last executing test programs: 2m15.294200197s ago: executing program 3 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) accept4$ax25(r2, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @rose, @rose, @netrom, @default, @netrom, @netrom, @rose]}, &(0x7f0000000000)=0x48, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_FLOW={0x8, 0xb, 0xfffffff9}, @FRA_DST={0x8, 0x1, @private=0xa010102}]}, 0x2c}}, 0x4000000) 2m14.327442257s ago: executing program 3 (id=322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'macvlan1\x00', 0x800}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="0800b70000000000080026008f0900"], 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x20000400) r4 = socket(0x11, 0xa, 0x0) bind$tipc(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x7af80, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="67d8902400", 0x5}], 0x1, 0x0, 0x0, 0x28008810}, 0x0) close(0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x1, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x3, 0x300) 2m14.25144065s ago: executing program 0 (id=323): socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f102000024060020010000000000000000000000000002fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 2m14.055385149s ago: executing program 0 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000000b000000", 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000001500)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000007c0)="170000000200020000ffbe8c5ee17688a2006c328a03000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3babf53f024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r6, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m13.887271021s ago: executing program 3 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x64, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000058) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x38, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xc}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe8}]}]}, 0x38}}, 0x14) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000180)=r6}, 0x20) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xdc, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x79}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x99e, 0x37}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x2a}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x92}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x87}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x80000001}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x761}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xca}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfd}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @default]}) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 2m13.88664764s ago: executing program 2 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x607, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1411, 0x400, 0xffffffff, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x40) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000180)="ba4f91fccd8cc315badc72a7365176a2743d2374acab2864b470d435b15c2f0d253879287eac0e0000f5c785c5d4a0e411a5789edb04000000a01498c194c65ad4c12c006e0e9a99ec34be52e87df4dc67bf2158162be075412d20cd06d446b59aa8", 0x62}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501"], 0x14}}, 0x0) 2m13.42054139s ago: executing program 0 (id=332): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f102000024060020010000000000000000000000000002fe8000000000004c00000000000000aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="901053f7c2c386731d"], 0x0) 2m13.359857143s ago: executing program 2 (id=334): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 2m13.219574152s ago: executing program 1 (id=335): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000040000002000000000711237000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m13.19827523s ago: executing program 1 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x3c, r3, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x6, 0x7, 0x8000}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1fb, 0x7, 0x3800}, &(0x7f0000000080)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r7, 0x29, 0xf8, 0xfc, 0x2, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x1, 0x20000007, 0x8}}) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000100)=0x6) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32, @ANYBLOB="170001"], 0x38}, 0x1, 0xf00}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000304000000000000000000000400", @ANYRES32=r10, @ANYBLOB="60bc565ee603010014001a80100002800c00018008004600810032d37f91143a3baa9920bcf8e30af35489dbfe3e5e081ac5c2f2878468941f5a9742edc5a8d9594357133f27944e3c318fa8b5b163d0cedafe1c8598fec9daeef5457cac745509256242aaac0179253ce98913062545bd74463387604fcc82c217c12ec32a8f850defaa522b212ddc8addaf412e59fdb63e0dc5d3a22c298747308ec7a091b7fefd45e9dadc978f92c8fd2586301f3a796e5b7f74e32efc95f53a6a0a0c3c59ccfd052c18efcaca5a8d225f"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040844) socket$nl_generic(0x10, 0x3, 0x10) 2m13.164275709s ago: executing program 3 (id=338): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000002880)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0200000004d0fb0509000000eea8b802464cfa8f0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r6, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c4a600"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001000)={&(0x7f0000000140)="36d61b3f702e2a67a6f66a89d462e8806e92ceb56e1424759c9353826dbf9fc1", &(0x7f0000001180)=""/205, &(0x7f0000001080)="62b677cd991bfdaf87a20016c01ceb0020ea1fccc27b2a7ad4b370391bf590abea38a30477a5ae8d7203d4b8686a595f17801a79f776ed8ea9c15224ebb3897a146a76e0fbdeae93391cd3da07837bf9cb1e08f22ede688f59a17cdeacfbf989f39f3766f81e4bf1d08a487f788e7172b4de9483b08c1f9d6cd29d4746d023b9234cc6fa926992660578f5bcc9cf810a7264babe997ba96cf3979eb2368411", &(0x7f0000001280)="badf9134a8b2002826426abbff62ef7391f636cb469e5705c722937e867a80da5c9fba141755dfea0d150ed9fa52f6452034ca68b0b20f33294b42ca74a6546292fb7db09e92464c6c5aa5fff8177d92e4cdeae90e4efbe9ee2959353685f8213f0b12a478c6d43b02d5683ca843ca386d355aa0b12935b10d2a9fe55f568a66392edc7b58695dec00d6c4b21d8ba7ec150e67ade1a6e9eae67f923d85940935c5b35be1e2bf580caab2312e4007050e85f1b563ab8a4457eb3102799d34f3fa55c7c0b2adde", 0x1000, r7, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r9) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbda1b2ca87e55bbd7000fcdbe9250d6e10000100000000000000d47781297a2644591c37627537c3b23bb92ce980aeeae72afd8928b1659ebd32a8087f5ca67abe05d5f904675a40eca8fa70f87c4bd7c2156625095e8c931888e30e89c09322b8f8af58afd705b73232684fef3a012679bd552f18096132d57b743b3304e0a64c5cbc4fd7fe4c07863c157afac2e6316a29f0fb3cd56098148aa81bb9e0ce181a23fb7d08761bbfafaa65095303b8bb4997a15a8dc52af6aba0639534bce52518e99e9e1057f74f93d88afa37bc783c5287cd13d491f9295504f301bcf88be9a1f7"], 0x1c}, 0x1, 0x0, 0x0, 0x24048004}, 0x8004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000010801000000fcdbdf2500000000", @ANYRES32=r13, @ANYBLOB="00000000911209001c001a8018002d80"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$MRT_DONE(r8, 0x0, 0xc9, 0x0, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x4014}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8005, 0xfffffff8, 0x2, r5}, &(0x7f0000000080)=0x10) 2m13.083155938s ago: executing program 2 (id=339): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'dummy0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xffe0}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000001200000006332999ea667b503ed00000000000000"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='nilfs2_collection_stage_transition\x00', r5}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r11) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m13.082609129s ago: executing program 0 (id=340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8005, 0xfffffff8, 0x2, r9}, &(0x7f0000000080)=0x10) 2m13.043360667s ago: executing program 1 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) r1 = socket(0x2a, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0xff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 13) 2m12.617789921s ago: executing program 1 (id=343): r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000240)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1004, &(0x7f0000000880)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x0, @local, 0x4e20, 0x4, 'sed\x00', 0x14, 0x9, 0x7a}, 0x2c) 2m12.612853534s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x607, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1411, 0x400, 0xffffffff, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x40) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000180)="ba4f91fccd8cc315badc72a7365176a2743d2374acab2864b470d435b15c2f0d253879287eac0e0000f5c785c5d4a0e411a5789edb04000000a01498c194c65ad4c12c006e0e9a99ec34be52e87df4dc67bf2158162be075412d20cd06d446b59aa8", 0x62}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501"], 0x14}}, 0x0) 2m12.527456364s ago: executing program 1 (id=345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 2m12.501752782s ago: executing program 2 (id=346): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="7fffffff00000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m12.347868105s ago: executing program 1 (id=347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48c02, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000380)={0x4, {0x4, 0x5, 0x1, 0x0, 0x2}}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x48}, 0x4, 0x700000000000000}, 0x8850) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x80, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4801}, 0x801) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) bind$can_raw(r12, &(0x7f0000000000)={0x1d, r11}, 0x10) close(r12) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 2m11.967655893s ago: executing program 32 (id=347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48c02, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000380)={0x4, {0x4, 0x5, 0x1, 0x0, 0x2}}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x48}, 0x4, 0x700000000000000}, 0x8850) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x80, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4801}, 0x801) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) bind$can_raw(r12, &(0x7f0000000000)={0x1d, r11}, 0x10) close(r12) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 2m11.921814425s ago: executing program 0 (id=349): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1a3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1], 0x1c) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x30, '\x00', 0x0, @fallback=0x24, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2m11.92149502s ago: executing program 2 (id=350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x14) 2m11.863466869s ago: executing program 33 (id=350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x14) 2m11.85381717s ago: executing program 3 (id=351): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f102000024060020010000000000000000000000000002fe8000000000005000000000000000aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="901053f7c2c386731d"], 0x0) 2m11.82491875s ago: executing program 0 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, r1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/164, 0xa4}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'veth1_to_hsr\x00', 0x1000}) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x9) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000480)={0x2f, @multicast2, 0x4e22, 0x1, 'wlc\x00', 0x41, 0x4, 0x2d}, 0x2c) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000004c0)=0x1eaf, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408f0}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@deltclass={0x38, 0x29, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0xfff1, 0x1}, {0x1e, 0xfff1}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5e, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000c0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0xf, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0x2}, {0x5, 0x2}]}, @struct={0x8, 0x7, 0x0, 0x4, 0x0, 0x6ff3ff47, [{0x5, 0x3, 0x85}, {0x5, 0x1, 0x5}, {0x5, 0x5, 0x7}, {0x8, 0x3, 0x4}, {0x2, 0x5, 0x81}, {0x3, 0x2, 0x4}, {0x2, 0x3, 0x7ff}]}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000009c0)=""/126, 0xf8, 0x7e, 0x1, 0x5, 0x10000, @value=r3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xd0000000, 0x0, r3, 0x2, '\x00', r1, r7, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x108, r9, 0x113, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "0897970d60f5e96cab952c914b5a59eef2a6e0205165ea18ad9bb3f6434637dfd050af18ea"}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "b1c6c18818122b4c8a32beb4c81e41209e90ed74ebc4eea163690c00647f8f537ab7e7d21219a0a080f48da867b55e689a2377b2ce2ff960f244cb00173e515e6532264e87725aec2598dd00542bf2597cf205a7ff3f5be5e92535509ccfa54916bdb90aaf1c77b211a9c1a225c494a1efcea8cafbbd976d159fe3932fb5469cfb2156488dda030d6345b03e19bd8d84b11fd78558501759c038dce9cbe465d1915812f318f581917b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x5) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000e80)={0x0, 0x5}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000f00)={0x0, 0x3, 0x20}, &(0x7f0000000f40)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000f80)={r11, 0x1c000000, 0x7ff, 0x22, 0x8c87, 0xc, 0x5, 0x8, {r12, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0x0, 0x1, 0x3, 0x4}}, &(0x7f0000001040)=0xb0) bind$unix(r3, &(0x7f0000001080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r13 = accept4(r6, &(0x7f0000001100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r13, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xd0, r8, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x81, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x99, 0x2a, [@chsw_timing={0x68, 0x4, {0x400, 0xe}}, @random={0x3, 0x79, "f609722d27713354aa641f9e5370d5596eb53685da54247c5883246a426df243412d5ce32f074972f1c2c9a748595d2f03a57ae3995367b90aff1e8b9ad5757f0f5bdc5d52f0342e15b31bade6c173c23e8a82c3762fd0cd022a2cb98792691a6033693db76505f807e2370015fab83c28712e97c39fb4737f"}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000000) 2m11.584861078s ago: executing program 34 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, r1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/164, 0xa4}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'veth1_to_hsr\x00', 0x1000}) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x9) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000480)={0x2f, @multicast2, 0x4e22, 0x1, 'wlc\x00', 0x41, 0x4, 0x2d}, 0x2c) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000004c0)=0x1eaf, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408f0}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@deltclass={0x38, 0x29, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0xfff1, 0x1}, {0x1e, 0xfff1}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5e, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000c0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0xf, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0x2}, {0x5, 0x2}]}, @struct={0x8, 0x7, 0x0, 0x4, 0x0, 0x6ff3ff47, [{0x5, 0x3, 0x85}, {0x5, 0x1, 0x5}, {0x5, 0x5, 0x7}, {0x8, 0x3, 0x4}, {0x2, 0x5, 0x81}, {0x3, 0x2, 0x4}, {0x2, 0x3, 0x7ff}]}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000009c0)=""/126, 0xf8, 0x7e, 0x1, 0x5, 0x10000, @value=r3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xd0000000, 0x0, r3, 0x2, '\x00', r1, r7, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x108, r9, 0x113, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "0897970d60f5e96cab952c914b5a59eef2a6e0205165ea18ad9bb3f6434637dfd050af18ea"}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "b1c6c18818122b4c8a32beb4c81e41209e90ed74ebc4eea163690c00647f8f537ab7e7d21219a0a080f48da867b55e689a2377b2ce2ff960f244cb00173e515e6532264e87725aec2598dd00542bf2597cf205a7ff3f5be5e92535509ccfa54916bdb90aaf1c77b211a9c1a225c494a1efcea8cafbbd976d159fe3932fb5469cfb2156488dda030d6345b03e19bd8d84b11fd78558501759c038dce9cbe465d1915812f318f581917b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x5) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000e80)={0x0, 0x5}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000f00)={0x0, 0x3, 0x20}, &(0x7f0000000f40)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000f80)={r11, 0x1c000000, 0x7ff, 0x22, 0x8c87, 0xc, 0x5, 0x8, {r12, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0x0, 0x1, 0x3, 0x4}}, &(0x7f0000001040)=0xb0) bind$unix(r3, &(0x7f0000001080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r13 = accept4(r6, &(0x7f0000001100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001180)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r13, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xd0, r8, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x81, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x99, 0x2a, [@chsw_timing={0x68, 0x4, {0x400, 0xe}}, @random={0x3, 0x79, "f609722d27713354aa641f9e5370d5596eb53685da54247c5883246a426df243412d5ce32f074972f1c2c9a748595d2f03a57ae3995367b90aff1e8b9ad5757f0f5bdc5d52f0342e15b31bade6c173c23e8a82c3762fd0cd022a2cb98792691a6033693db76505f807e2370015fab83c28712e97c39fb4737f"}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000000) 2m11.483027438s ago: executing program 3 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) r1 = socket(0x2a, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0xff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 14) 2m10.771286059s ago: executing program 35 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) r1 = socket(0x2a, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0xff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 14) 4.295319329s ago: executing program 4 (id=1504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8f91}]}]}, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'hsr0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x10, 0x4, 0x8, 0x9, 0x2080, r3, 0xb, '\x00', r4, r5, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='host1x_syncpt_wait_check\x00', r6, 0x0, 0x5}, 0x18) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209010b126fd9e828bd0aa1fc9c3170"], 0x10}}, 0x30000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newsa={0x204, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x4, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84}, {@in6=@mcast2, 0x4d5, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {0x2000000000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x10000000, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @lastused={0xc, 0xf, 0x9}, @lifetime_val={0x24, 0x9, {0x8, 0x1, 0x7, 0xe2f7}}, @migrate={0x9c, 0x11, [{@in=@empty, @in6=@private0, @in6=@mcast2, @in6=@private1, 0x32, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in=@private=0xa010102, @in6=@loopback, @in6=@mcast2, @in6=@local, 0x2b, 0x0, 0x0, 0x3504, 0x2, 0x2}]}]}, 0x204}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x6a040000) 2.021829143s ago: executing program 4 (id=1536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000080)={0x57}) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000000080)=0x43) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000001c0)=0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x1c2, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x18c, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xa, 0x4, 0x5, 0xe, 0x40, 0xfed9, [@private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x5, 