last executing test programs: 1m18.630996408s ago: executing program 4 (id=1085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private0, 0x80000}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01df23c6b48aeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "000000008100e108", "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x9}, 0x1c) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000) 1m17.718399931s ago: executing program 2 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getpeername$ax25(r2, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa2000000020000f8dfffffb703000008000000b7040000020000008500000082000000850000000f0000009500000000000000f1e6a915e677ff790e848368ae5e9484000d2a98871bf11892f6b5f94a4d9da3cf5149bda847501c9ae055ddcf2eb817b122112eb24bd36b6e3494ecc18781deae4c755915b778892737df1af0676d91e1cfb890b0646c0fca9c0625a13a055069b8cabace1dd1b6b73030cce1497e111019b50330da0b65faeb0878c8c5a39757303fba02aba132f86b27e72fd9a2923eb332f48a327fb809b83f3494227d81dcbefa756c0ad67fa9"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10320, 0x1b400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="01000000010000006c001a800800028004000180080002"], 0x8c}}, 0x0) 1m17.691300928s ago: executing program 0 (id=1095): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xf, 0x8208, 0x9f, 0x400, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0xb6d, 0x4, 0x5}, 0x10) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x438, 0x3f4, 0x800, 0x70bd28, 0x25dfdbff, {0x2, 0x2, 0xa, [0x1, 0x9, 0xe3, 0x0, 0x642a, 0xa, 0x10, 0x6, 0xe, 0xc, 0x7, 0x0, 0xc1, 0x3, 0x0, 0x6, 0xd59f, 0x200, 0x4, 0x8000, 0xb6c, 0x0, 0x1ff, 0x7, 0x3, 0x0, 0x5, 0x2, 0x51, 0x4, 0x6, 0xfffffffe, 0x3, 0x3, 0xe3b, 0x80000000, 0x2, 0x4, 0x7, 0x2, 0x6, 0xf163, 0xbca, 0x100000, 0x9, 0xecc6, 0x6, 0x1, 0x8, 0x3, 0x400, 0x7, 0x621, 0xc241, 0x3, 0x2, 0x4, 0x54f5, 0x1, 0x81e, 0x8, 0xffffffff, 0x5, 0x4], [0xb636, 0x10000, 0xe283, 0x8, 0x0, 0x80f, 0x8, 0x8, 0x6b, 0x3c9918f0, 0x1, 0x4df, 0x3ff, 0x5, 0x2, 0x991, 0x8, 0x3a288b6d, 0x3ff, 0x10, 0x3, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0x8, 0xffffffff, 0x56da, 0x80000000, 0x62, 0x0, 0x1, 0x4, 0x400, 0x8, 0x4, 0x4, 0x5, 0x0, 0xaf0f, 0x6, 0x1, 0x9, 0xff, 0x1, 0x401, 0xffe00000, 0x8, 0x4, 0x5, 0x81, 0xa, 0x0, 0x4, 0xffffffff, 0x8, 0xd2, 0x2, 0xefe, 0x4, 0x40, 0x1, 0xbaa0], [0x4, 0x6, 0xfffffffb, 0x32ae, 0xe, 0x8, 0x9c7e, 0x0, 0x2, 0x3ff, 0x800, 0xf, 0xe647, 0x6, 0xfff, 0x6, 0x4, 0x7ff, 0x200, 0xc, 0x1, 0x7, 0x87, 0x30000000, 0x4, 0x4, 0x0, 0xa000, 0x14b0, 0x3, 0x8, 0x7, 0x5, 0xa, 0x400, 0x1ff, 0x2d93, 0x8, 0x2, 0x6, 0xdc3b, 0x40, 0x6, 0x1, 0x4, 0x5, 0x10, 0x8, 0x9, 0x5, 0x6, 0x5, 0x3ff, 0x3, 0x8, 0x5, 0x5b552cf7, 0x3, 0x1, 0x7, 0x101, 0xc9, 0x4, 0x8], [0x4, 0xffffeadf, 0x1, 0x9, 0xfffffffd, 0x0, 0xfffffffa, 0x81, 0x8, 0x9, 0xd, 0x9, 0xb6e, 0x80, 0x4, 0x2, 0x309, 0x2, 0x7, 0x6, 0xd, 0x6, 0x3, 0x2, 0x7f, 0x8, 0x6, 0xf, 0x0, 0x216, 0x2, 0x0, 0x9, 0x7f, 0xe, 0x1, 0x7, 0x4, 0x0, 0x2, 0x10001, 0xffff, 0xb6c9, 0x445, 0x101, 0x80000000, 0x3, 0x6, 0x101, 0xffffffff, 0x2, 0x3, 0x6d2709b, 0xffffffff, 0x6, 0x2, 0x920b, 0x10001, 0x2, 0x4, 0xf1e7, 0x0, 0x88c, 0x8], 0x17, ['(,\x00', '#][[2D*\x00', '^:.\x00', '(@-[\\\x00', '\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r3, 0x22, 0x1, 0xfff, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000740)={r1, 0x3d, "86fe6ab3eecaf8ee85a350497272ffc22a46343bb7ad8f06ecfe06c54adab6f839f5f8406f118bce585e75e3086ef23b81dcd044476ac24a899eb375eb"}, &(0x7f00000007c0)=0x45) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000800)=0x9, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000840), 0x4) (async) r4 = socket(0x21, 0x4, 0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r6, 0x60de2eeb94397527, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x27}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="37fd6b85b5794664e87e65706f867f712942f3e3eb17b9c3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="81d5e1c80ac7958c0ca7a7339160b8eae771289a015107ef"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2999ce9bdbc76ab94ac87599e5c6c2cc"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000a40)={0xb311, 0x40000000, 0x2, 0x9, 0x8}, 0x14) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000cc0)=0x9, 0x4) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000d00)=0x1, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pS \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x2f, 0x78, 0x1, 0x9, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x7, 0x6, 0x89}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x5, 0x0, r10, 0x7d0, '\x00', r11, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r12, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3f6, 0x200, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001040)=0x1, 0x4) 1m17.651714049s ago: executing program 4 (id=1096): unshare(0x64000600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000800000264383762be8614064da9806b3d7bd778d92e2a28a37130906b009b4d95620f611dc2907206a0903e6728f1f099406d99507fdd7393d1ad0cc3362c7399937f6d160826e4530d80ee0b555f7cec0d1b9", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x20008800) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) recvfrom(r1, &(0x7f0000000000)=""/67, 0x43, 0x40000000, 0x0, 0x0) 1m17.514742284s ago: executing program 3 (id=1098): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4044) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03b8", 0x3}], 0x1}}], 0x1, 0x4400c800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd29, 0x4, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0xfffc, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x800000000000000, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x6, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendto$inet6(r6, &(0x7f0000000040), 0x0, 0x3b40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}}, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xfffffffd}, 0x1c) 1m17.437919356s ago: executing program 0 (id=1099): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xd5, &(0x7f0000000a00)={@local, @broadcast, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@x25={0x805, {0x3, 0xe, 0x23, "5fdd810db909190ecbf87979697b3c1fdf68802668dde9f65b755a20a0a64387afec9588ddb5160bb57c58052c120fb5385b97d1b4d853338d5f8742260a57129096d0c139bb4ccfa84cbe0ff12b759b9b20c4a374fff8780ce5727238e9ded00c2cd55f917efb4bc8a55ee656858a6e91db7f10ece9724c9102bfe7e160b9cab2d7b66c7340c9204bd699b20700b76b2f183cfc8fa25183caffe5b69e7cee6329a4c3ca9fd8e5d21e65971c79385a1352f8a2dcacf265eb885852c3492423e1"}}}}, &(0x7f0000000380)={0x1, 0x4, [0x8e4, 0x81f, 0xf72, 0x508]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x32, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffad0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xa, 0xb, 0x2, 0xc, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x21a}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfcc, 0xda, &(0x7f0000000900)=""/218, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x7, 0x1ff, 0x2b}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000000c0)=[{0x1, 0x5, 0x10, 0xc}, {0x0, 0x1, 0x4, 0xb}, {0x2, 0x3, 0xe, 0xa}, {0x0, 0x1, 0xa, 0xa}, {0x4, 0x2, 0xa, 0x7}, {0x20000004, 0x3, 0x2}], 0x10, 0x7d9aebe5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='wbt_stat\x00', r2, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000500)={@none, 0x6f}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000400], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 1m17.437308965s ago: executing program 2 (id=1100): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="080026006c09000008009f0001"], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="040018"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="080026006c09000008009f0001"], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="040018"], 0x38}}, 0x0) (async) 1m17.361524861s ago: executing program 2 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000000a80)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x9, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000002000000080000000700000000100408", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="9b030089", @ANYRES16=r10, @ANYBLOB="02002bbd7000ffdbdf250400000008000500ac1414aa14000200fc010000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x48014}, 0x4081) bind$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2711, @local}, 0x10) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9febf8ff1800000000000000180000c1ca9790101928307f2c7f20000000000000000000000d0a00000000000000000000060400"/62], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_buf(r4, 0x29, 0x44, &(0x7f0000000540)="b546368c3d10cb1d85f911cedd536c26663851fd816584b204bd193d7e20982f94388a5c74d76eaa03e2e999f3f5c0e48ccfa6174d0c661a462db8bcdb8efde01a99673a910a00a9331090454d8ee9761414f2243a4a60677cbb9bf4e26d08ab4bb2fce886b93a5b6ad287f84e1a82803abb81a3b5589d5db4a9cfdc1dd6a28d354bd1bdc23b647d5de0671caa56d9fb4d838dc964e84c05c431f25a80f368da5a548a29ee4a6cb275", 0xa9) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 1m16.977668149s ago: executing program 0 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0xffc0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1m16.798178054s ago: executing program 1 (id=1105): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf81ffffff90000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000004000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m16.721911142s ago: executing program 2 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 12) 1m16.662410247s ago: executing program 1 (id=1107): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x11, 0x800000003, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 1m16.659807803s ago: executing program 4 (id=1108): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001100), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x7, [@var={0x6, 0x0, 0x0, 0xe, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x6e, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @var={0x4, 0x0, 0x0, 0xe, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0x6, 0x4}, {0xa, 0x1}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x1}]}, {0x0, [0x5f, 0x2e, 0x30, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/4096, 0x9f, 0x1000, 0x1, 0xb, 0x10000, @value=r0}, 0x28) ioctl$FIBMAP(r1, 0x1, &(0x7f0000001140)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x1, &(0x7f0000001180)=@raw=[@exit], &(0x7f00000011c0)='syzkaller\x00', 0x1, 0x22, &(0x7f0000001200)=""/34, 0x41000, 0x5d, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0xc, 0x80000000, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000012c0)=[{0x3, 0x4, 0xb, 0xa}, {0x5, 0x1, 0xb, 0x5}, {0x5, 0x4, 0x9, 0xd}, {0x2, 0x2, 0xb, 0xc}, {0x5, 0x4, 0x9, 0x6}, {0x4, 0x5, 0xb}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r2, 0x0, 0x57, 0x1000, &(0x7f0000001400)="523ce48b5508bcf498649cf04471f00813e5d779abc049bd3459d0fc7384520bbcdf6c62e53d80306fdda9245861ac72d2d719160bc3d8f46705748f2f76bdb99a9ea06a071dc000d412ac89c231af0b9b1a342178136f", &(0x7f0000001480)=""/4096, 0x0, 0x0, 0x70, 0x39, &(0x7f0000002480)="4b6c4dd376455b96d169b4a21f57c2a7bc4ac6b1b284f48f4018055dbc23de0f0925b210bec0fd7e77e531cbf9e2a77318e180086b2bd4d18bb66de6709afd5f537e23ec1ad17af5848c3f8db35d9ca32cdbbc99ba07292e881f53d446f506847c5ef9c38522c8d2a135412daea49b35", &(0x7f0000002500)="34718760bcecc2519d57afabd8872f08719517636531afe50bab8185ef2b887116bdad4bfd5cd16ea8800ad91fccc81fe4c58665d4de97e1f0", 0x6, 0x0, 0x4}, 0x50) close(r2) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002680)={'syztnl1\x00', &(0x7f0000002600)={'tunl0\x00', 0x0, 0x40, 0x20, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x2a, 0x58, 0x67, 0x0, 0x7f, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp={0x44, 0x14, 0xb2, 0x0, 0x2, [0x1ff, 0x9, 0x101, 0x80000001]}, @rr={0x7, 0xf, 0x33, [@loopback, @loopback, @rand_addr=0x64010101]}, @rr={0x7, 0x17, 0x71, [@remote, @remote, @private=0xa010101, @local, @loopback]}, @generic={0x94, 0x8, "592c462e28ea"}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000002880)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002840)={&(0x7f00000026c0)=@delqdisc={0x170, 0x25, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0x1}, {0x2, 0xffff}, {0xa, 0xfff3}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x8, 0x8, 0x1, 0x9, 0x7, 0x6}}, {0x10, 0x2, [0x9, 0x80, 0x7ff, 0x401, 0x0, 0x1b31]}}, {{0x1c, 0x1, {0x3, 0xc, 0x8, 0x0, 0x2, 0xb9, 0x8, 0x2}}, {0x8, 0x2, [0x3a, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x41}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x21, 0x3, 0x2, 0x2, 0x1, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0xf, 0x6]}}, {{0x1c, 0x1, {0x40, 0x81, 0x100, 0x7fffffff, 0x2, 0x8, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x9, 0xffff, 0x1, 0x1, 0x5, 0x2000, 0x6}}, {0x10, 0x2, [0x40, 0x9, 0x29, 0x1, 0x8, 0x8]}}, {{0x1c, 0x1, {0x6a, 0x1, 0xfff, 0x2, 0x605715f96d2923da, 0x7fff, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x7, 0x2, 0x9, 0x0, 0x8, 0x5, 0x3}}, {0xa, 0x2, [0xaf, 0x7, 0x80]}}, {{0x1c, 0x1, {0x9c, 0x5, 0x4, 0x6, 0x0, 0xe, 0x4, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x6d49, 0x80]}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000009}, 0x80) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000028c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, r1, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002940)={0x1, 0xffffffffffffffff}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f0000002980)="0650b2f7e4c0b1a5407324c6bfc1df6e72a3f761b2d140abc76c814aaaccc389f4181bdbfea35ad080d4e36c40e67663ac83a1d239a9c412e0db993f63350701dac9283e3a6257dd2f6a53df43c74dc5e66b3311e7d75dff9d9e628687c221295b8b400fb91debbe3536d4808f6d16c8674e635ffdb46f18948c5dfa6ca41f1b633d52329acecd", 0x87) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net/syz1\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x7) r9 = accept4(r8, &(0x7f0000002a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002b00)=0x80, 0xc0000) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x8d420}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40881) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000002c40)={'vcan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x8000, 0x200000]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x9, 0x1, 0x7]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) clock_gettime(0x7, &(0x7f0000002dc0)) socket$packet(0x11, 0x2, 0x300) r13 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f0000002e00)={0x0, 0x2}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004100)={r1, 0x20, &(0x7f00000040c0)={&(0x7f0000003080)=""/4096, 0x1000, 0x0, &(0x7f0000004080)=""/22, 0x16}}, 0x10) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x380000, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x6, 0xe, &(0x7f0000002e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002ec0)='syzkaller\x00', 0x3f, 0xf0, &(0x7f0000002f00)=""/240, 0x41100, 0x5, '\x00', r12, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000003040)={0x4, 0xb, 0x6b1e, 0x4}, 0x10, r14, 0xffffffffffffffff, 0x3, &(0x7f00000041c0)=[r5, r15, r6, r6, r5], &(0x7f0000004200)=[{0x3, 0x5, 0x8, 0xa}, {0x5, 0x1, 0xd, 0x7}, {0x4, 0x2, 0xa, 0x7}], 0x10, 0x1ff, @void, @value}, 0x94) 1m16.441951605s ago: executing program 1 (id=1109): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="1cf68201a7e945c3a9eae13d28ed06554bc8c07001358ab0675f495c6ad816ad7c2f39c3bd3e10fb702c3c73e786387fc57139fb956f6e36622dfe6f58952df6da79678461e5310de6e64f7834ea6eaaf9b6c79d4488a2a4cb4b3751da3298e6e6d08817d197ecaf922a04000023b17d9401cfef14a24ca675eb8a367b34a71592ea963899f89b45d1012992fdb5f5ea98dc1fac6439a1e65a48f36a2e2781cf693e7145154f9998d00f403651630b358c2100"/198, @ANYRES16=r2, @ANYBLOB="010700000018000000006700000008003e01"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000005000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000180000000000000000000000090000009500000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000002d000000950000000000000000000000000000000000514073a45b2599cbec5a8f867c0ef3c0df9d19fb8383635fea14678703dc2894da182af15b495cf3f37e53f78e70674ef00eb9a2a3ce19878af87c79e4d8efac0fde"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m16.214970982s ago: executing program 3 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) unshare(0x2020600) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b1b, &(0x7f0000000040)) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m16.101881982s ago: executing program 1 (id=1111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/231, 0xe7}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0) (async) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r4 = socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={r7, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r9, 0x1, 0x9, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001a80)={0x31c, r9, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f711d3c80688399e805dbe1e3a73418057a493b814f5eeb500333b"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "60b8ff94383af30d95b4fe8e7d4798c6a91c8e6da580c5"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "935bd0f8a1048dc9ba50548611afd27bbb9495ecf878929d5ccfd4d55c4577168d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "9228e7c405b0ab6448c290fa631e7b27bad36a9aa1cecf05939deccf82a144cc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "816c14f9773a4dae41ab0631808999c8b915e38a8633aeae8e8a1d7d677d8a51da28bd4f0d245ba5c25b40cdf0fefab9ecc50dbd009c9bcfdc59db9d95ccef8116c6536a8913e33bab5e14ca9c1b0b78df47ea7c5a1fa68a215270f71fb86f047e12fddc831a1eecd014927fffa93c7365c9ee534bc88b75cffd1e0ca8344798c3bb60276cb2588d10490504f6ea0878623181e7b9f5de6a8e27e7a2fc7413d2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62bc}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x800c851}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001300)=r11, 0x4) (async, rerun: 32) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) openat$cgroup_ro(r12, &(0x7f0000000400)='memory.events.local\x00', 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x4001, 0x0) write(r14, &(0x7f00000015c0)="e06fdec8893a2bb6a6abb0f65616a2b09b4260ea3036e725a42451bd34e406c2abd9f926146096f3cca02647b40339e7aa71bcc6ee9561212e5761e9bfd2d998201f9595d6a7be7b04fdc9ea22eabc762c0193c772e309af3e75549669450aa6c4bd0337f3b7e17dbe7ba9875b7c147610d848100b16bcca478e6c30cb4ce20d22f5f962b945c64148bf4c3bbc3aa6bb7be373", 0x93) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r13, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$kcm(0x10, 0x2, 0x0) 1m16.100986845s ago: executing program 2 (id=1112): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040801}}], 0x1, 0x4000) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'pimreg1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="9fab5f4e4e71301cccd0b4f3b6b52a17d4c82c5a3ac6d9a2beb2c9cb3e59e5909734dbcff144456caed2f10edc2965744299f9a4eb47b4f2e84515490d4ca2e93b5d9ee1e420c66f1f7c05143dd4fb3daf5dcd49159e9aa3ab12b6c56216", 