last executing test programs: 10.496731919s ago: executing program 2 (id=1700): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, r6, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 7.198872522s ago: executing program 3 (id=1710): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) 7.021169857s ago: executing program 3 (id=1712): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x5, [@struct={0x9, 0x4, 0x0, 0x4, 0x0, 0x6, [{0x9, 0x1, 0x7}, {0x8, 0x4, 0xffff7fff}, {0x0, 0x3, 0xfffffffe}, {0xb, 0x0, 0xf}]}, @datasec={0x7, 0x1, 0x0, 0xf, 0x2, [{0x5, 0xcbd3, 0x6}], "fa9b"}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @const={0x6, 0x0, 0x0, 0xa, 0x2}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @fwd={0xb}]}, {0x0, [0x30, 0x21, 0x30]}}, &(0x7f0000000240)=""/206, 0xa5, 0xce, 0x1, 0xfffffffc, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xd1, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1a, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2f63cfd8}}, @map_fd={0x18, 0xb}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @alu={0x4, 0x1, 0xb, 0xb, 0x0, 0x40, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000500)='GPL\x00', 0x2e5, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x4, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x1, 0x2, 0xa, 0x5}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pS \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xa, 0x2, 0x5}, 0x10, r2, r3, 0x1, &(0x7f0000000840)=[0x1, r4, r5], &(0x7f0000000880)=[{0x4, 0x3, 0xc, 0x4}], 0x10, 0x2, @void, @value}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000980)={0x3, 0xf, "d44f58a3b16bd66191a525188eeccb"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x1, '\x00', r7, r1, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000a80)=@name, &(0x7f0000000ac0)=0x10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r10, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x84084) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000cc0)=0x1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@ifindex=r7, 0xb, 0x0, 0x1, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)={@ifindex=r7, r6, 0x3, 0x0, r3, @void, @value=r3, @void, @void, r13}, 0x20) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r14, &(0x7f0000001440)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000000ec0)=@newchain={0x510, 0x64, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x10}, {0x8, 0x2}, {0x8, 0x3}}, [@f_tcindex={{0xc}, {0x458, 0x2, [@TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd, 0x5}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xa768}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x8001, 0x80000001, 0xf, 0xfff, 0x42, 0x8c, 0x7fffffff, 0x1, 0x7fffffff, 0xd, 0x6, 0x5, 0x5, 0x2, 0x6, 0x4, 0x4f3, 0x2, 0xf0000000, 0x3, 0x9, 0x10001, 0x1, 0x7, 0x101, 0x722, 0xd, 0x9, 0x1, 0x73, 0xed50, 0xd, 0xffffffff, 0x7, 0x0, 0x1, 0xffffffff, 0x5, 0x80000000, 0xd, 0x4, 0x400, 0x8001, 0xdf7e, 0x4, 0xb, 0xe, 0x931e, 0x8, 0x8, 0x401, 0x1, 0x38, 0x0, 0x400, 0x7, 0x3, 0x2, 0x3ff, 0x9, 0x32, 0x4, 0xd, 0x3, 0x2a, 0x6, 0x401, 0x5, 0xfffffff4, 0xaaa, 0x9, 0x7, 0x101, 0x9, 0x400, 0x1, 0x8, 0x5, 0x800, 0xfffffff7, 0x4, 0x6, 0x6, 0xffffffd7, 0x7fff, 0x6d, 0x7fae, 0x8, 0xbc7a, 0x7524, 0x6, 0x8f33, 0x6, 0x0, 0x0, 0x10001, 0xfffffff8, 0x5, 0x2, 0xbc4, 0xfffffff8, 0x4, 0x2, 0xff, 0xd3e5, 0x10, 0x80000001, 0xda, 0x8cf0, 0xa14, 0x0, 0x5d, 0x10, 0x8, 0x2, 0x28, 0x1, 0x7, 0x4c, 0x8, 0x358, 0x6, 0x1, 0x10000, 0x8, 0xb3, 0xb4a, 0xffffffa5, 0x6, 0x6, 0x2457, 0x601c, 0x7, 0x5, 0x91c, 0x7f, 0x7, 0x4, 0x0, 0x6, 0x9, 0x5, 0x6, 0x8, 0x7fff, 0x4, 0x4, 0x5, 0x1ea, 0x4, 0x2, 0x2e000000, 0x5, 0x5, 0x2, 0x483, 0x1, 0x6, 0x7, 0x9623, 0x2, 0x4, 0x5, 0x1ba, 0x1, 0xcde, 0x9, 0xa, 0x4, 0xff, 0xa, 0x200, 0xc0000, 0x5, 0x3ff, 0x6, 0x3, 0xfffffff8, 0xbe, 0x7, 0x7, 0x9, 0x5, 0x80000001, 0x6, 0x6, 0x4c71, 0x7, 0x2, 0x3, 0x4, 0x7fffffff, 0xb, 0x21, 0xfde, 0x47b5de28, 0x9, 0x9, 0x10001, 0x5, 0x8, 0x7fffffff, 0x1, 0x1, 0x5, 0x8, 0xfffffffe, 0x8, 0xffffff00, 0x19fb, 0x9, 0x9, 0x7fff, 0x3, 0x7, 0x4, 0x1, 0x7, 0x1b7d1ac5, 0x200, 0x0, 0x2, 0x5, 0x7, 0x1ff, 0x5, 0xcb42, 0x1d2, 0x2, 0xe42, 0x4, 0x1, 0x3, 0x1, 0x2, 0x5, 0x3, 0xe03, 0x8001, 0xffff, 0x1, 0x6, 0xfffffeff, 0x7, 0x8, 0xc, 0x8, 0x6, 0x5, 0x8, 0x10000, 0x3, 0x6, 0xfffff000, 0x3]}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xc1b0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xff}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x7ee1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xe}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x5}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x6e0d}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x95d5}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1000}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010102}]}}, @f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xd}}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}, @f_rsvp={{0x9}, {0x4}}]}, 0x510}, 0x1, 0x0, 0x0, 0x4008014}, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000001480)={@private1, 0x8, r7}) sendmsg$nl_route(r14, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=@ipv6_getnetconf={0x44, 0x52, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x21a72695}, @NETCONFA_IFINDEX={0x8, 0x1, r12}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x64}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8a7}, @NETCONFA_FORWARDING={0x8, 0x2, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8015) bind$phonet(r3, &(0x7f0000001600)={0x23, 0xe, 0x2, 0x7}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001640)) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r15, 0x89f1, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'syztnl1\x00', r7, 0x29, 0x4d, 0x9, 0xc, 0x2, @private2, @loopback, 0x8000, 0x80, 0x2, 0x4000}}) sendmsg$inet(r14, &(0x7f0000001b40)={&(0x7f0000001740)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001780)="9b1719aee974e232afebae9f69250f0bfe141209b7aee7770931b8b7635e3d588ce33b62ecbc46cd31c48a9b3804dd0b9839f9a568196e01c3410635c0fdaeafd41e579c7443124cd8a8be40cc0443ec83efad492307744b095cade384eef85b9d7627938cee8d3c37be760327ff3a7109f4adc03b26cac5a870e3331a450de3e123868a2089d00dd3439c6bfaa2d7ae9948ee39c6e67d00123ba6d98866b90ffbc9d7a35871dd22ad28f5370dbcaf605aacfb88be8555828c1fb1ddd225703fc7cd07ddff649650a5", 0xc9}, {&(0x7f0000001880)="22365605083ef1caa6fbfa1c544340f9e94e0b42cf8106df6143d98da9312bfcb158993ab7cc67687a63429a2cbd9469cfa7f5c7927769b14ddb60c4ebdfa4abdc1a0810dbcbfe8dc4cd56550965c167c4c026d74590b00eaaa7a2dce9a026882bdd558475c38b079618b8103ec7031d02efba51f21ba552e1e89253f620651da255dc6793a9886ad1a24525ebeb1a826f46bdaee3072cd2cfe7ec89a49b9b124774c695f535d9eddf3e8b31940efa078166489304d229a073347f", 