0xc}}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc, 0xc, [0x4403aad3, 0x7]}}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r11}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff}) socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) 1.55066707s ago: executing program 6 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001180)={{r0}, "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"}) 1.444548034s ago: executing program 5 (id=1548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0xb48, 0x8d8, 0x1170, 0x1398, 0x8d8, 0x1170, 0x8d8, 0x1398, 0x1398, 0xa78, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x8b0, 0x8d8, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x4}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xba8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="5c2a99d37a49a8bd95bb17b2f1b7b60e854fc0a03eeb310abde9bac2a55b328e57f42a87b6c7b93b9597fa49512f8e05bccbd143a527aba89580a02626ed2bee02cfda914152b4c8249eb1b2ca76dea47dab0993"], 0x40}}, 0xc8c0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844d}, 0x20000000) 1.444092266s ago: executing program 6 (id=1549): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x78, 0x3, 0xfffffffd}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xff, 0x2, 0x3, 0x8e1, 0x6, 0x1}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @fwd={0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r3, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r5, 0x1) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000032d563354ccdf45675192600b7020000000000008500000000000000b700000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 1.361300223s ago: executing program 8 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=@newtaction={0x44, 0x76, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x44}}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d000000010000000000000014000000000000001001000002000000000000e6"], 0x30}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f0000000040)="8f840100000000000000000e0580a7b6070d63e286a5cefe", 0x18) 1.196307256s ago: executing program 8 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.195523461s ago: executing program 6 (id=1553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a14000000000a03080000000000000000070000001c000000090a010400000000000000000700000008000a4000000000140000001100010000000000000000000000000a7d4cee0cabf5d89c7825f2abd066315ed0c637048885d2aacdfbdf5949d89594c46cccb703c42a72c808ab6ff92227296f6dd6326a8c877c6af8261343af75b3796fe9f0d5594311f1c392dd8667d0998d2b76c9a8427407bec716b79413ef0d67a942f619c902c376c8f9109c3349214f427802f053d4b535ae0a3f70146b6f126a5a6710c27c9dec5c8fa08de25af834d9ff7f35dd6bc9113bb06447bebc367f"], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x0) unshare(0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4018}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x40000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.187332475s ago: executing program 5 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000"], 0x3c}, 0x1, 0x11}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x607, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1411, 0x400, 0xffffffff, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x40) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000180)="ba4f91fccd8cc315badc72a7365176a2743d2374acab2864b470d435b15c2f0d253879287eac0e0000f5c785c5d4a0e411a5789edb04000000a01498c194c65ad4c12c006e0e9a99ec34be52e87df4dc67bf2158162be075412d20cd", 0x5c}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501"], 0x14}}, 0x0) 1.103325898s ago: executing program 7 (id=1555): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x74}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r4, 0x408, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x2, 0x9, 0x6}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8008000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r5, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000140)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0x1, 0x2}, {0x0, 0x3, {0x2, 0x49729ca5bacd5d8, 0x5}, {0x1, 0x1, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xff, 0x4}, {0x1, 0x0, 0x2}, 0xfd}, {0x0, 0x3, {0x2, 0x0, 0x4}, {0x1, 0x1}, 0xff, 0x1}], 0x80) 1.067562403s ago: executing program 7 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a89a24ee8a3c77f8b"], 0x68}}, 0x0) socket$kcm(0x2, 0x3, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="bc6d85a4a3ceb660431c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x505, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53003e4c6588a80000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = epoll_create(0x2) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x140f, 0xf9f0f00d83ff580d, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000006}) r9 = epoll_create1(0x80000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000140)) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.051294095s ago: executing program 8 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000"], 0x3c}, 0x1, 0x11}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1411, 0x400, 0xffffffff, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x40) r5 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r5, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501"], 0x14}}, 0x0) 982.440633ms ago: executing program 4 (id=1558): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef4f", 0x9a}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0xff01000000000000) close(r1) 980.430277ms ago: executing program 5 (id=1559): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) socket(0xb, 0x6, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x4010, r1, 0xd9b63000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x607d8000) 902.280225ms ago: executing program 6 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00020000000000001c001a80180002801400018008001e0a6b005d03000008000b007400000014003500776c616e3100"/58], 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00020000000000001c001a80180002801400018008001e0a6b005d03000008000b007400000014003500776c616e3100"/58], 0x50}}, 0x0) 763.362096ms ago: executing program 6 (id=1561): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x20048004, &(0x7f0000000340), 0x3a) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x108, 0x0, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11, 0x0, 0x52}, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0xd, 0x1}}, @common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x2, 0x4e21, 0x4e22]}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @broadcast, 0xffffff00, 0xff000000, 'wlan1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x62, 0x3, 0x26}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e24, 0x2, @mcast2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)="7861e60f4102fab7aceead7eb1bfd1639bca69c82088bbdcfb4aadc7a1d3117e70436068bbd07e43e6af49a178dfecfd4e995cc5abad47e360d797f5f35437342ea25a1409b11bf497181876d51f7491e68c8944555bab813587ea23a68ab120b960409f", 0x64}, {&(0x7f0000000400)="c58cc46391ecce23e58164bdfeaff2be084f546e77ce826745f148a573a2809a58e0b5ff5415b127bdbcac2ee3aef3e591208e9579f8b9a57cbea66be2336d429c15573b6c52d61f3b2db63ec38c5cbf7588f024a9e7eb554a24993c6b14200250fd54efe39b37dd56e84b0cee13", 0x6e}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x20004002) 763.019155ms ago: executing program 4 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x408c0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 727.647453ms ago: executing program 8 (id=1563): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f83d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0xfe0, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC]}, 0xfe0}, 0x1, 0x0, 0x0, 0x20008091}, 0x801) getsockname$netlink(r8, &(0x7f00000001c0), &(0x7f0000000200)=0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="da02e0929db59d75553d26c696d90e4054549f85a1451da47072bcdb2e27d2917aec1fa8b39ef26bea1c75480c27fbe376dcc6965f92c8ccb83789f40a80bcb123a70adb75b978d08a793cd0e80be25e9cd3756f30799b308d15e0f193d191c9d3e900110e2416fb88dfd5aa261dfd3f1b4dcdc255461e538c38c841ce9909aba55dcbc152afdd4e9de5fa274f23492bb8e2cab755e02983b8772dfeed2cfee9fab687c674aaf05c60524965d42425e091452140bda00b29a7376f89328921050dc30faad301d9c86d88ad8aa00d687011d63a7144af28936c1aea5b9846d0b5a64564bd5e0681df3133b399bf2f3085351e5047a6906099fc8b98ff67baf10926f60e60676d8bac45696f563d9f3dd773f20babf9fd763c64cbf95d97707c3ae8615d025b22d1ce3a401c9e85b6dfd7befead05c348df9ddfb883459867c6426089524ff312c819d15e2d5cc800b26f90c7a034163521af054536debb192fe03715c5a7d0c73cccf70057bc677ac31014ff2a2462883cd40d80a3b8a830aed6d95448931082e9e2e6ef9e010c9b607223edb7e09492a0ac95d8f6b0b1134db18eea2b47a33a288dc27d8dcc417b77ab724a6b15b3369555660600f639c0495e25d65d22213e88917fde8ed947264c33f5fda448a450c68e2cca80a31421cc218f3aeb7234407d8137e87296bde3c010b1bcb9ba72696ceb5c63b48f03b907e2e8238132864e8a5c848627fddeef082ab85ac1e0c02d7f4111b195ce5d5f4439bcecda48f46738e427157817d5920d8484b91931f53b8d27f46511fa103235566bc09d38d1ccb2171710264f2e62d4eb5a90eb35d4eace763ef30141a89d8d8d71705a3eeab3aa76ed2c0bcdb8ca598334d79a66edee6cac3eb4db85e3390b3dfc33a8dec255f326f182c8afdfa31424b39feba825d94ea2196fe4a982c84d841a2ec92c990c622b25d1a9dfbb9371ea8404595cc03e6bb5a3a26f209dd2454a94735b7a3aca311e343bb02613370065acf299b3683f9214c948205d7350d2f291c0bef6f7829f637326f1cfc75e4c85035af140535dc436f864e75fc2bbcdbbc639822d6463c5cc3da6c888b4289998280a633ed291783193f3105a8600f415edc80595e199f6edc9be3c36dbc5cf550ff65d1ff81cfba4fe1170105da548b3cae9767737761bbe5ba8ffd02a41b76a75bc0743c83265aea2b0108d0a1f6bfae268f053a3609714e0ad4a3ee1e67501807d1c533b61f00e42e78aa33e340541e492d9f589bfbda7ec5b53603cc211ca3ca9396b27a2f2d2df75c86017a6e674ae05efdebbeef21f0147cbaca93437de4cba62df61babc68715cb065f8eb74a9ff4aac2a23fd0a62b5fb5ed69a60e25a49be97bd02769e3f9ed8f35956c10dd9b9f585a93552227804684a2cf9d3c3f5e048a05388982e343c6ad7a3e21410db6f2fa1947b7beb86b4853128db3a664006324e3564fab82cd33d9c0149fd87be6f852c857d5a23f71022cc5880d333e9129110a9e6a82822b749625157a7e75e90fb699260769e328d71a82ef41eb5fa7083a3e9e0a46177210f3802893224a08df6ef8e92538fe935caadef7c12492455a349b08022a1a8c6757ca79d262031ed5ac610bb74451823bbfe5f364bb98afafec4ce3116e7b20cfd56639272197d8bd9e20a37d9b90ae305c5f6c3eb9140049a3ac3c9896530130288744a36c2a94ea6f84c930b31aa957c29682f526ea9809ab0991990a9491791814210a69edf8df29d5a12f69d90c26788d3fc6ae6c079a49dab8283f43ce7e812ccf54658de24a9753960eac35405e549933754ff94e0c88b62d3e7318f2923a5cefb2184fbb361ad88ff9618ed678464af38496333b1083995c50f6fed40307f40a952c5c4a9d187082b850b9c48a91929afa32ceab9813cbcf024ad969775d16beac1d97c33f2b1084ca6719f1de998ec2b23cb4cabf135c1200b8523dc462434ef712737ec5a392b4a770f6b6702ab576d6d7c30284b7abe2db619442a94cb5b057eff83747175fc454cd4425b0bce81a44adc8e3a931dab3d9d885cbbf492cf152fe673a9f5eddd23609e45de5d406a5bc03842276bf933ad831a74911f1f679d3493533b59903a59d63795a56af2be052271da89c75ec4fd05c97c058ac89f79e3df94c56983589a74a3f583b395bb012d24a4988788d7f41d5334b0b64b427eabfdffde8cf3af5fdd4ae78b88fa402fde7bceba4b1fafff9ed5b7c55bddba7046231d2837b26ee7e88774558a5d78136c48a60d4a2410a05ab94807204cfc3ebf7f9c1a5a16b738dbab611cc89eaca55101e0af8128150205d244ddbaeae1eab2e23bd2d877b21c43039645a99ea507235b3ac9fc041fd37399c7b5ca5302ff54cc0c2b91ddda35cbe9a7b5d2c2bf7abb796f06185b56a0a7c4f652930e57b3c9eb69852921afffcc86be2768e40fe25f533b17f3a56e00c50964ba5a05de907bf1259ded7bb5a8f39c3e2f8f7f56b356be8e510028c15040894492fbcd84301e9ffcb36bd1959eb610ac82ca808b8a0b24e42e002d4de2ffa5b7f70c28e0f2c3d6734a90d31be326c7e8b1da1e7a94ec557e998f260c40082761780cca0ae7cdbd09c057a532a69d2e971f4d2fda2557069cc2c6e334f2dc246f5d675652bf6b4b6c4f838484fb64aebf2e51b384513d545f65a6bce99e696bd484c19799ce294cb4425c0a28ab1bf23ac84169232a4de593430b6d3cc18c3043c6c4e947f8cde7040b510530a4df0fe270cff302a62c3f858e674ecdfee262801c863dac815437ac62b720a8fd1146e2dfea80397b7f15965bbaeb41ba84ef63044c9dd48109973f96501ef0e51031706665b1724c0cab197117aca86bc137c6d2fbeb85d4b3d93200c7fc6d0e2583e44f607c72cf0cacd990d0160f332713cba1159a96ba717fcdd91bde51ad81448315387783a02a05fdde44c4819ffe9a5808d142bcaf283f90d82aca7fe2779ecccc6acbcf2d58a846d01e1ca2386f1a3321e7eca8bd05eccc06451f7da996d1a823f2235780e310e3f3d75a78a14e995f75799331304f3c33eb58561cc7e951f65d7e02c67849f70600610c0ac780d3b796a5fcda694d6a0ecaf6795524490086cd233dfdb44073f54e2f61a58a5e271602bdcb31c226c859e0a41e86a9aa437e49bb33e2fd8234e62e8acc22adcf55249ccacb6aeb5dbae76fd26c0785bd1a340da3f1a4f7dc44603c9a70f2637fd7e63aba68b1c61819d6aa4ef2e1745568ed9894bb66404e22e04a5c1d9d15d21bd5785db82f3bba763103b18015dbb9e63b3485257cf60ead97c07f89de16b7e5fedd1a1707fe9150a2eb5af96d753b3ccae88827f6126eb7919100ec1ac06cbb30c89aeffbedcd555cb2a2b4bb59481b9dfea27377b4e1ea1acc3392027c4f4dc9b44bd3161b57575a74c7f33e9f69374a3a94f4271e85cdd6c312649625ef4ac9032789e9943553b85ea594b2a8f517f205c57f22316fea2cd5ad2a6b3149b85dee2476fd69ffadc278d2b45c0a391d5567b6411d6f16852dff9d8ebdf0147ec840e054010c4a37764239b3783ea00a1e6605eef6b8d1f0fdf3dc0e2e94b501e1f9f7eae972dfe14fb241cb14d1726147b52ebc0ede069ea73df91cf0c4d6d58573d6413cba78fa85986b041baf5cb4fbbff89634ae5151d1eceef33a9acb1dea87d159a6868d4d43e7df706fef48284c648f8d6314aaabc1ba9702652eac010ec6d40dfca9eca1b7588e6efa4043510b91440cbf089aa6e52cc9b1e7e26c14bdb299392ee933afc436ab844083c0d263022bce73412054369f3949923c39c13f1c7d50a3505e16a5018d91470dc3bb1634cef7b6413d7c23d77b48cc21c22939daf26d3c271d3cf172f42ad40203f1db50127cf7e079e2a19ad34b56aba39992cffbe7726cab4a718656b955a6410bdb4642a7cd4b035037d84f447af81157a0c363df574423e0bbf46c323378953cce0537f59e2ae5d4307f13e75572f889640581607f34a65f7e4c5c7fc59a07541e40a7b83fbeee5e2910658eb2ea058050c58b6382916939c0a358f678f8b5002b8e79765083caee8ade57d1d3eec62e6306cc41547c2e805610ac7976ba97999aa2813a4d4acccdec14762c83cc5c18c9694a74487a7fcca996adde8da1c8a74842d7162f3c96ca7043c08a9bf769bfb07e1a33cd0591c3409098a6becd7804aac74373631207efa7a6eda851b3c9f483b024cae58396992fc58c36a1143d5f28dc4d6a221e1238082405f7a7234fcda6272329974e38d457698d12eabfe3edd327c32305f739820d83eaecde44f10a0e03d02b3c029ebcafdc6c01ec7010045d65438511c72f4fb5681ed8647d30f22bf37b345e9dd8a84d033370f18e904ef11a479fcf96bad45f1bda1a6fda19cf94ff95a8c489f665a162c3ddcc52f523e755b3821b5481662c9db2878a2ef996fa227863e82f641aa0cba96ca2464f0ee491c3db1f5a1ad5be4f2c9d3d4c8f1c0d70e3bef4c5455165571991dbe08057d8c2007e239acc50b8988ae77958bfb32f1a9b7e9cbd8adab24fb42f79e31fb624400b7e4877b0537dd892fdd56bcf86ca7ed5401c50b3bf473615e8e89504d586c8bde3d3802a7bc6f87674180e28fa12c1167b5355cdd66fb4a9457a68f6b2d0d2f5976ab8a36e7390b3204e2481220950776773630ddf839a", 0xd01}, {&(0x7f00000002c0)="40288f34bcff367c6993649e41118758375f199400599d9c8e1141c3777325c36236ae73b0a9755e1b624228bf70", 0x7fffffffffffffff}, {&(0x7f00000007c0)="155332afc2328ac86f330b721481623fa21d1c82095d68a6e83f6a0c272f5c44e27b53bb9c747b5fc8b89cb566637c7c444a", 0x32}, {&(0x7f0000004040)="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", 0xfc1}], 0x6, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19500000000000000000000000000000000000230b9fc8003b7cb229f83df85855573d0000", @ANYBLOB="b76c326f5fd8f8619a83b1e9232d85376f1235aeedaa1704bc496b3e0d5fc5125cdaaef416a872af7bb21f0c1199624469a4443be9921740d1a2e8507c660e389b9ba82e40ebb3baf0ea03b5080d0b71d012b6f9d2140a40f6f3986242bbef382acc75f1aff5728caf0caae2bac11ac8edd787ccbf5b44659eb0b7ed575c0d99d062cce7d1930c976d407b7ee5258c335feb23d6c3070a28950550b36df13d1ed5e604ad8edd3c4bfa13b809566d500a2bfe6be27ba7069ccb9f523e614b8072df3d637d0c90c7ddf8cfc909d7835e847612f7a6a225ff207fdd8442e89e", @ANYBLOB="0200"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="00000000030000000100"/28], 0x50) socket$inet6(0xa, 0x5, 0x8000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r11}, 0x8) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 686.53088ms ago: executing program 6 (id=1564): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x78, 0x3, 0xfffffffd}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xff, 0x2, 0x3, 0x8e1, 0x6, 0x1}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @fwd={0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r3, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r5, 0x1) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000032d563354ccdf45675192600b7020000000000008500000000000000b700000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 589.981606ms ago: executing program 4 (id=1565): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x6) (async) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r5, 0x20, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a00)=""/56, 0x38}}, 0x10) splice(r4, &(0x7f0000000180)=0x7ff, r4, &(0x7f00000001c0)=0x7, 0xe, 0x1) write(r4, &(0x7f0000003300), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x18, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b119a000000000006000000000000009500800c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b119a000000000006000000000000009500800c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_subtree(r7, 0x0, 0x1ffc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x2, "bf02"}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e23, 0x8937, @private1, 0x401}}, 0xfffc, 0x3}, &(0x7f0000000140)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e23, 0x8937, @private1, 0x401}}, 0xfffc, 0x3}, &(0x7f0000000140)=0x90) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x1207000, 0x800, 0x13, 0x1}, 0x20) 479.861588ms ago: executing program 8 (id=1566): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x74}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r4, 0x408, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x2, 0x9, 0x6}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8008000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r6, 0x0) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000140)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0x1, 0x2}, {0x0, 0x3, {0x2, 0x49729ca5bacd5d8, 0x5}, {0x1, 0x1, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xff, 0x4}, {0x1, 0x0, 0x2}, 0xfd}, {0x0, 0x3, {0x2, 0x0, 0x4}, {0x1, 0x1}, 0xff, 0x1}], 0x80) 393.70621ms ago: executing program 7 (id=1567): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500e2ff00000000bb7ccc2db638ecdcb975607aaad7c13b0bb7fbbb6c999f0c1bb32e5d8dcac681616269f821aa5dc0d11472093bb4b01d06e10b6518a98774a0d09061f06e4d74207f837997c36ab39ecd0c36b7a61721a36eae01eb224c045a38e701a4d196a4c9e14977c4d8d6396d84198d0a7fc83e02c9cc8882112e8ed59e1c0e1f3a00b0c8478dadbd2cc98fbc7153efbacc41497c78726b161ce3c2610bb71a2b0774abd84b26932d1bfac295d893f94ae878f90d909dccd4fe770435a013d09f88"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x3}, 0x1c) sendto$packet(r4, &(0x7f0000001100)="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", 0xa8d, 0x40000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000880) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r1, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)='%-010d \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r5, 0x58}, 0x10) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/86, 0x56}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4, &(0x7f00000003c0)=""/102, 0x66}, 0x40000004) 335.427451ms ago: executing program 5 (id=1568): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f102000024060020010000000000000000000000000002fe8000000000000000000000000050aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="901053f7c2c386731d"], 0x0) 331.861276ms ago: executing program 4 (id=1569): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f4, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f000000140005002b00427b00000a0001007770616e3100000005002e"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x100) accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8, 