0x5e}, {&(0x7f00000006c0)="7c7e31b9ef7cc0150d0db6492638a00b90b5ecd044c404f9c6233c7c5fb3f3d9c40040a4ea7f42bb8ac665f94e1c58b1d533e954167fd71d2c6436d78bf5626f98f608062ab4e983e0e206ab141ebff689d50b678e3242c184d126e07db65404041fc1c3fe849c3315e8a0211b08857f1c3a0f69a2e4cee1515e28099163b4aa8fd891678bd5", 0x86}], 0x2, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3f9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0x3, [{0x2, 0xb, "b6e4d7724c39039837"}, {0x1, 0xc, "830b26730c866a89a9a6"}, {0x6, 0xf, "573866529cb8146cb64687de57"}, {0x5, 0x12, "90c193cea3ee9e17d1d9354d9ddd0654"}]}, @ssrr={0x89, 0x13, 0xd5, [@remote, @remote, @remote, @local]}, @rr={0x7, 0x17, 0x82, [@empty, @private=0xa010101, @loopback, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xbc, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x400}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101}, {@empty, 0x401}]}, @noop, @ssrr={0x89, 0xf, 0x18, [@multicast1, @multicast2, @empty]}, @lsrr={0x83, 0x17, 0xdb, [@local, @private=0xa010100, @private=0xa010101, @multicast1, @multicast1]}, @timestamp={0x44, 0x10, 0x1a, 0x0, 0xe, [0x5, 0x529c, 0x6d]}, @generic={0x88, 0x4, "f8e6"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @multicast1}}}], 0x178}, 0x4000040) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000980)={{0x32, @multicast1, 0x4e20, 0x4, 'none\x00', 0xc, 0x2, 0x3d}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4e21, 0x2000, 0x6, 0x3}}, 0x44) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m16.093639421s ago: executing program 4 (id=1113): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0040000000000000800098"], 0x26}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r1, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x20}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x38, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m16.04226839s ago: executing program 0 (id=1114): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) tee(r2, r2, 0x2341, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0x0, 0xf6, 0x0, &(0x7f0000000300)=""/246, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff000000007110bf000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m15.886496636s ago: executing program 3 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b040000000000000000020000001c00048018000180086f7366000c000280050002000200000014000000110001bce1554900000000000000000a748c3d55d064fbb5657fb8691163000000"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000000010104000000000000000002000008240001801400018008000100e000000108000200e00000010c00028005000100000000003c0018"], 0x74}}, 0x0) 1m15.77714189s ago: executing program 1 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\b', 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='ext4_load_inode\x00', r2, 0x0, 0x9a}, 0x18) poll(0x0, 0x0, 0x80000201) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f31a24001280110001006272696467655f736c617665000016000c0005800800030004000000140003006272696467655f736c6176655f300000f54562eb37d7040c467fed4f57c1859573df9a3a82"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbe27}, {}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x3, 0x7, 0xfffffffffffffffc, 0x1}, @ldst={0x3, 0x2, 0x2, 0xb, 0x3, 0x8, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x4, 0x8, 0x7, 0x2, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0xc7, &(0x7f00000004c0)=""/199, 0x40f00, 0x34, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r1], &(0x7f0000000640)=[{0x4, 0x4, 0x5, 0x8}, {0x2, 0x1, 0x10, 0x3}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000080), &(0x7f0000000740)=r3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\b', 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='ext4_load_inode\x00', r2, 0x0, 0x9a}, 0x18) (async) poll(0x0, 0x0, 0x80000201) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f31a24001280110001006272696467655f736c617665000016000c0005800800030004000000140003006272696467655f736c6176655f300000f54562eb37d7040c467fed4f57c1859573df9a3a82"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbe27}, {}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x3, 0x7, 0xfffffffffffffffc, 0x1}, @ldst={0x3, 0x2, 0x2, 0xb, 0x3, 0x8, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x4, 0x8, 0x7, 0x2, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3, 0xc7, &(0x7f00000004c0)=""/199, 0x40f00, 0x34, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r1], &(0x7f0000000640)=[{0x4, 0x4, 0x5, 0x8}, {0x2, 0x1, 0x10, 0x3}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x8, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000080), &(0x7f0000000740)=r3}, 0x20) (async) 1m15.753524922s ago: executing program 4 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0xb3, 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @empty, 0xe}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x7, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) sendfile(r0, r1, 0x0, 0xffffffff004) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b703000000000000850000005500000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r4 = accept$alg(r3, 0x0, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062", 0x80}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) (async, rerun: 64) sendmsg$alg(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) (async) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1}, 0x5}], 0x3fffe7d, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 1m15.57029625s ago: executing program 4 (id=1118): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x80200}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="89dfc388cbf2b6b5a41c09c01ce10e065f5a2a8d3d1b00e9080091132aee8ceeee", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060011000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r9, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x3c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffff6, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:ip,port\x00'}]}, 0x54}}, 0x40000010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000095000000000000000000000000000200000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000100000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) 1m15.465287659s ago: executing program 3 (id=1119): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x11, 0x800000003, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1m15.446583644s ago: executing program 0 (id=1120): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x29, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES16, @ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @cgroup_sock=0xc9352c312fac4945, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000850000006100000085000400230000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xb2, 0x5e, &(0x7f0000000780)="b9060700000000000000f14b794eff67e6685c893c9575c6d08cf9eaa24c00531a7884a5ec603ade927216c0ff30092ecf63942640989a78bb9657a415f1b9edf799e1726156e50426d69b8da102000000330100000000000000db029137305aed10c3ec64aa4d3d1007d54a7fb5a6a03a0aa50000000085f1fe6d66b9af0b6dbe194e67f164d1fc1da077eee95bdf3c0b2ea25a2322ef0c00"/178, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03b8", 0x3}], 0x1}}], 0x1, 0x4400c800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc0000001900010029bd70000400000000000000000000000000000000000001fe8000000000000000000000000000bb000000000000fffc0a00000000000000ee1a582a87f140a2ece44a99c39a5cbee93470ca7306dfbd6d83c01c9cc449889404", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000020080600000004000000010000000000000004000500"], 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendto$inet6(r6, &(0x7f0000000040), 0x0, 0x3b40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$inet6(0xa, 0x5, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) 1m15.404417975s ago: executing program 1 (id=1121): socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e34000014000700ff02000000000000000000000000000108000800e0000002050004000100000008000b00", @ANYRES32=0x0, @ANYBLOB="e7abba4dabfcb486dc21be4cf3251fc8f178da3d1eb5c31dcd409618e995a69f72418c9a6c8a656a093d33a14e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x110) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040), 0x48) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x40010400) 1m15.230490478s ago: executing program 0 (id=1122): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m15.137681695s ago: executing program 2 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) sendmsg$inet6(r3, &(0x7f0000004540)={0x0, 0x0, 0x0}, 0x18040811) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x4, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 1m14.969736164s ago: executing program 3 (id=1124): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000020b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m11.46233023s ago: executing program 3 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a00000000060a01010000000000000000050000070000048000000180000001006f626a72656600000000018000000100696d6d65646961746500000000000280000001400000000b000001800000010072656a6563740000200002800000014000000002000001400000000100000200070000000000014000000002000002009d00000000000200e00000000000018000000100657874686472000000000280000006400000000100000640000000030000014000000010000005400000000100000a400000000100000000120a010400000000000000000700000100000640000000000000000400000000180a01020000000000000000020000050000020073797a3200000000000007400000000000000740000000020000010073797a3000000000000003800000024000000008000001400000000000000240000000090000014000000000000001400000000000000380000001007866726d3000000000000000000000000000038000000100766574683100000000000000000000000000010070696d36726567000000000000000000000007400000000000000000050a0104000000000000000002000004000005400000000000000480000002406e889c9f000002400e7177fe00000140000000040000014000000004000001400000000100000300697036677265300000000000000000000000014000000000000001400000000600000240000000000000000300000b400000000300000000030a000000000000000000000a00000000000b400000000100000000030a05000000000000000000050000010000088000000240000000008000000100000240000000000000000900000a4000000000140000001100010000000000000000000000000af27e06411ddf3da833c0b045d49474cded98719978b5ea2b8242c38414519771ae6f9acfd03eeb7af29e64a5116dd0e25aabedf0d9212ec94891ba39aa6d3bc987363e8ea56da6c97c62c080b1fec52df1a43293ea33de9d4a3f45bd5bf967e13599e053fc0bfc4b7c6fca36904975acdb6367698ff56b05e7ebe58f917b5dbdf2ac0b62f94cf17aeb82ddc6d7fc98f04d4cc32b3ca756b56c1e9935d97eb219de426eb621dd1ab73c08688196c6d9fec224d9ba472ae26af5e006bce8b1ddbbedc1b9fb0ca5f6cb915396bb55f882367b268a6260c69b2a1bb1ad3c"], 0xec}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[], 0xe) r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000002f00)=0x2) ioctl$PPPIOCSMAXCID(r4, 0x4004743c, 0x0) r5 = socket(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003c0007010000000000000000027c000008008900", @ANYRES32=r5, @ANYBLOB="0c00018006000600800a0000d7210294f5988548ab18db0e635e9141b1b2a6d9f138a9b13a92abc469d25f04590c537ac54d496f40cb57df439c0e32b67d87000000003658e2f57e2ace57755db2d1f1ade3afdbc61741ae148f6eefb6b91a15498bdbe80a9b840e698eeccde35296625cc94670830b27d4e741f295094265d0b37ee3f3d6a677c5e6192d2dbcfbb950d48dfa1c9f9b3ead1eaf56626b37b0488fd02eaabe8b84d478d616ef3d6789dd4257e529051a38b07a156752d3542526c6f9b3cf15c3c1004ed2658c249f9744bb2968fe351e1168"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000006f27752f67327646a6b89c582eef68955b6e0900020040000100000900010073797a3000000000080003400000000214000000110900000000000000000800000000"], 0x64}}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 0s ago: executing program 32 (id=1122): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 89.102675][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.110256][ T5840] Cannot create hsr debugfs directory [ 89.125236][ T5833] hsr_slave_0: entered promiscuous mode [ 89.131718][ T5833] hsr_slave_1: entered promiscuous mode [ 89.137913][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.145762][ T5833] Cannot create hsr debugfs directory [ 89.156866][ T5844] hsr_slave_0: entered promiscuous mode [ 89.163707][ T5844] hsr_slave_1: entered promiscuous mode [ 89.169818][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.177454][ T5844] Cannot create hsr debugfs directory [ 89.814964][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.828737][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.840018][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.866569][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.930668][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.943826][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.977112][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.987547][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.045146][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.070347][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.082198][ T5839] Bluetooth: hci0: command tx timeout [ 90.087742][ T5832] Bluetooth: hci1: command tx timeout [ 90.115644][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.127536][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.162602][ T5832] Bluetooth: hci3: command tx timeout [ 90.168047][ T5832] Bluetooth: hci2: command tx timeout [ 90.191289][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.206609][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.241741][ T5832] Bluetooth: hci4: command tx timeout [ 90.252829][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.267367][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.374291][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.408002][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.420931][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.434130][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.456520][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.468330][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.509321][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.516651][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.579046][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.598140][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.605658][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.630121][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.684581][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.736009][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.743194][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.756972][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.778804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.785968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.802103][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.822908][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.830058][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.848385][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.855561][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.008395][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.047444][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.074368][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.081608][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.097198][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.104435][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.122930][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.198407][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.291441][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.298671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.333904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.341163][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.501326][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.615941][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.756260][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.787291][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.926094][ T9] cfg80211: failed to load regulatory.db [ 91.945378][ T5833] veth0_vlan: entered promiscuous mode [ 91.989185][ T5829] veth0_vlan: entered promiscuous mode [ 92.046461][ T5833] veth1_vlan: entered promiscuous mode [ 92.072972][ T5829] veth1_vlan: entered promiscuous mode [ 92.115806][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.166626][ T5832] Bluetooth: hci1: command tx timeout [ 92.174648][ T5839] Bluetooth: hci0: command tx timeout [ 92.247384][ T5832] Bluetooth: hci2: command tx timeout [ 92.252894][ T5839] Bluetooth: hci3: command tx timeout [ 92.269104][ T5829] veth0_macvtap: entered promiscuous mode [ 92.299024][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.309905][ T5833] veth0_macvtap: entered promiscuous mode [ 92.325199][ T5832] Bluetooth: hci4: command tx timeout [ 92.352522][ T5833] veth1_macvtap: entered promiscuous mode [ 92.363823][ T5829] veth1_macvtap: entered promiscuous mode [ 92.445902][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.458470][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.489651][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.504600][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.513674][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.522482][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.531195][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.547034][ T5844] veth0_vlan: entered promiscuous mode [ 92.560424][ T5840] veth0_vlan: entered promiscuous mode [ 92.574770][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.584100][ T5828] veth0_vlan: entered promiscuous mode [ 92.609713][ T5828] veth1_vlan: entered promiscuous mode [ 92.629084][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.638339][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.647791][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.656823][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.710657][ T5844] veth1_vlan: entered promiscuous mode [ 92.731315][ T5840] veth1_vlan: entered promiscuous mode [ 92.784992][ T5828] veth0_macvtap: entered promiscuous mode [ 92.816700][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.830659][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.863622][ T5828] veth1_macvtap: entered promiscuous mode [ 92.919348][ T5844] veth0_macvtap: entered promiscuous mode [ 92.930410][ T5844] veth1_macvtap: entered promiscuous mode [ 92.945459][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.953933][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.981430][ T5840] veth0_macvtap: entered promiscuous mode [ 92.991239][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.017149][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.064613][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.074790][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.094241][ T5840] veth1_macvtap: entered promiscuous mode [ 