0xbb}, {&(0x7f0000001940)="65d0959dfbab837bb0224dab6ad4d7a1a01e052d4bc7eb7cae19ced0e6bb9b61b5b201b2b3835059c34d", 0x2a}, {&(0x7f0000001980)="6cb1f95fc233aac3014fe2cdbd4f4d476b93ffc98eca07464f22d3ca97cd49d9779cada27ae3adf20b01b77b70125c6439b50ddbf015a72e4389a8b94c1f965408258fe247c801c59955fa8e5fb8ff47c0", 0x51}], 0x4, &(0x7f0000001a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xaf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xe0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001bc0)={0x3, &(0x7f0000001b80)=[{0x1ff, 0xff, 0xeb, 0x77d4}, {0x8, 0x34, 0x2, 0x10000}, {0x7f, 0x2, 0x20, 0x10}]}, 0x10) 6.973126064s ago: executing program 2 (id=1714): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, r7, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x10, 0x3, 0xc) write(r8, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 6.814883639s ago: executing program 3 (id=1715): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, r7, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x10, 0x3, 0xc) write(r8, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 3.627512128s ago: executing program 4 (id=1720): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffd, 0x7f, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffd, 0x7f, 0x1}) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123300000000009500000000000000326403af62f27cb9eac5f9c1315dc328df8945328e9dad5cf6cf55c5ba7dd030dc395637020634d69244c76d25cd90d9c1f0e48ffd6a85b236db905deb4f1cd729c22901d95906b952947b7caea262c46940608f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123300000000009500000000000000326403af62f27cb9eac5f9c1315dc328df8945328e9dad5cf6cf55c5ba7dd030dc395637020634d69244c76d25cd90d9c1f0e48ffd6a85b236db905deb4f1cd729c22901d95906b952947b7caea262c46940608f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080)) (async) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/126, 0x7e}], 0x1}, 0x5cac}], 0x1, 0x2000, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB='\x00'/12, @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000180)=0x5, 0x4) r8 = socket$inet(0x2, 0x2, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000000)={r8, r10}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="020000000200f8c12e000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 3.542499683s ago: executing program 3 (id=1722): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) 3.47784784s ago: executing program 2 (id=1724): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 2) 3.448595155s ago: executing program 3 (id=1725): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, r7, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x10, 0x3, 0xc) write(r8, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 2.980544972s ago: executing program 4 (id=1727): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x80, 0x0}, 0x140008d0) 2.621096961s ago: executing program 1 (id=1731): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing={0x32, 0x0, 0x818e298d77c49daf}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000004c0)={{0x0}, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x3, 0xfffff00c}, {0x6, 0x0, 0x7}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x100, 0x70bd27, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x1, 0x10000000, 0xfffffffd, 0x2}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x804) 2.619969087s ago: executing program 4 (id=1732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.280038184s ago: executing program 1 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) (fail_nth: 2) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.217121527s ago: executing program 0 (id=1734): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'ip6erspan0\x00'}, 0x18) sendmsg$can_bcm(r1, 0x0, 0x20000000) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000040003000400028004000180"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$alg(r0, &(0x7f0000001cc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="4dcf32cd1a86bcc79f9481ca9ac5", 0xe}, {&(0x7f0000000140)="25325d538441150d5026c29878db8df69122839de22930405a", 0x19}, {&(0x7f0000000300)="39fe60d36aef4f7a7a1c3d0f164abb9c4c500e9ab5ffbfe723972c570d9958af91ea8f87556224edb90e2c80e2eee9d06b2debe5a51ebfa42f5599ca7dfdfde632bbfb3ed78be7a7467522193b8d8900a4ab81d491dff2fab76642ad3c0f7738a6598ae28ebdccb3a3930e866cbac37ecd5e", 0x72}, {&(0x7f0000000180)='R4,', 0x3}, {&(0x7f00000003c0)="edd0182c24428328a57b64118188c78114019704af58628522fb67f5ed678a556527d4acc109d3a8f797ff87a0efc6a1e63a1d2c98519983390764bcdd9e35e2c2112fa3bacd4d3149466be718934c5c1d743b91d26f9060564e62ac78254ab3d3b27d67056e37bbc9fb5c115b8860cbb852fe1868ff01c97f94380ad5fcfd4f359977958707586025bf48f788375897c9836a1fa2442baa928f7d59a9e6320d913be9867362e5fd9db097", 0xab}, {&(0x7f00000004c0)="bd91b3c39406088f409066a5d963af690d41f265188745cb97c2d39d8e435b084d215c8a5ffb0d560b891a7103f7dcf97593afda7dbc6b0fdce560f4928ec4eca5c7c84bdccd5d1258a84db86dc60963ab6a9c63d8d829a5da94b3e25169a08580fbb0bcbc817aa102daa69fcc0e9c03f87c27daf0e13f837095eeab8d58adb06db2b0307e860404995b5e629a69b8d3c8efe299e70e5f11a9074e30c6badc8f99fdf1e22c05a6ff42e3ca83883fb8286f43352f0d5da9be80060e154d2eef135e78ac153921487bb3d72c01d9058d88175bf135d8751ca6a29fdd609a831d1d271a2d342bd36f", 0xe7}, {&(0x7f00000005c0)="b60a06fb4f5cd35944e27c7cf7f7ec283fcccb455d825c1b0f2686f33051a4cda912973f20b5a07ca23288722f7a3610064f950f2c0097946d200f4994bfb9d0493e99e0d80903d1d51d269198121a16ae78b08b5585aa92e3fe184ceb5d989beb19a77b63937bef6fdbe37e126bcc86cb070c2a424a7eaa5ae493ddc3cac71ebf85d158834ee4e894a35f8fd2f2d2c40f92c5a873e1395b78a8c197712df25ae6ba33d3691aa51ee6105969c130", 0xae}, {&(0x7f0000000680)="3d61ca5fef6a3ad7d501f8e4247ac818535fc9a062aebfca3a88c254136e3d568ce971b5ae1d47a0a906dcf4429fe8bcbe4f69adda598e5f6cfb4e66549306473c495112b7039160d6e75ff49ef6c99a85e69dbc53380a27d1bfd87b4337beb60e6a2bbb97545c919c7a460061168e6d6a765dd5dbdc05014233172f19d817308e1034f0b716afd2", 0x88}], 0x8, &(0x7f00000007c0)}, 0x4000000) r9 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000040)="0f968cb5b9a089ec5afc9111baa8a9615ad581d6a080842e1f0bd24979e0f7b73fec7204c457c329fc95bc6c53527f8cdda8e91bad67cdde499681dede393e", &(0x7f00000007c0)=""/232, 0x4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.77155672s ago: executing program 0 (id=1735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}]}, 