0x1, 0x7ff, 0x100, 0x101, 0x15c0010}) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r8, &(0x7f0000000300)=""/82, 0x52, 0x9) 325.498421ms ago: executing program 8 (id=1570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a14000000000a03080000000000000000070000001c000000090a010400000000000000000700000008000a4000000000140000001100010000000000000000000000000a7d4cee0cabf5d89c7825f2abd066315ed0c637048885d2aacdfbdf5949d89594c46cccb703c42a72c808ab6ff92227296f6dd6326a8c877c6af8261343af75b3796fe9f0d5594311f1c392dd8667d0998d2b76c9a8427407bec716b79413ef0d67a942f619c902c376c8f9109c3349214f427802f053d4b535ae0a3f70146b6f126a5a6710c27c9dec5c8fa08de25af834d9ff7f35dd6bc9113bb06447bebc367f"], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x0) unshare(0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4018}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x40000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 221.025366ms ago: executing program 7 (id=1571): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x2a, 0x80000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6(0xa, 0x802, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 119.075316ms ago: executing program 5 (id=1572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0xfffff000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r3, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/98, 0x62}, 0xfffffff0}], 0x1, 0x13021, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0xd017, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000200004000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) recvmmsg$unix(r0, &(0x7f0000004540)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/84, 0x54}], 0x1}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/107, 0x6b}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/126, 0x7e}, {&(0x7f00000018c0)=""/99, 0x63}, {&(0x7f0000001940)=""/194, 0xc2}], 0x5, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001b80)=""/87, 0x57}, {&(0x7f0000001c00)=""/3, 0x3}, {&(0x7f0000001c40)=""/130, 0x82}], 0x3, &(0x7f0000001d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/7, 0x7}, {&(0x7f0000003040)=""/75, 0x4b}, {&(0x7f00000030c0)=""/204, 0xcc}, {&(0x7f00000031c0)}, {&(0x7f0000003200)=""/171, 0xab}, {&(0x7f00000032c0)=""/95, 0x5f}, {&(0x7f0000003340)=""/246, 0xf6}], 0x9, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000035c0)=""/11, 0xb}, {&(0x7f0000003600)=""/6, 0x6}, {&(0x7f0000003640)=""/247, 0xf7}, {&(0x7f0000003740)=""/149, 0x95}, {&(0x7f0000003800)=""/198, 0xc6}, {&(0x7f0000003900)=""/171, 0xab}], 0x6, &(0x7f0000003a40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003ac0)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/198, 0xc6}], 0x1, &(0x7f0000003c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003e80)=""/176, 0xb0}, {&(0x7f0000003f40)=""/221, 0xdd}], 0x2, &(0x7f0000004080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000040c0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004140)}, {&(0x7f0000004180)=""/113, 0x71}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/3, 0x3}, {&(0x7f0000004300)=""/183, 0xb7}, {&(0x7f00000043c0)=""/84, 0x54}, {&(0x7f0000004440)=""/122, 0x7a}], 0x7}}], 0xa, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 100.852808ms ago: executing program 7 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000"], 0x3c}, 0x1, 0x11}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1411, 0x400, 0xffffffff, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x40) r5 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r5, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501"], 0x14}}, 0x0) 34.967002ms ago: executing program 5 (id=1574): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) 0s ago: executing program 7 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010062726964"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 132.003493][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.020310][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.032046][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.128514][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.161796][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.186764][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.203216][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.223206][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.233765][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.243620][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.254934][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.264812][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.275874][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.285733][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.297821][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.309681][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.435483][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.450069][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.462011][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.472599][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.482574][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.493226][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.506845][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.524399][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.551553][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.567230][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.585059][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.618120][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.643015][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.654397][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.666889][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.676877][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.692369][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.702273][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.721940][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.738627][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.750438][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.761851][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.776961][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.787525][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.799020][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.812749][ T7377] lo speed is unknown, defaulting to 1000 [ 132.859645][ T7127] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.875412][ T7127] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.887790][ T7127] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.900310][ T7127] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.937058][ T7126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.946023][ T7126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.955678][ T7126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.965074][ T7126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.139531][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.176089][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.303558][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.331699][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.421647][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.439869][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.495770][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.533622][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.661174][ T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.692204][ T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.751038][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.786786][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.832161][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.6.358'. [ 133.918287][ T7420] netlink: 276 bytes leftover after parsing attributes in process `syz.8.386'. [ 133.982730][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.008064][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.387'. [ 134.475534][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.390'. [ 134.878875][ T7452] netlink: 32 bytes leftover after parsing attributes in process `syz.8.393'. [ 134.955958][ T7452] IPv6: NLM_F_REPLACE set, but no existing node found! [ 135.197133][ T7462] geneve0: entered allmulticast mode [ 135.377477][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.397'. [ 135.534700][ T7478] tun0: tun_chr_ioctl cmd 1074025673 [ 135.592844][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.8.401'. [ 135.764787][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 135.831327][ T5874] lo speed is unknown, defaulting to 1000 [ 136.321621][ T7516] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 136.364909][ T7519] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 136.383573][ T7513] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 136.400798][ T7519] batman_adv: batadv0: Adding interface: virt_wifi0 [ 136.417491][ T7519] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.484754][ T7519] batman_adv: batadv0: Interface activated: virt_wifi0 [ 136.798816][ T7535] __nla_validate_parse: 4 callbacks suppressed [ 136.798834][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.419'. [ 136.823010][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.6.418'. [ 137.088444][ T7550] syz.5.423: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.130740][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.5.423 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 137.130765][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 137.130774][ T7550] Call Trace: [ 137.130782][ T7550] [ 137.130789][ T7550] dump_stack_lvl+0x189/0x250 [ 137.130831][ T7550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.130855][ T7550] ? __pfx__printk+0x10/0x10 [ 137.130871][ T7550] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 137.130898][ T7550] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 137.130926][ T7550] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 137.130955][ T7550] warn_alloc+0x214/0x310 [ 137.130983][ T7550] ? __pfx_warn_alloc+0x10/0x10 [ 137.131006][ T7550] ? kasan_save_track+0x4f/0x80 [ 137.131024][ T7550] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 137.131043][ T7550] ? xskq_create+0x56/0x170 [ 137.131064][ T7550] ? __x64_sys_setsockopt+0x18b/0x220 [ 137.131082][ T7550] ? do_syscall_64+0xf6/0x210 [ 137.131111][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.131141][ T7550] __vmalloc_node_range_noprof+0x125/0x12c0 [ 137.131196][ T7550] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.131217][ T7550] ? xskq_create+0x56/0x170 [ 137.131238][ T7550] ? __kasan_kmalloc+0x93/0xb0 [ 137.131263][ T7550] vmalloc_user_noprof+0x74/0x80 [ 137.131285][ T7550] ? xskq_create+0xbf/0x170 [ 137.131303][ T7550] xskq_create+0xbf/0x170 [ 137.131326][ T7550] xsk_init_queue+0xb0/0x110 [ 137.131347][ T7550] xsk_setsockopt+0x43f/0x710 [ 137.131369][ T7550] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.131400][ T7550] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 137.131418][ T7550] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.131438][ T7550] do_sock_setsockopt+0x257/0x3e0 [ 137.131459][ T7550] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 137.131473][ T7550] ? __fget_files+0x2a/0x420 [ 137.131499][ T7550] ? __fget_files+0x3a0/0x420 [ 137.131518][ T7550] ? __fget_files+0x2a/0x420 [ 137.131548][ T7550] __x64_sys_setsockopt+0x18b/0x220 [ 137.131572][ T7550] do_syscall_64+0xf6/0x210 [ 137.131594][ T7550] ? clear_bhb_loop+0x45/0xa0 [ 137.131615][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.131631][ T7550] RIP: 0033:0x7f4c4e58e969 [ 137.131652][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.131667][ T7550] RSP: 002b:00007f4c4f3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.131685][ T7550] RAX: ffffffffffffffda RBX: 00007f4c4e7b5fa0 RCX: 00007f4c4e58e969 [ 137.131697][ T7550] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 137.131707][ T7550] RBP: 00007f4c4e610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 137.131717][ T7550] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.131727][ T7550] R13: 0000000000000000 R14: 00007f4c4e7b5fa0 R15: 00007ffd7c517468 [ 137.131756][ T7550] [ 137.131776][ T7550] Mem-Info: [ 137.260740][ T7562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'. [ 137.434972][ T7550] active_anon:8923 inactive_anon:0 isolated_anon:0 [ 137.434972][ T7550] active_file:1658 inactive_file:38339 isolated_file:0 [ 137.434972][ T7550] unevictable:768 dirty:248 writeback:0 [ 137.434972][ T7550] slab_reclaimable:10284 slab_unreclaimable:107450 [ 137.434972][ T7550] mapped:28968 shmem:1433 pagetables:975 [ 137.434972][ T7550] sec_pagetables:0 bounce:0 [ 137.434972][ T7550] kernel_misc_reclaimable:0 [ 137.434972][ T7550] free:1337499 free_pcp:498 free_cma:0 [ 137.553829][ T7550] Node 0 active_anon:35792kB inactive_anon:0kB active_file:6632kB inactive_file:153284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115872kB dirty:992kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11252kB pagetables:3704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.727010][ T7550] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.826751][ T7580] tipc: Started in network mode [ 137.852626][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 137.854014][ T7580] tipc: Node identity 1edcc92cc408, cluster identity 4711 [ 137.875479][ T7550] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.942326][ T7580] tipc: Enabled bearer , priority 0 [ 137.978443][ T7550] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 137.999785][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.433'. [ 138.028267][ T7550] Node 0 DMA32 free:1420132kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:35720kB inactive_anon:0kB active_file:6632kB inactive_file:153184kB unevictable:1536kB writepending:568kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:1572kB local_pcp:640kB free_cma:0kB [ 138.083232][ T7550] lowmem_reserve[]: 0 0 0 0 0 [ 138.087985][ T7550] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.130668][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 138.144712][ T7580] tipc: Disabling bearer [ 138.154600][ T7550] lowmem_reserve[]: 0 0 0 0 0 [ 138.170816][ T7550] Node 1 Normal free:3914416kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:0kB free_cma:0kB [ 138.214183][ T7550] lowmem_reserve[]: 0 0 0 0 0 [ 138.219241][ T7550] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.265483][ T7550] Node 0 DMA32: 481*4kB (UME) 281*8kB (UME) 222*16kB (UME) 50*32kB (UME) 30*64kB (UME) 20*128kB (UME) 17*256kB (UM) 8*512kB (UME) 7*1024kB (M) 8*2048kB (UME) 336*4096kB (M) = 1422060kB [ 138.343785][ T7550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.372286][ T7596] syzkaller0: entered promiscuous mode [ 138.378086][ T7596] syzkaller0: entered allmulticast mode [ 138.394667][ T7550] Node 1 Normal: 228*4kB (UE) 60*8kB (UME) 40*16kB (UME) 216*32kB (UME) 95*64kB (UME) 36*128kB (UME) 18*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3914416kB [ 138.495157][ T7550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.543479][ T7550] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.582562][ T7550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.618823][ T7550] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.642592][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.8.441'. [ 138.663249][ T7550] 41433 total pagecache pages [ 138.667959][ T7550] 0 pages in swap cache [ 138.672126][ T7550] Free swap = 124996kB [ 138.746185][ T7550] Total swap = 124996kB [ 138.750387][ T7550] 2097051 pages RAM [ 138.762149][ T7550] 0 pages HighMem/MovableOnly [ 138.775307][ T7550] 424362 pages reserved [ 138.784051][ T7550] 0 pages cma reserved [ 139.051289][ T7622] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 140.169222][ T7609] syzkaller1: entered promiscuous mode [ 140.175087][ T7609] syzkaller1: entered allmulticast mode [ 140.355037][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.7.449'. [ 140.618778][ T7640] syzkaller0: entered promiscuous mode [ 140.658915][ T7640] syzkaller0: entered allmulticast mode [ 140.693804][ T7650] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.702205][ T7650] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.710592][ T7650] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.719341][ T7650] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.792233][ T7650] vxlan0: entered promiscuous mode [ 140.841673][ T7650] vxlan0: entered allmulticast mode [ 140.852732][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.458'. [ 141.051744][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.5.462'. [ 141.876952][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.466'. [ 143.044107][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.467'. [ 143.433329][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 143.589562][ T7739] netlink: 'syz.7.469': attribute type 10 has an invalid length. [ 143.767456][ T7739] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.835205][ T7732] bridge_slave_0: left allmulticast mode [ 143.840885][ T7732] bridge_slave_0: left promiscuous mode [ 143.871818][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.891679][ T7732] bridge_slave_1: left allmulticast mode [ 143.932544][ T7732] bridge_slave_1: left promiscuous mode [ 143.955851][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.971547][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.6.478'. [ 143.986598][ T7732] bond0: (slave bond_slave_0): Releasing backup interface [ 144.016952][ T7732] bond0: (slave bond_slave_1): Releasing backup interface [ 144.054928][ T7732] team0: Port device team_slave_0 removed [ 144.075909][ T7732] team0: Port device team_slave_1 removed [ 144.082525][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.097878][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.107925][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.120198][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.207145][ T7732] bond0: (slave wlan1): Releasing backup interface [ 144.309059][ T7766] IPv6: NLM_F_REPLACE set, but no existing node found! [ 144.453689][ T7771] netlink: 'syz.6.481': attribute type 10 has an invalid length. [ 144.480611][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.6.481'. [ 144.502972][ T7769] netlink: 96 bytes leftover after parsing attributes in process `syz.8.480'. [ 144.529358][ T7771] batadv0: entered promiscuous mode [ 144.588418][ T7771] batadv0: entered allmulticast mode [ 144.599870][ T7771] bridge0: port 3(batadv0) entered blocking state [ 144.652356][ T7771] bridge0: port 3(batadv0) entered disabled state [ 144.677360][ T7771] bridge0: port 3(batadv0) entered blocking state [ 144.683942][ T7771] bridge0: port 3(batadv0) entered forwarding state [ 144.888468][ T7786] syzkaller0: entered promiscuous mode [ 144.906287][ T7786] syzkaller0: entered allmulticast mode [ 144.989987][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 144.999521][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 145.698804][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'. [ 146.611671][ T7795] bridge0: entered promiscuous mode [ 146.618917][ T7795] batman_adv: batadv0: Adding interface: macsec1 [ 146.625366][ T7795] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.656972][ T7795] batman_adv: batadv0: Interface activated: macsec1 [ 146.787773][ T7833] FAULT_INJECTION: forcing a failure. [ 146.787773][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 146.807126][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.7.494 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 