93.116521][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.139098][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.149527][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.175582][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.184622][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.203203][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.213274][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.222355][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.247032][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.285271][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295383][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.307785][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.320035][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.345681][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.374819][ T5923] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 93.400198][ T5923] ip6gretap0: entered promiscuous mode [ 93.414351][ T5923] ip6gretap0: left promiscuous mode [ 93.459842][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.567870][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.595436][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.606248][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.615602][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.776399][ T5934] Zero length message leads to an empty skb [ 93.783105][ T5932] Bluetooth: MGMT ver 1.23 [ 93.804935][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.818699][ T5934] syz_tun: entered allmulticast mode [ 93.824571][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.856472][ T5934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.910241][ T5934] dvmrp1: entered allmulticast mode [ 93.945532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.969086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.990301][ T5933] syz_tun: left allmulticast mode [ 94.041807][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.053540][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.150893][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.190245][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.241913][ T5832] Bluetooth: hci1: command tx timeout [ 94.247425][ T5839] Bluetooth: hci0: command tx timeout [ 94.280127][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.330941][ T5832] Bluetooth: hci2: command tx timeout [ 94.330954][ T5839] Bluetooth: hci3: command tx timeout [ 94.340446][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.400686][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.412956][ T5839] Bluetooth: hci4: command tx timeout [ 94.448778][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.523691][ T5941] 8021q: VLANs not supported on caif0 [ 94.572421][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.623415][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.899729][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.032430][ T5948] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 95.161286][ T5948] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.256711][ T5952] vxcan3: entered allmulticast mode [ 95.293253][ T5948] syz.4.5 (5948) used greatest stack depth: 20072 bytes left [ 95.467888][ T5954] vxcan3: entered allmulticast mode [ 95.592896][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 95.962366][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 95.996046][ T5967] !: renamed from dummy0 (while UP) [ 96.034420][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 96.043787][ T5968] tipc: Started in network mode [ 96.048786][ T5968] tipc: Node identity b, cluster identity 3 [ 96.075703][ T5968] tipc: Node number set to 11 [ 96.335072][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.723715][ T5961] syz.0.10 (5961) used greatest stack depth: 20024 bytes left [ 97.750817][ T6039] netlink: 'syz.4.20': attribute type 4 has an invalid length. [ 97.836037][ T6039] netlink: 'syz.4.20': attribute type 4 has an invalid length. [ 97.890773][ T6034] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18'. [ 98.608037][ T6064] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.842147][ T6070] netlink: 'syz.4.24': attribute type 32 has an invalid length. [ 98.870733][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 98.905358][ T6070] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 98.957894][ T6073] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 99.012218][ T6074] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 99.135781][ T6078] netlink: 'syz.4.27': attribute type 4 has an invalid length. [ 99.193100][ T6080] netlink: 'syz.4.27': attribute type 4 has an invalid length. [ 99.461101][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 99.532894][ T6088] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.018757][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 100.269637][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 100.320272][ T6113] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 100.358554][ T6116] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 100.492782][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 100.538279][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 100.578832][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 100.609689][ T6106] netlink: 'syz.3.34': attribute type 4 has an invalid length. [ 100.630033][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 100.639274][ T6118] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 101.578685][ T6145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.648937][ T6149] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 101.820379][ T6154] bridge: RTM_NEWNEIGH with invalid ether address [ 101.951772][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 102.081718][ T5832] Bluetooth: hci4: command tx timeout [ 102.087315][ T6165] netlink: 112 bytes leftover after parsing attributes in process `syz.0.54'. [ 102.099621][ T6162] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 102.309474][ T6162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.469466][ T6179] vlan2: entered promiscuous mode [ 102.505638][ T6179] bond0: entered promiscuous mode [ 102.520964][ T6179] bond_slave_0: entered promiscuous mode [ 102.542125][ T6179] bond_slave_1: entered promiscuous mode [ 102.550728][ T6179] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 102.869287][ T6179] syz.4.57 (6179) used greatest stack depth: 19904 bytes left [ 102.928448][ T6190] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 103.341306][ T6203] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 103.413831][ T6203] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 103.429497][ T6201] syz.4.62 (6201) used obsolete PPPIOCDETACH ioctl [ 103.877874][ T6206] vxcan3: entered allmulticast mode [ 104.361341][ T6226] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 104.372383][ T6228] __nla_validate_parse: 1 callbacks suppressed [ 104.372400][ T6228] netlink: 3 bytes leftover after parsing attributes in process `syz.4.71'. [ 104.389536][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.70'. [ 104.399791][ T6231] netlink: 3 bytes leftover after parsing attributes in process `syz.4.71'. [ 104.516971][ T6226] veth0_vlan: entered allmulticast mode [ 104.523710][ T6226] bridge0: port 3(veth0_vlan) entered blocking state [ 104.530767][ T6226] bridge0: port 3(veth0_vlan) entered disabled state [ 104.562356][ T6226] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 104.593081][ T6228] 0ŖX¹¦Ą: renamed from caif0 [ 104.612955][ T6228] 0ŖX¹¦Ą: entered allmulticast mode [ 104.623926][ T6228] A link change request failed with some changes committed already. Interface 60ŖX¹¦Ą may have been left with an inconsistent configuration, please check. [ 104.640584][ T6231] 1ŖX¹¦Ą: renamed from 60ŖX¹¦Ą [ 104.653864][ T6231] A link change request failed with some changes committed already. Interface 61ŖX¹¦Ą may have been left with an inconsistent configuration, please check. [ 105.148230][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 105.290284][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 106.118202][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 106.154481][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 106.214867][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.319098][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.870387][ T6299] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 106.923513][ T6301] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 107.018067][ T6294] lo speed is unknown, defaulting to 1000 [ 107.026187][ T6294] lo speed is unknown, defaulting to 1000 [ 107.051677][ T6304] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0 [ 107.090583][ T6294] lo speed is unknown, defaulting to 1000 [ 107.127817][ T6294] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.167042][ T6294] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.239343][ T6294] lo speed is unknown, defaulting to 1000 [ 107.269398][ T6294] lo speed is unknown, defaulting to 1000 [ 107.306945][ T6294] lo speed is unknown, defaulting to 1000 [ 107.357564][ T6294] lo speed is unknown, defaulting to 1000 [ 107.374624][ T6312] tap0: tun_chr_ioctl cmd 1074025677 [ 107.380161][ T6312] tap0: linktype set to 768 [ 107.414731][ T6294] lo speed is unknown, defaulting to 1000 [ 107.441876][ T6294] lo speed is unknown, defaulting to 1000 [ 107.476960][ T6294] lo speed is unknown, defaulting to 1000 [ 107.514700][ T6323] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 107.532895][ T6323] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 107.569602][ T6325] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 107.650551][ T6325] netlink: 'syz.0.93': attribute type 2 has an invalid length. [ 107.710119][ T6323] netlink: 572 bytes leftover after parsing attributes in process `syz.0.93'. [ 107.775172][ T6321] lo speed is unknown, defaulting to 1000 [ 107.779606][ T6334] netlink: 'syz.4.95': attribute type 21 has an invalid length. [ 107.831867][ T6337] netlink: 'syz.3.94': attribute type 39 has an invalid length. [ 107.840095][ T6334] netlink: 128 bytes leftover after parsing attributes in process `syz.4.95'. [ 107.945893][ T6331] raw_sendmsg: syz.2.96 forgot to set AF_INET. Fix it! [ 107.974660][ T6334] netlink: 'syz.4.95': attribute type 5 has an invalid length. [ 107.986708][ T6334] netlink: 'syz.4.95': attribute type 6 has an invalid length. [ 107.999300][ T6334] netlink: 3 bytes leftover after parsing attributes in process `syz.4.95'. [ 108.340077][ T6342] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 109.039749][ T6364] dummy0: entered promiscuous mode [ 109.093429][ T6364] macsec1: entered allmulticast mode [ 109.113712][ T6364] dummy0: entered allmulticast mode [ 109.146689][ T6364] dummy0: left allmulticast mode [ 109.162101][ T6364] dummy0: left promiscuous mode [ 109.507777][ T6376] lo speed is unknown, defaulting to 1000 [ 109.677635][ T6388] __nla_validate_parse: 3 callbacks suppressed [ 109.677654][ T6388] netlink: 136 bytes leftover after parsing attributes in process `syz.4.113'. [ 109.700709][ T6388] netlink: 136 bytes leftover after parsing attributes in process `syz.4.113'. [ 109.764566][ T6378] lo speed is unknown, defaulting to 1000 [ 110.699101][ T6409] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.119'. [ 110.897156][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.403382][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 111.618995][ T6447] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 112.176876][ T6449] lo speed is unknown, defaulting to 1000 [ 112.298495][ T6454] lo speed is unknown, defaulting to 1000 [ 112.397505][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 112.428037][ T6460] validate_nla: 4 callbacks suppressed [ 112.428055][ T6460] netlink: 'syz.4.131': attribute type 10 has an invalid length. [ 112.692027][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 112.775484][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 113.006772][ T6480] xt_recent: Unsupported userspace flags (00000048) [ 113.086638][ T6486] xt_recent: Unsupported userspace flags (00000048) [ 113.598025][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.141'. [ 113.628524][ T6493] vxcan3: entered allmulticast mode [ 113.689971][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 113.837888][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 114.052778][ T6521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.218055][ T6529] netlink: 'syz.2.151': attribute type 10 has an invalid length. [ 114.451244][ T6529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.569589][ T6540] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 114.929533][ T6554] vxcan3: entered allmulticast mode [ 115.264275][ T6572] __nla_validate_parse: 3 callbacks suppressed [ 115.264296][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 115.324125][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 115.334828][ T6574] 8021q: VLANs not supported on 61ŖX¹¦Ą [ 115.368446][ T6576] lo speed is unknown, defaulting to 1000 [ 115.557912][ T6589] trusted_key: syz.2.170 sent an empty control message without MSG_MORE. [ 115.644632][ T6595] Illegal XDP return value 4294967294 on prog (id 80) dev N/A, expect packet loss! [ 115.808035][ T6601] vxcan3: entered allmulticast mode [ 115.852303][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 116.177977][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 116.226159][ T6618] 8021q: VLANs not supported on 61ŖX¹¦Ą [ 116.627559][ T6647] netlink: 212 bytes leftover after parsing attributes in process `syz.1.185'. [ 116.690126][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 116.777257][ T6632] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.808181][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 116.828577][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 116.899579][ T6636] team0: Port device team_slave_0 removed [ 116.936891][ T6632] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.954552][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 117.010777][ T6632] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.090123][ T6632] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.195570][ T6632] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.217700][ T6632] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.240595][ T6632] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.290289][ T6632] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.304074][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 117.313488][ T6660] netlink: 'syz.2.191': attribute type 11 has an invalid length. [ 117.441391][ T6665] 8021q: VLANs not supported on 61ŖX¹¦Ą [ 117.507293][ T6669] netlink: 'syz.4.195': attribute type 10 has an invalid length. [ 117.832452][ T6684] netlink: 'syz.4.198': attribute type 4 has an invalid length. [ 117.849592][ T5884] lo speed is unknown, defaulting to 1000 [ 117.857972][ T6684] netlink: 'syz.4.198': attribute type 4 has an invalid length. [ 117.866139][ T5884] syz1: Port: 1 Link DOWN [ 117.882658][ T5884] lo speed is unknown, defaulting to 1000 [ 117.896168][ T5884] syz1: Port: 1 Link ACTIVE [ 117.941917][ T6688] netlink: 'syz.3.200': attribute type 21 has an invalid length. [ 117.963217][ T6688] netlink: 'syz.3.200': attribute type 6 has an invalid length. [ 117.988417][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.029161][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.697478][ T6724] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 118.729003][ T2153] lo speed is unknown, defaulting to 1000 [ 118.737089][ T2153] syz1: Port: 1 Link DOWN [ 118.741923][ T6724] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 118.785569][ T2153] lo speed is unknown, defaulting to 1000 [ 118.795808][ T2153] syz1: Port: 1 Link ACTIVE [ 118.957887][ T6738] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 118.970868][ T5831] lo speed is unknown, defaulting to 1000 [ 118.981740][ T5831] syz1: Port: 1 Link DOWN [ 119.002272][ T6738] netlink: 'syz.4.214': attribute type 4 has an invalid length. [ 119.040561][ T5831] lo speed is unknown, defaulting to 1000 [ 119.051638][ T5831] syz1: Port: 1 Link ACTIVE [ 119.171488][ T6743] pim6reg: entered allmulticast mode [ 119.184626][ T6743] pim6reg: left allmulticast mode [ 119.742331][ T6754] netlink: 'syz.4.221': attribute type 10 has an invalid length. [ 119.934202][ T6769] vxcan5: entered allmulticast mode [ 120.156270][ T6777] pim6reg: entered allmulticast mode [ 120.168749][ T6777] pim6reg: left allmulticast mode [ 120.447797][ T6789] bond1 (unregistering): Released all slaves [ 120.760427][ T6797] __nla_validate_parse: 15 callbacks suppressed [ 120.760448][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 120.776938][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 120.820871][ T6796] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 121.070878][ T6808] vxcan3: entered allmulticast mode [ 121.085661][ T6811] x_tables: duplicate underflow at hook 2 [ 121.165561][ T6812] netlink: 144 bytes leftover after parsing attributes in process `syz.3.241'. [ 121.372039][ T6821] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 121.869427][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 121.984828][ T6837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.235128][ T6848] lo speed is unknown, defaulting to 1000 [ 122.243338][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 122.262446][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 122.297379][ T6854] bond_slave_0: entered promiscuous mode [ 122.303283][ T6854] bond_slave_1: entered promiscuous mode [ 122.309064][ T6854] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 122.338869][ T6854] bond_slave_0: left promiscuous mode [ 122.344412][ T6854] bond_slave_1: left promiscuous mode [ 122.349988][ T6854] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 122.389640][ T6858] netlink: 68 bytes leftover after parsing attributes in process `syz.3.255'. [ 122.590400][ T6870] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.865314][ T6868] lo speed is unknown, defaulting to 1000 [ 123.104741][ T6878] lo speed is unknown, defaulting to 1000 [ 123.130694][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 123.236072][ T6890] validate_nla: 12 callbacks suppressed [ 123.236091][ T6890] netlink: 'syz.0.265': attribute type 4 has an invalid length. [ 123.287637][ T6891] netlink: 'syz.0.265': attribute type 4 has an invalid length. [ 124.224739][ T6909] lo speed is unknown, defaulting to 1000 [ 124.295717][ T6913] netlink: 9 bytes leftover after parsing attributes in process `syz.1.272'. [ 124.327492][ T6913] gretap0: entered promiscuous mode [ 124.353635][ T6913] netlink: 5 bytes leftover after parsing attributes in process `syz.1.272'. [ 124.364924][ T6913] 0ŖX¹¦D: renamed from gretap0 [ 124.377748][ T6913] 0ŖX¹¦D: left promiscuous mode [ 124.384334][ T6913] 0ŖX¹¦D: entered allmulticast mode [ 124.394799][ T6913] A link change request failed with some