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.584375928s ago: executing program 0 (id=1736): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) 1.538331663s ago: executing program 1 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x0) 1.508385065s ago: executing program 0 (id=1738): socket(0x11, 0x800000003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002100000000000000000000000000ccb00a689efbd8d4841b9c960000"], 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) shutdown(r3, 0x0) write(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x1e4, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x4}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x80}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa6, 0x7, 0x36a, 0x8, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0x2, 0xe, 0x8, 0x2, 0x1e74, 0x0, 0x7}}, {0x12, 0x2, [0x800, 0xc8e9, 0x800, 0x4, 0x3, 0x0, 0x9]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0xa, 0x84c9, 0x0, 0xf, 0x7, 0x8}}]}}]}, 0x1e4}}, 0x4004) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x24, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}]}}]}}]}, 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.44781845s ago: executing program 2 (id=1739): unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x28, 0x40088, 0x13}, 0x2c) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000200000000000000"], 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x3, 0x7, {{0x2d, 0x4, 0x2, 0x20, 0xb4, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x44, 0xd5, 0x1, 0x2, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x40350a85}, {@broadcast, 0x4}, {@broadcast, 0x6be6}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010100, 0x200}, {@broadcast, 0x6}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x23, 0x4a, [@broadcast, @private=0xa010100, @empty, @multicast1, @initdev={0xac, 0x1e, 0x41, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0xc}]}, @generic={0x88, 0x12, "f09bb294f54606f03ee0f45573fc0296"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3a, [@remote, @rand_addr=0x64010100, @loopback, @local, @remote, @multicast2, @empty, @empty]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', r7, @fallback=0x7, 0x0, 0x0, 0x0, 0xfffffffffffffdb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859adaa133792a97f447af93a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x5, 0x12, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 1.283681557s ago: executing program 1 (id=1740): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x20000000) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, 0x0, 0x8000) r4 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0xfffffffffffffe93, 0xc, [@union={0xc, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000480)=""/135, 0x3c, 0x87, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(r1, &(0x7f0000001cc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r5, 0x0, 0x0) write$ppp(r5, &(0x7f0000000200)="bc72", 0x2) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="4dcf32cd1a86bcc79f9481ca9ac5", 0xe}, {&(0x7f0000000140)="25325d538441150d5026c29878db8df69122839de22930405a", 0x19}, {&(0x7f0000000300)="39fe60d36aef4f7a7a1c3d0f164abb9c4c500e9ab5ffbfe723972c570d9958af91ea8f87556224edb90e2c80e2eee9d06b2debe5a51ebfa42f5599ca7dfdfde632bbfb3ed78be7a7467522193b8d8900a4ab81d491dff2fab76642ad3c0f7738a6598ae28ebdccb3a3930e866cbac37ecd5e", 0x72}, {&(0x7f0000000180)='R4,', 0x3}, {&(0x7f00000003c0)="edd0182c24428328a57b64118188c78114019704af58628522fb67f5ed678a556527d4acc109d3a8f797ff87a0efc6a1e63a1d2c98519983390764bcdd9e35e2c2112fa3bacd4d3149466be718934c5c1d743b91d26f9060564e62ac78254ab3d3b27d67056e37bbc9fb5c115b8860cbb852fe1868ff01c97f94380ad5fcfd4f359977958707586025bf48f788375897c9836a1fa2442baa928f7d59a9e6320d913be9867362e5fd9db097", 0xab}, {&(0x7f00000004c0)="bd91b3c39406088f409066a5d963af690d41f265188745cb97c2d39d8e435b084d215c8a5ffb0d560b891a7103f7dcf97593afda7dbc6b0fdce560f4928ec4eca5c7c84bdccd5d1258a84db86dc60963ab6a9c63d8d829a5da94b3e25169a08580fbb0bcbc817aa102daa69fcc0e9c03f87c27daf0e13f837095eeab8d58adb06db2b0307e860404995b5e629a69b8d3c8efe299e70e5f11a9074e30c6badc8f99fdf1e22c05a6ff42e3ca83883fb8286f43352f0d5da9be80060e154d2eef135e78ac153921487bb3d72c01d9058d88175bf135d8751ca6a29fdd609a831d1d271a2d342bd36f", 0xe7}, {&(0x7f00000005c0)="b60a06fb4f5cd35944e27c7cf7f7ec283fcccb455d825c1b0f2686f33051a4cda912973f20b5a07ca23288722f7a3610064f950f2c0097946d200f4994bfb9d0493e99e0d80903d1d51d269198121a16ae78b08b5585aa92e3fe184ceb5d989beb19a77b63937bef6fdbe37e126bcc86cb070c2a424a7eaa5ae493ddc3cac71ebf85d158834ee4e894a35f8fd2f2d2c40f92c5a873e1395b78a8c197712df25ae6ba33d3691aa51ee6105969c130", 0xae}, {&(0x7f0000000680)="3d61ca5fef6a3ad7d501f8e4247ac818535fc9a062aebfca3a88c254136e3d568ce971b5ae1d47a0a906dcf4429fe8bcbe4f69adda598e5f6cfb4e66549306473c495112b7039160d6e75ff49ef6c99a85e69dbc53380a27d1bfd87b4337beb60e6a2bbb97545c919c7a460061168e6d6a765dd5dbdc05014233172f19d817308e1034f0b716afd2", 0x88}], 0x8, &(0x7f00000007c0)}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3406d300", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088008000c8004000780"], 0x34}}, 0x0) r8 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.280794149s ago: executing program 4 (id=1741): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) (fail_nth: 2) 763.039888ms ago: executing program 4 (id=1742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"}) (async) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 581.070095ms ago: executing program 1 (id=1743): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x4}, {0x0, 0x7}}}, 0x24}}, 0x4004) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 553.504152ms ago: executing program 0 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x0) (fail_nth: 2) 476.01552ms ago: executing program 2 (id=1745): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 332.343559ms ago: executing program 2 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a4fdd99a98e6dfb2d0000020000000900020073797a32000000000900010073797a30000000000c000340000000000000000214000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x40480d0}, 0x0) 144.318727ms ago: executing program 0 (id=1747): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(0x3) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r0, 0xc, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x14, &(0x7f00000002c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @exit, @map_idx_val={0x18, 0x97d9b7f19ca07e13, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x7ff, 