146.807150][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 146.807160][ T7833] Call Trace: [ 146.807167][ T7833] [ 146.807174][ T7833] dump_stack_lvl+0x189/0x250 [ 146.807212][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.807235][ T7833] ? __pfx__printk+0x10/0x10 [ 146.807258][ T7833] ? __pfx___might_resched+0x10/0x10 [ 146.807273][ T7833] ? fs_reclaim_acquire+0x7d/0x100 [ 146.807300][ T7833] should_fail_ex+0x414/0x560 [ 146.807329][ T7833] should_failslab+0xa8/0x100 [ 146.807351][ T7833] __kmalloc_noprof+0xcb/0x4f0 [ 146.807369][ T7833] ? kfree+0x4d/0x440 [ 146.807384][ T7833] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.807408][ T7833] tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.807428][ T7833] ? tomoyo_domain+0xda/0x130 [ 146.807453][ T7833] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.807476][ T7833] tomoyo_path_number_perm+0x1e8/0x5a0 [ 146.807502][ T7833] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.807543][ T7833] ? __lock_acquire+0xaac/0xd20 [ 146.807583][ T7833] ? __fget_files+0x2a/0x420 [ 146.807608][ T7833] ? __fget_files+0x3a0/0x420 [ 146.807626][ T7833] ? __fget_files+0x2a/0x420 [ 146.807650][ T7833] security_file_ioctl+0xcb/0x2d0 [ 146.807675][ T7833] __se_sys_ioctl+0x47/0x170 [ 146.807695][ T7833] do_syscall_64+0xf6/0x210 [ 146.807717][ T7833] ? clear_bhb_loop+0x45/0xa0 [ 146.807738][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.807754][ T7833] RIP: 0033:0x7fb1edd8e969 [ 146.807769][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.807783][ T7833] RSP: 002b:00007fb1eec0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.807801][ T7833] RAX: ffffffffffffffda RBX: 00007fb1edfb5fa0 RCX: 00007fb1edd8e969 [ 146.807814][ T7833] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 146.807824][ T7833] RBP: 00007fb1eec0f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.807835][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.807844][ T7833] R13: 0000000000000000 R14: 00007fb1edfb5fa0 R15: 00007ffceb6f4298 [ 146.807872][ T7833] [ 146.807880][ T7833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.154333][ T7844] netlink: 'syz.5.497': attribute type 1 has an invalid length. [ 147.367149][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 147.534171][ T7861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.504'. [ 147.580349][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.7.504'. [ 147.633536][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 147.663919][ T7861] netlink: 60 bytes leftover after parsing attributes in process `syz.7.504'. [ 147.763054][ T7873] IPv6: NLM_F_REPLACE set, but no existing node found! [ 147.878667][ T7881] FAULT_INJECTION: forcing a failure. [ 147.878667][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 147.894100][ T7881] CPU: 1 UID: 0 PID: 7881 Comm: syz.4.509 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 147.894123][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 147.894133][ T7881] Call Trace: [ 147.894139][ T7881] [ 147.894147][ T7881] dump_stack_lvl+0x189/0x250 [ 147.894174][ T7881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.894196][ T7881] ? __pfx__printk+0x10/0x10 [ 147.894214][ T7881] ? __pfx___might_resched+0x10/0x10 [ 147.894230][ T7881] ? fs_reclaim_acquire+0x7d/0x100 [ 147.894257][ T7881] should_fail_ex+0x414/0x560 [ 147.894284][ T7881] should_failslab+0xa8/0x100 [ 147.894307][ T7881] __kmalloc_noprof+0xcb/0x4f0 [ 147.894325][ T7881] ? tomoyo_encode+0x28b/0x550 [ 147.894347][ T7881] tomoyo_encode+0x28b/0x550 [ 147.894374][ T7881] tomoyo_realpath_from_path+0x58d/0x5d0 [ 147.894394][ T7881] ? tomoyo_domain+0xda/0x130 [ 147.894418][ T7881] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 147.894443][ T7881] tomoyo_path_number_perm+0x1e8/0x5a0 [ 147.894468][ T7881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.894508][ T7881] ? __lock_acquire+0xaac/0xd20 [ 147.894547][ T7881] ? __fget_files+0x2a/0x420 [ 147.894572][ T7881] ? __fget_files+0x3a0/0x420 [ 147.894587][ T7881] ? __fget_files+0x2a/0x420 [ 147.894606][ T7881] security_file_ioctl+0xcb/0x2d0 [ 147.894623][ T7881] __se_sys_ioctl+0x47/0x170 [ 147.894637][ T7881] do_syscall_64+0xf6/0x210 [ 147.894659][ T7881] ? clear_bhb_loop+0x45/0xa0 [ 147.894678][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.894694][ T7881] RIP: 0033:0x7f9b5eb8e969 [ 147.894708][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.894723][ T7881] RSP: 002b:00007f9b5faa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.894740][ T7881] RAX: ffffffffffffffda RBX: 00007f9b5edb5fa0 RCX: 00007f9b5eb8e969 [ 147.894753][ T7881] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 147.894763][ T7881] RBP: 00007f9b5faa5090 R08: 0000000000000000 R09: 0000000000000000 [ 147.894773][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.894782][ T7881] R13: 0000000000000000 R14: 00007f9b5edb5fa0 R15: 00007fffd4afbca8 [ 147.894809][ T7881] [ 147.894887][ T7881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.338757][ T7892] netlink: 64 bytes leftover after parsing attributes in process `syz.6.510'. [ 148.525611][ T7909] Cannot find add_set index 0 as target [ 148.718561][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'. [ 148.801870][ T7922] netlink: 'syz.8.520': attribute type 1 has an invalid length. [ 148.910927][ T7932] IPv6: NLM_F_REPLACE set, but no existing node found! [ 148.966789][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.121330][ T7929] bond1: (slave veth3): Enslaving as an active interface with a down link [ 149.187356][ T7933] bond1: (slave veth0_to_bond): making interface the new active one [ 149.245274][ T7933] veth0_to_bond: entered promiscuous mode [ 149.249171][ T7899] infiniband syz0: set active [ 149.277414][ T7933] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 149.297849][ T7899] infiniband syz0: added bond_slave_1 [ 149.326588][ T7899] syz0: rxe_create_cq: returned err = -12 [ 149.342747][ T7899] infiniband syz0: Couldn't create ib_mad CQ [ 149.348456][ T7935] vlan2: entered allmulticast mode [ 149.369398][ T7935] bond1: entered allmulticast mode [ 149.369423][ T7899] infiniband syz0: Couldn't open port 1 [ 149.380592][ T7935] veth0_to_bond: entered allmulticast mode [ 149.397993][ T7935] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 149.479453][ T7899] RDS/IB: syz0: added [ 149.503775][ T7899] smc: adding ib device syz0 with port count 1 [ 149.518081][ T7899] smc: ib device syz0 port 1 has pnetid [ 149.545866][ T7952] smc: net device bond0 applied user defined pnetid SYZ0 [ 149.576612][ T7954] smc: net device bond0 erased user defined pnetid SYZ0 [ 149.749745][ T7945] lo speed is unknown, defaulting to 1000 [ 150.287910][ T7977] IPv6: NLM_F_REPLACE set, but no existing node found! [ 150.820381][ T7988] dvmrp0: entered allmulticast mode [ 150.829881][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.6.523'. [ 151.008865][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.531'. [ 151.346416][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.8.533'. [ 151.736796][ T8013] syzkaller0: entered promiscuous mode [ 151.742438][ T8013] syzkaller0: entered allmulticast mode [ 151.774243][ T8015] tipc: Enabled bearer , priority 0 [ 151.824611][ T8014] tipc: Disabling bearer [ 152.027667][ T8018] netlink: 'syz.8.537': attribute type 4 has an invalid length. [ 152.144411][ T8019] sctp: [Deprecated]: syz.8.537 (pid 8019) Use of int in max_burst socket option deprecated. [ 152.144411][ T8019] Use struct sctp_assoc_value instead [ 152.422087][ T8021] FAULT_INJECTION: forcing a failure. [ 152.422087][ T8021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.441145][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.8.538 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 152.441169][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 152.441179][ T8021] Call Trace: [ 152.441186][ T8021] [ 152.441193][ T8021] dump_stack_lvl+0x189/0x250 [ 152.441223][ T8021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.441245][ T8021] ? __pfx__printk+0x10/0x10 [ 152.441283][ T8021] should_fail_ex+0x414/0x560 [ 152.441313][ T8021] _copy_from_user+0x2d/0xb0 [ 152.441334][ T8021] __copy_msghdr+0x3c5/0x5b0 [ 152.441357][ T8021] ___sys_sendmsg+0x1a5/0x2a0 [ 152.441377][ T8021] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.441430][ T8021] ? __fget_files+0x2a/0x420 [ 152.441450][ T8021] ? __fget_files+0x3a0/0x420 [ 152.441484][ T8021] __sys_sendmmsg+0x227/0x430 [ 152.441507][ T8021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 152.441533][ T8021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.441571][ T8021] ? ksys_write+0x1f0/0x250 [ 152.441600][ T8021] __x64_sys_sendmmsg+0xa0/0xc0 [ 152.441620][ T8021] do_syscall_64+0xf6/0x210 [ 152.441642][ T8021] ? clear_bhb_loop+0x45/0xa0 [ 152.441662][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.441678][ T8021] RIP: 0033:0x7fae89f8e969 [ 152.441692][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.441706][ T8021] RSP: 002b:00007fae8ae4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.441723][ T8021] RAX: ffffffffffffffda RBX: 00007fae8a1b5fa0 RCX: 00007fae89f8e969 [ 152.441736][ T8021] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 152.441746][ T8021] RBP: 00007fae8ae4e090 R08: 0000000000000000 R09: 0000000000000000 [ 152.441757][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.441766][ T8021] R13: 0000000000000000 R14: 00007fae8a1b5fa0 R15: 00007ffc10db6608 [ 152.441792][ T8021] [ 152.721899][ T8023] IPv6: NLM_F_REPLACE set, but no existing node found! [ 152.992293][ T30] audit: type=1800 audit(1745967992.672:2): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.540" name="blkio.bfq.time_recursive" dev="tmpfs" ino=183 res=0 errno=0 [ 153.020333][ T30] audit: type=1800 audit(1745967992.672:3): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.540" name="blkio.bfq.time_recursive" dev="tmpfs" ino=183 res=0 errno=0 [ 153.959937][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.542'. [ 154.174210][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.182258][ T8046] batadv_slave_1: entered promiscuous mode [ 154.205410][ T8051] FAULT_INJECTION: forcing a failure. [ 154.205410][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 154.253951][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.7.547 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 154.253974][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.253984][ T8051] Call Trace: [ 154.253991][ T8051] [ 154.253998][ T8051] dump_stack_lvl+0x189/0x250 [ 154.254028][ T8051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.254051][ T8051] ? __pfx__printk+0x10/0x10 [ 154.254073][ T8051] ? __pfx___might_resched+0x10/0x10 [ 154.254094][ T8051] should_fail_ex+0x414/0x560 [ 154.254123][ T8051] should_failslab+0xa8/0x100 [ 154.254146][ T8051] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.254166][ T8051] ? __alloc_skb+0x112/0x2d0 [ 154.254187][ T8051] __alloc_skb+0x112/0x2d0 [ 154.254208][ T8051] nl80211_send_scan_start+0x2f/0x170 [ 154.254234][ T8051] cfg80211_wext_siwscan+0xea7/0x1270 [ 154.254278][ T8051] ioctl_standard_iw_point+0x686/0xd40 [ 154.254314][ T8051] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 154.254336][ T8051] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 154.254352][ T8051] ? __pfx___mutex_lock+0x10/0x10 [ 154.254379][ T8051] ? full_name_hash+0x92/0xe0 [ 154.254403][ T8051] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 154.254424][ T8051] ioctl_standard_call+0xaf/0x1b0 [ 154.254451][ T8051] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 154.254469][ T8051] wext_ioctl_dispatch+0xeb/0x410 [ 154.254489][ T8051] ? __pfx_ioctl_standard_call+0x10/0x10 [ 154.254517][ T8051] wext_handle_ioctl+0x100/0x1c0 [ 154.254543][ T8051] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 154.254584][ T8051] sock_ioctl+0x15f/0x790 [ 154.254608][ T8051] ? __pfx_sock_ioctl+0x10/0x10 [ 154.254630][ T8051] ? __fget_files+0x3a0/0x420 [ 154.254650][ T8051] ? __fget_files+0x2a/0x420 [ 154.254673][ T8051] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.254693][ T8051] ? __pfx_sock_ioctl+0x10/0x10 [ 154.254712][ T8051] __se_sys_ioctl+0xf9/0x170 [ 154.254732][ T8051] do_syscall_64+0xf6/0x210 [ 154.254754][ T8051] ? clear_bhb_loop+0x45/0xa0 [ 154.254774][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.254790][ T8051] RIP: 0033:0x7fb1edd8e969 [ 154.254805][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.254820][ T8051] RSP: 002b:00007fb1eec0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.254837][ T8051] RAX: ffffffffffffffda RBX: 00007fb1edfb5fa0 RCX: 00007fb1edd8e969 [ 154.254848][ T8051] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 154.254859][ T8051] RBP: 00007fb1eec0f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.254869][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.254878][ T8051] R13: 0000000000000000 R14: 00007fb1edfb5fa0 R15: 00007ffceb6f4298 [ 154.254907][ T8051] [ 154.617212][ T8055] FAULT_INJECTION: forcing a failure. [ 154.617212][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 154.724139][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.7.549 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 154.724166][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.724176][ T8055] Call Trace: [ 154.724182][ T8055] [ 154.724190][ T8055] dump_stack_lvl+0x189/0x250 [ 154.724220][ T8055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.724242][ T8055] ? __pfx__printk+0x10/0x10 [ 154.724261][ T8055] ? __pfx___might_resched+0x10/0x10 [ 154.724277][ T8055] ? fs_reclaim_acquire+0x7d/0x100 [ 154.724304][ T8055] should_fail_ex+0x414/0x560 [ 154.724333][ T8055] should_failslab+0xa8/0x100 [ 154.724355][ T8055] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.724376][ T8055] ? __alloc_skb+0x112/0x2d0 [ 154.724396][ T8055] __alloc_skb+0x112/0x2d0 [ 154.724415][ T8055] alloc_skb_with_frags+0xca/0x890 [ 154.724437][ T8055] ? __might_fault+0xb0/0x130 [ 154.724463][ T8055] sock_alloc_send_pskb+0x857/0x990 [ 154.724501][ T8055] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 154.724525][ T8055] ? __pfx__copy_from_iter+0x10/0x10 [ 154.724552][ T8055] nfc_alloc_send_skb+0x94/0x1c0 [ 154.724580][ T8055] nfc_llcp_send_ui_frame+0x27d/0x540 [ 154.724615][ T8055] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 154.724638][ T8055] ? llcp_sock_sendmsg+0x240/0x3c0 [ 154.724663][ T8055] ? llcp_sock_sendmsg+0x240/0x3c0 [ 154.724684][ T8055] ? __pfx_llcp_sock_sendmsg+0x10/0x10 [ 154.724708][ T8055] __sock_sendmsg+0x219/0x270 [ 154.724738][ T8055] ____sys_sendmsg+0x52d/0x830 [ 154.724761][ T8055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.724788][ T8055] ? import_iovec+0x74/0xa0 [ 154.724812][ T8055] ___sys_sendmsg+0x21f/0x2a0 [ 154.724832][ T8055] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.724886][ T8055] ? __fget_files+0x2a/0x420 [ 154.724906][ T8055] ? __fget_files+0x3a0/0x420 [ 154.724936][ T8055] __sys_sendmmsg+0x227/0x430 [ 154.724960][ T8055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.724992][ T8055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.725031][ T8055] ? ksys_write+0x1f0/0x250 [ 154.725048][ T8055] ? rcu_is_watching+0x15/0xb0 [ 154.725081][ T8055] __x64_sys_sendmmsg+0xa0/0xc0 [ 154.725101][ T8055] do_syscall_64+0xf6/0x210 [ 154.725124][ T8055] ? clear_bhb_loop+0x45/0xa0 [ 154.725148][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.725163][ T8055] RIP: 0033:0x7fb1edd8e969 [ 154.725178][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.725192][ T8055] RSP: 002b:00007fb1eec0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.725210][ T8055] RAX: ffffffffffffffda RBX: 00007fb1edfb5fa0 RCX: 00007fb1edd8e969 [ 154.725223][ T8055] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 154.725233][ T8055] RBP: 00007fb1eec0f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.725243][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.725253][ T8055] R13: 0000000000000000 R14: 00007fb1edfb5fa0 R15: 00007ffceb6f4298 [ 154.725281][ T8055] [ 154.725439][ T8055] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 155.364353][ T8070] netlink: 200 bytes leftover after parsing attributes in process `syz.5.552'. [ 155.531070][ T8074] IPv6: NLM_F_REPLACE set, but no existing node found! [ 155.757615][ T8080] netlink: 'syz.8.556': attribute type 6 has an invalid length. [ 155.801497][ T8083] netlink: 'syz.8.556': attribute type 6 has an invalid length. [ 156.156403][ T8100] ip6gretap0: entered promiscuous mode [ 156.237299][ T8106] IPVS: length: 98 != 8 [ 156.337176][ T8112] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 156.483403][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.7.565'. [ 157.010329][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.570'. [ 157.252930][ T8151] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 157.300017][ T8154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.452963][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.8.576'. [ 157.609730][ T8168] netlink: 'syz.7.579': attribute type 11 has an invalid length. [ 157.645344][ T8168] netlink: 224 bytes leftover after parsing attributes in process `syz.7.579'. [ 158.018611][ T8192] FAULT_INJECTION: forcing a failure. [ 158.018611][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.089111][ T8194] netlink: 'syz.8.587': attribute type 10 has an invalid length. [ 158.103308][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.6.586 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 158.103337][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.103348][ T8192] Call Trace: [ 158.103356][ T8192] [ 158.103365][ T8192] dump_stack_lvl+0x189/0x250 [ 158.103397][ T8192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.103421][ T8192] ? __pfx__printk+0x10/0x10 [ 158.103451][ T8192] should_fail_ex+0x414/0x560 [ 158.103482][ T8192] _copy_from_user+0x2d/0xb0 [ 158.103505][ T8192] __copy_msghdr+0x3c5/0x5b0 [ 158.103528][ T8192] ___sys_sendmsg+0x1a5/0x2a0 [ 158.103550][ T8192] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.103621][ T8192] ? __might_fault+0xb0/0x130 [ 158.103647][ T8192] __sys_sendmmsg+0x227/0x430 [ 158.103671][ T8192] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.103699][ T8192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.103738][ T8192] ? ksys_write+0x1f0/0x250 [ 158.103757][ T8192] ? rcu_is_watching+0x15/0xb0 [ 158.103790][ T8192] __x64_sys_sendmmsg+0xa0/0xc0 [ 158.103812][ T8192] do_syscall_64+0xf6/0x210 [ 158.103834][ T8192] ? clear_bhb_loop+0x45/0xa0 [ 158.103855][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.103872][ T8192] RIP: 0033:0x7f082038e969 [ 158.103888][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.103903][ T8192] RSP: 002b:00007f08211a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.103924][ T8192] RAX: ffffffffffffffda RBX: 00007f08205b5fa0 RCX: 00007f082038e969 [ 158.103937][ T8192] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 158.103949][ T8192] RBP: 00007f08211a5090 R08: 0000000000000000 R09: 0000000000000000 [ 158.103960][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.103971][ T8192] R13: 0000000000000000 R14: 00007f08205b5fa0 R15: 00007ffe7a53d288 [ 158.104000][ T8192] [ 158.335974][ T8194] netlink: 40 bytes leftover after parsing attributes in process `syz.8.587'. [ 158.378362][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'. [ 158.399795][ T8194] dummy0: entered promiscuous mode [ 158.408918][ T8194] bridge0: port 3(dummy0) entered blocking state [ 158.451043][ T8194] bridge0: port 3(dummy0) entered disabled state [ 158.465430][ T8194] dummy0: entered allmulticast mode [ 158.487504][ T8194] bridge0: port 3(dummy0) entered blocking state [ 158.493997][ T8194] bridge0: port 3(dummy0) entered forwarding state [ 158.502364][ T8209] C: renamed from team_slave_0 [ 158.514982][ T8209] netlink: 'syz.7.592': attribute type 1 has an invalid length. [ 158.522642][ T8209] netlink: 152 bytes leftover after parsing attributes in process `syz.7.592'. [ 158.531687][ T8209] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 158.795123][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.596'. [ 158.823779][ T8224] netlink: 'syz.4.598': attribute type 39 has an invalid length. [ 158.904089][ T8233] team0: Port device gtp0 added [ 159.071514][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.6.600'. [ 159.146045][ T8243] IPv6: NLM_F_REPLACE set, but no existing node found! [ 159.155983][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.7.602'. [ 159.409161][ T8257] !: renamed from dummy0 (while UP) [ 159.460382][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.606'. [ 159.786014][ T8266] lo speed is unknown, defaulting to 1000 [ 159.920946][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.611'. [ 160.357573][ T8301] IPv6: NLM_F_REPLACE set, but no existing node found! [ 160.359397][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.617'. [ 160.460840][ T8304] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 160.506995][ T8304] netlink: 224 bytes leftover after parsing attributes in process `syz.4.615'. [ 160.901416][ T8327] @ÿz0: renamed from bond_slave_0 (while UP) [ 161.008028][ T6084] udevd[6084]: setting mode of /dev/nbd64 to 060660 failed: No such file or directory [ 161.023068][ T6084] udevd[6084]: setting owner of /dev/nbd64 to uid=0, gid=6 failed: No such file or directory [ 161.508835][ T54] veth0_to_bond: left promiscuous mode [ 161.713678][ T8369] FAULT_INJECTION: forcing a failure. [ 161.713678][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.793418][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.8.628 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 161.793443][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 161.793453][ T8369] Call Trace: [ 161.793460][ T8369] [ 161.793466][ T8369] dump_stack_lvl+0x189/0x250 [ 161.793492][ T8369] ? __lock_acquire+0xaac/0xd20 [ 161.793517][ T8369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.793539][ T8369] ? __pfx__printk+0x10/0x10 [ 161.793556][ T8369] ? __might_fault+0xb0/0x130 [ 161.793588][ T8369] should_fail_ex+0x414/0x560 [ 161.793618][ T8369] _copy_from_iter+0x1db/0x15a0 [ 161.793648][ T8369] ? __pfx__copy_from_iter+0x10/0x10 [ 161.793670][ T8369] ? rcu_is_watching+0x15/0xb0 [ 161.793692][ T8369] ? trace_kmalloc+0x1f/0xd0 [ 161.793710][ T8369] ? nfc_llcp_send_ui_frame+0xf2/0x540 [ 161.793737][ T8369] nfc_llcp_send_ui_frame+0x145/0x540 [ 161.793762][ T8369] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.793783][ T8369] ? __local_bh_enable_ip+0x12d/0x1c0 [ 161.793806][ T8369] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 161.793828][ T8369] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 161.793848][ T8369] ? do_raw_spin_unlock+0x122/0x240 [ 161.793865][ T8369] ? llcp_sock_sendmsg+0x240/0x3c0 [ 161.793891][ T8369] ? llcp_sock_sendmsg+0x240/0x3c0 [ 161.793913][ T8369] ? __pfx_llcp_sock_sendmsg+0x10/0x10 [ 161.793934][ T8369] sock_sendmsg_nosec+0x18c/0x1d0 [ 161.793958][ T8369] ____sys_sendmsg+0x6c5/0x830 [ 161.793978][ T8369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.794003][ T8369] ? import_iovec+0x74/0xa0 [ 161.794027][ T8369] ___sys_sendmsg+0x21f/0x2a0 [ 161.794047][ T8369] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.794104][ T8369] ? __might_fault+0xb0/0x130 [ 161.794128][ T8369] __sys_sendmmsg+0x227/0x430 [ 161.794159][ T8369] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.794185][ T8369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.794222][ T8369] ? ksys_write+0x1f0/0x250 [ 161.794239][ T8369] ? rcu_is_watching+0x15/0xb0 [ 161.794272][ T8369] __x64_sys_sendmmsg+0xa0/0xc0 [ 161.794292][ T8369] do_syscall_64+0xf6/0x210 [ 161.794313][ T8369] ? clear_bhb_loop+0x45/0xa0 [ 161.794335][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.794351][ T8369] RIP: 0033:0x7fae89f8e969 [ 161.794366][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.794380][ T8369] RSP: 002b:00007fae8ae4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.794397][ T8369] RAX: ffffffffffffffda RBX: 00007fae8a1b5fa0 RCX: 00007fae89f8e969 [ 161.794410][ T8369] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 161.794424][ T8369] RBP: 00007fae8ae4e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.794434][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.794445][ T8369] R13: 0000000000000000 R14: 00007fae8a1b5fa0 R15: 00007ffc10db6608 [ 161.794473][ T8369] [ 161.840579][ T8274] lo speed is unknown, defaulting to 1000 [ 162.111470][ T5918] IPVS: starting estimator thread 0... [ 162.203327][ T8388] IPVS: using max 32 ests per chain, 76800 per kthread [ 163.284193][ T8437] FAULT_INJECTION: forcing a failure. [ 163.284193][ T8437] name failslab, interval 1, probability 0, space 0, times 0 [ 163.345302][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.5.641 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 163.345327][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.345337][ T8437] Call Trace: [ 163.345344][ T8437] [ 163.345351][ T8437] dump_stack_lvl+0x189/0x250 [ 163.345382][ T8437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.345404][ T8437] ? __pfx__printk+0x10/0x10 [ 163.345423][ T8437] ? __pfx___might_resched+0x10/0x10 [ 163.345439][ T8437] ? fs_reclaim_acquire+0x7d/0x100 [ 163.345467][ T8437] should_fail_ex+0x414/0x560 [ 163.345496][ T8437] should_failslab+0xa8/0x100 [ 163.345518][ T8437] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 163.345539][ T8437] ? __alloc_skb+0x112/0x2d0 [ 163.345559][ T8437] __alloc_skb+0x112/0x2d0 [ 163.345579][ T8437] alloc_skb_with_frags+0xca/0x890 [ 163.345602][ T8437] ? __might_fault+0xb0/0x130 [ 163.345628][ T8437] sock_alloc_send_pskb+0x857/0x990 [ 163.345667][ T8437] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 163.345690][ T8437] ? __pfx__copy_from_iter+0x10/0x10 [ 163.345713][ T8437] ? rcu_is_watching+0x15/0xb0 [ 163.345738][ T8437] nfc_alloc_send_skb+0x94/0x1c0 [ 163.345766][ T8437] nfc_llcp_send_ui_frame+0x27d/0x540 [ 163.345800][ T8437] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 163.345820][ T8437] ? do_raw_spin_unlock+0x122/0x240 [ 163.345840][ T8437] ? llcp_sock_sendmsg+0x240/0x3c0 [ 163.345864][ T8437] ? llcp_sock_sendmsg+0x240/0x3c0 [ 163.345888][ T8437] ? __pfx_llcp_sock_sendmsg+0x10/0x10 [ 163.345910][ T8437] sock_sendmsg_nosec+0x18c/0x1d0 [ 163.345934][ T8437] ____sys_sendmsg+0x6c5/0x830 [ 163.345964][ T8437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.345991][ T8437] ? import_iovec+0x74/0xa0 [ 163.346015][ T8437] ___sys_sendmsg+0x21f/0x2a0 [ 163.346035][ T8437] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.346096][ T8437] ? __might_fault+0xb0/0x130 [ 163.346120][ T8437] __sys_sendmmsg+0x227/0x430 [ 163.346144][ T8437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.346171][ T8437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.346208][ T8437] ? ksys_write+0x1f0/0x250 [ 163.346225][ T8437] ? rcu_is_watching+0x15/0xb0 [ 163.346257][ T8437] __x64_sys_sendmmsg+0xa0/0xc0 [ 163.346277][ T8437] do_syscall_64+0xf6/0x210 [ 163.346299][ T8437] ? clear_bhb_loop+0x45/0xa0 [ 163.346319][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.346335][ T8437] RIP: 0033:0x7f4c4e58e969 [ 163.346350][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.346364][ T8437] RSP: 002b:00007f4c4f3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.346382][ T8437] RAX: ffffffffffffffda RBX: 00007f4c4e7b5fa0 RCX: 00007f4c4e58e969 [ 163.346394][ T8437] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 163.346405][ T8437] RBP: 00007f4c4f3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 163.346415][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.346425][ T8437] R13: 0000000000000000 R14: 00007f4c4e7b5fa0 R15: 00007ffd7c517468 [ 163.346452][ T8437] [ 163.346459][ T8437] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 164.060227][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.647'. [ 164.179536][ T8459] xt_CT: No such helper "snmp" [ 164.265538][ T8464] lo speed is unknown, defaulting to 1000 [ 164.315023][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 164.472925][ T8466] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 164.796868][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.654'. [ 164.991760][ T8495] netlink: 'syz.8.656': attribute type 5 has an invalid length. [ 165.338378][ T8480] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 165.593471][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.660'. [ 167.063611][ T8568] netlink: 32 bytes leftover after parsing attributes in process `syz.8.673'. [ 168.130631][ T8621] bond0: option use_carrier: invalid value (14) [ 168.386482][ T8631] netlink: 32 bytes leftover after parsing attributes in process `syz.7.686'. [ 168.417986][ T8633] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 168.482144][ T8633] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 168.513381][ T8638] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.071895][ T8662] netlink: set zone limit has 4 unknown bytes [ 169.216834][ T8662] gtp0: entered promiscuous mode [ 169.254128][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.695'. [ 169.272815][ T8662] gtp0: entered allmulticast mode [ 169.339798][ T8662] sock: sock_timestamping_bind_phc: sock not bind to device [ 169.640359][ T8689] netlink: 32 bytes leftover after parsing attributes in process `syz.6.700'. [ 169.683281][ T8689] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.837850][ T8700] IPv6: NLM_F_REPLACE set, but no existing node found! [ 170.160340][ T8720] netlink: 'syz.7.707': attribute type 2 has an invalid length. [ 170.377930][ T8724] lo speed is unknown, defaulting to 1000 [ 170.678534][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.686235][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.771125][ T8757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.985349][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.066768][ T8737] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 171.173310][ T8737] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.185049][ T8737] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.193552][ T8737] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.201893][ T8737] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.228958][ T8737] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.237654][ T8737] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.246078][ T8737] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.254506][ T8737] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.277003][ T5877] lo speed is unknown, defaulting to 1000 [ 171.282784][ T5877] syz2: Port: 1 Link DOWN [ 171.458204][ T8768] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.470349][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.8.717'. [ 171.503265][ T8773] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.517371][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.716'. [ 171.770901][ T8787] Cannot find del_set index 0 as target [ 171.876342][ T8788] lo speed is unknown, defaulting to 1000 [ 172.560002][ T8826] IPv6: NLM_F_REPLACE set, but no existing node found! [ 172.807400][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz.6.732'. [ 172.871150][ T8833] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.139654][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 173.351373][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 173.620427][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.738'. [ 173.701061][ T8879] netlink: 44 bytes leftover after parsing attributes in process `syz.5.743'. [ 174.034492][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.743'. [ 174.050687][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 174.103928][ T8856] lo speed is unknown, defaulting to 1000 [ 174.860472][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'. [ 175.401890][ T8943] xt_l2tp: invalid flags combination: c [ 175.693187][ T8937] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.949662][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.762'. [ 176.660484][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.767'. [ 177.024532][ T9007] netlink: 36 bytes leftover after parsing attributes in process `syz.8.773'. [ 178.278203][ T9073] xt_socket: unknown flags 0xfc [ 178.284313][ T9068] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.325539][ T9068] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 178.341055][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.787'. [ 178.356804][ T9073] syzkaller1: entered promiscuous mode [ 178.362291][ T9073] syzkaller1: entered allmulticast mode [ 178.904153][ T9101] netlink: 'syz.8.792': attribute type 16 has an invalid length. [ 178.913555][ T9104] netlink: 32 bytes leftover after parsing attributes in process `syz.6.794'. [ 178.927298][ T9101] netlink: 'syz.8.792': attribute type 17 has an invalid length. [ 179.096773][ T9101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.441896][ T9122] netlink: 4348 bytes leftover after parsing attributes in process `syz.5.796'. [ 179.997565][ T9128] syzkaller1: entered allmulticast mode [ 180.115642][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.803'. [ 180.349828][ T9162] netlink: 68 bytes leftover after parsing attributes in process `syz.6.806'. [ 180.385387][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.806'. [ 180.416447][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.806'. [ 180.460423][ T9167] tipc: Enabling of bearer rejected, failed to enable media [ 180.549837][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.7.810'. [ 180.595055][ T9175] netlink: 'syz.7.810': attribute type 2 has an invalid length. [ 180.615045][ T9175] netlink: 'syz.7.810': attribute type 1 has an invalid length. [ 181.041813][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.817'. [ 181.315911][ T9201] bridge0: port 3(batadv0) entered disabled state [ 181.334203][ T9201] bridge_slave_1: left allmulticast mode [ 181.353414][ T9201] bridge_slave_1: left promiscuous mode [ 181.369821][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.388237][ T9201] bridge_slave_0: left allmulticast mode [ 181.401706][ T9201] bridge_slave_0: left promiscuous mode [ 181.413646][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.451721][ T9213] FAULT_INJECTION: forcing a failure. [ 181.451721][ T9213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.465473][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.5.819 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 181.465495][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 181.465505][ T9213] Call Trace: [ 181.465512][ T9213] [ 181.465519][ T9213] dump_stack_lvl+0x189/0x250 [ 181.465545][ T9213] ? __lock_acquire+0xaac/0xd20 [ 181.465570][ T9213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.465592][ T9213] ? __pfx__printk+0x10/0x10 [ 181.465609][ T9213] ? __might_fault+0xb0/0x130 [ 181.465640][ T9213] should_fail_ex+0x414/0x560 [ 181.465669][ T9213] _copy_from_user+0x2d/0xb0 [ 181.465691][ T9213] __sys_bpf+0x1ed/0x860 [ 181.465713][ T9213] ? __pfx___sys_bpf+0x10/0x10 [ 181.465745][ T9213] ? ksys_write+0x1f0/0x250 [ 181.465772][ T9213] __x64_sys_bpf+0x7c/0x90 [ 181.465791][ T9213] do_syscall_64+0xf6/0x210 [ 181.465813][ T9213] ? clear_bhb_loop+0x45/0xa0 [ 181.465833][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.465849][ T9213] RIP: 0033:0x7f4c4e58e969 [ 181.465864][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.465878][ T9213] RSP: 002b:00007f4c4f3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.465896][ T9213] RAX: ffffffffffffffda RBX: 00007f4c4e7b5fa0 RCX: 00007f4c4e58e969 [ 181.465908][ T9213] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 0000000000000000 [ 181.465919][ T9213] RBP: 00007f4c4f3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 181.465930][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.465939][ T9213] R13: 0000000000000001 R14: 00007f4c4e7b5fa0 R15: 00007ffd7c517468 [ 181.465967][ T9213] [ 181.765510][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.5.821'. [ 182.115155][ T9236] netlink: 'syz.8.827': attribute type 10 has an invalid length. [ 182.230836][ T9236] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.590498][ T9251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.723861][ T9265] wireguard0: entered promiscuous mode [ 182.732573][ T9265] wireguard0: entered allmulticast mode [ 182.878223][ T9251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.985933][ T9251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.089595][ T9277] IPv6: NLM_F_REPLACE set, but no existing node found! [ 183.092738][ T9251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.269077][ T9251] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.296441][ T9251] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.405447][ T9251] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.478897][ T9251] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.679784][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.844'. [ 183.813870][ T9313] netlink: 44 bytes leftover after parsing attributes in process `syz.5.846'. [ 184.227655][ T9337] netlink: 68 bytes leftover after parsing attributes in process `syz.7.852'. [ 184.819683][ T9358] nbd: nbd64 already in use [ 185.331893][ T9391] IPv6: NLM_F_REPLACE set, but no existing node found! [ 185.439687][ T9383] lo speed is unknown, defaulting to 1000 [ 185.540271][ T9403] IPv6: NLM_F_REPLACE set, but no existing node found! [ 185.650897][ T9407] __nla_validate_parse: 4 callbacks suppressed [ 185.650915][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 186.023561][ T9429] netlink: 516 bytes leftover after parsing attributes in process `syz.7.876'. [ 186.077755][ T9430] netlink: 'syz.4.877': attribute type 27 has an invalid length. [ 186.132707][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'. [ 186.367059][ T9444] IPv6: NLM_F_REPLACE set, but no existing node found! [ 186.405064][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.7.882'. [ 186.445455][ T9447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.883'. [ 186.638493][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.886'. [ 186.686245][ T9461] netlink: 256 bytes leftover after parsing attributes in process `syz.7.887'. [ 186.742881][ T9458] lo speed is unknown, defaulting to 1000 [ 187.084145][ T9484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.955985][ T9507] lo speed is unknown, defaulting to 1000 [ 188.914137][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.897'. [ 189.040692][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 189.061766][ T9534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.382576][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.6.903'. [ 189.561205][ T9561] FAULT_INJECTION: forcing a failure. [ 189.561205][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.593246][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.8.906 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 189.593270][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 189.593280][ T9561] Call Trace: [ 189.593286][ T9561] [ 189.593292][ T9561] dump_stack_lvl+0x189/0x250 [ 189.593321][ T9561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.593343][ T9561] ? __pfx__printk+0x10/0x10 [ 189.593371][ T9561] should_fail_ex+0x414/0x560 [ 189.593398][ T9561] _copy_from_user+0x2d/0xb0 [ 189.593418][ T9561] get_user_ifreq+0x6c/0x180 [ 