changes committed already. Interface 30ŖX¹¦D may have been left with an inconsistent configuration, please check. [ 124.610499][ T6916] pim6reg: entered allmulticast mode [ 124.830388][ T6911] pim6reg: left allmulticast mode [ 125.104117][ T6937] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 125.132146][ T6937] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 125.287627][ T6943] netdevsim netdevsim4 ’’’’’’: renamed from netdevsim0 [ 125.334513][ T6943] block nbd0: Unsupported socket: shutdown callout must be supported. [ 125.826119][ T6956] pim6reg: entered allmulticast mode [ 125.875885][ T6954] vxcan3: entered allmulticast mode [ 125.957723][ T6956] pim6reg: left allmulticast mode [ 126.009842][ T6966] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 126.038344][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 126.089224][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 126.114799][ T6969] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 126.122494][ T6969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.168456][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.176955][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.379336][ T6982] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 126.467955][ T6982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.568412][ T6992] lo speed is unknown, defaulting to 1000 [ 127.005769][ T7003] vxcan5: entered allmulticast mode [ 127.295889][ T7011] pim6reg1: entered promiscuous mode [ 127.339900][ T7011] pim6reg1: entered allmulticast mode [ 127.530066][ T7020] lo speed is unknown, defaulting to 1000 [ 127.753854][ T7024] lo speed is unknown, defaulting to 1000 [ 128.206520][ T7040] pim6reg: entered allmulticast mode [ 128.223278][ T7047] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 128.294987][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 128.323196][ T7046] lo speed is unknown, defaulting to 1000 [ 128.393484][ T7053] netlink: 'syz.2.315': attribute type 10 has an invalid length. [ 128.469503][ T7039] pim6reg: left allmulticast mode [ 128.685503][ T7056] lo speed is unknown, defaulting to 1000 [ 128.731468][ T7069] lo speed is unknown, defaulting to 1000 [ 129.297728][ T7086] tun0: tun_chr_ioctl cmd 1074025673 [ 129.316792][ T7091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.325'. [ 129.467067][ T7096] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.577017][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 129.630890][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.330'. [ 129.641099][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'. [ 129.683642][ T7110] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 129.691003][ T7101] vxcan5: entered allmulticast mode [ 129.740985][ T7106] netlink: 248 bytes leftover after parsing attributes in process `syz.0.331'. [ 129.907198][ T7108] netlink: 248 bytes leftover after parsing attributes in process `syz.0.331'. [ 129.946677][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 130.426647][ T7142] Cannot find del_set index 1 as target [ 130.437858][ T7138] lo speed is unknown, defaulting to 1000 [ 131.035506][ T7158] batman_adv: batadv0: Adding interface: vxlan0 [ 131.051598][ T7158] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.100846][ T7158] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 131.120822][ T7167] __nla_validate_parse: 3 callbacks suppressed [ 131.120841][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 131.868761][ T7196] lo speed is unknown, defaulting to 1000 [ 131.956667][ T7203] x_tables: duplicate underflow at hook 3 [ 132.126392][ T7208] vxcan3: entered allmulticast mode [ 132.775547][ T7237] macsec1: entered promiscuous mode [ 132.784481][ T7237] macsec1: entered allmulticast mode [ 132.790083][ T7237] veth1_macvtap: entered allmulticast mode [ 132.807260][ T7237] veth1_macvtap: left allmulticast mode [ 132.897985][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906038][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052878][ T7242] FAULT_INJECTION: forcing a failure. [ 133.052878][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.082000][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.3.373 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 133.082031][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.082052][ T7242] Call Trace: [ 133.082061][ T7242] [ 133.082070][ T7242] dump_stack_lvl+0x189/0x250 [ 133.082117][ T7242] ? __pfx____ratelimit+0x10/0x10 [ 133.082144][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.082177][ T7242] ? __pfx__printk+0x10/0x10 [ 133.082215][ T7242] should_fail_ex+0x414/0x560 [ 133.082248][ T7242] _copy_to_user+0x31/0xb0 [ 133.082272][ T7242] simple_read_from_buffer+0xe1/0x170 [ 133.082309][ T7242] proc_fail_nth_read+0x1df/0x250 [ 133.082335][ T7242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.082360][ T7242] ? rw_verify_area+0x258/0x650 [ 133.082386][ T7242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.082413][ T7242] vfs_read+0x200/0x980 [ 133.082446][ T7242] ? __pfx___mutex_lock+0x10/0x10 [ 133.082474][ T7242] ? __pfx_vfs_read+0x10/0x10 [ 133.082503][ T7242] ? __fget_files+0x2a/0x420 [ 133.082540][ T7242] ? __fget_files+0x3a0/0x420 [ 133.082576][ T7242] ? __fget_files+0x2a/0x420 [ 133.082618][ T7242] ksys_read+0x145/0x250 [ 133.082647][ T7242] ? __pfx_ksys_read+0x10/0x10 [ 133.082671][ T7242] ? rcu_is_watching+0x15/0xb0 [ 133.082705][ T7242] ? do_syscall_64+0xbe/0x3b0 [ 133.082734][ T7242] do_syscall_64+0xfa/0x3b0 [ 133.082758][ T7242] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.082781][ T7242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.082801][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 133.082826][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.082845][ T7242] RIP: 0033:0x7f28bfb8d33c [ 133.082869][ T7242] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.082886][ T7242] RSP: 002b:00007f28c0972030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.082908][ T7242] RAX: ffffffffffffffda RBX: 00007f28bfdb5fa0 RCX: 00007f28bfb8d33c [ 133.082923][ T7242] RDX: 000000000000000f RSI: 00007f28c09720a0 RDI: 0000000000000004 [ 133.082935][ T7242] RBP: 00007f28c0972090 R08: 0000000000000000 R09: 0000000000000000 [ 133.082947][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.082959][ T7242] R13: 0000000000000000 R14: 00007f28bfdb5fa0 R15: 00007ffc8578f4e8 [ 133.082990][ T7242] [ 133.603321][ T7255] vxcan3: entered allmulticast mode [ 133.888726][ T7261] lo speed is unknown, defaulting to 1000 [ 133.941725][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 133.991145][ T7262] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 134.035850][ T7276] netlink: 'syz.1.383': attribute type 10 has an invalid length. [ 134.060196][ T7274] ip6gretap0: mtu less than device minimum [ 134.186990][ T7282] vcan0: entered allmulticast mode [ 134.275507][ T7287] netlink: 'syz.3.388': attribute type 16 has an invalid length. [ 134.283876][ T7287] netlink: 'syz.3.388': attribute type 17 has an invalid length. [ 134.326595][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 134.333640][ T7287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.376312][ T7291] veth1_macvtap: left promiscuous mode [ 134.382665][ T7291] macsec0: entered allmulticast mode [ 134.395128][ T7291] veth1_macvtap: entered promiscuous mode [ 134.400913][ T7291] veth1_macvtap: entered allmulticast mode [ 134.408804][ T7291] macsec0: left allmulticast mode [ 134.413918][ T7291] veth1_macvtap: left allmulticast mode [ 135.086971][ T7313] lo speed is unknown, defaulting to 1000 [ 135.557651][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 135.749266][ T7322] netlink: 'syz.2.398': attribute type 10 has an invalid length. [ 136.034395][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 136.087237][ T7334] syz_tun: entered allmulticast mode [ 136.124265][ T7334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'. [ 136.202692][ T7336] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 136.218728][ T7334] dvmrp1: entered allmulticast mode [ 136.312138][ T7333] syz_tun: left allmulticast mode [ 136.326121][ T7338] lo speed is unknown, defaulting to 1000 [ 136.343717][ T7347] netlink: zone id is out of range [ 136.357588][ T7347] netlink: zone id is out of range [ 136.391930][ T7347] netlink: set zone limit has 4 unknown bytes [ 137.361092][ T7368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.478606][ T7368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.599429][ T7368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.714413][ T7368] netdevsim netdevsim4 ’’’’’’ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.907201][ T7368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.981280][ T7368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.123309][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 138.152330][ T7393] IPVS: Error joining to the multicast group [ 138.178601][ T7368] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.271953][ T7368] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.334751][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 138.738939][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'. [ 138.791965][ T7411] tipc: Started in network mode [ 138.807200][ T7411] tipc: Node identity b, cluster identity 3 [ 138.826075][ T7411] tipc: Node number set to 11 [ 139.048042][ T7414] lo speed is unknown, defaulting to 1000 [ 139.056666][ T7414] lo speed is unknown, defaulting to 1000 [ 139.069419][ T7414] lo speed is unknown, defaulting to 1000 [ 139.489991][ T5904] lo speed is unknown, defaulting to 1000 [ 139.496157][ T7414] infiniband sz1: set down [ 139.526623][ T7414] infiniband sz1: added lo [ 139.701939][ T7414] RDS/IB: sz1: added [ 139.706644][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 139.707552][ T7414] smc: adding ib device sz1 with port count 1 [ 139.723878][ T7414] smc: ib device sz1 port 1 has pnetid [ 139.731126][ T89] lo speed is unknown, defaulting to 1000 [ 139.737269][ T7423] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 139.739107][ T7414] lo speed is unknown, defaulting to 1000 [ 139.852449][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'. [ 139.870607][ T7429] lo speed is unknown, defaulting to 1000 [ 139.924532][ T7431] bond_slave_0: entered promiscuous mode [ 139.930317][ T7431] bond_slave_1: entered promiscuous mode [ 139.955649][ T7431] bond_slave_0: left promiscuous mode [ 139.961233][ T7431] bond_slave_1: left promiscuous mode [ 140.159404][ T7414] lo speed is unknown, defaulting to 1000 [ 140.415512][ T7429] lo speed is unknown, defaulting to 1000 [ 140.580388][ T7438] x_tables: duplicate underflow at hook 3 [ 140.688827][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 140.735677][ T7414] lo speed is unknown, defaulting to 1000 [ 140.747145][ T7441] lo speed is unknown, defaulting to 1000 [ 141.136735][ T7414] lo speed is unknown, defaulting to 1000 [ 141.379723][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 141.412041][ T7446] netlink: 'syz.4.435': attribute type 10 has an invalid length. [ 141.507231][ T7441] lo speed is unknown, defaulting to 1000 [ 141.517256][ T7448] netlink: 504 bytes leftover after parsing attributes in process `syz.2.436'. [ 141.886927][ T7414] lo speed is unknown, defaulting to 1000 [ 142.097641][ T7456] netlink: 96 bytes leftover after parsing attributes in process `syz.2.439'. [ 142.253394][ T7464] vxcan5: entered allmulticast mode [ 142.380303][ T7465] vxcan5: entered allmulticast mode [ 142.763748][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.443'. [ 143.007689][ T7474] !: renamed from dummy0 (while UP) [ 143.122015][ T7479] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 143.151258][ T7479] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 143.187429][ T5904] lo speed is unknown, defaulting to 1000 [ 143.193845][ T5904] sz1: Port: 1 Link ACTIVE [ 143.198775][ T5904] lo speed is unknown, defaulting to 1000 [ 143.481972][ T7489] netlink: 'syz.1.448': attribute type 4 has an invalid length. [ 143.562008][ T7490] netlink: 'syz.1.448': attribute type 4 has an invalid length. [ 144.252312][ T7516] rdma_rxe: rxe_newlink: failed to add lo [ 144.580030][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 144.635317][ T7523] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 144.676989][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 144.782940][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'. [ 144.897903][ T7528] lo speed is unknown, defaulting to 1000 [ 144.902306][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 144.929997][ T7535] netlink: 'syz.1.473': attribute type 10 has an invalid length. [ 144.937494][ T7528] lo speed is unknown, defaulting to 1000 [ 145.018732][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 145.041822][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 145.072424][ T7540] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 145.088935][ T7540] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 146.569926][ T7575] macsec1: entered promiscuous mode [ 146.586184][ T7575] macsec1: entered allmulticast mode [ 146.611890][ T7575] veth1_macvtap: entered allmulticast mode [ 146.635677][ T7575] veth1_macvtap: left allmulticast mode [ 146.675088][ T7582] __nla_validate_parse: 2 callbacks suppressed [ 146.675107][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 146.701327][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 146.733291][ T7582] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 146.998272][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 147.058653][ T7598] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 147.058763][ T7597] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.096930][ T7598] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 147.439221][ T7611] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 147.469095][ T7613] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 147.759438][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 147.829815][ T7619] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 147.974613][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 148.010628][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.497'. [ 148.087847][ T7635] xt_hashlimit: overflow, try lower: 5/0 [ 148.218001][ T7639] netlink: 'syz.0.500': attribute type 12 has an invalid length. [ 148.251156][ T7639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.500'. [ 149.053778][ T7659] vxcan5: entered allmulticast mode [ 149.172494][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 149.286430][ T7661] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 149.447539][ T7664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.539705][ T7664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.647573][ T7664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.898047][ T7664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.023057][ T7691] lo speed is unknown, defaulting to 1000 [ 150.053523][ T7697] vxcan5: entered allmulticast mode [ 150.061236][ T7691] lo speed is unknown, defaulting to 1000 [ 150.126196][ T7664] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.269297][ T7664] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.320044][ T7664] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.364571][ T7664] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.399596][ T7702] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 150.441145][ T7702] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 150.558663][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 150.594480][ T7706] vlan2: entered promiscuous mode [ 150.599583][ T7706] bond0: entered promiscuous mode [ 150.662233][ T7706] bond_slave_0: entered promiscuous mode [ 150.685073][ T7706] bond_slave_1: entered promiscuous mode [ 150.693932][ T7706] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 151.466831][ T7734] vxcan7: entered allmulticast mode [ 151.526905][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 151.633921][ T7739] lo speed is unknown, defaulting to 1000 [ 151.685845][ T7742] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 151.703738][ T7739] lo speed is unknown, defaulting to 1000 [ 152.859456][ T7774] __nla_validate_parse: 1 callbacks suppressed [ 152.859475][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.546'. [ 152.980737][ T7773] lo speed is unknown, defaulting to 1000 [ 152.991343][ T7773] lo speed is unknown, defaulting to 1000 [ 153.254758][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 153.308526][ T7783] netlink: 'syz.3.550': attribute type 10 has an invalid length. [ 153.515321][ T7788] netlink: 452 bytes leftover after parsing attributes in process `syz.3.553'. [ 153.719185][ T7795] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 153.752251][ T7796] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.752944][ T5904] lo speed is unknown, defaulting to 1000 [ 153.771785][ T7795] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 153.779518][ T5904] syz1: Port: 1 Link DOWN [ 153.796314][ T5904] lo speed is unknown, defaulting to 1000 [ 153.815212][ T5904] syz1: Port: 1 Link ACTIVE [ 154.537523][ T7814] netlink: 'syz.0.559': attribute type 4 has an invalid length. [ 154.607167][ T5904] lo speed is unknown, defaulting to 1000 [ 154.613797][ T5904] sz1: Port: 1 Link DOWN [ 154.621736][ T7814] netlink: 'syz.0.559': attribute type 4 has an invalid length. [ 154.634624][ T5904] lo speed is unknown, defaulting to 1000 [ 154.672086][ T5904] lo speed is unknown, defaulting to 1000 [ 154.677880][ T5904] sz1: Port: 1 Link ACTIVE [ 154.710788][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 154.962088][ T7825] netlink: 'syz.4.560': attribute type 10 has an invalid length. [ 154.970821][ T2153] lo speed is unknown, defaulting to 1000 [ 155.528761][ T7839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 155.597351][ T7841] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 155.627812][ T7839] syz_tun: entered promiscuous mode [ 155.650000][ T7839] syz_tun: left promiscuous mode [ 155.656975][ T7846] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 156.068549][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 156.103332][ T7865] 8021q: VLANs not supported on nlmon0 [ 156.328181][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 156.344059][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 156.360551][ T7877] lo speed is unknown, defaulting to 1000 [ 156.369097][ T7877] lo speed is unknown, defaulting to 1000 [ 156.381860][ T7876] IPVS: Error joining to the multicast group [ 156.552831][ T7883] netlink: 'syz.2.581': attribute type 4 has an invalid length. [ 156.582885][ T7883] netlink: 'syz.2.581': attribute type 4 has an invalid length. [ 156.738884][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.012156][ T7900] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 157.188877][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 157.198019][ T7907] 8021q: VLANs not supported