053233][ T5841] Bluetooth: hci0: command tx timeout [ 159.215020][ T5841] Bluetooth: hci2: command tx timeout [ 159.299364][ T7859] openvswitch: netlink: IP tunnel dst address not specified [ 159.357702][ T5841] Bluetooth: hci5: command tx timeout [ 159.600894][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 159.650139][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 159.735537][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 160.044005][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.052123][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.063166][ T7834] bridge_slave_0: entered allmulticast mode [ 160.086635][ T7834] bridge_slave_0: entered promiscuous mode [ 160.119273][ T30] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.173373][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.190463][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.199416][ T7834] bridge_slave_1: entered allmulticast mode [ 160.206725][ T7834] bridge_slave_1: entered promiscuous mode [ 160.232133][ T30] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.286212][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.304057][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.312993][ T7832] bridge_slave_0: entered allmulticast mode [ 160.321383][ T7832] bridge_slave_0: entered promiscuous mode [ 160.331363][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.344408][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.352867][ T7829] bridge_slave_0: entered allmulticast mode [ 160.365483][ T7829] bridge_slave_0: entered promiscuous mode [ 160.394063][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.406185][ T30] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.420303][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.427739][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.435036][ T7832] bridge_slave_1: entered allmulticast mode [ 160.443762][ T7832] bridge_slave_1: entered promiscuous mode [ 160.464257][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.471941][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.479804][ T7829] bridge_slave_1: entered allmulticast mode [ 160.490803][ T7829] bridge_slave_1: entered promiscuous mode [ 160.511998][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.529445][ T30] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.637154][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.669325][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.685004][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.704195][ T7834] team0: Port device team_slave_0 added [ 160.782916][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.809990][ T7834] team0: Port device team_slave_1 added [ 160.826467][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 160.837713][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 160.860728][ T7832] team0: Port device team_slave_0 added [ 160.978097][ T7832] team0: Port device team_slave_1 added [ 160.994174][ T7829] team0: Port device team_slave_0 added [ 161.022975][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.031254][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 161.043586][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.055457][ T7895] netlink: 'syz.1.523': attribute type 2 has an invalid length. [ 161.083705][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.116563][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 161.125602][ T5849] Bluetooth: hci0: command tx timeout [ 161.138162][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 161.358048][ T5849] Bluetooth: hci2: command tx timeout [ 161.384989][ T7829] team0: Port device team_slave_1 added [ 161.391627][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.398788][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.426297][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.437513][ T5850] Bluetooth: hci5: command tx timeout [ 161.491282][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.501842][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.529783][ T7832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.709369][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.730068][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.766756][ T7832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.797663][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.828994][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.899682][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.920394][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.935861][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.967943][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.070792][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.149637][ T7834] hsr_slave_0: entered promiscuous mode [ 162.157203][ T7834] hsr_slave_1: entered promiscuous mode [ 162.171017][ T7834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.180933][ T7834] Cannot create hsr debugfs directory [ 162.279424][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.368930][ T7832] hsr_slave_0: entered promiscuous mode [ 162.375613][ T7832] hsr_slave_1: entered promiscuous mode [ 162.382818][ T7832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.393206][ T7832] Cannot create hsr debugfs directory [ 162.481883][ T7917] FAULT_INJECTION: forcing a failure. [ 162.481883][ T7917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.505725][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.2.528 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 162.505754][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.505766][ T7917] Call Trace: [ 162.505773][ T7917] [ 162.505782][ T7917] dump_stack_lvl+0x241/0x360 [ 162.505814][ T7917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.505848][ T7917] ? __pfx__printk+0x10/0x10 [ 162.505876][ T7917] ? snprintf+0xda/0x120 [ 162.505900][ T7917] should_fail_ex+0x40a/0x550 [ 162.505937][ T7917] _copy_to_user+0x31/0xb0 [ 162.505969][ T7917] simple_read_from_buffer+0xca/0x150 [ 162.506001][ T7917] proc_fail_nth_read+0x1e9/0x250 [ 162.506035][ T7917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.506069][ T7917] ? rw_verify_area+0x243/0x630 [ 162.506090][ T7917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.506122][ T7917] vfs_read+0x1f8/0xb40 [ 162.506146][ T7917] ? fdget_pos+0x254/0x320 [ 162.506178][ T7917] ? __pfx___mutex_lock+0x10/0x10 [ 162.506205][ T7917] ? __pfx_vfs_read+0x10/0x10 [ 162.506231][ T7917] ? __fget_files+0x2a/0x410 [ 162.506264][ T7917] ? __fget_files+0x395/0x410 [ 162.506293][ T7917] ? __fget_files+0x2a/0x410 [ 162.506334][ T7917] ksys_read+0x18f/0x2b0 [ 162.506359][ T7917] ? __pfx_ksys_read+0x10/0x10 [ 162.506383][ T7917] ? do_syscall_64+0x100/0x230 [ 162.506413][ T7917] ? do_syscall_64+0xb6/0x230 [ 162.506443][ T7917] do_syscall_64+0xf3/0x230 [ 162.506470][ T7917] ? clear_bhb_loop+0x35/0x90 [ 162.506503][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.506532][ T7917] RIP: 0033:0x7fa33398bb7c [ 162.506550][ T7917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.506566][ T7917] RSP: 002b:00007fa33479f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.506588][ T7917] RAX: ffffffffffffffda RBX: 00007fa333ba5fa0 RCX: 00007fa33398bb7c [ 162.506603][ T7917] RDX: 000000000000000f RSI: 00007fa33479f0a0 RDI: 0000000000000005 [ 162.506615][ T7917] RBP: 00007fa33479f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.506628][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.506639][ T7917] R13: 0000000000000000 R14: 00007fa333ba5fa0 R15: 00007ffcd8144268 [ 162.506671][ T7917] [ 162.770275][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.897991][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.982618][ T7829] hsr_slave_0: entered promiscuous mode [ 162.989045][ T7829] hsr_slave_1: entered promiscuous mode [ 162.995058][ T7829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.027885][ T7829] Cannot create hsr debugfs directory [ 163.177990][ T7919] lo speed is unknown, defaulting to 1000 [ 163.197814][ T5850] Bluetooth: hci0: command tx timeout [ 163.437861][ T5850] Bluetooth: hci2: command tx timeout [ 163.517745][ T5850] Bluetooth: hci5: command 0x040f tx timeout [ 163.589181][ T30] bridge_slave_1: left allmulticast mode [ 163.597598][ T30] bridge_slave_1: left promiscuous mode [ 163.603448][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.613811][ T30] bridge_slave_0: left allmulticast mode [ 163.626076][ T30] bridge_slave_0: left promiscuous mode [ 163.632291][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.649943][ T30] vlan2: left allmulticast mode [ 163.654919][ T30] dummy0: left allmulticast mode [ 163.667727][ T30] vlan2: left promiscuous mode [ 163.672576][ T30] dummy0: left promiscuous mode [ 163.685658][ T30] bridge0: port 3(vlan2) entered disabled state [ 163.695898][ T30] bridge_slave_1: left allmulticast mode [ 163.701894][ T30] bridge_slave_1: left promiscuous mode [ 163.707787][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.719372][ T30] bridge_slave_0: left allmulticast mode [ 163.725048][ T30] bridge_slave_0: left promiscuous mode [ 163.731164][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.423754][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.434556][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.446701][ T30] bond0 (unregistering): Released all slaves [ 164.564598][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.582899][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.594006][ T30] bond0 (unregistering): Released all slaves [ 164.815954][ T7834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.827460][ T7932] dccp_close: ABORT with 216 bytes unread [ 164.860243][ T7834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.932041][ T7937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.534'. [ 165.012647][ T7834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.036103][ T7834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.185051][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 165.225607][ T7832] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.277685][ T5841] Bluetooth: hci0: command tx timeout [ 165.284089][ T7832] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.296317][ T7832] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.353894][ T7832] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.474099][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 165.495560][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 165.527461][ T5841] Bluetooth: hci2: command tx timeout [ 165.597873][ T5841] Bluetooth: hci5: command 0x040f tx timeout [ 165.636199][ T7947] vlan2: entered promiscuous mode [ 165.686904][ T7947] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 165.698253][ T30] hsr_slave_0: left promiscuous mode [ 165.712513][ T7948] netlink: 'syz.2.538': attribute type 58 has an invalid length. [ 165.738818][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 165.748495][ T30] hsr_slave_1: left promiscuous mode [ 165.755261][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.769548][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.781896][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.793049][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.825430][ T30] hsr_slave_0: left promiscuous mode [ 165.831914][ T30] hsr_slave_1: left promiscuous mode [ 165.839433][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.846989][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.857451][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.865269][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.901035][ T30] veth1_macvtap: left promiscuous mode [ 165.906755][ T30] veth0_macvtap: left promiscuous mode [ 165.913353][ T30] veth1_vlan: left promiscuous mode [ 165.925359][ T30] veth0_vlan: left promiscuous mode [ 165.932712][ T30] veth1_macvtap: left promiscuous mode [ 165.945697][ T30] veth0_macvtap: left promiscuous mode [ 165.952680][ T30] veth1_vlan: left promiscuous mode [ 165.959059][ T30] veth0_vlan: left promiscuous mode [ 167.301059][ T30] team0 (unregistering): Port device team_slave_1 removed [ 167.346665][ T30] team0 (unregistering): Port device team_slave_0 removed [ 167.677699][ T5841] Bluetooth: hci5: command 0x040f tx timeout [ 167.773589][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.781251][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.958742][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.009120][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.021906][ T7829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.044411][ T7829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.078463][ T7829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.099201][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 168.129579][ T7829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.142257][ T7959] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 168.208650][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.289318][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.300468][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.307663][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.326220][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.333455][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.409385][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.416525][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.425529][ T7965] netlink: 'syz.1.544': attribute type 2 has an invalid length. [ 168.466568][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.473757][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.503206][ T7965] fþ: entered promiscuous mode [ 168.542783][ T7967] syzkaller0: entered promiscuous mode [ 168.548752][ T7967] syzkaller0: entered allmulticast mode [ 170.493684][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.550793][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.552091][ T30] IPVS: stop unused estimator thread 0... [ 170.646042][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.653241][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.734016][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.741227][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.804019][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.549'. [ 170.845637][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.971540][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.047057][ T7994] vxcan3: entered allmulticast mode [ 171.126063][ T7998] vxcan3: entered allmulticast mode [ 171.305011][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.443898][ T7829] veth0_vlan: entered promiscuous mode [ 171.484420][ T7829] veth1_vlan: entered promiscuous mode [ 171.566907][ T7834] veth0_vlan: entered promiscuous mode [ 171.656932][ T7834] veth1_vlan: entered promiscuous mode [ 171.700935][ T8024] xt_TCPMSS: Only works on TCP SYN packets [ 171.782627][ T7832] veth0_vlan: entered promiscuous mode [ 171.814035][ T7829] veth0_macvtap: entered promiscuous mode [ 171.850384][ T7832] veth1_vlan: entered promiscuous mode [ 171.875885][ T7829] veth1_macvtap: entered promiscuous mode [ 171.954963][ T7834] veth0_macvtap: entered promiscuous mode [ 171.987203][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.025467][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.057508][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.078905][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.091944][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.107274][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.123162][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.135574][ T7834] veth1_macvtap: entered promiscuous mode [ 172.149728][ T7832] veth0_macvtap: entered promiscuous mode [ 172.186833][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.207329][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.218066][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.229339][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.240867][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.251929][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.298363][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.325421][ T7832] veth1_macvtap: entered promiscuous mode [ 172.345132][ T7829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.362549][ T7829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.375815][ T7829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.385505][ T7829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.406528][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.419893][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 172.425381][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.440210][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.452026][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.462471][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.473768][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.487304][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.498476][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.510869][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.544784][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.577291][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.587214][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.602719][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.624657][ T8045] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 172.642276][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.667650][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.679201][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.689906][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.705843][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.763194][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.775027][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.785687][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.796579][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.815354][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.826016][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.836073][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.846572][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.856574][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.872235][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.898666][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.899935][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 172.918365][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 172.931047][ T7834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.940249][ T7834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.949705][ T7834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.959672][ T7834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.004828][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.017788][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.030084][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.040814][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.050771][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.061887][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.072299][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.083122][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.094219][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.104761][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.115845][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.145441][ T7832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.168777][ T7832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.177986][ T7832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.187078][ T7832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.295181][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.330522][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.402629][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.405833][ T8058] lo speed is unknown, defaulting to 1000 [ 173.420408][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.505794][ T1858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.518217][ T1858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.662683][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.691054][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.738181][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.746177][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.041494][ T1858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.060375][ T1858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.094608][ T8069] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 174.373236][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.565230][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.753573][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.859782][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.221152][ T30] bridge_slave_1: left allmulticast mode [ 175.226971][ T30] bridge_slave_1: left promiscuous mode [ 175.263686][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.294787][ T30] bridge_slave_0: left allmulticast mode [ 175.324672][ T30] bridge_slave_0: left promiscuous mode [ 175.334384][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.790187][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.570'. [ 175.813811][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.570'. [ 175.894929][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.903841][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.911885][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.930000][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.951498][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.966565][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.084359][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.100617][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.111477][ T30] bond0 (unregistering): Released all slaves [ 176.145893][ T8085] bond0 (unregistering): Released all slaves [ 176.278304][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.572913][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.6.573'. [ 176.590256][ T8095] lo speed is unknown, defaulting to 1000 [ 176.824915][ T8116] netlink: 'syz.2.574': attribute type 39 has an invalid length. [ 176.887561][ T30] hsr_slave_0: left promiscuous mode [ 176.896170][ T30] hsr_slave_1: left promiscuous mode [ 176.940920][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.970445][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.000269][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.016419][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.071896][ T30] veth1_macvtap: left promiscuous mode [ 177.088139][ T30] veth0_macvtap: left promiscuous mode [ 177.099783][ T30] veth1_vlan: left promiscuous mode [ 177.110203][ T30] veth0_vlan: left promiscuous mode [ 177.447193][ T8139] netlink: 165 bytes leftover after parsing attributes in process `syz.6.578'. [ 177.914172][ T30] team0 (unregistering): Port device team_slave_1 removed [ 177.961555][ T30] team0 (unregistering): Port device team_slave_0 removed [ 178.091128][ T5850] Bluetooth: hci0: command tx timeout [ 178.850469][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 178.896247][ T8166] syzkaller1: entered promiscuous mode [ 178.918075][ T8166] syzkaller1: entered allmulticast mode [ 178.956896][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.583'. [ 179.236591][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.245222][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.257784][ T8095] bridge_slave_0: entered allmulticast mode [ 179.265040][ T8095] bridge_slave_0: entered promiscuous mode [ 179.300129][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.329477][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.336799][ T8095] bridge_slave_1: entered allmulticast mode [ 179.346603][ T8095] bridge_slave_1: entered promiscuous mode [ 179.462389][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.488725][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.660779][ T8095] team0: Port device team_slave_0 added [ 179.680596][ T8095] team0: Port device team_slave_1 added [ 179.746600][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.761600][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.781403][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.593'. [ 179.858269][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.880977][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.888494][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.948640][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.157852][ T5850] Bluetooth: hci0: command tx timeout [ 180.265798][ T8095] hsr_slave_0: entered promiscuous mode [ 180.329235][ T8095] hsr_slave_1: entered promiscuous mode [ 180.335515][ T8095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.376043][ T8095] Cannot create hsr debugfs directory [ 180.534587][ T8212] tap0: tun_chr_ioctl cmd 2148553947 [ 180.550489][ T8216] lo speed is unknown, defaulting to 1000 [ 180.922650][ T8230] openvswitch: netlink: Key type 29 is not supported [ 181.378807][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.2.606'. [ 181.698753][ T8095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.772161][ T8095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.806301][ T8095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.861282][ T8095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.958313][ T8251] tap0: tun_chr_ioctl cmd 1074025677 [ 181.963881][ T8251] tap0: linktype set to 804 [ 182.125139][ T8268] x_tables: duplicate underflow at hook 2 [ 182.250020][ T5850] Bluetooth: hci0: command tx timeout [ 182.264069][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.305037][ T8095] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.365577][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.372791][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.450857][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.458054][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.485737][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.505695][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.524901][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.554620][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.587935][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.602672][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.626365][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.643414][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.671087][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 182.979788][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.066958][ T8296] Bluetooth: MGMT ver 1.23 [ 183.105287][ T8095] veth0_vlan: entered promiscuous mode [ 183.133954][ T8296] netlink: 'syz.7.619': attribute type 1 has an invalid length. [ 183.140176][ T8095] veth1_vlan: entered promiscuous mode [ 183.164439][ T8296] netlink: 'syz.7.619': attribute type 11 has an invalid length. [ 183.231815][ T8095] veth0_macvtap: entered promiscuous mode [ 183.254136][ T8095] veth1_macvtap: entered promiscuous mode [ 183.318245][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.339833][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.366827][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.408334][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.437706][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.465612][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.489649][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.506546][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.526357][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.545076][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.556909][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.615737][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.679970][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.717352][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.752108][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.785638][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.806925][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.843356][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.867110][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.877763][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.889103][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.901105][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.975941][ T8095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.996714][ T8095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.034654][ T8095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.067308][ T8095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.309361][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.317789][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.332185][ T5841] Bluetooth: hci0: command tx timeout [ 184.370178][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.395495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.569005][ T8340] lo speed is unknown, defaulting to 1000 [ 184.704535][ T8344] lo speed is unknown, defaulting to 1000 [ 185.137820][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 185.288924][ T8317] ================================================================== [ 185.297054][ T8317] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 185.305432][ T8317] Read of size 8 at addr ffff88807b5f1058 by task syz.2.624/8317 [ 185.313177][ T8317] [ 185.315546][ T8317] CPU: 1 UID: 0 PID: 8317 Comm: syz.2.624 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 185.315585][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.315600][ T8317] Call Trace: [ 185.315608][ T8317] [ 185.315617][ T8317] dump_stack_lvl+0x241/0x360 [ 185.315648][ T8317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.315672][ T8317] ? __pfx__printk+0x10/0x10 [ 185.315694][ T8317] ? _printk+0xd5/0x120 [ 185.315712][ T8317] ? __virt_addr_valid+0x183/0x530 [ 185.315733][ T8317] ? __virt_addr_valid+0x183/0x530 [ 185.315754][ T8317] print_report+0x16e/0x5b0 [ 185.315781][ T8317] ? __virt_addr_valid+0x183/0x530 [ 185.315801][ T8317] ? __virt_addr_valid+0x183/0x530 [ 185.315820][ T8317] ? __virt_addr_valid+0x45f/0x530 [ 