189.593439][ T9561] sock_ioctl+0x6dd/0x790 [ 189.593461][ T9561] ? __pfx_sock_ioctl+0x10/0x10 [ 189.593484][ T9561] ? __fget_files+0x3a0/0x420 [ 189.593505][ T9561] ? __fget_files+0x2a/0x420 [ 189.593527][ T9561] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.593547][ T9561] ? __pfx_sock_ioctl+0x10/0x10 [ 189.593567][ T9561] __se_sys_ioctl+0xf9/0x170 [ 189.593586][ T9561] do_syscall_64+0xf6/0x210 [ 189.593607][ T9561] ? clear_bhb_loop+0x45/0xa0 [ 189.593627][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.593642][ T9561] RIP: 0033:0x7fae89f8e969 [ 189.593657][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.593672][ T9561] RSP: 002b:00007fae8ae4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.593689][ T9561] RAX: ffffffffffffffda RBX: 00007fae8a1b5fa0 RCX: 00007fae89f8e969 [ 189.593701][ T9561] RDX: 0000200000001440 RSI: 00000000000089ff RDI: 0000000000000003 [ 189.593711][ T9561] RBP: 00007fae8ae4e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.593720][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.593730][ T9561] R13: 0000000000000000 R14: 00007fae8a1b5fa0 R15: 00007ffc10db6608 [ 189.593755][ T9561] [ 189.827105][ T9564] lo speed is unknown, defaulting to 1000 [ 190.845880][ T9604] syz.4.916: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.887990][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.4.916 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 190.888015][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.888025][ T9604] Call Trace: [ 190.888032][ T9604] [ 190.888039][ T9604] dump_stack_lvl+0x189/0x250 [ 190.888069][ T9604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.888088][ T9604] ? __pfx__printk+0x10/0x10 [ 190.888104][ T9604] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.888129][ T9604] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.888155][ T9604] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 190.888180][ T9604] warn_alloc+0x214/0x310 [ 190.888208][ T9604] ? __pfx_warn_alloc+0x10/0x10 [ 190.888236][ T9604] ? __get_vm_area_node+0x1c5/0x2d0 [ 190.888254][ T9604] ? __get_vm_area_node+0x25a/0x2d0 [ 190.888280][ T9604] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 190.888328][ T9604] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.888353][ T9604] ? __kasan_kmalloc+0x93/0xb0 [ 190.888376][ T9604] vmalloc_user_noprof+0x74/0x80 [ 190.888396][ T9604] ? xskq_create+0xbf/0x170 [ 190.888414][ T9604] xskq_create+0xbf/0x170 [ 190.888434][ T9604] xsk_init_queue+0xb0/0x110 [ 190.888454][ T9604] xsk_setsockopt+0x4de/0x710 [ 190.888474][ T9604] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.888499][ T9604] ? aa_sock_opt_perm+0x74/0x110 [ 190.888518][ T9604] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 190.888534][ T9604] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.888552][ T9604] do_sock_setsockopt+0x257/0x3e0 [ 190.888572][ T9604] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.888586][ T9604] ? __fget_files+0x2a/0x420 [ 190.888611][ T9604] ? __fget_files+0x3a0/0x420 [ 190.888628][ T9604] ? __fget_files+0x2a/0x420 [ 190.888653][ T9604] __x64_sys_setsockopt+0x18b/0x220 [ 190.888674][ T9604] do_syscall_64+0xf6/0x210 [ 190.888695][ T9604] ? clear_bhb_loop+0x45/0xa0 [ 190.888714][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.888729][ T9604] RIP: 0033:0x7f9b5eb8e969 [ 190.888744][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.888758][ T9604] RSP: 002b:00007f9b5fa63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.888776][ T9604] RAX: ffffffffffffffda RBX: 00007f9b5edb6160 RCX: 00007f9b5eb8e969 [ 190.888787][ T9604] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 190.888796][ T9604] RBP: 00007f9b5ec10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 190.888806][ T9604] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 190.888816][ T9604] R13: 0000000000000000 R14: 00007f9b5edb6160 R15: 00007fffd4afbca8 [ 190.888843][ T9604] [ 190.888849][ T9604] Mem-Info: [ 191.165333][ T9604] active_anon:9659 inactive_anon:0 isolated_anon:0 [ 191.165333][ T9604] active_file:1658 inactive_file:38362 isolated_file:0 [ 191.165333][ T9604] unevictable:768 dirty:283 writeback:0 [ 191.165333][ T9604] slab_reclaimable:10621 slab_unreclaimable:111678 [ 191.165333][ T9604] mapped:28988 shmem:1468 pagetables:1096 [ 191.165333][ T9604] sec_pagetables:0 bounce:0 [ 191.165333][ T9604] kernel_misc_reclaimable:0 [ 191.165333][ T9604] free:1331411 free_pcp:215 free_cma:0 [ 191.235081][ T9604] Node 0 active_anon:38736kB inactive_anon:0kB active_file:6632kB inactive_file:153376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115952kB dirty:1132kB writeback:0kB shmem:4336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12072kB pagetables:4384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.319097][ T9604] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 191.388767][ T9621] __nla_validate_parse: 1 callbacks suppressed [ 191.388782][ T9621] netlink: 80 bytes leftover after parsing attributes in process `syz.8.919'. [ 191.418839][ T9604] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.493510][ T9604] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 191.509481][ T9604] Node 0 DMA32 free:1392272kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:41728kB inactive_anon:0kB active_file:6632kB inactive_file:153276kB unevictable:1536kB writepending:1132kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:920kB local_pcp:724kB free_cma:0kB [ 191.814633][ T9604] lowmem_reserve[]: 0 0 0 0 0 [ 191.819399][ T9604] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.849868][ T9624] FAULT_INJECTION: forcing a failure. [ 191.849868][ T9624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.899139][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.8.920 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 191.899161][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 191.899171][ T9624] Call Trace: [ 191.899178][ T9624] [ 191.899186][ T9624] dump_stack_lvl+0x189/0x250 [ 191.899210][ T9624] ? __lock_acquire+0xaac/0xd20 [ 191.899235][ T9624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.899257][ T9624] ? __pfx__printk+0x10/0x10 [ 191.899273][ T9624] ? __might_fault+0xb0/0x130 [ 191.899305][ T9624] should_fail_ex+0x414/0x560 [ 191.899331][ T9624] _copy_from_user+0x2d/0xb0 [ 191.899352][ T9624] br_dev_siocdevprivate+0xf5/0x1580 [ 191.899380][ T9624] ? __pfx___mutex_trylock_common+0x10/0x10 [ 191.899398][ T9624] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 191.899423][ T9624] ? rcu_is_watching+0x15/0xb0 [ 191.899449][ T9624] ? __mutex_lock+0x330/0xe80 [ 191.899475][ T9624] ? __lock_acquire+0xaac/0xd20 [ 191.899498][ T9624] ? dev_ioctl+0x83c/0x1150 [ 191.899519][ T9624] ? full_name_hash+0x92/0xe0 [ 191.899553][ T9624] ? netdev_name_node_lookup+0xdf/0x120 [ 191.899578][ T9624] dev_ifsioc+0xb54/0xf00 [ 191.899607][ T9624] dev_ioctl+0x84c/0x1150 [ 191.899632][ T9624] sock_ioctl+0x719/0x790 [ 191.899655][ T9624] ? __pfx_sock_ioctl+0x10/0x10 [ 191.899678][ T9624] ? __fget_files+0x3a0/0x420 [ 191.899698][ T9624] ? __fget_files+0x2a/0x420 [ 191.899720][ T9624] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.899740][ T9624] ? __pfx_sock_ioctl+0x10/0x10 [ 191.899760][ T9624] __se_sys_ioctl+0xf9/0x170 [ 191.899778][ T9624] do_syscall_64+0xf6/0x210 [ 191.899800][ T9624] ? clear_bhb_loop+0x45/0xa0 [ 191.899821][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.899837][ T9624] RIP: 0033:0x7fae89f8e969 [ 191.899852][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.899866][ T9624] RSP: 002b:00007fae8ae4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.899883][ T9624] RAX: ffffffffffffffda RBX: 00007fae8a1b5fa0 RCX: 00007fae89f8e969 [ 191.899895][ T9624] RDX: 0000200000001440 RSI: 00000000000089ff RDI: 0000000000000003 [ 191.899906][ T9624] RBP: 00007fae8ae4e090 R08: 0000000000000000 R09: 0000000000000000 [ 191.899916][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.899925][ T9624] R13: 0000000000000000 R14: 00007fae8a1b5fa0 R15: 00007ffc10db6608 [ 191.899954][ T9624] [ 191.900159][ T9604] lowmem_reserve[]: 0 0 0 0 0 [ 192.178886][ T9604] Node 1 Normal free:3914448kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB [ 192.253841][ T9604] lowmem_reserve[]: 0 0 0 0 0 [ 192.259539][ T9604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.303170][ T9604] Node 0 DMA32: 123*4kB (UM) 21*8kB (UE) 156*16kB (UE) 273*32kB (UE) 167*64kB (UME) 104*128kB (UME) 34*256kB (U) 42*512kB (UME) 15*1024kB (UME) 9*2048kB (UM) 312*4096kB (UM) = 1377844kB [ 192.363475][ T9604] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 192.383629][ T9632] netlink: 40 bytes leftover after parsing attributes in process `syz.8.923'. [ 192.413318][ T9604] Node 1 Normal: 228*4kB (UE) 60*8kB (UME) 40*16kB (UME) 217*32kB (UME) 95*64kB (UME) 36*128kB (UME) 18*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3914448kB [ 192.491674][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.7.924'. [ 192.513267][ T9604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.522916][ T9604] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.595765][ T9604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.636206][ T9604] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.673237][ T9604] 41512 total pagecache pages [ 192.689762][ T9604] 0 pages in swap cache [ 192.703324][ T9604] Free swap = 124996kB [ 192.707495][ T9604] Total swap = 124996kB [ 192.838388][ T9604] 2097051 pages RAM [ 192.842275][ T9604] 0 pages HighMem/MovableOnly [ 192.879400][ T9604] 424362 pages reserved [ 192.893185][ T9604] 0 pages cma reserved [ 193.260986][ T9653] IPv6: NLM_F_REPLACE set, but no existing node found! [ 193.467931][ T9657] syzkaller1: entered promiscuous mode [ 193.504312][ T9661] IPv6: NLM_F_REPLACE set, but no existing node found! [ 193.504584][ T9657] syzkaller1: entered allmulticast mode [ 193.550044][ T9656] netlink: 36 bytes leftover after parsing attributes in process `syz.4.930'. [ 193.930082][ T9674] netlink: 148 bytes leftover after parsing attributes in process `syz.5.938'. [ 193.982389][ T9674] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 194.166516][ T9680] syzkaller1: entered promiscuous mode [ 194.180947][ T9680] syzkaller1: entered allmulticast mode [ 194.648469][ T56] block nbd1: Receive control failed (result -32) [ 194.770999][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.947'. [ 194.924157][ T9715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.948'. [ 194.939583][ T9718] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 195.032596][ T9720] netlink: 'syz.7.949': attribute type 3 has an invalid length. [ 195.311562][ T9734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.293206][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 196.313742][ T9766] sctp: [Deprecated]: syz.6.965 (pid 9766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.313742][ T9766] Use struct sctp_sack_info instead [ 196.413074][ T9768] netlink: 'syz.5.966': attribute type 3 has an invalid length. [ 196.529419][ T9773] lo speed is unknown, defaulting to 1000 [ 196.684141][ T9789] sit0: entered promiscuous mode [ 196.714521][ T9789] netlink: 'syz.8.969': attribute type 3 has an invalid length. [ 196.743188][ T9789] netlink: 1 bytes leftover after parsing attributes in process `syz.8.969'. [ 196.823051][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.969'. [ 197.231081][ T9814] lo speed is unknown, defaulting to 1000 [ 197.238496][ T9816] netlink: 'syz.6.977': attribute type 1 has an invalid length. [ 197.247641][ T9816] lo: entered allmulticast mode [ 197.262964][ T9816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.296223][ T9819] xt_connbytes: Forcing CT accounting to be enabled [ 197.318740][ T9819] Cannot find add_set index 0 as target [ 197.328126][ T9822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.344691][ T9825] trusted_key: syz.7.978 sent an empty control message without MSG_MORE. [ 197.402076][ T9826] rdma_op ffff888031e281f0 conn xmit_rdma 0000000000000000 [ 197.452564][ T9828] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.605636][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.983'. [ 197.853560][ T9846] IPv6: NLM_F_REPLACE set, but no existing node found! [ 197.969446][ T9850] IPv6: NLM_F_REPLACE set, but no existing node found! [ 198.273254][ T5833] Bluetooth: hci4: link tx timeout [ 198.278578][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.339593][ T9863] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 198.485058][ T9868] nbd: socks must be embedded in a SOCK_ITEM attr [ 198.539392][ T9868] bridge_slave_1: left allmulticast mode [ 198.557917][ T9868] bridge_slave_1: left promiscuous mode [ 198.584194][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.615196][ T9868] bridge_slave_0: left allmulticast mode [ 198.627389][ T9868] bridge_slave_0: left promiscuous mode [ 198.638872][ T9874] netlink: 'syz.8.994': attribute type 1 has an invalid length. [ 198.649283][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.664659][ T9874] netlink: 208 bytes leftover after parsing attributes in process `syz.8.994'. [ 198.927431][ T9878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.247647][ T9890] IPv6: NLM_F_REPLACE set, but no existing node found! [ 199.261343][ T9884] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 199.454193][ T9897] xt_TCPMSS: Only works on TCP SYN packets [ 199.823903][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1005'. [ 199.840076][ T9907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 199.858879][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1005'. [ 199.941212][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'. [ 200.296817][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 200.596698][ T9930] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 200.670317][ T9936] IPv6: NLM_F_REPLACE set, but no existing node found! [ 200.721394][ T9939] netlink: 916 bytes leftover after parsing attributes in process `syz.4.1015'. [ 200.768248][ T9939] netlink: 916 bytes leftover after parsing attributes in process `syz.4.1015'. [ 201.187948][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1023'. [ 201.419416][ T9975] IPv6: NLM_F_REPLACE set, but no existing node found! [ 201.990133][T10010] FAULT_INJECTION: forcing a failure. [ 201.990133][T10010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.004269][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.4.1038 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 202.004292][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.004302][T10010] Call Trace: [ 202.004309][T10010] [ 202.004315][T10010] dump_stack_lvl+0x189/0x250 [ 202.004346][T10010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.004368][T10010] ? __pfx__printk+0x10/0x10 [ 202.004397][T10010] should_fail_ex+0x414/0x560 [ 202.004426][T10010] _copy_to_user+0x31/0xb0 [ 202.004449][T10010] simple_read_from_buffer+0xe1/0x170 [ 202.004474][T10010] proc_fail_nth_read+0x1df/0x250 [ 202.004499][T10010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.004524][T10010] ? rw_verify_area+0x258/0x650 [ 202.004541][T10010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.004570][T10010] vfs_read+0x1fd/0x980 [ 202.004593][T10010] ? __pfx___mutex_lock+0x10/0x10 [ 202.004614][T10010] ? __pfx_vfs_read+0x10/0x10 [ 202.004633][T10010] ? __fget_files+0x2a/0x420 [ 202.004656][T10010] ? __fget_files+0x3a0/0x420 [ 202.004674][T10010] ? __fget_files+0x2a/0x420 [ 202.004701][T10010] ksys_read+0x145/0x250 [ 202.004717][T10010] ? rcu_is_watching+0x15/0xb0 [ 202.004741][T10010] ? __pfx_ksys_read+0x10/0x10 [ 202.004762][T10010] ? do_syscall_64+0xba/0x210 [ 202.004784][T10010] do_syscall_64+0xf6/0x210 [ 202.004804][T10010] ? clear_bhb_loop+0x45/0xa0 [ 202.004823][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.004839][T10010] RIP: 0033:0x7f9b5eb8d37c [ 202.004854][T10010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.004869][T10010] RSP: 002b:00007f9b5faa5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.004886][T10010] RAX: ffffffffffffffda RBX: 00007f9b5edb5fa0 RCX: 00007f9b5eb8d37c [ 202.004896][T10010] RDX: 000000000000000f RSI: 00007f9b5faa50a0 RDI: 0000000000000004 [ 202.004905][T10010] RBP: 00007f9b5faa5090 R08: 0000000000000000 R09: 0000000000000000 [ 202.004915][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.004925][T10010] R13: 0000000000000000 R14: 00007f9b5edb5fa0 R15: 00007fffd4afbca8 [ 202.004949][T10010] [ 202.370261][T10023] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 202.762723][T10044] IPVS: set_ctl: invalid protocol: 26 0.0.0.0:20004 [ 203.400840][T10074] __nla_validate_parse: 1 callbacks suppressed [ 203.400858][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'. [ 203.539286][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1066'. [ 203.692234][T10083] bond1: entered promiscuous mode [ 203.730876][T10083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.827623][T10108] netlink: 'syz.8.1071': attribute type 13 has an invalid length. [ 203.918561][T10111] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1073'. [ 203.940973][T10083] bond1 (unregistering): Released all slaves [ 204.013801][T10102] netlink: 908 bytes leftover after parsing attributes in process `syz.5.1068'. [ 204.169883][T10108] bridge0: port 3(dummy0) entered disabled state [ 204.176380][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.184016][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.411101][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1079'. [ 204.457635][T10108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.628477][T10108] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.638325][T10108] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.656163][T10108] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.666863][T10108] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.676745][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1081'. [ 204.791409][T10135] macvlan2: entered promiscuous mode [ 204.831473][T10135] macvlan2: entered allmulticast mode [ 204.851127][T10135] team0: Device macvlan2 is of different type [ 204.951651][T10146] xt_TCPMSS: Only works on TCP SYN packets [ 205.100852][T10154] team0: entered allmulticast mode [ 205.147930][T10154] team_slave_0: entered allmulticast mode [ 205.203638][T10154] team_slave_1: entered allmulticast mode [ 206.716281][T10241] Bluetooth: MGMT ver 1.23 [ 206.742383][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1108'. [ 207.262472][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1115'. [ 207.345406][T10263] macsec1: entered promiscuous mode [ 207.360833][T10263] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 207.392544][T10263] macsec1: entered allmulticast mode [ 207.412348][T10263] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 207.617700][T10288] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1121'. [ 207.644358][T10288] vti0: entered promiscuous mode [ 207.672775][T10288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1121'. [ 207.942515][T10299] FAULT_INJECTION: forcing a failure. [ 207.942515][T10299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.956401][T10299] CPU: 1 UID: 0 PID: 10299 Comm: syz.6.1125 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 207.956423][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.956433][T10299] Call Trace: [ 207.956440][T10299] [ 207.956447][T10299] dump_stack_lvl+0x189/0x250 [ 207.956471][T10299] ? __lock_acquire+0xaac/0xd20 [ 207.956496][T10299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.956518][T10299] ? __pfx__printk+0x10/0x10 [ 207.956535][T10299] ? __might_fault+0xb0/0x130 [ 207.956566][T10299] should_fail_ex+0x414/0x560 [ 