on nlmon0 [ 157.271834][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 158.053278][ T7931] netlink: 'syz.3.595': attribute type 4 has an invalid length. [ 158.092948][ T7931] netlink: 'syz.3.595': attribute type 4 has an invalid length. [ 158.277935][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 158.292009][ T7939] 8021q: VLANs not supported on nlmon0 [ 158.818840][ T7960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.603'. [ 159.355931][ T7972] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 159.457217][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 159.482189][ T7981] 8021q: VLANs not supported on nlmon0 [ 159.517528][ T7987] x_tables: duplicate underflow at hook 1 [ 159.834430][ T8006] FAULT_INJECTION: forcing a failure. [ 159.834430][ T8006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.842402][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 159.867668][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.4.619 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 159.867699][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.867712][ T8006] Call Trace: [ 159.867720][ T8006] [ 159.867729][ T8006] dump_stack_lvl+0x189/0x250 [ 159.867776][ T8006] ? __pfx____ratelimit+0x10/0x10 [ 159.867802][ T8006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.867836][ T8006] ? __pfx__printk+0x10/0x10 [ 159.867859][ T8006] ? __might_fault+0xb0/0x130 [ 159.867904][ T8006] should_fail_ex+0x414/0x560 [ 159.867938][ T8006] _copy_from_user+0x2d/0xb0 [ 159.867960][ T8006] ___sys_sendmsg+0x158/0x2a0 [ 159.867985][ T8006] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.868048][ T8006] ? __fget_files+0x2a/0x420 [ 159.868078][ T8006] ? __fget_files+0x3a0/0x420 [ 159.868121][ T8006] __sys_sendmmsg+0x227/0x430 [ 159.868149][ T8006] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.868168][ T8006] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 159.868226][ T8006] ? ksys_write+0x22a/0x250 [ 159.868268][ T8006] ? __pfx_ksys_write+0x10/0x10 [ 159.868291][ T8006] ? rcu_is_watching+0x15/0xb0 [ 159.868347][ T8006] __x64_sys_sendmmsg+0xa0/0xc0 [ 159.868371][ T8006] do_syscall_64+0xfa/0x3b0 [ 159.868396][ T8006] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.868421][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.868442][ T8006] ? clear_bhb_loop+0x60/0xb0 [ 159.868468][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.868488][ T8006] RIP: 0033:0x7f6c96d8e929 [ 159.868507][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.868525][ T8006] RSP: 002b:00007f6c97b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.868547][ T8006] RAX: ffffffffffffffda RBX: 00007f6c96fb5fa0 RCX: 00007f6c96d8e929 [ 159.868562][ T8006] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 159.868577][ T8006] RBP: 00007f6c97b87090 R08: 0000000000000000 R09: 0000000000000000 [ 159.868589][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.868601][ T8006] R13: 0000000000000000 R14: 00007f6c96fb5fa0 R15: 00007ffc3ed648d8 [ 159.868635][ T8006] [ 160.281287][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 160.291407][ T8020] 8021q: VLANs not supported on nlmon0 [ 160.584562][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 160.938095][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 160.999569][ T8055] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 161.025870][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 161.052502][ T8054] 8021q: VLANs not supported on nlmon0 [ 161.327207][ T8064] ip6tnl1: entered promiscuous mode [ 161.344155][ T8064] ip6tnl1: entered allmulticast mode [ 161.730289][ T8076] lo speed is unknown, defaulting to 1000 [ 161.754324][ T8076] lo speed is unknown, defaulting to 1000 [ 161.951942][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.647'. [ 162.183379][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 162.221324][ T8090] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 162.272095][ T8092] 8021q: VLANs not supported on nlmon0 [ 162.737274][ T8120] FAULT_INJECTION: forcing a failure. [ 162.737274][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.750843][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.1.661 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 162.750873][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.750886][ T8120] Call Trace: [ 162.750894][ T8120] [ 162.750903][ T8120] dump_stack_lvl+0x189/0x250 [ 162.750942][ T8120] ? __pfx____ratelimit+0x10/0x10 [ 162.750969][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.751002][ T8120] ? __pfx__printk+0x10/0x10 [ 162.751026][ T8120] ? __might_fault+0xb0/0x130 [ 162.751070][ T8120] should_fail_ex+0x414/0x560 [ 162.751104][ T8120] _copy_from_iter+0x1db/0x16f0 [ 162.751141][ T8120] ? rcu_is_watching+0x15/0xb0 [ 162.751174][ T8120] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 162.751207][ T8120] ? __pfx__copy_from_iter+0x10/0x10 [ 162.751241][ T8120] ? __build_skb_around+0x257/0x3e0 [ 162.751277][ T8120] ? netlink_sendmsg+0x642/0xb30 [ 162.751295][ T8120] ? skb_put+0x11b/0x210 [ 162.751332][ T8120] netlink_sendmsg+0x6b2/0xb30 [ 162.751362][ T8120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.751386][ T8120] ? aa_sock_msg_perm+0x94/0x160 [ 162.751416][ T8120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.751441][ T8120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.751462][ T8120] __sock_sendmsg+0x219/0x270 [ 162.751493][ T8120] ____sys_sendmsg+0x52d/0x830 [ 162.751524][ T8120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.751555][ T8120] ? import_iovec+0x74/0xa0 [ 162.751581][ T8120] ___sys_sendmsg+0x21f/0x2a0 [ 162.751605][ T8120] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.751668][ T8120] ? __fget_files+0x2a/0x420 [ 162.751700][ T8120] ? __fget_files+0x3a0/0x420 [ 162.751744][ T8120] __sys_sendmmsg+0x227/0x430 [ 162.751778][ T8120] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.751797][ T8120] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 162.751855][ T8120] ? ksys_write+0x22a/0x250 [ 162.751886][ T8120] ? __pfx_ksys_write+0x10/0x10 [ 162.751911][ T8120] ? rcu_is_watching+0x15/0xb0 [ 162.751949][ T8120] __x64_sys_sendmmsg+0xa0/0xc0 [ 162.751973][ T8120] do_syscall_64+0xfa/0x3b0 [ 162.751999][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.752024][ T8120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.752045][ T8120] ? clear_bhb_loop+0x60/0xb0 [ 162.752071][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.752092][ T8120] RIP: 0033:0x7f623478e929 [ 162.752111][ T8120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.752129][ T8120] RSP: 002b:00007f623553e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.752151][ T8120] RAX: ffffffffffffffda RBX: 00007f62349b5fa0 RCX: 00007f623478e929 [ 162.752178][ T8120] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 162.752192][ T8120] RBP: 00007f623553e090 R08: 0000000000000000 R09: 0000000000000000 [ 162.752204][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.752216][ T8120] R13: 0000000000000000 R14: 00007f62349b5fa0 R15: 00007ffe272375c8 [ 162.752248][ T8120] [ 163.366981][ T8128] __nla_validate_parse: 1 callbacks suppressed [ 163.367012][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 163.412712][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 163.422131][ T8132] 8021q: VLANs not supported on nlmon0 [ 163.490948][ T8128] netlink: 'syz.4.663': attribute type 10 has an invalid length. [ 163.651376][ T8139] netlink: 3 bytes leftover after parsing attributes in process `syz.0.670'. [ 163.672184][ T8139] 0ŖX¹¦Ą: renamed from caif0 [ 163.702353][ T8139] 0ŖX¹¦Ą: entered allmulticast mode [ 163.709651][ T8139] A link change request failed with some changes committed already. Interface 60ŖX¹¦Ą may have been left with an inconsistent configuration, please check. [ 163.777001][ T8144] FAULT_INJECTION: forcing a failure. [ 163.777001][ T8144] name failslab, interval 1, probability 0, space 0, times 0 [ 163.806302][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.3.672 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 163.806333][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.806345][ T8144] Call Trace: [ 163.806354][ T8144] [ 163.806363][ T8144] dump_stack_lvl+0x189/0x250 [ 163.806402][ T8144] ? __pfx____ratelimit+0x10/0x10 [ 163.806428][ T8144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.806461][ T8144] ? __pfx__printk+0x10/0x10 [ 163.806492][ T8144] ? ref_tracker_alloc+0x318/0x460 [ 163.806525][ T8144] should_fail_ex+0x414/0x560 [ 163.806557][ T8144] should_failslab+0xa8/0x100 [ 163.806592][ T8144] kmem_cache_alloc_noprof+0x73/0x3c0 [ 163.806621][ T8144] ? skb_clone+0x212/0x3a0 [ 163.806649][ T8144] skb_clone+0x212/0x3a0 [ 163.806675][ T8144] __netlink_deliver_tap+0x404/0x850 [ 163.806731][ T8144] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.806767][ T8144] netlink_deliver_tap+0x19c/0x1b0 [ 163.806801][ T8144] netlink_unicast+0x72f/0x8d0 [ 163.806844][ T8144] netlink_sendmsg+0x805/0xb30 [ 163.806874][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.806899][ T8144] ? aa_sock_msg_perm+0x94/0x160 [ 163.806928][ T8144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.806953][ T8144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.806974][ T8144] __sock_sendmsg+0x219/0x270 [ 163.807004][ T8144] ____sys_sendmsg+0x52d/0x830 [ 163.807033][ T8144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.807065][ T8144] ? import_iovec+0x74/0xa0 [ 163.807090][ T8144] ___sys_sendmsg+0x21f/0x2a0 [ 163.807114][ T8144] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.807177][ T8144] ? __fget_files+0x2a/0x420 [ 163.807220][ T8144] ? __fget_files+0x3a0/0x420 [ 163.807263][ T8144] __sys_sendmmsg+0x227/0x430 [ 163.807290][ T8144] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.807308][ T8144] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 163.807365][ T8144] ? ksys_write+0x22a/0x250 [ 163.807394][ T8144] ? __pfx_ksys_write+0x10/0x10 [ 163.807419][ T8144] ? rcu_is_watching+0x15/0xb0 [ 163.807456][ T8144] __x64_sys_sendmmsg+0xa0/0xc0 [ 163.807498][ T8144] do_syscall_64+0xfa/0x3b0 [ 163.807526][ T8144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.807546][ T8144] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.807568][ T8144] ? clear_bhb_loop+0x60/0xb0 [ 163.807594][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.807615][ T8144] RIP: 0033:0x7f28bfb8e929 [ 163.807634][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.807651][ T8144] RSP: 002b:00007f28c0972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.807673][ T8144] RAX: ffffffffffffffda RBX: 00007f28bfdb5fa0 RCX: 00007f28bfb8e929 [ 163.807688][ T8144] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 163.807702][ T8144] RBP: 00007f28c0972090 R08: 0000000000000000 R09: 0000000000000000 [ 163.807721][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.807733][ T8144] R13: 0000000000000000 R14: 00007f28bfdb5fa0 R15: 00007ffc8578f4e8 [ 163.807765][ T8144] [ 164.128765][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.678'. [ 164.156850][ T8144] vxcan5: entered allmulticast mode [ 164.261802][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 164.298774][ T8166] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 164.316339][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 164.341683][ T8168] 8021q: VLANs not supported on nlmon0 [ 164.775619][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 164.800842][ T8192] netlink: 212 bytes leftover after parsing attributes in process `syz.3.689'. [ 164.838843][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 164.854970][ T8196] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 164.927232][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 164.942882][ T8200] 8021q: VLANs not supported on nlmon0 [ 165.047290][ T8207] FAULT_INJECTION: forcing a failure. [ 165.047290][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.062727][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.2.698 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 165.062756][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.062768][ T8207] Call Trace: [ 165.062776][ T8207] [ 165.062784][ T8207] dump_stack_lvl+0x189/0x250 [ 165.062822][ T8207] ? __pfx____ratelimit+0x10/0x10 [ 165.062847][ T8207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.062879][ T8207] ? __pfx__printk+0x10/0x10 [ 165.062901][ T8207] ? __might_fault+0xb0/0x130 [ 165.062943][ T8207] should_fail_ex+0x414/0x560 [ 165.062975][ T8207] _copy_from_user+0x2d/0xb0 [ 165.062997][ T8207] __sys_bpf+0x1ed/0x860 [ 165.063025][ T8207] ? __pfx___sys_bpf+0x10/0x10 [ 165.063064][ T8207] ? ksys_write+0x22a/0x250 [ 165.063093][ T8207] ? __pfx_ksys_write+0x10/0x10 [ 165.063117][ T8207] ? rcu_is_watching+0x15/0xb0 [ 165.063155][ T8207] __x64_sys_bpf+0x7c/0x90 [ 165.063178][ T8207] do_syscall_64+0xfa/0x3b0 [ 165.063203][ T8207] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.063225][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.063246][ T8207] ? clear_bhb_loop+0x60/0xb0 [ 165.063271][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.063290][ T8207] RIP: 0033:0x7f659638e929 [ 165.063307][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.063324][ T8207] RSP: 002b:00007f6597228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.063345][ T8207] RAX: ffffffffffffffda RBX: 00007f65965b5fa0 RCX: 00007f659638e929 [ 165.063360][ T8207] RDX: 0000000000000050 RSI: 0000200000004f40 RDI: 0000000000000000 [ 165.063372][ T8207] RBP: 00007f6597228090 R08: 0000000000000000 R09: 0000000000000000 [ 165.063385][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.063396][ T8207] R13: 0000000000000000 R14: 00007f65965b5fa0 R15: 00007ffd8bc98b38 [ 165.063429][ T8207] [ 165.739124][ T8226] vxcan5: entered allmulticast mode [ 165.919333][ T8233] tun0: tun_chr_ioctl cmd 2147767520 [ 165.978821][ T8238] 8021q: VLANs not supported on nlmon0 [ 166.580082][ T8260] FAULT_INJECTION: forcing a failure. [ 166.580082][ T8260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.604052][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.0.716 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 166.604082][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.604095][ T8260] Call Trace: [ 166.604103][ T8260] [ 166.604112][ T8260] dump_stack_lvl+0x189/0x250 [ 166.604149][ T8260] ? __pfx____ratelimit+0x10/0x10 [ 166.604180][ T8260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.604213][ T8260] ? __pfx__printk+0x10/0x10 [ 166.604235][ T8260] ? __might_fault+0xb0/0x130 [ 166.604279][ T8260] should_fail_ex+0x414/0x560 [ 166.604320][ T8260] _copy_from_user+0x2d/0xb0 [ 166.604342][ T8260] __sys_connect+0x123/0x440 [ 166.604378][ T8260] ? __fget_files+0x3a0/0x420 [ 166.604410][ T8260] ? __pfx___sys_connect+0x10/0x10 [ 166.604454][ T8260] ? __pfx_ksys_write+0x10/0x10 [ 166.604478][ T8260] ? rcu_is_watching+0x15/0xb0 [ 166.604517][ T8260] __x64_sys_connect+0x7a/0x90 [ 166.604549][ T8260] do_syscall_64+0xfa/0x3b0 [ 166.604574][ T8260] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.604599][ T8260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.604619][ T8260] ? clear_bhb_loop+0x60/0xb0 [ 166.604645][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.604665][ T8260] RIP: 0033:0x7fc89d58e929 [ 166.604683][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.604700][ T8260] RSP: 002b:00007fc89e386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 166.604721][ T8260] RAX: ffffffffffffffda RBX: 00007fc89d7b5fa0 RCX: 00007fc89d58e929 [ 166.604736][ T8260] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 166.604749][ T8260] RBP: 00007fc89e386090 R08: 0000000000000000 R09: 0000000000000000 [ 166.604761][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.604773][ T8260] R13: 0000000000000000 R14: 00007fc89d7b5fa0 R15: 00007ffff80ad478 [ 166.604805][ T8260] [ 167.067150][ T8264] vxcan3: entered allmulticast mode [ 167.167074][ T8269] 8021q: VLANs not supported on nlmon0 [ 167.438422][ T8283] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 167.998061][ T8303] 8021q: VLANs not supported on nlmon0 [ 168.008297][ T8301] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 168.043976][ T8305] FAULT_INJECTION: forcing a failure. [ 168.043976][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 168.073749][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.2.735 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 168.073780][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.073793][ T8305] Call Trace: [ 168.073801][ T8305] [ 168.073810][ T8305] dump_stack_lvl+0x189/0x250 [ 168.073848][ T8305] ? __pfx____ratelimit+0x10/0x10 [ 168.073874][ T8305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.073906][ T8305] ? __pfx__printk+0x10/0x10 [ 168.073933][ T8305] ? __mutex_trylock_common+0x153/0x260 [ 168.073974][ T8305] should_fail_ex+0x414/0x560 [ 168.074006][ T8305] should_failslab+0xa8/0x100 [ 168.074039][ T8305] __kmalloc_cache_noprof+0x70/0x3d0 [ 168.074068][ T8305] ? __hw_addr_add_ex+0x1f4/0x770 [ 168.074096][ T8305] __hw_addr_add_ex+0x1f4/0x770 [ 168.074125][ T8305] dev_addr_init+0x14f/0x230 [ 168.074151][ T8305] ? __pfx_dev_addr_init+0x10/0x10 [ 168.074167][ T8305] ? alloc_netdev_mqs+0xa6/0x11e0 [ 168.074208][ T8305] alloc_netdev_mqs+0x2f3/0x11e0 [ 168.074230][ T8305] ? __pfx_vxcan_setup+0x10/0x10 [ 168.074263][ T8305] rtnl_create_link+0x31f/0xd10 [ 168.074295][ T8305] rtnl_newlink_create+0x25c/0xb00 [ 168.074339][ T8305] ? __pfx_aa_get_newest_label+0x10/0x10 [ 168.074387][ T8305] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 168.074424][ T8305] ? rtnl_newlink+0x8db/0x1c70 [ 168.074457][ T8305] ? __pfx___mutex_lock+0x10/0x10 [ 168.074497][ T8305] ? ns_capable+0x8a/0xf0 [ 168.074533][ T8305] rtnl_newlink+0x16d6/0x1c70 [ 168.074565][ T8305] ? netlink_sendmsg+0x805/0xb30 [ 168.074599][ T8305] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.074720][ T8305] ? __lock_acquire+0xab9/0xd20 [ 168.074777][ T8305] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.074806][ T8305] rtnetlink_rcv_msg+0x7cf/0xb70 [ 168.074841][ T8305] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 168.074870][ T8305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.074897][ T8305] ? ref_tracker_free+0x63a/0x7d0 [ 168.074924][ T8305] ? __copy_skb_header+0xa7/0x550 [ 168.074949][ T8305] ? __pfx_ref_tracker_free+0x10/0x10 [ 168.074990][ T8305] netlink_rcv_skb+0x205/0x470 [ 168.075024][ T8305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.075056][ T8305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.075105][ T8305] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.075136][ T8305] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.075175][ T8305] netlink_unicast+0x758/0x8d0 [ 168.075218][ T8305] netlink_sendmsg+0x805/0xb30 [ 168.075249][ T8305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.075273][ T8305] ? aa_sock_msg_perm+0x94/0x160 [ 168.075302][ T8305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.075326][ T8305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.075347][ T8305] __sock_sendmsg+0x219/0x270 [ 168.075379][ T8305] ____sys_sendmsg+0x52d/0x830 [ 168.075407][ T8305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.075446][ T8305] ? import_iovec+0x74/0xa0 [ 168.075472][ T8305] ___sys_sendmsg+0x21f/0x2a0 [ 168.075496][ T8305] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.075562][ T8305] ? __fget_files+0x2a/0x420 [ 168.075593][ T8305] ? __fget_files+0x3a0/0x420 [ 168.075637][ T8305] __sys_sendmmsg+0x227/0x430 [ 168.075666][ T8305] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.075684][ T8305] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 168.075753][ T8305] ? ksys_write+0x22a/0x250 [ 168.075783][ T8305] ? __pfx_ksys_write+0x10/0x10 [ 168.075807][ T8305] ? rcu_is_watching+0x15/0xb0 [ 168.075845][ T8305] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.075869][ T8305] do_syscall_64+0xfa/0x3b0 [ 168.075893][ T8305] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.075917][ T8305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.075938][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 168.075963][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.075983][ T8305] RIP: 0033:0x7f659638e929 [ 168.076001][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.076018][ T8305] RSP: 002b:00007f6597228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.076040][ T8305] RAX: ffffffffffffffda RBX: 00007f65965b5fa0 RCX: 00007f659638e929 [ 168.076055][ T8305] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 168.076069][ T8305] RBP: 00007f6597228090 R08: 0000000000000000 R09: 0000000000000000 [ 168.076081][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.076092][ T8305] R13: 0000000000000000 R14: 00007f65965b5fa0 R15: 00007ffd8bc98b38 [ 168.076126][ T8305] [ 168.834988][ T8320] __nla_validate_parse: 8 callbacks suppressed [ 168.835008][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 169.223753][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 169.236175][ T8336] 8021q: VLANs not supported on nlmon0 [ 169.398982][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 169.417713][ T8339] netlink: 'syz.3.749': attribute type 10 has an invalid length. [ 169.503265][ T8342] vxcan5: entered allmulticast mode [ 169.532615][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.750'. [ 169.864969][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 169.874399][ T8360] 8021q: VLANs not supported on nlmon0 [ 170.087459][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 170.106549][ T8367] netlink: 'syz.2.761': attribute type 10 has an invalid length. [ 170.581209][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 170.592411][ T8395] 8021q: VLANs not supported on nlmon0 [ 170.676448][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 170.763526][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 170.837995][ T8405] netlink: 'syz.0.773': attribute type 10 has an invalid length. [ 170.865718][ T8409] netlink: 92 bytes leftover after parsing attributes in process `syz.1.776'. [ 171.330039][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.951498][ T8446] xfrm1: entered promiscuous mode [ 171.957516][ T8446] xfrm1: entered allmulticast mode [ 171.987225][ T8450] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 172.146442][ T8460] vxcan3: entered allmulticast mode [ 172.156313][ T30] audit: type=1800 audit(1749066966.106:2): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.793" name="blkio.bfq.time_recursive" dev="tmpfs" ino=801 res=0 errno=0 [ 172.180221][ T30] audit: type=1800 audit(1749066966.106:3): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.793" name="blkio.bfq.time_recursive" dev="tmpfs" ino=801 res=0 errno=0 [ 172.206083][ T8467] FAULT_INJECTION: forcing a failure. [ 172.206083][ T8467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.223781][ T8467] CPU: 1 UID: 0 PID: 8467 Comm: syz.4.795 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 172.223809][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.223820][ T8467] Call Trace: [ 172.223828][ T8467] [ 172.223836][ T8467] dump_stack_lvl+0x189/0x250 [ 172.223871][ T8467] ? __pfx____ratelimit+0x10/0x10 [ 172.223895][ T8467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.223925][ T8467] ? __pfx__printk+0x10/0x10 [ 172.223947][ T8467] ? fs_reclaim_acquire+0x7d/0x100 [ 172.223976][ T8467] should_fail_ex+0x414/0x560 [ 172.224006][ T8467] prepare_alloc_pages+0x213/0x610 [ 172.224033][ T8467] __alloc_frozen_pages_noprof+0x123/0x370 [ 172.224059][ T8467] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.224091][ T8467] ? policy_nodemask+0x27c/0x720 [ 172.224117][ T8467] ? __lock_acquire+0xab9/0xd20 [ 172.224146][ T8467] alloc_pages_bulk_noprof+0x560/0x710 [ 172.224181][ T8467] ? alloc_pages_noprof+0xbe/0x190 [ 172.224214][ T8467] kasan_populate_vmalloc+0xba/0x1a0 [ 172.224243][ T8467] alloc_vmap_area+0x1e2b/0x24c0 [ 172.224295][ T8467] ? __pfx_alloc_vmap_area+0x10/0x10 [ 172.224322][ T8467] ? __kasan_kmalloc+0x93/0xb0 [ 172.224349][ T8467] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 172.224377][ T8467] ? __get_vm_area_node+0x13f/0x300 [ 172.224404][ T8467] ? prealloc_init+0x123/0x630 [ 172.224428][ T8467] __get_vm_area_node+0x1f8/0x300 [ 172.224463][ T8467] __vmalloc_node_range_noprof+0x301/0x1340 [ 172.224494][ T8467] ? prealloc_init+0x123/0x630 [ 172.224515][ T8467] ? __lock_acquire+0xab9/0xd20 [ 172.224562][ T8467] ? do_raw_spin_lock+0x121/0x290 [ 172.224585][ T8467] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.224621][ T8467] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 172.224647][ T8467] bpf_map_area_alloc+0x12d/0x180 [ 172.224674][ T8467] ? prealloc_init+0x123/0x630 [ 172.224700][ T8467] prealloc_init+0x123/0x630 [ 172.224726][ T8467] ? __percpu_counter_init_many+0x364/0x380 [ 172.224763][ T8467] htab_map_alloc+0x6ce/0xc70 [ 172.224795][ T8467] map_create+0x903/0x1150 [ 172.224823][ T8467] ? security_bpf+0x7e/0x300 [ 172.224848][ T8467] __sys_bpf+0x67e/0x860 [ 172.224874][ T8467] ? __pfx___sys_bpf+0x10/0x10 [ 172.224911][ T8467] ? ksys_write+0x22a/0x250 [ 172.224941][ T8467] ? __pfx_ksys_write+0x10/0x10 [ 172.224963][ T8467] ? rcu_is_watching+0x15/0xb0 [ 172.224999][ T8467] __x64_sys_bpf+0x7c/0x90 [ 172.225039][ T8467] do_syscall_64+0xfa/0x3b0 [ 172.225064][ T8467] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.225087][ T8467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.225107][ T8467] ? clear_bhb_loop+0x60/0xb0 [ 172.225132][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.225151][ T8467] RIP: 0033:0x7f6c96d8e929 [ 172.225176][ T8467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.225193][ T8467] RSP: 002b:00007f6c97b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.225219][ T8467] RAX: ffffffffffffffda RBX: 00007f6c96fb5fa0 RCX: 00007f6c96d8e929 [ 172.225233][ T8467] RDX: 0000000000000050 RSI: 0000200000004f40 RDI: 0000000000000000 [ 172.225245][ T8467] RBP: 00007f6c97b87090 R08: 0000000000000000 R09: 0000000000000000 [ 172.225257][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.225268][ T8467] R13: 0000000000000000 R14: 00007f6c96fb5fa0 R15: 00007ffc3ed648d8 [ 172.225300][ T8467] [ 172.588661][ T8464] veth0: entered promiscuous mode [ 172.594385][ T8464] veth0: left promiscuous mode [ 172.668152][ T8472] openvswitch: netlink: Flow key attr not present in new flow. [ 172.684812][ T8475] openvswitch: netlink: Flow key attr not present in new flow. [ 172.763603][ T8477] netlink: 'syz.3.797': attribute type 32 has an invalid length. [ 172.817780][ T8481] tipc: Started in network mode [ 172.834429][ T8481] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 172.916516][ T8481] tipc: Enabled bearer , priority 18 [ 172.939696][ T8484] syzkaller0: entered promiscuous mode [ 172.950385][ T8484] syzkaller0: entered allmulticast mode [ 173.336689][ T8504] netlink: 'syz.0.806': attribute type 10 has an invalid length. [ 173.527899][ T8515] vxcan9: entered allmulticast mode [ 173.641385][ T8519] veth0: entered promiscuous mode [ 173.952246][ T8531] __nla_validate_parse: 14 callbacks suppressed [ 173.952266][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 173.971653][ T8531] tipc: Enabling of bearer rejected, media not registered [ 174.033120][ T5904] tipc: Node number set to 10005162 [ 174.180652][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.819'. [ 174.229953][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 174.540350][ T8557] vxcan3: entered allmulticast mode [ 174.596552][ T8556] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 174.684570][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 174.715092][ T8563] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 174.878068][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 174.906879][ T8570] lo speed is unknown, defaulting to 1000 [ 174.975282][ T8566] batadv0: entered promiscuous mode [ 174.997444][ T8566] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.032827][ T8566] batadv0: left promiscuous mode [ 175.092429][ T8573] FAULT_INJECTION: forcing a failure. [ 175.092429][ T8573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.119912][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.1.830 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 175.119953][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.119964][ T8573] Call Trace: [ 175.119971][ T8573] [ 175.119979][ T8573] dump_stack_lvl+0x189/0x250 [ 175.120015][ T8573] ? __pfx____ratelimit+0x10/0x10 [ 175.120038][ T8573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.120067][ T8573] ? __pfx__printk+0x10/0x10 [ 175.120090][ T8573] ? fs_reclaim_acquire+0x7d/0x100 [ 175.120117][ T8573] should_fail_ex+0x414/0x560 [ 175.120147][ T8573] prepare_alloc_pages+0x213/0x610 [ 175.120174][ T8573] __alloc_frozen_pages_noprof+0x123/0x370 [ 175.120199][ T8573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.120239][ T8573] alloc_pages_bulk_noprof+0x560/0x710 [ 175.120266][ T8573] ? alloc_pages_noprof+0xbe/0x190 [ 175.120299][ T8573] kasan_populate_vmalloc+0xba/0x1a0 [ 175.120329][ T8573] alloc_vmap_area+0x1e2b/0x24c0 [ 175.120380][ T8573] ? __pfx_alloc_vmap_area+0x10/0x10 [ 175.120407][ T8573] ? __kasan_kmalloc+0x93/0xb0 [ 175.120432][ T8573] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 175.120460][ T8573] ? __get_vm_area_node+0x13f/0x300 [ 175.120487][ T8573] ? prealloc_init+0x123/0x630 [ 175.120511][ T8573] __get_vm_area_node+0x1f8/0x300 [ 175.120546][ T8573] __vmalloc_node_range_noprof+0x301/0x1340 [ 175.120577][ T8573] ? prealloc_init+0x123/0x630 [ 175.120600][ T8573] ? __lock_acquire+0xab9/0xd20 [ 175.120651][ T8573] ? do_raw_spin_lock+0x121/0x290 [ 175.120674][ T8573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.120728][ T8573] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 175.120761][ T8573] bpf_map_area_alloc+0x12d/0x180 [ 175.120789][ T8573] ? prealloc_init+0x123/0x630 [ 175.120815][ T8573] prealloc_init+0x123/0x630 [ 175.120842][ T8573] ? __percpu_counter_init_many+0x364/0x380 [ 175.120873][ T8573] htab_map_alloc+0x6ce/0xc70 [ 175.120904][ T8573] map_create+0x903/0x1150 [ 175.120940][ T8573] ? security_bpf+0x7e/0x300 [ 175.120965][ T8573] __sys_bpf+0x67e/0x860 [ 175.120991][ T8573] ? __pfx___sys_bpf+0x10/0x10 [ 175.121030][ T8573] ? ksys_write+0x22a/0x250 [ 175.121058][ T8573] ? __pfx_ksys_write+0x10/0x10 [ 175.121081][ T8573] ? rcu_is_watching+0x15/0xb0 [ 175.121117][ T8573] __x64_sys_bpf+0x7c/0x90 [ 175.121139][ T8573] do_syscall_64+0xfa/0x3b0 [ 175.121164][ T8573] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.121187][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.121206][ T8573] ? clear_bhb_loop+0x60/0xb0 [ 175.121230][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.121249][ T8573] RIP: 0033:0x7f623478e929 [ 175.121266][ T8573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.121283][ T8573] RSP: 002b:00007f623553e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.121303][ T8573] RAX: ffffffffffffffda RBX: 00007f62349b5fa0 RCX: 00007f623478e929 [ 175.121317][ T8573] RDX: 0000000000000050 RSI: 0000200000004f40 RDI: 0000000000000000 [ 175.121330][ T8573] RBP: 00007f623553e090 R08: 0000000000000000 R09: 0000000000000000 [ 175.121341][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.121352][ T8573] R13: 0000000000000000 R14: 00007f62349b5fa0 R15: 00007ffe272375c8 [ 175.121384][ T8573] [ 175.753936][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 175.948057][ T8589] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 175.986119][ T8590] lo speed is unknown, defaulting to 1000 [ 176.028048][ T8590] lo speed is unknown, defaulting to 1000 [ 176.088030][ T8589] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 176.730720][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 176.747966][ T8608] vlan2: entered promiscuous mode [ 176.754706][ T8608] !: entered promiscuous mode [ 177.007036][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 177.056601][ T8613] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 177.076791][ T8591] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 177.594972][ T8629] FAULT_INJECTION: forcing a failure. [ 177.594972][ T8629] name failslab, interval 1, probability 0, space 0, times 0 [ 177.641733][ T8629] CPU: 1 UID: 0 PID: 8629 Comm: syz.0.849 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 177.641765][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.641778][ T8629] Call Trace: [ 177.641787][ T8629] [ 177.641796][ T8629] dump_stack_lvl+0x189/0x250 [ 177.641835][ T8629] ? __pfx____ratelimit+0x10/0x10 [ 177.641862][ T8629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.641896][ T8629] ? __pfx__printk+0x10/0x10 [ 177.641922][ T8629] ? __pfx___might_resched+0x10/0x10 [ 177.641954][ T8629] ? fs_reclaim_acquire+0x7d/0x100 [ 177.641982][ T8629] should_fail_ex+0x414/0x560 [ 177.642017][ T8629] should_failslab+0xa8/0x100 [ 177.642051][ T8629] __kmalloc_cache_noprof+0x70/0x3d0 [ 177.642082][ T8629] ? alloc_netdev_mqs+0xc36/0x11e0 [ 177.642113][ T8629] alloc_netdev_mqs+0xc36/0x11e0 [ 177.642148][ T8629] rtnl_create_link+0x31f/0xd10 [ 177.642181][ T8629] rtnl_newlink_create+0x25c/0xb00 [ 177.642223][ T8629] ? __pfx_aa_get_newest_label+0x10/0x10 [ 177.642254][ T8629] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 177.642284][ T8629] ? rtnl_newlink+0x8db/0x1c70 [ 177.642318][ T8629] ? __pfx___mutex_lock+0x10/0x10 [ 177.642358][ T8629] ? ns_capable+0x8a/0xf0 [ 177.642394][ T8629] rtnl_newlink+0x16d6/0x1c70 [ 177.642427][ T8629] ? netlink_sendmsg+0x805/0xb30 [ 177.642461][ T8629] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.642595][ T8629] ? __lock_acquire+0xab9/0xd20 [ 177.642654][ T8629] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.642684][ T8629] rtnetlink_rcv_msg+0x7cf/0xb70 [ 177.642718][ T8629] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 177.642759][ T8629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.642786][ T8629] ? ref_tracker_free+0x63a/0x7d0 [ 177.642812][ T8629] ? __copy_skb_header+0xa7/0x550 [ 177.642835][ T8629] ? __pfx_ref_tracker_free+0x10/0x10 [ 177.642877][ T8629] netlink_rcv_skb+0x205/0x470 [ 177.642909][ T8629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.642941][ T8629] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.642989][ T8629] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.643019][ T8629] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.643057][ T8629] netlink_unicast+0x758/0x8d0 [ 177.643097][ T8629] netlink_sendmsg+0x805/0xb30 [ 177.643128][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.643150][ T8629] ? aa_sock_msg_perm+0x94/0x160 [ 177.643178][ T8629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.643201][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.643221][ T8629] __sock_sendmsg+0x219/0x270 [ 177.643250][ T8629] ____sys_sendmsg+0x52d/0x830 [ 177.643278][ T8629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.643309][ T8629] ? import_iovec+0x74/0xa0 [ 177.643334][ T8629] ___sys_sendmsg+0x21f/0x2a0 [ 177.643358][ T8629] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.643423][ T8629] ? __fget_files+0x2a/0x420 [ 177.643452][ T8629] ? __fget_files+0x3a0/0x420 [ 177.643496][ T8629] __sys_sendmmsg+0x227/0x430 [ 177.643531][ T8629] ? __pfx___sys_sendmmsg+0x10/0x10 [ 177.643549][ T8629] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 177.643608][ T8629] ? ksys_write+0x22a/0x250 [ 177.643638][ T8629] ? __pfx_ksys_write+0x10/0x10 [ 177.643662][ T8629] ? rcu_is_watching+0x15/0xb0 [ 177.643700][ T8629] __x64_sys_sendmmsg+0xa0/0xc0 [ 177.643724][ T8629] do_syscall_64+0xfa/0x3b0 [ 177.643749][ T8629] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.643774][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.643795][ T8629] ? clear_bhb_loop+0x60/0xb0 [ 177.643820][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.643840][ T8629] RIP: 0033:0x7fc89d58e929 [ 177.643859][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.643876][ T8629] RSP: 002b:00007fc89e386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.643897][ T8629] RAX: ffffffffffffffda RBX: 00007fc89d7b5fa0 RCX: 00007fc89d58e929 [ 177.643912][ T8629] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 177.643926][ T8629] RBP: 00007fc89e386090 R08: 0000000000000000 R09: 0000000000000000 [ 177.643938][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.643949][ T8629] R13: 0000000000000000 R14: 00007fc89d7b5fa0 R15: 00007ffff80ad478 [ 177.643983][ T8629] [ 178.458347][ T8638] lo speed is unknown, defaulting to 1000 [ 178.466287][ T8638] lo speed is unknown, defaulting to 1000 [ 178.545846][ T8647] vxcan5: entered allmulticast mode [ 178.780374][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 178.849136][ T8652] netlink: 'syz.3.856': attribute type 10 has an invalid length. [ 179.096189][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.857'. [ 179.220784][ T8659] lo speed is unknown, defaulting to 1000 [ 179.238961][ T8663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.239542][ T8659] lo speed is unknown, defaulting to 1000 [ 179.342121][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 180.172758][ T8680] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 180.196248][ T8680] macvtap1: entered allmulticast mode [ 180.208033][ T8680] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 180.350998][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 180.416796][ T8685] vxcan5: entered allmulticast mode [ 180.432244][ T8688] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 180.901391][ T8696] syzkaller0: entered promiscuous mode [ 180.919197][ T8696] syzkaller0: entered allmulticast mode [ 180.962072][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.874'. [ 185.432091][ T8704] lo speed is unknown, defaulting to 1000 [ 185.514953][ T8704] lo speed is unknown, defaulting to 1000 [ 185.909693][ T8729] ip6gre1: entered allmulticast mode [ 185.953948][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.993153][ T8731] netlink: 'syz.0.879': attribute