185.315838][ T8317] ? __phys_addr+0xba/0x170 [ 185.315859][ T8317] ? skb_queue_purge_reason+0xb9/0x500 [ 185.315909][ T8317] kasan_report+0x143/0x180 [ 185.315938][ T8317] ? skb_queue_purge_reason+0xb9/0x500 [ 185.315976][ T8317] skb_queue_purge_reason+0xb9/0x500 [ 185.316010][ T8317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.316046][ T8317] ? __mutex_unlock_slowpath+0x227/0x800 [ 185.316076][ T8317] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 185.316143][ T8317] ? hci_conn_hash_flush+0x1da/0x240 [ 185.316174][ T8317] vhci_flush+0x44/0x50 [ 185.316206][ T8317] ? __pfx_vhci_flush+0x10/0x10 [ 185.316237][ T8317] hci_dev_reset+0x42a/0x5d0 [ 185.316266][ T8317] sock_do_ioctl+0x158/0x460 [ 185.316298][ T8317] ? __pfx_sock_do_ioctl+0x10/0x10 [ 185.316328][ T8317] ? do_futex+0x392/0x560 [ 185.316361][ T8317] sock_ioctl+0x626/0x8e0 [ 185.316389][ T8317] ? __pfx_sock_ioctl+0x10/0x10 [ 185.316419][ T8317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.316452][ T8317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.316485][ T8317] ? __pfx_sock_ioctl+0x10/0x10 [ 185.316513][ T8317] __se_sys_ioctl+0xf5/0x170 [ 185.316537][ T8317] do_syscall_64+0xf3/0x230 [ 185.316564][ T8317] ? clear_bhb_loop+0x35/0x90 [ 185.316596][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.316624][ T8317] RIP: 0033:0x7fa33398d169 [ 185.316651][ T8317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.316670][ T8317] RSP: 002b:00007fa33479f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.316701][ T8317] RAX: ffffffffffffffda RBX: 00007fa333ba5fa0 RCX: 00007fa33398d169 [ 185.316717][ T8317] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000c [ 185.316731][ T8317] RBP: 00007fa333a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.316745][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.316757][ T8317] R13: 0000000000000000 R14: 00007fa333ba5fa0 R15: 00007ffcd8144268 [ 185.316799][ T8317] [ 185.316807][ T8317] [ 185.591429][ T8317] Allocated by task 8095: [ 185.595756][ T8317] kasan_save_track+0x3f/0x80 [ 185.600449][ T8317] __kasan_kmalloc+0x98/0xb0 [ 185.605052][ T8317] __kmalloc_cache_noprof+0x243/0x390 [ 185.610445][ T8317] vhci_open+0x57/0x360 [ 185.614608][ T8317] misc_open+0x2cc/0x340 [ 185.618855][ T8317] chrdev_open+0x521/0x600 [ 185.623276][ T8317] do_dentry_open+0xdec/0x1960 [ 185.628043][ T8317] vfs_open+0x3b/0x370 [ 185.632120][ T8317] path_openat+0x2c81/0x3590 [ 185.636732][ T8317] do_filp_open+0x27f/0x4e0 [ 185.641277][ T8317] do_sys_openat2+0x13e/0x1d0 [ 185.645985][ T8317] __x64_sys_openat+0x247/0x2a0 [ 185.650857][ T8317] do_syscall_64+0xf3/0x230 [ 185.655376][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.661283][ T8317] [ 185.663609][ T8317] Freed by task 8095: [ 185.667588][ T8317] kasan_save_track+0x3f/0x80 [ 185.672277][ T8317] kasan_save_free_info+0x40/0x50 [ 185.677335][ T8317] __kasan_slab_free+0x59/0x70 [ 185.682117][ T8317] kfree+0x196/0x430 [ 185.686036][ T8317] vhci_release+0xbc/0xd0 [ 185.690400][ T8317] __fput+0x3e9/0x9f0 [ 185.694400][ T8317] task_work_run+0x24f/0x310 [ 185.699007][ T8317] do_exit+0xa2a/0x28e0 [ 185.703182][ T8317] do_group_exit+0x207/0x2c0 [ 185.707791][ T8317] __x64_sys_exit_group+0x3f/0x40 [ 185.712831][ T8317] x64_sys_call+0x26a8/0x26b0 [ 185.717522][ T8317] do_syscall_64+0xf3/0x230 [ 185.722035][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.727950][ T8317] [ 185.730291][ T8317] The buggy address belongs to the object at ffff88807b5f1000 [ 185.730291][ T8317] which belongs to the cache kmalloc-1k of size 1024 [ 185.744352][ T8317] The buggy address is located 88 bytes inside of [ 185.744352][ T8317] freed 1024-byte region [ffff88807b5f1000, ffff88807b5f1400) [ 185.758164][ T8317] [ 185.760486][ T8317] The buggy address belongs to the physical page: [ 185.766893][ T8317] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b5f0 [ 185.775662][ T8317] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.784191][ T8317] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 185.791755][ T8317] page_type: f5(slab) [ 185.795746][ T8317] raw: 00fff00000000040 ffff88801b041dc0 ffffea0001f1f200 dead000000000002 [ 185.804343][ T8317] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 185.812949][ T8317] head: 00fff00000000040 ffff88801b041dc0 ffffea0001f1f200 dead000000000002 [ 185.821627][ T8317] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 185.830305][ T8317] head: 00fff00000000003 ffffea0001ed7c01 ffffffffffffffff 0000000000000000 [ 185.839072][ T8317] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 185.847739][ T8317] page dumped because: kasan: bad access detected [ 185.854162][ T8317] page_owner tracks the page as allocated [ 185.859873][ T8317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5837, tgid 5837 (kworker/1:3), ts 83798102125, free_ts 83611383131 [ 185.879065][ T8317] post_alloc_hook+0x1f4/0x240 [ 185.883852][ T8317] get_page_from_freelist+0x365c/0x37a0 [ 185.889408][ T8317] __alloc_frozen_pages_noprof+0x292/0x710 [ 185.895221][ T8317] alloc_pages_mpol+0x311/0x660 [ 185.900083][ T8317] allocate_slab+0x8f/0x3a0 [ 185.904589][ T8317] ___slab_alloc+0xc27/0x14a0 [ 185.909266][ T8317] __slab_alloc+0x58/0xa0 [ 185.913682][ T8317] __kmalloc_noprof+0x2e6/0x4c0 [ 185.918544][ T8317] ___neigh_create+0x6c3/0x2360 [ 185.923402][ T8317] ip6_finish_output2+0xb70/0x17c0 [ 185.928524][ T8317] ip6_finish_output+0x41e/0x840 [ 185.933465][ T8317] NF_HOOK+0x9e/0x430 [ 185.937457][ T8317] mld_sendpack+0x843/0xdb0 [ 185.941967][ T8317] mld_ifc_work+0x7d9/0xd90 [ 185.946476][ T8317] process_scheduled_works+0xabe/0x18e0 [ 185.952049][ T8317] worker_thread+0x870/0xd30 [ 185.956669][ T8317] page last free pid 2970 tgid 2970 stack trace: [ 185.962997][ T8317] free_frozen_pages+0xe0d/0x10e0 [ 185.968026][ T8317] __put_partials+0x160/0x1c0 [ 185.972707][ T8317] put_cpu_partial+0x17c/0x250 [ 185.977477][ T8317] __slab_free+0x290/0x380 [ 185.981901][ T8317] qlist_free_all+0x9a/0x140 [ 185.986498][ T8317] kasan_quarantine_reduce+0x14f/0x170 [ 185.991964][ T8317] __kasan_slab_alloc+0x23/0x80 [ 185.996824][ T8317] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 186.002734][ T8317] __alloc_skb+0x1c3/0x440 [ 186.007160][ T8317] rtmsg_ifinfo_build_skb+0x84/0x260 [ 186.012457][ T8317] rtmsg_ifinfo+0x91/0x1b0 [ 186.016882][ T8317] netdev_state_change+0x139/0x1a0 [ 186.022006][ T8317] linkwatch_do_dev+0x112/0x170 [ 186.026868][ T8317] __linkwatch_run_queue+0x44f/0x6c0 [ 186.032159][ T8317] linkwatch_event+0x4c/0x60 [ 186.036752][ T8317] process_scheduled_works+0xabe/0x18e0 [ 186.042311][ T8317] [ 186.044637][ T8317] Memory state around the buggy address: [ 186.050267][ T8317] ffff88807b5f0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.058333][ T8317] ffff88807b5f0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.066392][ T8317] >ffff88807b5f1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.074447][ T8317] ^ [ 186.081402][ T8317] ffff88807b5f1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.089486][ T8317] ffff88807b5f1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.097558][ T8317] ================================================================== [ 186.204437][ T8317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.211700][ T8317] CPU: 0 UID: 0 PID: 8317 Comm: syz.2.624 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 186.222502][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.232606][ T8317] Call Trace: [ 186.235914][ T8317] [ 186.238875][ T8317] dump_stack_lvl+0x241/0x360 [ 186.243588][ T8317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.248815][ T8317] ? __pfx__printk+0x10/0x10 [ 186.253438][ T8317] ? preempt_schedule+0xe1/0xf0 [ 186.258334][ T8317] ? vscnprintf+0x5d/0x90 [ 186.262719][ T8317] panic+0x349/0x880 [ 186.266652][ T8317] ? check_panic_on_warn+0x21/0xb0 [ 186.271907][ T8317] ? __pfx_panic+0x10/0x10 [ 186.276360][ T8317] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 186.282400][ T8317] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.288778][ T8317] ? print_report+0x519/0x5b0 [ 186.293511][ T8317] check_panic_on_warn+0x86/0xb0 [ 186.298497][ T8317] ? skb_queue_purge_reason+0xb9/0x500 [ 186.304115][ T8317] end_report+0x77/0x160 [ 186.308401][ T8317] kasan_report+0x154/0x180 [ 186.312964][ T8317] ? skb_queue_purge_reason+0xb9/0x500 [ 186.318473][ T8317] skb_queue_purge_reason+0xb9/0x500 [ 186.323805][ T8317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.329846][ T8317] ? __mutex_unlock_slowpath+0x227/0x800 [ 186.335527][ T8317] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 186.341479][ T8317] ? hci_conn_hash_flush+0x1da/0x240 [ 186.346811][ T8317] vhci_flush+0x44/0x50 [ 186.351010][ T8317] ? __pfx_vhci_flush+0x10/0x10 [ 186.355915][ T8317] hci_dev_reset+0x42a/0x5d0 [ 186.360547][ T8317] sock_do_ioctl+0x158/0x460 [ 186.365181][ T8317] ? __pfx_sock_do_ioctl+0x10/0x10 [ 186.370331][ T8317] ? do_futex+0x392/0x560 [ 186.374703][ T8317] sock_ioctl+0x626/0x8e0 [ 186.379105][ T8317] ? __pfx_sock_ioctl+0x10/0x10 [ 186.383991][ T8317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.390020][ T8317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.396395][ T8317] ? __pfx_sock_ioctl+0x10/0x10 [ 186.401289][ T8317] __se_sys_ioctl+0xf5/0x170 [ 186.405917][ T8317] do_syscall_64+0xf3/0x230 [ 186.410455][ T8317] ? clear_bhb_loop+0x35/0x90 [ 186.415187][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.421117][ T8317] RIP: 0033:0x7fa33398d169 [ 186.425562][ T8317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.445202][ T8317] RSP: 002b:00007fa33479f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.453656][ T8317] RAX: ffffffffffffffda RBX: 00007fa333ba5fa0 RCX: 00007fa33398d169 [ 186.461661][ T8317] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000c [ 186.469666][ T8317] RBP: 00007fa333a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.477678][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.485683][ T8317] R13: 0000000000000000 R14: 00007fa333ba5fa0 R15: 00007ffcd8144268 [ 186.493697][ T8317] [ 186.497049][ T8317] Kernel Offset: disabled [ 186.501384][ T8317] Rebooting in 86400 seconds..