207.956602][T10299] _copy_from_user+0x2d/0xb0 [ 207.956621][T10299] ___sys_recvmsg+0x12e/0x510 [ 207.956645][T10299] ? __pfx____sys_recvmsg+0x10/0x10 [ 207.956685][T10299] ? __fget_files+0x3a0/0x420 [ 207.956715][T10299] __x64_sys_recvmsg+0x198/0x260 [ 207.956737][T10299] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 207.956771][T10299] ? do_syscall_64+0xba/0x210 [ 207.956796][T10299] do_syscall_64+0xf6/0x210 [ 207.956816][T10299] ? clear_bhb_loop+0x45/0xa0 [ 207.956836][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.956851][T10299] RIP: 0033:0x7f082038e969 [ 207.956869][T10299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.956883][T10299] RSP: 002b:00007f08211a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 207.956900][T10299] RAX: ffffffffffffffda RBX: 00007f08205b5fa0 RCX: 00007f082038e969 [ 207.956911][T10299] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 207.956921][T10299] RBP: 00007f08211a5090 R08: 0000000000000000 R09: 0000000000000000 [ 207.956931][T10299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.956941][T10299] R13: 0000000000000000 R14: 00007f08205b5fa0 R15: 00007ffe7a53d288 [ 207.956967][T10299] [ 208.510089][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 208.513435][T10314] sit0: entered promiscuous mode [ 208.531176][T10314] netlink: 'syz.5.1131': attribute type 1 has an invalid length. [ 208.573349][T10314] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1131'. [ 208.591762][ T5875] IPVS: starting estimator thread 0... [ 208.610054][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1132'. [ 208.636710][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1132'. [ 208.656660][T10320] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1132'. [ 208.683763][T10319] IPVS: using max 34 ests per chain, 81600 per kthread [ 208.711581][T10312] batman_adv: batadv0: Removing interface: virt_wifi0 [ 208.969441][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 209.333039][T10346] FAULT_INJECTION: forcing a failure. [ 209.333039][T10346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.361648][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.5.1138 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 209.361677][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.361687][T10346] Call Trace: [ 209.361694][T10346] [ 209.361702][T10346] dump_stack_lvl+0x189/0x250 [ 209.361732][T10346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.361755][T10346] ? __pfx__printk+0x10/0x10 [ 209.361773][T10346] ? fs_reclaim_acquire+0x7d/0x100 [ 209.361804][T10346] should_fail_ex+0x414/0x560 [ 209.361833][T10346] prepare_alloc_pages+0x213/0x610 [ 209.361864][T10346] __alloc_frozen_pages_noprof+0x123/0x370 [ 209.361892][T10346] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.361920][T10346] ? __lock_acquire+0xaac/0xd20 [ 209.361943][T10346] ? policy_nodemask+0x27c/0x720 [ 209.361969][T10346] alloc_pages_mpol+0x232/0x4a0 [ 209.361996][T10346] folio_alloc_mpol_noprof+0x39/0x70 [ 209.362019][T10346] shmem_alloc_and_add_folio+0x447/0xf60 [ 209.362043][T10346] ? filemap_get_entry+0xad/0x2f0 [ 209.362066][T10346] ? filemap_get_entry+0xad/0x2f0 [ 209.362087][T10346] ? filemap_get_entry+0xad/0x2f0 [ 209.362114][T10346] ? shmem_huge_global_enabled+0x174/0x3a0 [ 209.362132][T10346] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 209.362156][T10346] ? shmem_allowable_huge_orders+0x414/0x420 [ 209.362181][T10346] shmem_get_folio_gfp+0x597/0x15f0 [ 209.362221][T10346] shmem_fault+0x179/0x390 [ 209.362250][T10346] __do_fault+0x135/0x390 [ 209.362275][T10346] __handle_mm_fault+0x17f9/0x5380 [ 209.362294][T10346] ? mt_find+0x15c/0x5f0 [ 209.362332][T10346] ? __pfx___handle_mm_fault+0x10/0x10 [ 209.362369][T10346] ? find_vma+0xe7/0x160 [ 209.362388][T10346] ? __pfx_find_vma+0x10/0x10 [ 209.362412][T10346] handle_mm_fault+0x3f6/0x8c0 [ 209.362441][T10346] do_user_addr_fault+0x764/0x1390 [ 209.362473][T10346] exc_page_fault+0x68/0x110 [ 209.362495][T10346] asm_exc_page_fault+0x26/0x30 [ 209.362511][T10346] RIP: 0010:put_cmsg+0x201/0x640 [ 209.362532][T10346] Code: 89 f6 e8 22 d8 83 f8 48 89 df 4c 89 ee e8 17 d8 83 f8 4c 39 eb 0f 82 fd 02 00 00 4c 39 f3 0f 87 f4 02 00 00 0f 01 cb 0f ae e8 <4d> 89 65 00 8b 44 24 08 41 89 45 08 8b 44 24 0c 41 89 45 0c 49 83 [ 209.362546][T10346] RSP: 0018:ffffc9000c1f7700 EFLAGS: 00050283 [ 209.362562][T10346] RAX: ffffffff893be7c9 RBX: 0000200000002f58 RCX: ffff888044111e00 [ 209.362574][T10346] RDX: 0000000000000000 RSI: 0000200000002f40 RDI: 0000200000002f58 [ 209.362585][T10346] RBP: 0000000000000008 R08: ffffc9000c1f77e0 R09: 0000000000000000 [ 209.362596][T10346] R10: ffffc9000c1f77e0 R11: fffff5200183eefd R12: 0000000000000018 [ 209.362607][T10346] R13: 0000200000002f40 R14: 00007ffffffff000 R15: ffffc9000c1f77e0 [ 209.362628][T10346] ? put_cmsg+0x1e9/0x640 [ 209.362674][T10346] tipc_sk_anc_data_recv+0x336/0x6f0 [ 209.362695][T10346] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 209.362719][T10346] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 209.362750][T10346] tipc_recvmsg+0x6e6/0x13c0 [ 209.362785][T10346] ? __pfx_tipc_recvmsg+0x10/0x10 [ 209.362812][T10346] ? aa_sock_msg_perm+0x94/0x160 [ 209.362830][T10346] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 209.362847][T10346] ? security_socket_recvmsg+0x7e/0x2e0 [ 209.362867][T10346] ? __pfx_tipc_recvmsg+0x10/0x10 [ 209.362887][T10346] sock_recvmsg+0x229/0x270 [ 209.362913][T10346] ____sys_recvmsg+0x1c9/0x460 [ 209.362941][T10346] ? __pfx_____sys_recvmsg+0x10/0x10 [ 209.362976][T10346] ? import_iovec+0x74/0xa0 [ 209.363000][T10346] ___sys_recvmsg+0x1b5/0x510 [ 209.363025][T10346] ? __pfx____sys_recvmsg+0x10/0x10 [ 209.363070][T10346] ? __fget_files+0x3a0/0x420 [ 209.363098][T10346] __x64_sys_recvmsg+0x198/0x260 [ 209.363119][T10346] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 209.363152][T10346] ? do_syscall_64+0xba/0x210 [ 209.363175][T10346] do_syscall_64+0xf6/0x210 [ 209.363196][T10346] ? clear_bhb_loop+0x45/0xa0 [ 209.363216][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.363232][T10346] RIP: 0033:0x7f4c4e58e969 [ 209.363246][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.363259][T10346] RSP: 002b:00007f4c4f3ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 209.363276][T10346] RAX: ffffffffffffffda RBX: 00007f4c4e7b5fa0 RCX: 00007f4c4e58e969 [ 209.363287][T10346] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 209.363298][T10346] RBP: 00007f4c4f3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 209.363308][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.363317][T10346] R13: 0000000000000000 R14: 00007f4c4e7b5fa0 R15: 00007ffd7c517468 [ 209.363343][T10346] [ 210.009301][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1142'. [ 210.253625][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1146'. [ 210.335530][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1151'. [ 210.370506][T10377] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1150'. [ 211.206653][T10414] x_tables: duplicate underflow at hook 2 [ 211.581033][T10428] IPv6: NLM_F_REPLACE set, but no existing node found! [ 212.061597][T10448] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.577288][T10466] IPv6: NLM_F_REPLACE set, but no existing node found! [ 213.074741][T10477] lo speed is unknown, defaulting to 1000 [ 213.437802][T10491] lo speed is unknown, defaulting to 1000 [ 213.734237][T10506] __nla_validate_parse: 5 callbacks suppressed [ 213.734253][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 213.834336][T10479] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.989185][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 214.006500][T10511] FAULT_INJECTION: forcing a failure. [ 214.006500][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.020224][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.8.1185 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 214.020246][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 214.020256][T10511] Call Trace: [ 214.020264][T10511] [ 214.020270][T10511] dump_stack_lvl+0x189/0x250 [ 214.020300][T10511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.020323][T10511] ? __pfx__printk+0x10/0x10 [ 214.020352][T10511] should_fail_ex+0x414/0x560 [ 214.020382][T10511] _copy_to_user+0x31/0xb0 [ 214.020406][T10511] simple_read_from_buffer+0xe1/0x170 [ 214.020430][T10511] proc_fail_nth_read+0x1df/0x250 [ 214.020455][T10511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.020478][T10511] ? rw_verify_area+0x258/0x650 [ 214.020494][T10511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.020517][T10511] vfs_read+0x1fd/0x980 [ 214.020539][T10511] ? __pfx___mutex_lock+0x10/0x10 [ 214.020561][T10511] ? __pfx_vfs_read+0x10/0x10 [ 214.020580][T10511] ? __fget_files+0x2a/0x420 [ 214.020605][T10511] ? __fget_files+0x3a0/0x420 [ 214.020623][T10511] ? __fget_files+0x2a/0x420 [ 214.020652][T10511] ksys_read+0x145/0x250 [ 214.020668][T10511] ? rcu_is_watching+0x15/0xb0 [ 214.020697][T10511] ? __pfx_ksys_read+0x10/0x10 [ 214.020718][T10511] ? do_syscall_64+0xba/0x210 [ 214.020742][T10511] do_syscall_64+0xf6/0x210 [ 214.020763][T10511] ? clear_bhb_loop+0x45/0xa0 [ 214.020784][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.020799][T10511] RIP: 0033:0x7fae89f8d37c [ 214.020814][T10511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.020828][T10511] RSP: 002b:00007fae8ae4e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.020844][T10511] RAX: ffffffffffffffda RBX: 00007fae8a1b5fa0 RCX: 00007fae89f8d37c [ 214.020855][T10511] RDX: 000000000000000f RSI: 00007fae8ae4e0a0 RDI: 0000000000000005 [ 214.020865][T10511] RBP: 00007fae8ae4e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.020875][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.020884][T10511] R13: 0000000000000000 R14: 00007fae8a1b5fa0 R15: 00007ffc10db6608 [ 214.020911][T10511] [ 214.757928][T10532] macvlan2: entered allmulticast mode [ 215.230204][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 215.371622][T10555] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 215.885481][T10576] Cannot find del_set index 0 as target [ 215.893420][T10576] netlink: 'syz.8.1205': attribute type 1 has an invalid length. [ 216.192515][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1209'. [ 216.615451][T10608] IPv6: NLM_F_REPLACE set, but no existing node found! [ 217.306090][T10624] tipc: Started in network mode [ 217.338781][T10624] tipc: Node identity 4, cluster identity 4711 [ 217.356702][T10624] tipc: Node number set to 4 [ 217.488192][T10633] pim6reg1: entered promiscuous mode [ 217.501770][T10633] pim6reg1: entered allmulticast mode [ 217.576331][T10637] lo speed is unknown, defaulting to 1000 [ 217.622438][T10641] ip6t_srh: unknown srh match flags 4000 [ 217.732023][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1227'. [ 217.883002][T10641] hsr_slave_0 (unregistering): left promiscuous mode [ 217.939017][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1231'. [ 218.008617][T10652] lo speed is unknown, defaulting to 1000 [ 218.097942][T10653] lo speed is unknown, defaulting to 1000 [ 218.132889][T10654] lo speed is unknown, defaulting to 1000 [ 218.159298][T10659] lo speed is unknown, defaulting to 1000 [ 219.729850][T10675] lo speed is unknown, defaulting to 1000 [ 219.947610][T10680] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 220.044864][T10686] netlink: 'syz.8.1238': attribute type 3 has an invalid length. [ 220.242679][T10683] netlink: 'syz.4.1239': attribute type 2 has an invalid length. [ 220.400724][T10683] k›*·]‘: entered promiscuous mode [ 220.603247][T10699] xt_CT: No such helper "pptp" [ 220.952741][T10713] netlink: 272 bytes leftover after parsing attributes in process `syz.8.1247'. [ 221.438350][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1249'. [ 221.820086][T10744] IPv6: NLM_F_REPLACE set, but no existing node found! [ 221.834101][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1260'. [ 222.009539][T10757] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 222.024697][T10759] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1263'. [ 222.145980][T10756] lo speed is unknown, defaulting to 1000 [ 222.310612][T10773] lo speed is unknown, defaulting to 1000 [ 222.368368][T10775] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.442557][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 222.469837][T10777] netlink: 'syz.5.1267': attribute type 1 has an invalid length. [ 222.480364][T10777] netlink: 'syz.5.1267': attribute type 2 has an invalid length. [ 222.523346][T10779] netlink: 'syz.4.1268': attribute type 9 has an invalid length. [ 222.772373][T10787] veth5: entered promiscuous mode [ 222.894026][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1273'. [ 223.119832][T10803] netlink: 'syz.8.1275': attribute type 1 has an invalid length. [ 223.171190][T10807] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1275'. [ 223.291026][T10803] bond2: entered promiscuous mode [ 223.297180][T10812] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1275'. [ 223.306851][T10803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.322257][T10807] batadv1: entered promiscuous mode [ 223.330392][T10807] batadv1: entered allmulticast mode [ 223.356790][T10807] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.368749][T10807] bond2: (slave batadv1): making interface the new active one [ 223.377626][T10807] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 223.675719][T10828] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 223.961819][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1287'. [ 224.160413][T10852] GUP no longer grows the stack in syz.7.1288 (10852): 200000006000-20000000a000 (200000005000) [ 224.178351][T10852] CPU: 1 UID: 0 PID: 10852 Comm: syz.7.1288 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 224.178378][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 224.178389][T10852] Call Trace: [ 224.178395][T10852] [ 224.178404][T10852] dump_stack_lvl+0x189/0x250 [ 224.178435][T10852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.178458][T10852] ? __pfx__printk+0x10/0x10 [ 224.178471][T10852] ? find_vma+0xe7/0x160 [ 224.178505][T10852] __get_user_pages+0x24e4/0x2a40 [ 224.178556][T10852] ? __pfx___get_user_pages+0x10/0x10 [ 224.178574][T10852] ? __gup_longterm_locked+0xbf7/0x15b0 [ 224.178594][T10852] ? down_read_killable+0x1d1/0x350 [ 224.178614][T10852] ? try_get_folio+0x633/0x660 [ 224.178646][T10852] __gup_longterm_locked+0xd66/0x15b0 [ 224.178670][T10852] ? try_grab_folio_fast+0x19a/0x4d0 [ 224.178701][T10852] ? gup_fast_fallback+0x1672/0x1d60 [ 224.178723][T10852] gup_fast_fallback+0x1843/0x1d60 [ 224.178778][T10852] ? __pfx_gup_fast_fallback+0x10/0x10 [ 224.178801][T10852] ? __mutex_lock+0x330/0xe80 [ 224.178827][T10852] ? is_valid_gup_args+0x11f/0x200 [ 224.178851][T10852] ? get_user_pages_fast+0x4d/0xb0 [ 224.178874][T10852] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 224.178903][T10852] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 224.178924][T10852] ? wait_for_space+0x24d/0x2d0 [ 224.178947][T10852] iov_iter_get_pages2+0x5e/0xa0 [ 224.178972][T10852] __se_sys_vmsplice+0x548/0x10e0 [ 224.179014][T10852] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 224.179039][T10852] ? __pfx_futex_wake+0x10/0x10 [ 224.179068][T10852] ? __lock_acquire+0xaac/0xd20 [ 224.179132][T10852] ? rcu_is_watching+0x15/0xb0 [ 224.179166][T10852] ? do_syscall_64+0xba/0x210 [ 224.179192][T10852] do_syscall_64+0xf6/0x210 [ 224.179214][T10852] ? clear_bhb_loop+0x45/0xa0 [ 224.179237][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.179254][T10852] RIP: 0033:0x7fb1edd8e969 [ 224.179271][T10852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.179286][T10852] RSP: 002b:00007fb1eebee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 224.179305][T10852] RAX: ffffffffffffffda RBX: 00007fb1edfb6080 RCX: 00007fb1edd8e969 [ 224.179318][T10852] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 224.179329][T10852] RBP: 00007fb1ede10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 224.179340][T10852] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 224.179349][T10852] R13: 0000000000000000 R14: 00007fb1edfb6080 R15: 00007ffceb6f4298 [ 224.179376][T10852] [ 224.462669][T10851] netlink: 'syz.7.1288': attribute type 1 has an invalid length. [ 224.576985][T10855] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1289'. [ 225.195936][T10906] netlink: 'syz.8.1300': attribute type 1 has an invalid length. [ 225.293786][T10915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.309712][T10906] bond3: (slave gretap1): making interface the new active one [ 225.329483][T10906] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 225.403305][T10906] syz.8.1300 (10906) used greatest stack depth: 20120 bytes left [ 225.680190][T10932] lo speed is unknown, defaulting to 1000 [ 225.955339][T10980] netlink: 'syz.6.1317': attribute type 1 has an invalid length. [ 225.963270][T10975] vxcan3: entered allmulticast mode [ 226.053875][T10978] lo speed is unknown, defaulting to 1000 [ 226.181790][T10989] IPv6: NLM_F_REPLACE set, but no existing node found! [ 226.341408][T10996] IPv6: NLM_F_REPLACE set, but no existing node found! [ 226.434452][T10998] __nla_validate_parse: 2 callbacks suppressed [ 226.434470][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1323'. [ 226.467009][T10998] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 226.573375][T10998] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1323'. [ 226.840280][T11009] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 226.848460][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1327'. [ 226.868437][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1327'. [ 226.887965][T11009] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 227.422173][T11025] syzkaller0: entered promiscuous mode [ 227.433466][T11025] syzkaller0: entered allmulticast mode [ 227.668678][T11042] IPv6: NLM_F_REPLACE set, but no existing node found! [ 229.652849][T11054] netlink: 'syz.7.1340': attribute type 13 has an invalid length. [ 229.880805][T11082] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1348'. [ 229.924833][T11085] IPv6: NLM_F_REPLACE set, but no existing node found! [ 230.097681][T11091] netlink: 'syz.6.1351': attribute type 12 has an invalid length. [ 230.113196][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1351'. [ 230.122675][T11091] bond0: option primary_reselect: invalid value (8) [ 230.201596][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1353'. [ 230.269842][T11101] netlink: 'syz.6.1356': attribute type 3 has an invalid length. [ 230.279260][T11100] batadv_slave_1: entered promiscuous mode [ 230.298186][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1356'. [ 230.443847][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 230.508747][T11118] netlink: 'syz.4.1359': attribute type 21 has an invalid length. [ 230.536889][T11120] FAULT_INJECTION: forcing a failure. [ 230.536889][T11120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.554034][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.5.1360 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 230.554059][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 230.554069][T11120] Call Trace: [ 230.554075][T11120] [ 230.554083][T11120] dump_stack_lvl+0x189/0x250 [ 230.554107][T11120] ? __lock_acquire+0xaac/0xd20 [ 230.554132][T11120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.554160][T11120] ? __pfx__printk+0x10/0x10 [ 230.554177][T11120] ? __might_fault+0xb0/0x130 [ 230.554207][T11120] should_fail_ex+0x414/0x560 [ 230.554236][T11120] _copy_from_user+0x2d/0xb0 [ 230.554257][T11120] ___sys_sendmsg+0x158/0x2a0 [ 