type 12 has an invalid length. [ 186.181226][ T8731] batadv0: entered promiscuous mode [ 186.273051][ T8731] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 186.305473][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.882'. [ 186.340097][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 186.358817][ T8731] batadv0: left promiscuous mode [ 186.469428][ T8741] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 186.499253][ T8738] vxcan5: entered allmulticast mode [ 187.236451][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 187.302269][ T8750] ipvlan1: entered promiscuous mode [ 187.330231][ T8750] ipvlan1: left promiscuous mode [ 187.381408][ T8755] netlink: 'syz.4.887': attribute type 4 has an invalid length. [ 187.508126][ T8757] netlink: 'syz.4.887': attribute type 4 has an invalid length. [ 187.546952][ T8759] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 187.595580][ T89] lo speed is unknown, defaulting to 1000 [ 187.648435][ T89] lo speed is unknown, defaulting to 1000 [ 189.613080][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 189.686661][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 189.711552][ T8790] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 189.761918][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.922425][ T8795] vxcan5: entered allmulticast mode [ 190.380827][ T8803] lo speed is unknown, defaulting to 1000 [ 190.403896][ T8804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.901'. [ 190.421958][ T8803] lo speed is unknown, defaulting to 1000 [ 190.486867][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 190.519399][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.544855][ T8807] team0 (unregistering): Port device team_slave_0 removed [ 191.584893][ T8807] team0 (unregistering): Port device team_slave_1 removed [ 191.658076][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.667748][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.690438][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.720263][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.744166][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.778258][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.815825][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.844992][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.869913][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 191.900866][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 192.115060][ T8817] vxcan9: entered allmulticast mode [ 193.806987][ T8851] vxcan5: entered allmulticast mode [ 194.337124][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.343683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400280][ T8860] FAULT_INJECTION: forcing a failure. [ 194.400280][ T8860] name failslab, interval 1, probability 0, space 0, times 0 [ 194.450127][ T8860] CPU: 1 UID: 0 PID: 8860 Comm: syz.1.917 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 194.450158][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.450170][ T8860] Call Trace: [ 194.450178][ T8860] [ 194.450187][ T8860] dump_stack_lvl+0x189/0x250 [ 194.450237][ T8860] ? __pfx____ratelimit+0x10/0x10 [ 194.450262][ T8860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.450294][ T8860] ? __pfx__printk+0x10/0x10 [ 194.450323][ T8860] ? __pfx___might_resched+0x10/0x10 [ 194.450358][ T8860] should_fail_ex+0x414/0x560 [ 194.450391][ T8860] should_failslab+0xa8/0x100 [ 194.450423][ T8860] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.450454][ T8860] ? __alloc_skb+0x112/0x2d0 [ 194.450489][ T8860] __alloc_skb+0x112/0x2d0 [ 194.450525][ T8860] netlink_sendmsg+0x5c6/0xb30 [ 194.450555][ T8860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.450578][ T8860] ? aa_sock_msg_perm+0x94/0x160 [ 194.450606][ T8860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.450631][ T8860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.450651][ T8860] __sock_sendmsg+0x219/0x270 [ 194.450689][ T8860] ____sys_sendmsg+0x505/0x830 [ 194.450718][ T8860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.450749][ T8860] ? import_iovec+0x74/0xa0 [ 194.450773][ T8860] ___sys_sendmsg+0x21f/0x2a0 [ 194.450797][ T8860] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.450858][ T8860] ? __fget_files+0x2a/0x420 [ 194.450888][ T8860] ? __fget_files+0x3a0/0x420 [ 194.450930][ T8860] __x64_sys_sendmsg+0x19b/0x260 [ 194.450959][ T8860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.451009][ T8860] ? __pfx_ksys_write+0x10/0x10 [ 194.451033][ T8860] ? rcu_is_watching+0x15/0xb0 [ 194.451070][ T8860] ? do_syscall_64+0xbe/0x3b0 [ 194.451102][ T8860] do_syscall_64+0xfa/0x3b0 [ 194.451127][ T8860] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.451152][ T8860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.451172][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 194.451199][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.451219][ T8860] RIP: 0033:0x7f623478e929 [ 194.451243][ T8860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.451261][ T8860] RSP: 002b:00007f623553e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.451288][ T8860] RAX: ffffffffffffffda RBX: 00007f62349b5fa0 RCX: 00007f623478e929 [ 194.451303][ T8860] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 194.451316][ T8860] RBP: 00007f623553e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.451329][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.451342][ T8860] R13: 0000000000000000 R14: 00007f62349b5fa0 R15: 00007ffe272375c8 [ 194.451375][ T8860] [ 196.296643][ T8888] openvswitch: netlink: IP tunnel dst address not specified [ 196.435242][ T8886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.519092][ T8886] bridge0: port 3(bond1) entered blocking state [ 196.558936][ T8886] bridge0: port 3(bond1) entered disabled state [ 196.587379][ T8886] bond1: entered allmulticast mode [ 196.669591][ T8886] bond1: entered promiscuous mode [ 196.781911][ T8886] bridge0: port 3(bond1) entered blocking state [ 196.789440][ T8886] bridge0: port 3(bond1) entered forwarding state [ 196.856970][ T6018] bridge0: port 3(bond1) entered disabled state [ 197.529668][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.732125][ T8914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.813022][ T8914] __nla_validate_parse: 70 callbacks suppressed [ 197.813044][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 197.860350][ T8911] lo speed is unknown, defaulting to 1000 [ 198.168586][ T8911] lo speed is unknown, defaulting to 1000 [ 198.191980][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 198.355423][ T8920] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 198.843283][ T8926] tipc: Started in network mode [ 198.871120][ T8926] tipc: Node identity ac14141, cluster identity 4711 [ 198.917552][ T8926] tipc: New replicast peer: 0.0.0.0 [ 198.940430][ T8926] tipc: Enabled bearer , priority 10 [ 199.857393][ T8936] block nbd0: server does not support multiple connections per device. [ 199.872489][ T8936] block nbd0: shutting down sockets [ 199.941176][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 200.051800][ T2153] tipc: Node number set to 2886997008 [ 200.061033][ T8946] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 200.951528][ C0] sched: DL replenish lagged too much [ 201.417497][ T8965] netlink: 'syz.4.946': attribute type 4 has an invalid length. [ 201.578037][ T5886] lo speed is unknown, defaulting to 1000 [ 201.608183][ T5886] syz1: Port: 1 Link DOWN [ 201.649165][ T8970] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 201.771699][ T5904] lo speed is unknown, defaulting to 1000 [ 201.781431][ T8969] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 201.815004][ T5904] sz1: Port: 1 Link DOWN [ 201.831886][ T5904] lo speed is unknown, defaulting to 1000 [ 201.846501][ T5904] lo speed is unknown, defaulting to 1000 [ 201.872084][ T5904] sz1: Port: 1 Link ACTIVE [ 201.888827][ T5886] lo speed is unknown, defaulting to 1000 [ 201.922103][ T8972] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 201.947549][ T8972] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 202.019874][ T5904] lo speed is unknown, defaulting to 1000 [ 202.049396][ T5904] syz1: Port: 1 Link ACTIVE [ 202.748290][ T8985] netlink: 'syz.3.952': attribute type 5 has an invalid length. [ 202.908578][ T8987] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 203.015969][ T8991] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 203.054178][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 203.096089][ T44] lo speed is unknown, defaulting to 1000 [ 203.102194][ T5886] lo speed is unknown, defaulting to 1000 [ 203.648396][ T8998] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 205.100722][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 205.192316][ T9040] validate_nla: 1 callbacks suppressed [ 205.192336][ T9040] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 205.548754][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.997502][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 206.081397][ T9057] syzkaller0: entered promiscuous mode [ 206.091447][ T9057] syzkaller0: entered allmulticast mode [ 206.100449][ T9055] netlink: 'syz.3.974': attribute type 12 has an invalid length. [ 206.162535][ T9055] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 206.170825][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 206.189947][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 206.353722][ T9064] FAULT_INJECTION: forcing a failure. [ 206.353722][ T9064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.369840][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.1.979 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 206.369870][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.369882][ T9064] Call Trace: [ 206.369891][ T9064] [ 206.369900][ T9064] dump_stack_lvl+0x189/0x250 [ 206.369936][ T9064] ? __pfx____ratelimit+0x10/0x10 [ 206.369962][ T9064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.369994][ T9064] ? __pfx__printk+0x10/0x10 [ 206.370016][ T9064] ? __might_fault+0xb0/0x130 [ 206.370059][ T9064] should_fail_ex+0x414/0x560 [ 206.370091][ T9064] _copy_from_iter+0x1db/0x16f0 [ 206.370125][ T9064] ? rcu_is_watching+0x15/0xb0 [ 206.370156][ T9064] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 206.370187][ T9064] ? __pfx__copy_from_iter+0x10/0x10 [ 206.370220][ T9064] ? __build_skb_around+0x257/0x3e0 [ 206.370255][ T9064] ? netlink_sendmsg+0x642/0xb30 [ 206.370273][ T9064] ? skb_put+0x11b/0x210 [ 206.370326][ T9064] netlink_sendmsg+0x6b2/0xb30 [ 206.370356][ T9064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.370381][ T9064] ? aa_sock_msg_perm+0x94/0x160 [ 206.370410][ T9064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.370434][ T9064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.370456][ T9064] __sock_sendmsg+0x219/0x270 [ 206.370487][ T9064] ____sys_sendmsg+0x505/0x830 [ 206.370515][ T9064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.370547][ T9064] ? import_iovec+0x74/0xa0 [ 206.370572][ T9064] ___sys_sendmsg+0x21f/0x2a0 [ 206.370597][ T9064] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.370668][ T9064] ? __fget_files+0x2a/0x420 [ 206.370699][ T9064] ? __fget_files+0x3a0/0x420 [ 206.370743][ T9064] __x64_sys_sendmsg+0x19b/0x260 [ 206.370768][ T9064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.370801][ T9064] ? __pfx_ksys_write+0x10/0x10 [ 206.370826][ T9064] ? rcu_is_watching+0x15/0xb0 [ 206.370862][ T9064] ? do_syscall_64+0xbe/0x3b0 [ 206.370893][ T9064] do_syscall_64+0xfa/0x3b0 [ 206.370918][ T9064] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.370943][ T9064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.370965][ T9064] ? clear_bhb_loop+0x60/0xb0 [ 206.370991][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.371011][ T9064] RIP: 0033:0x7f623478e929 [ 206.371029][ T9064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.371047][ T9064] RSP: 002b:00007f623553e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.371068][ T9064] RAX: ffffffffffffffda RBX: 00007f62349b5fa0 RCX: 00007f623478e929 [ 206.371084][ T9064] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000d [ 206.371097][ T9064] RBP: 00007f623553e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.371109][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.371121][ T9064] R13: 0000000000000000 R14: 00007f62349b5fa0 R15: 00007ffe272375c8 [ 206.371154][ T9064] [ 206.720177][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.980'. [ 206.751435][ T9069] vlan0: entered promiscuous mode [ 206.829911][ T9069] !: entered promiscuous mode [ 207.033107][ T9081] FAULT_INJECTION: forcing a failure. [ 207.033107][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.061743][ T9081] CPU: 1 UID: 0 PID: 9081 Comm: syz.0.984 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 207.061775][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.061787][ T9081] Call Trace: [ 207.061796][ T9081] [ 207.061804][ T9081] dump_stack_lvl+0x189/0x250 [ 207.061843][ T9081] ? __pfx____ratelimit+0x10/0x10 [ 207.061869][ T9081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.061902][ T9081] ? __pfx__printk+0x10/0x10 [ 207.061925][ T9081] ? __might_fault+0xb0/0x130 [ 207.061968][ T9081] should_fail_ex+0x414/0x560 [ 207.062001][ T9081] _copy_from_user+0x2d/0xb0 [ 207.062023][ T9081] generic_map_update_batch+0x572/0x7f0 [ 207.062059][ T9081] ? __pfx_generic_map_update_batch+0x10/0x10 [ 207.062080][ T9081] ? __fget_files+0x2a/0x420 [ 207.062119][ T9081] ? __pfx_generic_map_update_batch+0x10/0x10 [ 207.062139][ T9081] bpf_map_do_batch+0x369/0x5f0 [ 207.062187][ T9081] __sys_bpf+0x384/0x860 [ 207.062214][ T9081] ? __pfx___sys_bpf+0x10/0x10 [ 207.062254][ T9081] ? ksys_write+0x22a/0x250 [ 207.062283][ T9081] ? __pfx_ksys_write+0x10/0x10 [ 207.062306][ T9081] ? rcu_is_watching+0x15/0xb0 [ 207.062344][ T9081] __x64_sys_bpf+0x7c/0x90 [ 207.062368][ T9081] do_syscall_64+0xfa/0x3b0 [ 207.062393][ T9081] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.062417][ T9081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.062437][ T9081] ? clear_bhb_loop+0x60/0xb0 [ 207.062463][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.062482][ T9081] RIP: 0033:0x7fc89d58e929 [ 207.062500][ T9081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.062517][ T9081] RSP: 002b:00007fc89e386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.062539][ T9081] RAX: ffffffffffffffda RBX: 00007fc89d7b5fa0 RCX: 00007fc89d58e929 [ 207.062553][ T9081] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 207.062566][ T9081] RBP: 00007fc89e386090 R08: 0000000000000000 R09: 0000000000000000 [ 207.062578][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.062590][ T9081] R13: 0000000000000000 R14: 00007fc89d7b5fa0 R15: 00007ffff80ad478 [ 207.062621][ T9081] [ 207.129369][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 207.332939][ T9084] hsr_slave_0: left promiscuous mode [ 207.340859][ T9084] hsr_slave_1: left promiscuous mode [ 207.472355][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 207.638015][ T9104] netlink: 'syz.1.992': attribute type 2 has an invalid length. [ 207.649160][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 207.689027][ T9105] netlink: 'syz.4.991': attribute type 10 has an invalid length. [ 207.700061][ T9111] netlink: 'syz.0.993': attribute type 5 has an invalid length. [ 207.718077][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 207.875854][ T9113] vxcan5: entered allmulticast mode [ 208.131229][ T9127] FAULT_INJECTION: forcing a failure. [ 208.131229][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.148350][ T9127] CPU: 1 UID: 0 PID: 9127 Comm: syz.4.1000 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 208.148378][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.148390][ T9127] Call Trace: [ 208.148399][ T9127] [ 208.148407][ T9127] dump_stack_lvl+0x189/0x250 [ 208.148445][ T9127] ? __pfx____ratelimit+0x10/0x10 [ 208.148469][ T9127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.148501][ T9127] ? __pfx__printk+0x10/0x10 [ 208.148523][ T9127] ? __might_fault+0xb0/0x130 [ 208.148566][ T9127] should_fail_ex+0x414/0x560 [ 208.148598][ T9127] _copy_from_user+0x2d/0xb0 [ 208.148620][ T9127] generic_map_update_batch+0x51b/0x7f0 [ 208.148655][ T9127] ? __pfx_generic_map_update_batch+0x10/0x10 [ 208.148676][ T9127] ? __fget_files+0x2a/0x420 [ 208.148715][ T9127] ? __pfx_generic_map_update_batch+0x10/0x10 [ 208.148735][ T9127] bpf_map_do_batch+0x369/0x5f0 [ 208.148776][ T9127] __sys_bpf+0x384/0x860 [ 208.148805][ T9127] ? __pfx___sys_bpf+0x10/0x10 [ 208.148864][ T9127] ? ksys_write+0x22a/0x250 [ 208.148894][ T9127] ? __pfx_ksys_write+0x10/0x10 [ 208.148919][ T9127] ? rcu_is_watching+0x15/0xb0 [ 208.148959][ T9127] __x64_sys_bpf+0x7c/0x90 [ 208.148982][ T9127] do_syscall_64+0xfa/0x3b0 [ 208.149008][ T9127] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.149033][ T9127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.149054][ T9127] ? clear_bhb_loop+0x60/0xb0 [ 208.149080][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.149100][ T9127] RIP: 0033:0x7f6c96d8e929 [ 208.149119][ T9127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.149137][ T9127] RSP: 002b:00007f6c97b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.149159][ T9127] RAX: ffffffffffffffda RBX: 00007f6c96fb5fa0 RCX: 00007f6c96d8e929 [ 208.149174][ T9127] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 208.149188][ T9127] RBP: 00007f6c97b87090 R08: 0000000000000000 R09: 0000000000000000 [ 208.149201][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.149213][ T9127] R13: 0000000000000000 R14: 00007f6c96fb5fa0 R15: 00007ffc3ed648d8 [ 208.149246][ T9127] [ 208.408132][ T9129] __nla_validate_parse: 1 callbacks suppressed [ 208.408145][ T9129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1001'. [ 208.580184][ T9137] gretap0: entered promiscuous mode [ 208.585919][ T9137] macsec1: entered promiscuous mode [ 208.594993][ T9137] gretap0: left promiscuous mode [ 208.635777][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 208.661021][ T9140] netlink: 'syz.0.1006': attribute type 10 has an invalid length. [ 208.756663][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'. [ 208.766236][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'. [ 208.787405][ T9144] ip6gretap0: entered promiscuous mode [ 208.798942][ T9144] syz_tun: entered promiscuous mode [ 209.011493][ T9160] FAULT_INJECTION: forcing a failure. [ 209.011493][ T9160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.063850][ T9160] CPU: 1 UID: 0 PID: 9160 Comm: syz.0.1013 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 209.063881][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.063894][ T9160] Call Trace: [ 209.063902][ T9160] [ 209.063911][ T9160] dump_stack_lvl+0x189/0x250 [ 209.063949][ T9160] ? __pfx____ratelimit+0x10/0x10 [ 209.063975][ T9160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.064008][ T9160] ? __pfx__printk+0x10/0x10 [ 209.064030][ T9160] ? __might_fault+0xb0/0x130 [ 209.064073][ T9160] should_fail_ex+0x414/0x560 [ 209.064105][ T9160] _copy_from_user+0x2d/0xb0 [ 209.064127][ T9160] generic_map_update_batch+0x572/0x7f0 [ 209.064163][ T9160] ? __pfx_generic_map_update_batch+0x10/0x10 [ 209.064184][ T9160] ? __fget_files+0x2a/0x420 [ 209.064223][ T9160] ? __pfx_generic_map_update_batch+0x10/0x10 [ 209.064243][ T9160] bpf_map_do_batch+0x369/0x5f0 [ 209.064278][ T9160] __sys_bpf+0x384/0x860 [ 209.064306][ T9160] ? __pfx___sys_bpf+0x10/0x10 [ 209.064346][ T9160] ? ksys_write+0x22a/0x250 [ 209.064375][ T9160] ? __pfx_ksys_write+0x10/0x10 [ 209.064400][ T9160] ? rcu_is_watching+0x15/0xb0 [ 209.064437][ T9160] __x64_sys_bpf+0x7c/0x90 [ 209.064462][ T9160] do_syscall_64+0xfa/0x3b0 [ 209.064487][ T9160] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.064511][ T9160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.064531][ T9160] ? clear_bhb_loop+0x60/0xb0 [ 209.064556][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.064575][ T9160] RIP: 0033:0x7fc89d58e929 [ 209.064594][ T9160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.064612][ T9160] RSP: 002b:00007fc89e386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.064634][ T9160] RAX: ffffffffffffffda RBX: 00007fc89d7b5fa0 RCX: 00007fc89d58e929 [ 209.064649][ T9160] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 209.064663][ T9160] RBP: 00007fc89e386090 R08: 0000000000000000 R09: 0000000000000000 [ 209.064676][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.064688][ T9160] R13: 0000000000000000 R14: 00007fc89d7b5fa0 R15: 00007ffff80ad478 [ 209.064726][ T9160] [ 209.420195][ T9168] FAULT_INJECTION: forcing a failure. [ 209.420195][ T9168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.438632][ T9168] CPU: 1 UID: 0 PID: 9168 Comm: syz.3.1016 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 209.438661][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.438680][ T9168] Call Trace: [ 209.438688][ T9168] [ 209.438697][ T9168] dump_stack_lvl+0x189/0x250 [ 209.438735][ T9168] ? __pfx____ratelimit+0x10/0x10 [ 209.438760][ T9168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.438793][ T9168] ? __pfx__printk+0x10/0x10 [ 209.438815][ T9168] ? __might_fault+0xb0/0x130 [ 209.438859][ T9168] should_fail_ex+0x414/0x560 [ 209.438891][ T9168] _copy_from_user+0x2d/0xb0 [ 209.438913][ T9168] kstrtouint_from_user+0xc4/0x170 [ 209.438945][ T9168] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 209.438994][ T9168] proc_fail_nth_write+0x88/0x240 [ 209.439016][ T9168] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.439044][ T9168] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.439067][ T9168] vfs_write+0x27e/0xa90 [ 209.439105][ T9168] ? __pfx_vfs_write+0x10/0x10 [ 209.439134][ T9168] ? __fget_files+0x2a/0x420 [ 209.439169][ T9168] ? __fget_files+0x3a0/0x420 [ 209.439199][ T9168] ? __fget_files+0x2a/0x420 [ 209.439239][ T9168] ksys_write+0x145/0x250 [ 209.439269][ T9168] ? __pfx_ksys_write+0x10/0x10 [ 209.439293][ T9168] ? rcu_is_watching+0x15/0xb0 [ 209.439330][ T9168] ? do_syscall_64+0xbe/0x3b0 [ 209.439360][ T9168] do_syscall_64+0xfa/0x3b0 [ 209.439385][ T9168] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.439410][ T9168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.439430][ T9168] ? clear_bhb_loop+0x60/0xb0 [ 209.439456][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.439476][ T9168] RIP: 0033:0x7f28bfb8d3df [ 209.439494][ T9168] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 209.439512][ T9168] RSP: 002b:00007f28c0972030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 209.439533][ T9168] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f28bfb8d3df [ 209.439548][ T9168] RDX: 0000000000000001 RSI: 00007f28c09720a0 RDI: 0000000000000004 [ 209.439560][ T9168] RBP: 00007f28c0972090 R08: 0000000000000000 R09: 0000000000000000 [ 209.439573][ T9168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 209.439585][ T9168] R13: 0000000000000000 R14: 00007f28bfdb5fa0 R15: 00007ffc8578f4e8 [ 209.439619][ T9168] [ 210.072899][ T9185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1021'. [ 210.205647][ T9193] xt_hashlimit: size too large, truncated to 1048576 [ 210.535837][ T9206] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1028'. [ 210.541918][ T9198] lo speed is unknown, defaulting to 1000 [ 210.590347][ T9198] lo speed is unknown, defaulting to 1000 [ 211.023925][ T9225] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 211.041862][ T9225] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1036'. [ 211.152418][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 211.176676][ T9231] netlink: 'syz.4.1039': attribute type 29 has an invalid length. [ 211.187793][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 211.223548][ T9235] netlink: 'syz.0.1040': attribute type 7 has an invalid length. [ 211.236854][ T9235] netlink: 'syz.0.1040': attribute type 8 has an invalid length. [ 211.434992][ T9247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1042'. [ 211.648829][ T9204] Bluetooth: MGMT ver 1.23 [ 211.765788][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.774620][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 211.780787][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 211.787469][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 212.452387][ T9273] netlink: 'syz.3.1051': attribute type 5 has an invalid length. [ 212.726408][ T9281] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 212.908815][ T9299] netlink: 'syz.2.1057': attribute type 10 has an invalid length. [ 213.144985][ T9312] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.521783][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.880864][ T9345] netlink: 'syz.0.1070': attribute type 4 has an invalid length. [ 213.900086][ T9347] __nla_validate_parse: 6 callbacks suppressed [ 213.900105][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 213.935675][ T5904] lo speed is unknown, defaulting to 1000 [ 213.942788][ T9347] netlink: 'syz.3.1071': attribute type 10 has an invalid length. [ 213.949260][ T9345] netlink: 'syz.0.1070': attribute type 4 has an invalid length. [ 213.950852][ T5904] sz1: Port: 1 Link DOWN [ 213.984208][ T5884] lo speed is unknown, defaulting to 1000 [ 213.990191][ T5884] sz1: Port: 1 Link ACTIVE [ 213.990204][ T44] lo speed is unknown, defaulting to 1000 [ 214.125435][ T9354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'. [ 214.549723][ T30] audit: type=1800 audit(1749067008.496:4): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1078" name=25705320202020 dev="tmpfs" ino=1037 res=0 errno=0 [ 214.595009][ T30] audit: type=1804 audit(1749067008.526:5): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1078" name=2F6E6577726F6F742F3230302F25705320202020 dev="tmpfs" ino=1037 res=1 errno=0 [ 214.725439][ T9378] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1081'. [ 214.825782][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 215.133225][ T89] lo speed is unknown, defaulting to 1000 [ 215.166000][ T89] lo speed is unknown, defaulting to 1000 [ 215.172283][ T5884] lo speed is unknown, defaulting to 1000 [ 215.591811][ T9402] block nbd0: server does not support multiple connections per device. [ 215.605805][ T9402] block nbd0: shutting down sockets [ 215.632774][ T30] audit: type=1107 audit(1749067009.576:6): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ĢE' [ 216.032887][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 216.043104][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 216.127277][ T9426] lo speed is unknown, defaulting to 1000 [ 216.137817][ T9426] lo speed is unknown, defaulting to 1000 [ 216.390134][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 216.447509][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 216.481779][ T9446] validate_nla: 3 callbacks suppressed [ 216.481797][ T9446] netlink: 'syz.2.1101': attribute type 3 has an invalid length. [ 216.545167][ T9443] bridge_slave_1: left allmulticast mode [ 216.572616][ T9443] bridge_slave_1: left promiscuous mode [ 216.591892][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.620399][ T9443] bridge_slave_0: left allmulticast mode [ 216.632707][ T9443] bridge_slave_0: left promiscuous mode [ 216.638478][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.011107][ T9465] FAULT_INJECTION: forcing a failure. [ 217.011107][ T9465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.090648][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.2.1106 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 217.090680][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.090693][ T9465] Call Trace: [ 217.090701][ T9465] [ 217.090710][ T9465] dump_stack_lvl+0x189/0x250 [ 217.090750][ T9465] ? __pfx____ratelimit+0x10/0x10 [ 217.090776][ T9465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.090810][ T9465] ? __pfx__printk+0x10/0x10 [ 217.090833][ T9465] ? __might_fault+0xb0/0x130 [ 217.090877][ T9465] should_fail_ex+0x414/0x560 [ 217.090910][ T9465] _copy_from_user+0x2d/0xb0 [ 217.090932][ T9465] generic_map_update_batch+0x51b/0x7f0 [ 217.090966][ T9465] ? __pfx_generic_map_update_batch+0x10/0x10 [ 217.090987][ T9465] ? __fget_files+0x2a/0x420 [ 217.091026][ T9465] ? __pfx_generic_map_update_batch+0x10/0x10 [ 217.091046][ T9465] bpf_map_do_batch+0x369/0x5f0 [ 217.091081][ T9465] __sys_bpf+0x384/0x860 [ 217.091109][ T9465] ? __pfx___sys_bpf+0x10/0x10 [ 217.091151][ T9465] ? ksys_write+0x22a/0x250 [ 217.091181][ T9465] ? __pfx_ksys_write+0x10/0x10 [ 217.091213][ T9465] ? rcu_is_watching+0x15/0xb0 [ 217.091252][ T9465] __x64_sys_bpf+0x7c/0x90 [ 217.091277][ T9465] do_syscall_64+0xfa/0x3b0 [ 217.091302][ T9465] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.091327][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.091347][ T9465] ? clear_bhb_loop+0x60/0xb0 [ 217.091373][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.091394][ T9465] RIP: 0033:0x7f659638e929 [ 217.091413][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.091432][ T9465] RSP: 002b:00007f6597228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.091455][ T9465] RAX: ffffffffffffffda RBX: 00007f65965b5fa0 RCX: 00007f659638e929 [ 217.091471][ T9465] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 217.091485][ T9465] RBP: 00007f6597228090 R08: 0000000000000000 R09: 0000000000000000 [ 217.091503][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.091516][ T9465] R13: 0000000000000000 R14: 00007f65965b5fa0 R15: 00007ffd8bc98b38 [ 217.091548][ T9465] [ 217.719734][ T9488] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 217.965755][ T9502] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1115'. [ 218.250680][ T9510] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1118'. [ 218.463647][ T9510] wireguard0: entered promiscuous mode [ 218.478563][ T9510] wireguard0: entered allmulticast mode [ 218.704349][ C0] hrtimer: interrupt took 57508122 ns [ 293.509086][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.547938][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.554303][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.561466][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 398.568503][ C1] rcu: 0-...!: (1 ticks this GP) idle=6acc/1/0x4000000000000000 softirq=38431/38431 fqs=0 [ 398.579222][ C1] rcu: (detected by 1, t=10502 jiffies, g=31065, q=1006 ncpus=2) [ 398.587076][ C1] Sending NMI from CPU 1 to CPUs 0: [ 398.587135][ C0] NMI backtrace for cpu 0 [ 398.587159][ C0] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 398.587181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.587199][ C0] RIP: 0010:rb_erase+0x3e6/0xe60 [ 398.587232][ C0] Code: 4d 85 ed 75 7b 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 ba fa c3 f6 4d 8b 2c 24 41 83 e5 01 49 f7 dd 4d 21 fd eb 75 <48> 89 d8 48 c1 e8 03 80 3c 28 00 0f 84 a5 05 00 00 48 89 df e8 81 [ 398.587249][ C0] RSP: 0018:ffffc90000007ca8 EFLAGS: 00000046 [ 398.587265][ C0] RAX: 1ffff1100943be68 RBX: ffff8880b8627c10 RCX: dffffc0000000000 [ 398.587279][ C0] RDX: 0000000000010000 RSI: ffff8880b8627c10 RDI: ffff88804a1df348 [ 398.587292][ C0] RBP: dffffc0000000000 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 398.587305][ C0] R10: dffffc0000000000 R11: fffffbfff1f41637 R12: ffff88804a1df340 [ 398.587318][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 398.587329][ C0] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 398.587343][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.587355][ C0] CR2: 00007f837ea00218 CR3: 000000000df36000 CR4: 00000000003526f0 [ 398.587370][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.587381][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.587392][ C0] Call Trace: [ 398.587399][ C0] [ 398.587413][ C0] timerqueue_del+0xae/0x100 [ 398.587443][ C0] __hrtimer_run_queues+0x364/0xc60 [ 398.587479][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 398.587504][ C0] ? read_tsc+0x9/0x20 [ 398.587529][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 398.587570][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 398.587599][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 398.587620][ C0] [ 398.587626][ C0] [ 398.587633][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.587651][ C0] RIP: 0010:pfn_valid+0x26/0x490 [ 398.587677][ C0] Code: 90 90 90 90 55 41 57 41 56 41 55 41 54 53 49 89 fe e8 3e ba 91 ff e9 f3 03 00 00 e8 34 ba 91 ff 49 bc 00 00 00 00 00 fc ff df 24 04 00 00 e8 20 ba 91 ff 48 c7 c0 60 d4 ac 99 48 c1 e8 03 42 [ 398.587692][ C0] RSP: 0018:ffffc9000454f338 EFLAGS: 00000293 [ 398.587707][ C0] RAX: ffffffff822e44ce RBX: 1ffffd400026ac23 RCX: ffff88807e00bc00 [ 398.587720][ C0] RDX: 0000000000000000 RSI: 000000000004d584 RDI: 0000000400000000 [ 398.587731][ C0] RBP: ffffc9000454f670 R08: ffffea0001356107 R09: 1ffffd400026ac20 [ 398.587745][ C0] R10: dffffc0000000000 R11: fffff9400026ac21 R12: dffffc0000000000 [ 398.587758][ C0] R13: dffffc0000000000 R14: 000000000004d584 R15: 800000004d584007 [ 398.587776][ C0] ? pfn_valid+0x42e/0x490 [ 398.587804][ C0] ? pfn_valid+0x42e/0x490 [ 398.587836][ C0] page_table_check_clear+0x21/0x700 [ 398.587862][ C0] ? vm_normal_page+0xb7/0x230 [ 398.587881][ C0] unmap_page_range+0x32fd/0x4580 [ 398.587899][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 398.587944][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 398.587965][ C0] ? unmap_single_vma+0x1b2/0x2a0 [ 398.587987][ C0] unmap_vmas+0x25d/0x3c0 [ 398.588008][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 398.588040][ C0] exit_mmap+0x245/0xba0 [ 398.588070][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 398.588095][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 398.588126][ C0] ? __pfx_exit_aio+0x10/0x10 [ 398.588154][ C0] ? uprobe_clear_state+0x274/0x290 [ 398.588179][ C0] __mmput+0x118/0x420 [ 398.588206][ C0] exit_mm+0x1da/0x2c0 [ 398.588225][ C0] ? __pfx_exit_mm+0x10/0x10 [ 398.588246][ C0] ? rcu_is_watching+0x15/0xb0 [ 398.588273][ C0] do_exit+0x864/0x2550 [ 398.588290][ C0] ? __lock_acquire+0xab9/0xd20 [ 398.588317][ C0] ? do_raw_spin_lock+0x121/0x290 [ 398.588335][ C0] ? __pfx_do_exit+0x10/0x10 [ 398.588354][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 398.588381][ C0] do_group_exit+0x21c/0x2d0 [ 398.588400][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.588422][ C0] get_signal+0x1286/0x1340 [ 398.588458][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 398.588479][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 398.588503][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 398.588533][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 398.588558][ C0] exit_to_user_mode_loop+0x75/0x110 [ 398.588580][ C0] do_syscall_64+0x2bd/0x3b0 [ 398.588602][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.588621][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.588638][ C0] ? clear_bhb_loop+0x60/0xb0 [ 398.588658][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.588675][ C0] RIP: 0033:0x7fc89d5c11e5 [ 398.588690][ C0] Code: Unable to access opcode bytes at 0x7fc89d5c11bb. [ 398.588699][ C0] RSP: 002b:00007ffff80ad790 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 398.588716][ C0] RAX: fffffffffffffdfc RBX: 0000000000000283 RCX: 00007fc89d5c11e5 [ 398.588728][ C0] RDX: 00007ffff80ad7d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.588739][ C0] RBP: 00007ffff80ad83c R08: 0000000000000000 R09: 0000000000000000 [ 398.588749][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000e5 [ 398.588760][ C0] R13: 0000000000000018 R14: 000000000003555c R15: 00007ffff80ad890 [ 398.588781][ C0] [ 398.589127][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g31065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 399.113711][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=10385 [ 399.121716][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g31065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 399.133117][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 399.143107][ C1] rcu: RCU grace-period kthread stack dump: [ 399.149012][ C1] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 399.160974][ C1] Call Trace: [ 399.164280][ C1] [ 399.167241][ C1] __schedule+0x16f5/0x4d00 [ 399.171794][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 399.177028][ C1] ? schedule+0x165/0x360 [ 399.181388][ C1] ? __lock_acquire+0xab9/0xd20 [ 399.186278][ C1] ? __pfx___schedule+0x10/0x10 [ 399.191189][ C1] ? schedule+0x91/0x360 [ 399.195463][ C1] schedule+0x165/0x360 [ 399.199649][ C1] schedule_timeout+0x12b/0x270 [ 399.204542][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 399.209972][ C1] ? __pfx_process_timeout+0x10/0x10 [ 399.215376][ C1] ? prepare_to_swait_event+0x341/0x380 [ 399.220965][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 399.225852][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.231093][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 399.236067][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 399.241385][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 399.246622][ C1] ? finish_swait+0xcd/0x1f0 [ 399.251246][ C1] rcu_gp_kthread+0x99/0x390 [ 399.255870][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 399.261119][ C1] ? __kthread_parkme+0x7b/0x200 [ 399.266109][ C1] ? __kthread_parkme+0x1a1/0x200 [ 399.271181][ C1] kthread+0x70e/0x8a0 [ 399.275287][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 399.280523][ C1] ? __pfx_kthread+0x10/0x10 [ 399.285147][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.290376][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.295607][ C1] ? __pfx_kthread+0x10/0x10 [ 399.300227][ C1] ret_from_fork+0x3fc/0x770 [ 399.304868][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 399.310021][ C1] ? __switch_to_asm+0x39/0x70 [ 399.314816][ C1] ? __switch_to_asm+0x33/0x70 [ 399.319605][ C1] ? __pfx_kthread+0x10/0x10 [ 399.324325][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.329137][ C1]