0x2b, &(0x7f00000003c0)=""/43, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x10, 0x5e0}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x2, 0x2, 0x2, 0x6}, {0x0, 0x5, 0x10, 0xa}, {0x5, 0x4, 0x3, 0x5}, {0x5, 0x3, 0xa, 0x2}, {0x1, 0x2, 0xd, 0x4}, {0x4, 0x2, 0x5, 0xb}, {0x2, 0x2, 0xc, 0x9}, {0x5, 0x3, 0xa}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=0x1, r4, 0x2e, 0x4, r5, @void, @value=r7, @void, @void, r6}, 0x20) 87.728715ms ago: executing program 4 (id=1748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@random="f9ff481200", @remote, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1}, {0x0, 0x4e26, 0x7e, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @val=0x80}, "ea2bb5d7b8952c226dafbbcdc5beff8df7430753c746200a4038d3507d7d900b2597c32dee5cc7b3d6aa6591afb7396cc0bf1f5be8843623592fd80af2804e2984c651c1e459f8b321bbedca65d3027362e7c526ce8e37b1b9b0b2344e61c8f4a100eec89bb7ff66190e9a13917b"}}}}}}}, 0xac) 66.155037ms ago: executing program 1 (id=1749): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$inet(r4, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001380)="ba8c851d2f22a6d3b11e5fa1992b7428eeff427d961881f291172704adb0b580af63fceb5b2cb5be4391e514ef488fd3482052234f5d162f03f0de4d7255195f83516fc38555671fe8f22fed498906a2926973ea0bb44b1b7ba3ed92177161db3c268ae599985c3f1c778fe015a8b64583cb0c04c160e7d8cb3d2f35ed714627736d1b688f663fdcf5f32e5439d6d1c4dbda0e5273a0b581e588d6224365cea1989c2aa20e88ecc4006f22895c028a2e9a5d5fd51dfdcc29a4a1f11aec17746a9bd17d707e25b530ae00857ccc63fdc66f7f22d79f", 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001480)="1502352d19370723bbd2593780c4da31ae6dfbb465ef7c9d225836185f11a494dc10fbd2cbf9bed01574d66202238137ca2857a92363a6e7d19c76cedae06078484d4c54985c507fa6f6f2934f09d87c2f41e61b0c3b732cd5bf1ece1e37d2dd2004996a386f768099c106aececcb1462cbe0370df80f4d7c7f6896b046b0393425c518df98d11", 0x87}, {&(0x7f0000001540)="08a16007512aacb3c59d127bce31f1236bf1a908e74bbd0b6b6065740378d07dd3b834858e75872d6c1463e0868be8d7b9f3e0aaa1ade2f62bf043c404759e0161690153f0215d7a797b9f4dbd0f0c97bf06918b5a2d0dc31bf7efdc6f4e78151d7189ce6ca867c73a0659151911f754919175c500251982689400", 0x7b}, {&(0x7f00000015c0)="65b615db6257d670c306b53645b37d82c618240fce1fd6afec3bf218e48896504f40b8d8b28a86cd83db527868e37bb1622c9bda10b3d902e62e2442054f19652a63818bbd226f33c069a06fa3f573808397d43f05a52338ff80b1aaa162a29315c7ef0c18a83e746f89778376ecbb92fc3daf98c53f2e8d835248e90977dc33f33f866980ad2249160d69564f5a75e962e3aa3d8fd24e789e19ce2e2c78baab26e451bf2a7fdaab27981abdd4062a845d5853f6fc9a532f0e24580e22ebcc4a8c57f94250e335d0473f55010d41902e1a3ff27c5618c85bbd2ff7eaf9c503edbe0c1d3cd3f588209c8ce5f297fca3394cb78d79015c5d", 0xf7}, {&(0x7f00000016c0)="113c53af8ce141a83ee35edb", 0xc}, {&(0x7f0000001700)="634126b4bd98d7b1cca378efb63ea230443814f0c691828f8ebdeea59298aeeba0a766538c4473bad6472daffa49355fb6604fb4c01435796be7490cbd69f843e584b5a8bf8ccde156d4262db0a98536f696b9a6aa192f52dccf5403e0d7d1a5fb3417991effc4eb4ce04f1dbd3c1a846b5b427d34bdd007d29fb2bc4776f9b5dafb6c4cb05eaed06a0e604ae1266b96636201b3a0d91bdf5477fa46674e7dba8535da699fa58f6b45b370f6fc5dfaafc003522d4b86c446640721", 0xbb}, {&(0x7f00000017c0)="80ed1194378e16c2944115c2feae5476782d99cc4f8e1ed836aa22e05383a843740e82cc0965c8f7f51129fec644ba40462c08ed4b679a7574b6206fc1fe90d2e5945f21741cda3a74b9fb9b1f8e00892383e75384ebb93336d91336a5cce0d79b1ca9bfd862add69e1a4f954e79ffbfa67107989743c3dbbc88d748d0fc1ba2b0fd99bcb964ced10c8a0afc5d0e0ce3837aac7984e6ceb6f283f732367e04206d8cec2cdb6c232de04776ec9d74da90c30d9813189f2f6f4e04a42492daa48abff6d7e3c425f8e51ffda2acb065954a5d27da1d00bb6515891252f5cb83ba14e7", 0xe1}, {&(0x7f00000018c0)="05f726205cb3b4947ca0699f4efd6b2fd73d0c33ba575b51cb183471cc842743793ee8de8201f6fccd61f03a64d236fa9dae6b4ab6d3c87f43abd19d8d8696f01ba903083a1a545f6f25d221e18eddb1f98220731ed963e828451f6667de46c5c151911fd3cd0a166c5c52c0e10aed6e4360e825c6ccb33eec03c3d0d163d9e861c57be74d76cb8f8cbe943b94cb1494b89d669b94aa378b684301205c3256f92f94e6fc28741650492d598395bd0ed51068f1af13b4c8ee5a38509a9fe6bcd32d427fa567be276f21ecbca750b2c4011da2", 0xd2}], 0x7}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="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", 0xab9}, {0x0}], 0x2}}], 0x3, 0x8010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0xdb, 0x100, 0x7, 0x410004, r2}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6d616e676865000000000000000000000000000000000000000000000000000005"], 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="faffffffffffffff0000002000000000000000008318336c6072ccc103ddeffef949035dc40000040000000000"], 0x48) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) bind$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 0s ago: executing program 3 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) kernel console output (not intermixed with test programs): `syz.4.1503'. [ 650.611531][T14403] lo: left promiscuous mode [ 650.655901][T14403] tunl0: left promiscuous mode [ 650.664958][T14403] gre0: left promiscuous mode [ 650.669971][T14403] gretap0: left promiscuous mode [ 650.682345][T14403] erspan0: left promiscuous mode [ 650.687491][T14403] ip_vti0: left promiscuous mode [ 650.697477][T14403] ip6_vti0: left promiscuous mode [ 650.703108][T14403] sit0: left promiscuous mode [ 650.708071][T14403] ip6tnl0: left promiscuous mode [ 650.713571][T14403] ip6gre0: left promiscuous mode [ 650.728920][T14403] syz_tun: left promiscuous mode [ 650.749224][T14403] ip6gretap0: left promiscuous mode [ 650.769453][T14403] bridge0: left promiscuous mode [ 650.789113][T14403] bond0: left promiscuous mode [ 650.797631][T14409] netlink: 'syz.3.1506': attribute type 27 has an invalid length. [ 650.862062][T14403] team0: left promiscuous mode [ 650.867401][T14403] !: left promiscuous mode [ 650.877231][T14403] nlmon0: left promiscuous mode [ 650.893872][T14403] caif0: left promiscuous mode [ 650.898842][T14403] batadv0: left promiscuous mode [ 650.918577][T14403] vxcan0: left promiscuous mode [ 650.934652][T14403] vxcan1: left promiscuous mode [ 650.949921][T14403] veth0: left promiscuous mode [ 651.072129][T14403] veth1: left promiscuous mode [ 651.087359][T14403] wg0: left promiscuous mode [ 651.098770][T14403] wg1: left promiscuous mode [ 651.114149][T14403] wg2: left promiscuous mode [ 651.126315][T14403] veth0_to_bridge: left promiscuous mode [ 651.141144][T14403] veth1_to_bridge: left promiscuous mode [ 651.158665][T14403] veth0_to_bond: left promiscuous mode [ 651.175023][T14403] bond_slave_0: left promiscuous mode [ 651.189803][T14403] veth1_to_bond: left promiscuous mode [ 651.206602][T14403] bond_slave_1: left promiscuous mode [ 651.224041][T14403] veth0_to_team: left promiscuous mode [ 651.236223][T14403] team_slave_0: left promiscuous mode [ 651.263949][T14403] veth1_to_team: left promiscuous mode [ 651.273221][T14403] team_slave_1: left promiscuous mode [ 651.289072][T14403] veth0_to_batadv: left promiscuous mode [ 651.308339][T14403] batadv_slave_0: left promiscuous mode [ 651.319424][T14403] veth1_to_batadv: left promiscuous mode [ 651.336502][T14403] batadv_slave_1: left promiscuous mode [ 651.350669][T14403] xfrm0: left promiscuous mode [ 651.365209][T14403] veth0_to_hsr: left promiscuous mode [ 651.378903][T14403] veth1_to_hsr: left promiscuous mode [ 651.396376][T14403] hsr0: left promiscuous mode [ 651.404923][T14403] veth1_virt_wifi: left promiscuous mode [ 651.411202][T14403] veth0_virt_wifi: left promiscuous mode [ 651.418986][T14403] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 651.429330][T14403] vlan0: left promiscuous mode [ 651.437096][T14403] vlan1: left promiscuous mode [ 651.444893][T14403] macvlan0: left promiscuous mode [ 651.450261][T14403] macvlan1: left promiscuous mode [ 651.458658][T14403] ipvlan0: left promiscuous mode [ 651.466460][T14403] ipvlan1: left promiscuous mode [ 651.473747][T14403] macvtap0: left promiscuous mode [ 651.479108][T14403] macsec0: left promiscuous mode [ 651.486925][T14403] geneve0: left promiscuous mode [ 651.493913][T14403] geneve1: left promiscuous mode [ 651.499180][T14403] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 651.509730][T14403] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 651.518903][T14403] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 651.528793][T14403] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 651.538028][T14403] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 651.547620][T14403] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 651.556310][T14403] syztnl2: left promiscuous mode [ 651.561740][T14403] ip6erspan0: left promiscuous mode [ 651.567172][T14403] gtp0: left promiscuous mode [ 652.097577][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1507'. [ 652.834745][T14428] lo: left promiscuous mode [ 652.839480][T14428] tunl0: left promiscuous mode [ 652.860694][T14428] gre0: left promiscuous mode [ 652.870556][T14428] gretap0: left promiscuous mode [ 652.877932][T14428] erspan0: left promiscuous mode [ 652.887528][T14428] ip_vti0: left promiscuous mode [ 652.894855][T14428] ip6_vti0: left promiscuous mode [ 652.900056][T14428] sit0: left promiscuous mode [ 652.905697][T14428] ip6tnl0: left promiscuous mode [ 652.911182][T14428] ip6gre0: left promiscuous mode [ 652.917661][T14428] syz_tun: left promiscuous mode [ 652.923087][T14428] ip6gretap0: left promiscuous mode [ 652.928583][T14428] bridge0: left promiscuous mode [ 652.933994][T14428] bond0: left promiscuous mode [ 652.939090][T14428] team0: left promiscuous mode [ 652.944296][T14428] !: left promiscuous mode [ 652.949251][T14428] nlmon0: left promiscuous mode [ 652.954657][T14428] caif0: left promiscuous mode [ 652.959796][T14428] batadv0: left promiscuous mode [ 652.965152][T14428] vxcan0: left promiscuous mode [ 652.970339][T14428] vxcan1: left promiscuous mode [ 652.975677][T14428] veth0: left promiscuous mode [ 652.980785][T14428] veth1: left promiscuous mode [ 652.986062][T14428] wg0: left promiscuous mode [ 652.991015][T14428] wg1: left promiscuous mode [ 652.996026][T14428] wg2: left promiscuous mode [ 653.000794][T14428] veth0_to_bridge: left promiscuous mode [ 653.007011][T14428] bridge_slave_0: left promiscuous mode [ 653.013196][T14428] veth1_to_bridge: left promiscuous mode [ 653.019197][T14428] bridge_slave_1: left promiscuous mode [ 653.025160][T14428] veth0_to_bond: left promiscuous mode [ 653.030993][T14428] bond_slave_0: left promiscuous mode [ 653.036916][T14428] veth1_to_bond: left promiscuous mode [ 653.051584][T14428] bond_slave_1: left promiscuous mode [ 653.067518][T14428] veth0_to_team: left promiscuous mode [ 653.075102][T14428] team_slave_0: left promiscuous mode [ 653.090962][T14428] veth1_to_team: left promiscuous mode [ 653.098945][T14428] team_slave_1: left promiscuous mode [ 653.121728][T14428] veth0_to_batadv: left promiscuous mode [ 653.137959][T14428] batadv_slave_0: left promiscuous mode [ 653.149222][T14428] veth1_to_batadv: left promiscuous mode [ 653.172068][T14438] can: request_module (can-proto-3) failed. [ 653.197216][T14428] batadv_slave_1: left promiscuous mode [ 653.221614][T14428] xfrm0: left promiscuous mode [ 653.241736][T14428] veth0_to_hsr: left promiscuous mode [ 653.267755][T14428] veth1_to_hsr: left promiscuous mode [ 653.292018][T14428] hsr0: left promiscuous mode [ 653.301696][T14428] veth1_virt_wifi: left promiscuous mode [ 653.317806][T14428] veth0_virt_wifi: left promiscuous mode [ 653.327931][T14428] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 653.336880][T14428] vlan0: left promiscuous mode [ 653.342301][T14428] vlan1: left promiscuous mode [ 653.347487][T14428] macvlan0: left promiscuous mode [ 653.353275][T14428] macvlan1: left promiscuous mode [ 653.358556][T14428] ipvlan0: left promiscuous mode [ 653.364073][T14428] ipvlan1: left promiscuous mode [ 653.369549][T14428] macvtap0: left promiscuous mode [ 653.375201][T14428] macsec0: left promiscuous mode [ 653.380402][T14428] geneve0: left promiscuous mode [ 653.386636][T14428] geneve1: left promiscuous mode [ 653.392798][T14428] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 653.400142][T14428] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 653.410860][T14428] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 653.419145][T14428] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 653.429378][T14428] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 653.437278][T14428] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 653.444576][T14428] syztnl2: left promiscuous mode [ 653.621722][T14442] lo: entered promiscuous mode [ 653.626855][T14442] tunl0: entered promiscuous mode [ 653.637228][T14442] gre0: entered promiscuous mode [ 653.642618][T14442] gretap0: entered promiscuous mode [ 653.663369][T14442] erspan0: entered promiscuous mode [ 653.679393][T14442] ip_vti0: entered promiscuous mode [ 653.687030][T14442] ip6_vti0: entered promiscuous mode [ 653.697133][T14442] sit0: entered promiscuous mode [ 653.708976][T14442] ip6tnl0: entered promiscuous mode [ 653.719044][T14442] ip6gre0: entered promiscuous mode [ 653.729161][T14442] syz_tun: entered promiscuous