230.554279][T11120] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.554331][T11120] ? __fget_files+0x2a/0x420 [ 230.554350][T11120] ? __fget_files+0x3a0/0x420 [ 230.554380][T11120] __x64_sys_sendmsg+0x19b/0x260 [ 230.554400][T11120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.554432][T11120] ? do_syscall_64+0xba/0x210 [ 230.554457][T11120] do_syscall_64+0xf6/0x210 [ 230.554477][T11120] ? clear_bhb_loop+0x45/0xa0 [ 230.554497][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.554512][T11120] RIP: 0033:0x7f4c4e58e969 [ 230.554527][T11120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.554541][T11120] RSP: 002b:00007f4c4f3ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.554559][T11120] RAX: ffffffffffffffda RBX: 00007f4c4e7b5fa0 RCX: 00007f4c4e58e969 [ 230.554571][T11120] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005 [ 230.554581][T11120] RBP: 00007f4c4f3ac090 R08: 0000000000000000 R09: 0000000000000000 [ 230.554591][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.554600][T11120] R13: 0000000000000000 R14: 00007f4c4e7b5fa0 R15: 00007ffd7c517468 [ 230.554625][T11120] [ 230.954209][T11136] IPv6: NLM_F_REPLACE set, but no existing node found! [ 231.072259][T11140] bridge0: port 3(veth1_to_bridge) entered blocking state [ 231.082188][T11140] bridge0: port 3(veth1_to_bridge) entered disabled state [ 231.098018][T11140] veth1_to_bridge: entered allmulticast mode [ 231.116418][T11140] veth1_to_bridge: entered promiscuous mode [ 231.122572][T11140] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 231.168608][T11140] bridge0: port 3(veth1_to_bridge) entered blocking state [ 231.175894][T11140] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 231.194094][T11153] ipt_ECN: cannot use operation on non-tcp rule [ 231.219388][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1368'. [ 231.270966][T11153] lo speed is unknown, defaulting to 1000 [ 231.281184][T11143] netlink: 'syz.4.1370': attribute type 39 has an invalid length. [ 231.355605][T11151] lo speed is unknown, defaulting to 1000 [ 231.411164][T11165] FAULT_INJECTION: forcing a failure. [ 231.411164][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 231.493060][T11159] lo speed is unknown, defaulting to 1000 [ 231.493154][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.7.1371 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 231.493175][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.493184][T11165] Call Trace: [ 231.493190][T11165] [ 231.493195][T11165] dump_stack_lvl+0x189/0x250 [ 231.493222][T11165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.493244][T11165] ? __pfx__printk+0x10/0x10 [ 231.493264][T11165] ? __pfx___might_resched+0x10/0x10 [ 231.493284][T11165] should_fail_ex+0x414/0x560 [ 231.493312][T11165] should_failslab+0xa8/0x100 [ 231.493333][T11165] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 231.493353][T11165] ? __alloc_skb+0x112/0x2d0 [ 231.493372][T11165] __alloc_skb+0x112/0x2d0 [ 231.493391][T11165] netlink_sendmsg+0x5c6/0xb30 [ 231.493415][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.493434][T11165] ? aa_sock_msg_perm+0x94/0x160 [ 231.493451][T11165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.493468][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.493484][T11165] __sock_sendmsg+0x219/0x270 [ 231.493508][T11165] ____sys_sendmsg+0x505/0x830 [ 231.493531][T11165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.493556][T11165] ? import_iovec+0x74/0xa0 [ 231.493579][T11165] ___sys_sendmsg+0x21f/0x2a0 [ 231.493598][T11165] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.493648][T11165] ? __fget_files+0x2a/0x420 [ 231.493667][T11165] ? __fget_files+0x3a0/0x420 [ 231.493695][T11165] __x64_sys_sendmsg+0x19b/0x260 [ 231.493715][T11165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.493747][T11165] ? do_syscall_64+0xba/0x210 [ 231.493771][T11165] do_syscall_64+0xf6/0x210 [ 231.493791][T11165] ? clear_bhb_loop+0x45/0xa0 [ 231.493810][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.493826][T11165] RIP: 0033:0x7fb1edd8e969 [ 231.493839][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.493854][T11165] RSP: 002b:00007fb1eebee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.493871][T11165] RAX: ffffffffffffffda RBX: 00007fb1edfb6080 RCX: 00007fb1edd8e969 [ 231.493883][T11165] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005 [ 231.493893][T11165] RBP: 00007fb1eebee090 R08: 0000000000000000 R09: 0000000000000000 [ 231.493902][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.493912][T11165] R13: 0000000000000000 R14: 00007fb1edfb6080 R15: 00007ffceb6f4298 [ 231.493937][T11165] [ 231.531732][T11172] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1376'. [ 231.776497][T11172] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 231.799307][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1377'. [ 231.875263][T11178] smc: net device bond0 applied user defined pnetid SYZ0 [ 231.883531][T11183] smc: net device bond0 erased user defined pnetid SYZ0 [ 232.396082][T11187] No such timeout policy "syz0" [ 232.662734][T11205] syzkaller0: entered allmulticast mode [ 232.797742][T11214] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1387'. [ 232.989505][T11226] IPv6: NLM_F_REPLACE set, but no existing node found! [ 233.171536][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1393'. [ 233.194016][T11220] syzkaller1: entered promiscuous mode [ 233.199774][T11220] syzkaller1: entered allmulticast mode [ 233.278102][T11238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.358897][T11237] batadv2: entered allmulticast mode [ 233.369124][T11237] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 233.376508][T11237] bridge0: port 4(batadv2) entered blocking state [ 233.383319][T11237] bridge0: port 4(batadv2) entered disabled state [ 233.391014][T11237] batadv2: entered promiscuous mode [ 233.734265][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1400'. [ 233.871826][ T2979] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 233.881446][ T2979] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 233.899895][T11267] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1403'. [ 233.966988][T11267] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.987611][T11267] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.002695][T11267] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.020163][T11267] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.117237][T11274] FAULT_INJECTION: forcing a failure. [ 234.117237][T11274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.161128][T11274] CPU: 1 UID: 0 PID: 11274 Comm: syz.4.1405 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 234.161156][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 234.161166][T11274] Call Trace: [ 234.161173][T11274] [ 234.161180][T11274] dump_stack_lvl+0x189/0x250 [ 234.161207][T11274] ? __lock_acquire+0xaac/0xd20 [ 234.161231][T11274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.161253][T11274] ? __pfx__printk+0x10/0x10 [ 234.161270][T11274] ? __might_fault+0xb0/0x130 [ 234.161302][T11274] should_fail_ex+0x414/0x560 [ 234.161330][T11274] _copy_from_iter+0x1db/0x15a0 [ 234.161356][T11274] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 234.161374][T11274] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 234.161395][T11274] ? __pfx__copy_from_iter+0x10/0x10 [ 234.161416][T11274] ? __build_skb_around+0x257/0x3e0 [ 234.161435][T11274] ? netlink_sendmsg+0x642/0xb30 [ 234.161502][T11274] ? skb_put+0x11b/0x210 [ 234.161522][T11274] netlink_sendmsg+0x6b2/0xb30 [ 234.161546][T11274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.161563][T11274] ? aa_sock_msg_perm+0x94/0x160 [ 234.161581][T11274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.161599][T11274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.161614][T11274] __sock_sendmsg+0x219/0x270 [ 234.161638][T11274] ____sys_sendmsg+0x505/0x830 [ 234.161661][T11274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.161688][T11274] ? import_iovec+0x74/0xa0 [ 234.161761][T11274] ___sys_sendmsg+0x21f/0x2a0 [ 234.161784][T11274] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.161838][T11274] ? __fget_files+0x2a/0x420 [ 234.161857][T11274] ? __fget_files+0x3a0/0x420 [ 234.161887][T11274] __x64_sys_sendmsg+0x19b/0x260 [ 234.161907][T11274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.161941][T11274] ? do_syscall_64+0xba/0x210 [ 234.161965][T11274] do_syscall_64+0xf6/0x210 [ 234.161986][T11274] ? clear_bhb_loop+0x45/0xa0 [ 234.162006][T11274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.162022][T11274] RIP: 0033:0x7f9b5eb8e969 [ 234.162038][T11274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.162053][T11274] RSP: 002b:00007f9b5faa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.162070][T11274] RAX: ffffffffffffffda RBX: 00007f9b5edb5fa0 RCX: 00007f9b5eb8e969 [ 234.162082][T11274] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005 [ 234.162092][T11274] RBP: 00007f9b5faa5090 R08: 0000000000000000 R09: 0000000000000000 [ 234.162102][T11274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.162111][T11274] R13: 0000000000000000 R14: 00007f9b5edb5fa0 R15: 00007fffd4afbca8 [ 234.162137][T11274] [ 234.517873][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1406'. [ 234.528008][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1406'. [ 234.580596][T11281] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.589648][T11281] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.591073][T11284] xt_hashlimit: max too large, truncated to 1048576 [ 234.598641][T11281] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.613894][T11281] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.634541][T11284] xt_hashlimit: overflow, try lower: 241/0 [ 235.161541][T11314] pim6reg1: entered promiscuous mode [ 235.188771][T11314] pim6reg1: entered allmulticast mode [ 235.192386][T11320] xt_CT: No such helper "pptp" [ 235.318640][T11319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.397032][T11319] bond1: entered allmulticast mode [ 235.410988][T11319] team0: Port device bond1 added [ 235.646060][T11335] lo speed is unknown, defaulting to 1000 [ 235.847338][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 236.245950][T11355] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1431'. [ 236.314098][T11357] x_tables: duplicate underflow at hook 1 [ 236.529398][T11365] lo speed is unknown, defaulting to 1000 [ 236.906678][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1423'. [ 237.001168][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1439'. [ 237.555480][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 238.207389][T11424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.404643][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 238.413970][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1454'. [ 238.538746][T11452] netlink: 'syz.8.1457': attribute type 2 has an invalid length. [ 238.574089][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1455'. [ 238.583615][T11449] ipvlan0: entered allmulticast mode [ 238.593653][T11449] dummy0: entered allmulticast mode [ 239.072979][T11470] xt_bpf: check failed: parse error [ 239.245172][T11473] tipc: Failed to remove unknown binding: 66,1,1/0:1783960243/1783960245 [ 239.288608][T11473] tipc: Failed to remove unknown binding: 66,1,1/0:1783960243/1783960245 [ 239.343228][T11473] tipc: Failed to remove unknown binding: 66,1,1/0:1783960243/1783960245 [ 239.877589][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1468'. [ 239.934650][T11493] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1468'. [ 240.097087][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1470'. [ 240.134138][T11500] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1470'. [ 240.534236][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 240.559097][T11526] vlan3: entered allmulticast mode [ 240.583251][T11526] batadv0: entered allmulticast mode [ 241.190124][T11557] lo speed is unknown, defaulting to 1000 [ 242.375707][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 242.384547][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 242.390606][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 242.490775][T11614] __nla_validate_parse: 7 callbacks suppressed [ 242.490793][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1505'. [ 242.697183][T11623] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1508'. [ 242.733727][T11616] lo speed is unknown, defaulting to 1000 [ 242.739534][T11624] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1509'. [ 242.961025][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1514'. [ 243.410682][T11661] pim6reg: entered allmulticast mode [ 243.454979][T11664] pim6reg: left allmulticast mode [ 243.500714][T11662] sctp: [Deprecated]: syz.6.1519 (pid 11662) Use of int in max_burst socket option deprecated. [ 243.500714][T11662] Use struct sctp_assoc_value instead [ 243.549111][T11662] sctp: [Deprecated]: syz.6.1519 (pid 11662) Use of int in maxseg socket option. [ 243.549111][T11662] Use struct sctp_assoc_value instead [ 243.672436][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1523'. [ 243.677687][T11661] macvlan2: entered promiscuous mode [ 243.690068][T11661] macvlan2: entered allmulticast mode [ 243.696178][T11661] team0: Device macvlan2 is of different type [ 243.742304][T11669] batman_adv: batadv0: Adding interface: dummy0 [ 243.758686][T11669] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.793284][T11669] batman_adv: batadv0: Interface activated: dummy0 [ 244.020746][T11684] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1526'. [ 244.050361][T11681] mac80211_hwsim hwsim18 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.117663][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1525'. [ 244.368074][T11694] sctp: [Deprecated]: syz.7.1531 (pid 11694) Use of int in max_burst socket option deprecated. [ 244.368074][T11694] Use struct sctp_assoc_value instead [ 244.587134][ T30] audit: type=1800 audit(1745968084.272:4): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1525" name="cgroup.controllers" dev="tmpfs" ino=1333 res=0 errno=0 [ 244.612580][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1531'. [ 244.677776][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1534'. [ 244.872845][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 245.224673][T11738] IPv6: NLM_F_REPLACE set, but no existing node found! [ 245.271485][T11740] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 245.408400][T11746] team0: Device gtp1 is of different type [ 245.449202][T11753] netlink: 'syz.7.1550': attribute type 18 has an invalid length. [ 245.478640][T11753] netlink: 'syz.7.1550': attribute type 18 has an invalid length. [ 245.615190][T11762] IPv6: NLM_F_REPLACE set, but no existing node found! [ 245.853526][T11772] IPv6: NLM_F_REPLACE set, but no existing node found! [ 245.862866][ T30] audit: type=1800 audit(1745968085.542:5): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1559" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1237 res=0 errno=0 [ 245.912209][ T30] audit: type=1800 audit(1745968085.542:6): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1559" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1237 res=0 errno=0 [ 246.092912][T11790] netlink: 'syz.8.1563': attribute type 2 has an invalid length. [ 246.197952][T11795] sctp: [Deprecated]: syz.8.1563 (pid 11795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.197952][T11795] Use struct sctp_sack_info instead [ 246.773461][T10957] wlan0: Trigger new scan to find an IBSS to join [ 246.790152][T10957] ------------[ cut here ]------------ [ 246.800226][T10957] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 [ 246.818496][T10957] index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 246.851183][T10957] CPU: 1 UID: 0 PID: 10957 Comm: kworker/u8:24 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 246.851209][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 246.851220][T10957] Workqueue: events_unbound cfg80211_wiphy_work [ 246.851257][T10957] Call Trace: [ 246.851264][T10957] [ 246.851272][T10957] dump_stack_lvl+0x189/0x250 [ 246.851300][T10957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.851323][T10957] ? __pfx__printk+0x10/0x10 [ 246.851352][T10957] ubsan_epilogue+0xa/0x40 [ 246.851369][T10957] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 246.851397][T10957] ieee80211_request_ibss_scan+0x600/0x8b0 [ 246.851433][T10957] ieee80211_ibss_work+0xde7/0x1060 [ 246.851462][T10957] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 246.851491][T10957] ? ieee80211_iface_work+0xf39/0xfe0 [ 246.851514][T10957] ? rcu_is_watching+0x15/0xb0 [ 246.851540][T10957] cfg80211_wiphy_work+0x2dc/0x460 [ 246.851563][T10957] ? process_scheduled_works+0x9ec/0x17a0 [ 246.851588][T10957] process_scheduled_works+0xadb/0x17a0 [ 246.851639][T10957] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.851677][T10957] worker_thread+0x8a0/0xda0 [ 246.851716][T10957] kthread+0x70e/0x8a0 [ 246.851737][T10957] ? __pfx_worker_thread+0x10/0x10 [ 246.851751][T10957] ? __pfx_kthread+0x10/0x10 [ 246.851771][T10957] ? __pfx_kthread+0x10/0x10 [ 246.851787][T10957] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.851804][T10957] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.851823][T10957] ? __pfx_kthread+0x10/0x10 [ 246.851839][T10957] ret_from_fork+0x4b/0x80 [ 246.851854][T10957] ? __pfx_kthread+0x10/0x10 [ 246.851871][T10957] ret_from_fork_asm+0x1a/0x30 [ 246.851903][T10957] [ 246.851909][T10957] ---[ end trace ]--- [ 247.029490][T10957] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 247.036717][T10957] CPU: 1 UID: 0 PID: 10957 Comm: kworker/u8:24 Not tainted 6.15.0-rc3-syzkaller-00618-gff61a4a5dfc2 #0 PREEMPT(full) [ 247.049068][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.059142][T10957] Workqueue: events_unbound cfg80211_wiphy_work [ 247.065394][T10957] Call Trace: [ 247.068660][T10957] [ 247.071579][T10957] dump_stack_lvl+0x99/0x250 [ 247.076170][T10957] ? __asan_memcpy+0x40/0x70 [ 247.080745][T10957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.085944][T10957] ? __pfx__printk+0x10/0x10 [ 247.090553][T10957] panic+0x2db/0x790 [ 247.095320][T10957] ? __pfx_panic+0x10/0x10 [ 247.099723][T10957] ? _printk+0xcf/0x120 [ 247.103870][T10957] ? __pfx__printk+0x10/0x10 [ 247.108460][T10957] check_panic_on_warn+0x89/0xb0 [ 247.113387][T10957] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 247.119097][T10957] ieee80211_request_ibss_scan+0x600/0x8b0 [ 247.124924][T10957] ieee80211_ibss_work+0xde7/0x1060 [ 247.130135][T10957] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 247.135779][T10957] ? ieee80211_iface_work+0xf39/0xfe0 [ 247.141159][T10957] ? rcu_is_watching+0x15/0xb0 [ 247.145929][T10957] cfg80211_wiphy_work+0x2dc/0x460 [ 247.151038][T10957] ? process_scheduled_works+0x9ec/0x17a0 [ 247.156758][T10957] process_scheduled_works+0xadb/0x17a0 [ 247.162331][T10957] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.168315][T10957] worker_thread+0x8a0/0xda0 [ 247.172912][T10957] kthread+0x70e/0x8a0 [ 247.176974][T10957] ? __pfx_worker_thread+0x10/0x10 [ 247.182084][T10957] ? __pfx_kthread+0x10/0x10 [ 247.186715][T10957] ? __pfx_kthread+0x10/0x10 [ 247.191293][T10957] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.196480][T10957] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.201666][T10957] ? __pfx_kthread+0x10/0x10 [ 247.206245][T10957] ret_from_fork+0x4b/0x80 [ 247.210650][T10957] ? __pfx_kthread+0x10/0x10 [ 247.215232][T10957] ret_from_fork_asm+0x1a/0x30 [ 247.220018][T10957] [ 247.223280][T10957] Kernel Offset: disabled [ 247.227651][T10957] Rebooting in 86400 seconds..