mode [ 653.741541][T14442] ip6gretap0: entered promiscuous mode [ 653.747184][T14442] bridge0: entered promiscuous mode [ 653.767040][T14442] bond0: entered promiscuous mode [ 653.782140][T14442] bond_slave_0: entered promiscuous mode [ 653.787994][T14442] bond_slave_1: entered promiscuous mode [ 653.811957][T14442] team0: entered promiscuous mode [ 653.817065][T14442] team_slave_0: entered promiscuous mode [ 653.837389][T14442] team_slave_1: entered promiscuous mode [ 653.873689][T14442] !: entered promiscuous mode [ 653.878723][T14442] nlmon0: entered promiscuous mode [ 653.887602][T14442] caif0: entered promiscuous mode [ 653.899967][T14442] batadv0: entered promiscuous mode [ 653.914456][T14442] vxcan0: entered promiscuous mode [ 653.931699][T14442] vxcan1: entered promiscuous mode [ 653.940530][T14442] veth0: entered promiscuous mode [ 653.951692][T14442] veth1: entered promiscuous mode [ 653.962906][T14442] wg0: entered promiscuous mode [ 653.981755][T14442] wg1: entered promiscuous mode [ 653.986793][T14442] wg2: entered promiscuous mode [ 654.003135][T14442] veth0_to_bridge: entered promiscuous mode [ 654.016350][T14442] veth1_to_bridge: entered promiscuous mode [ 654.033178][T14442] veth0_to_bond: entered promiscuous mode [ 654.044497][T14442] veth1_to_bond: entered promiscuous mode [ 654.050874][T14442] veth0_to_team: entered promiscuous mode [ 654.057561][T14442] veth1_to_team: entered promiscuous mode [ 654.069710][T14442] veth0_to_batadv: entered promiscuous mode [ 654.084393][T14442] batadv_slave_0: entered promiscuous mode [ 654.102284][T14442] veth1_to_batadv: entered promiscuous mode [ 654.118717][T14442] batadv_slave_1: entered promiscuous mode [ 654.153109][T14442] xfrm0: entered promiscuous mode [ 654.158355][T14442] veth0_to_hsr: entered promiscuous mode [ 654.164670][T14442] veth1_to_hsr: entered promiscuous mode [ 654.176382][T14442] hsr0: entered promiscuous mode [ 654.185006][T14442] veth1_virt_wifi: entered promiscuous mode [ 654.192463][T14454] can: request_module (can-proto-3) failed. [ 654.207206][T14442] veth0_virt_wifi: entered promiscuous mode [ 654.215383][T14442] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 654.223481][T14442] vlan0: entered promiscuous mode [ 654.228991][T14442] vlan1: entered promiscuous mode [ 654.235162][T14442] macvlan0: entered promiscuous mode [ 654.240687][T14442] macvlan1: entered promiscuous mode [ 654.246695][T14442] ipvlan0: entered promiscuous mode [ 654.252289][T14442] ipvlan1: entered promiscuous mode [ 654.257911][T14442] macvtap0: entered promiscuous mode [ 654.265052][T14442] macsec0: entered promiscuous mode [ 654.270724][T14442] geneve0: entered promiscuous mode [ 654.276369][T14442] geneve1: entered promiscuous mode [ 654.282001][T14442] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 654.289654][T14442] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 654.301192][T14442] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 654.309259][T14442] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 654.318071][T14442] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 654.325563][T14442] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 654.332807][T14442] syztnl2: entered promiscuous mode [ 654.338272][T14442] ip6erspan0: entered promiscuous mode [ 654.344170][T14442] gtp0: entered promiscuous mode [ 654.383907][T14447] lo: entered promiscuous mode [ 654.389261][T14447] tunl0: entered promiscuous mode [ 654.395288][T14447] gre0: entered promiscuous mode [ 654.400554][T14447] gretap0: entered promiscuous mode [ 654.406456][T14447] erspan0: entered promiscuous mode [ 654.414040][T14447] ip_vti0: entered promiscuous mode [ 654.419583][T14447] ip6_vti0: entered promiscuous mode [ 654.425881][T14447] sit0: entered promiscuous mode [ 654.431058][T14447] ip6tnl0: entered promiscuous mode [ 654.436927][T14447] ip6gre0: entered promiscuous mode [ 654.444808][T14447] syz_tun: entered promiscuous mode [ 654.450337][T14447] ip6gretap0: entered promiscuous mode [ 654.456700][T14447] bridge0: entered promiscuous mode [ 654.462499][T14447] bond0: entered promiscuous mode [ 654.467721][T14447] team0: entered promiscuous mode [ 654.473163][T14447] !: entered promiscuous mode [ 654.478207][T14447] nlmon0: entered promiscuous mode [ 654.483844][T14447] caif0: entered promiscuous mode [ 654.489081][T14447] batadv0: entered promiscuous mode [ 654.494746][T14447] vxcan0: entered promiscuous mode [ 654.500155][T14447] vxcan1: entered promiscuous mode [ 654.506611][T14447] veth0: entered promiscuous mode [ 654.512148][T14447] veth1: entered promiscuous mode [ 654.517527][T14447] wg0: entered promiscuous mode [ 654.525487][T14447] wg1: entered promiscuous mode [ 654.532641][T14447] wg2: entered promiscuous mode [ 654.537836][T14447] veth0_to_bridge: entered promiscuous mode [ 654.547949][T14447] bridge_slave_0: entered promiscuous mode [ 654.555822][T14447] veth1_to_bridge: entered promiscuous mode [ 654.565217][T14447] bridge_slave_1: entered promiscuous mode [ 654.571717][T14447] veth0_to_bond: entered promiscuous mode [ 654.577885][T14447] bond_slave_0: entered promiscuous mode [ 654.584161][T14447] veth1_to_bond: entered promiscuous mode [ 654.590297][T14447] bond_slave_1: entered promiscuous mode [ 654.596400][T14447] veth0_to_team: entered promiscuous mode [ 654.602600][T14447] team_slave_0: entered promiscuous mode [ 654.608489][T14447] veth1_to_team: entered promiscuous mode [ 654.614709][T14447] team_slave_1: entered promiscuous mode [ 654.620580][T14447] veth0_to_batadv: entered promiscuous mode [ 654.626860][T14447] batadv_slave_0: entered promiscuous mode [ 654.632945][T14447] veth1_to_batadv: entered promiscuous mode [ 654.639148][T14447] batadv_slave_1: entered promiscuous mode [ 654.645417][T14447] xfrm0: entered promiscuous mode [ 654.650625][T14447] veth0_to_hsr: entered promiscuous mode [ 654.656797][T14447] veth1_to_hsr: entered promiscuous mode [ 654.662901][T14447] hsr0: entered promiscuous mode [ 654.668188][T14447] veth1_virt_wifi: entered promiscuous mode [ 654.675626][T14447] veth0_virt_wifi: entered promiscuous mode [ 654.685383][T14447] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 654.694327][T14447] vlan0: entered promiscuous mode [ 654.699883][T14447] vlan1: entered promiscuous mode [ 654.709069][T14447] macvlan0: entered promiscuous mode [ 654.715815][T14447] macvlan1: entered promiscuous mode [ 654.721680][T14447] ipvlan0: entered promiscuous mode [ 654.727272][T14447] ipvlan1: entered promiscuous mode [ 654.740893][T14447] macvtap0: entered promiscuous mode [ 654.760521][T14447] macsec0: entered promiscuous mode [ 654.770729][T14447] geneve0: entered promiscuous mode [ 654.777115][T14447] geneve1: entered promiscuous mode [ 654.786466][T14447] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 654.794629][T14447] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 654.808019][T14447] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 654.815925][T14447] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 654.823916][T14447] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 654.831051][T14447] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 654.838639][T14447] syztnl2: entered promiscuous mode [ 655.111340][T14469] netlink: 'syz.3.1517': attribute type 27 has an invalid length. [ 655.512366][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'. [ 655.731416][T14473] lo: entered promiscuous mode [ 655.769268][T14473] tunl0: entered promiscuous mode [ 655.801641][T14473] gre0: entered promiscuous mode [ 655.806923][T14473] gretap0: entered promiscuous mode [ 655.862608][T14473] erspan0: entered promiscuous mode [ 655.881641][T14473] ip_vti0: entered promiscuous mode [ 655.898657][T14473] ip6_vti0: entered promiscuous mode [ 655.911641][T14473] sit0: entered promiscuous mode [ 655.929050][T14473] ip6tnl0: entered promiscuous mode [ 655.949428][T14473] ip6gre0: entered promiscuous mode [ 655.959591][T14473] syz_tun: entered promiscuous mode [ 655.990048][T14473] ip6gretap0: entered promiscuous mode [ 656.000177][T14473] bridge0: entered promiscuous mode [ 656.031010][T14473] bond0: entered promiscuous mode [ 656.036683][T14473] team0: entered promiscuous mode [ 656.060973][T14473] !: entered promiscuous mode [ 656.071180][T14473] nlmon0: entered promiscuous mode [ 656.082865][T14473] caif0: entered promiscuous mode [ 656.108496][T14473] batadv0: entered promiscuous mode [ 656.128802][T14473] vxcan0: entered promiscuous mode [ 656.138945][T14473] vxcan1: entered promiscuous mode [ 656.149092][T14473] veth0: entered promiscuous mode [ 656.162960][T14473] veth1: entered promiscuous mode [ 656.168200][T14473] wg0: entered promiscuous mode [ 656.191546][T14473] wg1: entered promiscuous mode [ 656.201626][T14473] wg2: entered promiscuous mode [ 656.217103][T14473] veth0_to_bridge: entered promiscuous mode [ 656.227236][T14473] bridge_slave_0: entered promiscuous mode [ 656.241582][T14473] veth1_to_bridge: entered promiscuous mode [ 656.257995][T14473] bridge_slave_1: entered promiscuous mode [ 656.275151][T14473] veth0_to_bond: entered promiscuous mode [ 656.301614][T14473] bond_slave_0: entered promiscuous mode [ 656.307463][T14473] veth1_to_bond: entered promiscuous mode [ 656.321573][T14473] bond_slave_1: entered promiscuous mode [ 656.339838][T14473] veth0_to_team: entered promiscuous mode [ 656.356805][T14473] team_slave_0: entered promiscuous mode [ 656.366920][T14473] veth1_to_team: entered promiscuous mode [ 656.385463][T14473] team_slave_1: entered promiscuous mode [ 656.405350][T14473] veth0_to_batadv: entered promiscuous mode [ 656.415584][T14473] batadv_slave_0: entered promiscuous mode [ 656.441741][T14473] veth1_to_batadv: entered promiscuous mode [ 656.458272][T14473] batadv_slave_1: entered promiscuous mode [ 656.468335][T14473] xfrm0: entered promiscuous mode [ 656.479458][T14473] veth0_to_hsr: entered promiscuous mode [ 656.491823][T14473] veth1_to_hsr: entered promiscuous mode [ 656.497916][T14473] hsr0: entered promiscuous mode [ 656.515334][T14473] veth1_virt_wifi: entered promiscuous mode [ 656.531722][T14473] veth0_virt_wifi: entered promiscuous mode [ 656.537989][T14473] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 656.563697][T14473] vlan0: entered promiscuous mode [ 656.569192][T14473] vlan1: entered promiscuous mode [ 656.578557][T14473] macvlan0: entered promiscuous mode [ 656.585541][T14473] macvlan1: entered promiscuous mode [ 656.591052][T14473] ipvlan0: entered promiscuous mode [ 656.600705][T14473] ipvlan1: entered promiscuous mode [ 656.607045][T14473] macvtap0: entered promiscuous mode [ 656.616669][T14473] macsec0: entered promiscuous mode [ 656.622583][T14473] geneve0: entered promiscuous mode [ 656.628052][T14473] geneve1: entered promiscuous mode [ 656.637767][T14473] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 656.645480][T14473] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 656.657020][T14473] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 656.664976][T14473] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 656.676469][T14473] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 656.683998][T14473] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 656.691251][T14473] ip6erspan0: entered promiscuous mode [ 656.695345][T14493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1522'. [ 656.701051][T14473] syztnl2: entered promiscuous mode [ 656.910006][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1519'. [ 656.994617][T14499] netlink: 'syz.4.1523': attribute type 27 has an invalid length. [ 657.015534][T14492] lo: left promiscuous mode [ 657.033953][T14492] tunl0: left promiscuous mode [ 657.071178][T14492] gre0: left promiscuous mode [ 657.076271][T14492] gretap0: left promiscuous mode [ 657.107584][T14492] erspan0: left promiscuous mode [ 657.118826][T14492] ip_vti0: left promiscuous mode [ 657.146448][T14492] ip6_vti0: left promiscuous mode [ 657.175191][T14492] sit0: left promiscuous mode [ 657.264038][T14503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'. [ 657.295969][T14492] ip6tnl0: left promiscuous mode [ 657.301108][T14492] ip6gre0: left promiscuous mode [ 657.570533][T14492] syz_tun: left promiscuous mode [ 657.597262][T14492] ip6gretap0: left promiscuous mode [ 657.608510][T14492] bridge0: left promiscuous mode [ 657.614551][T14492] bond0: left promiscuous mode [ 657.619574][T14492] team0: left promiscuous mode [ 657.661634][T14492] !: left promiscuous mode [ 657.666407][T14492] nlmon0: left promiscuous mode [ 657.701901][T14492] caif0: left promiscuous mode [ 657.706894][T14492] batadv0: left promiscuous mode [ 657.731640][T14492] vxcan0: left promiscuous mode [ 657.736681][T14492] vxcan1: left promiscuous mode [ 657.781786][T14492] veth0: left promiscuous mode [ 657.786809][T14492] veth1: left promiscuous mode [ 657.811575][T14492] wg0: left promiscuous mode [ 657.816424][T14492] wg1: left promiscuous mode [ 657.821202][T14492] wg2: left promiscuous mode [ 657.845726][T14492] veth0_to_bridge: left promiscuous mode [ 657.852793][T14492] bridge_slave_0: left promiscuous mode [ 657.859335][T14492] veth1_to_bridge: left promiscuous mode [ 657.866497][T14492] bridge_slave_1: left promiscuous mode [ 657.873365][T14492] veth0_to_bond: left promiscuous mode [ 657.879111][T14492] bond_slave_0: left promiscuous mode [ 657.889693][T14492] veth1_to_bond: left promiscuous mode [ 658.051593][T14492] bond_slave_1: left promiscuous mode [ 658.057206][T14492] veth0_to_team: left promiscuous mode [ 658.098945][T14492] team_slave_0: left promiscuous mode [ 658.121615][T14492] veth1_to_team: left promiscuous mode [ 658.127323][T14492] team_slave_1: left promiscuous mode [ 658.147424][T14492] veth0_to_batadv: left promiscuous mode [ 658.171647][T14492] batadv_slave_0: left promiscuous mode [ 658.177440][T14492] veth1_to_batadv: left promiscuous mode [ 658.191572][T14492] batadv_slave_1: left promiscuous mode [ 658.197373][T14492] xfrm0: left promiscuous mode [ 658.212373][T14492] veth0_to_hsr: left promiscuous mode [ 658.218095][T14492] veth1_to_hsr: left promiscuous mode [ 658.237296][T14492] hsr0: left promiscuous mode [ 658.248437][T14492] veth1_virt_wifi: left promiscuous mode [ 658.263091][T14492] veth0_virt_wifi: left promiscuous mode [ 658.279407][T14492] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 658.301957][T14492] vlan0: left promiscuous mode [ 658.315830][T14492] vlan1: left promiscuous mode [ 658.326500][T14492] macvlan0: left promiscuous mode [ 658.341733][T14492] macvlan1: left promiscuous mode [ 658.351908][T14492] ipvlan0: left promiscuous mode [ 658.361885][T14492] ipvlan1: left promiscuous mode [ 658.383059][T14492] macvtap0: left promiscuous mode [ 658.388308][T14492] macsec0: left promiscuous mode [ 658.415700][T14492] geneve0: left promiscuous mode [ 658.425022][T14492] geneve1: left promiscuous mode [ 658.430155][T14492] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 658.451645][T14492] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 658.479268][T14492] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 658.489464][T14511] netlink: 'syz.4.1526': attribute type 27 has an invalid length. [ 658.596799][T14492] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 658.611580][T14492] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 658.621652][T14492] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 658.638753][T14492] syztnl2: left promiscuous mode [ 659.092758][T14519] lo: entered promiscuous mode [ 659.098020][T14519] tunl0: entered promiscuous mode [ 659.120659][T14519] gre0: entered promiscuous mode [ 659.136778][T14519] gretap0: entered promiscuous mode [ 659.162678][T14519] erspan0: entered promiscuous mode [ 659.168072][T14519] ip_vti0: entered promiscuous mode [ 659.195942][T14519] ip6_vti0: entered promiscuous mode [ 659.228381][T14519] sit0: entered promiscuous mode [ 659.235451][T14519] ip6tnl0: entered promiscuous mode [ 659.241599][T14519] ip6gre0: entered promiscuous mode [ 659.251614][T14519] syz_tun: entered promiscuous mode [ 659.257152][T14519] ip6gretap0: entered promiscuous mode [ 659.263106][T14519] bridge0: entered promiscuous mode [ 659.268561][T14519] bond0: entered promiscuous mode [ 659.274230][T14519] team0: entered promiscuous mode [ 659.280723][T14519] !: entered promiscuous mode [ 659.286356][T14519] nlmon0: entered promiscuous mode [ 659.292057][T14519] caif0: entered promiscuous mode [ 659.297347][T14519] batadv0: entered promiscuous mode [ 659.304344][T14519] vxcan0: entered promiscuous mode [ 659.314880][T14519] vxcan1: entered promiscuous mode [ 659.320138][T14519] veth0: entered promiscuous mode [ 659.325666][T14519] veth1: entered promiscuous mode [ 659.330920][T14519] wg0: entered promiscuous mode [ 659.336412][T14519] wg1: entered promiscuous mode [ 659.342393][T14519] wg2: entered promiscuous mode [ 659.348521][T14519] veth0_to_bridge: entered promiscuous mode [ 659.355412][T14519] bridge_slave_0: entered promiscuous mode [ 659.362105][T14519] veth1_to_bridge: entered promiscuous mode [ 659.411724][T14519] bridge_slave_1: entered promiscuous mode [ 659.417762][T14519] veth0_to_bond: entered promiscuous mode [ 659.478217][T14519] bond_slave_0: entered promiscuous mode [ 659.495356][T14519] veth1_to_bond: entered promiscuous mode [ 659.513132][T14519] bond_slave_1: entered promiscuous mode [ 659.529207][T14519] veth0_to_team: entered promiscuous mode [ 659.558293][T14519] team_slave_0: entered promiscuous mode [ 659.588038][T14519] veth1_to_team: entered promiscuous mode [ 659.598158][T14519] team_slave_1: entered promiscuous mode [ 659.605837][T14529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1529'. [ 659.613268][T14519] veth0_to_batadv: entered promiscuous mode [ 659.632984][T14519] batadv_slave_0: entered promiscuous mode [ 659.639132][T14519] veth1_to_batadv: entered promiscuous mode [ 659.653158][T14519] batadv_slave_1: entered promiscuous mode [ 659.689836][T14519] xfrm0: entered promiscuous mode [ 659.704154][T14519] veth0_to_hsr: entered promiscuous mode [ 659.718775][T14519] veth1_to_hsr: entered promiscuous mode [ 659.735198][T14519] hsr0: entered promiscuous mode [ 659.740451][T14519] veth1_virt_wifi: entered promiscuous mode [ 659.749209][T14519] veth0_virt_wifi: entered promiscuous mode [ 659.758178][T14519] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 659.768607][T14519] vlan0: entered promiscuous mode [ 659.777188][T14519] vlan1: entered promiscuous mode [ 659.785819][T14519] macvlan0: entered promiscuous mode [ 659.793322][T14519] macvlan1: entered promiscuous mode [ 659.798950][T14519] ipvlan0: entered promiscuous mode [ 659.807241][T14519] ipvlan1: entered promiscuous mode [ 659.815037][T14519] macvtap0: entered promiscuous mode [ 659.820603][T14519] macsec0: entered promiscuous mode [ 659.828994][T14519] geneve0: entered promiscuous mode [ 659.836436][T14519] geneve1: entered promiscuous mode [ 659.844751][T14519] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 659.854651][T14519] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 659.866032][T14519] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 659.876364][T14519] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 659.887284][T14519] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 659.897063][T14519] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 659.907442][T14519] syztnl2: entered promiscuous mode [ 660.112836][T14525] lo: left promiscuous mode [ 660.117611][T14525] tunl0: left promiscuous mode [ 660.131633][T14525] gre0: left promiscuous mode [ 660.133705][T14498] tipc: can't start tipc receive workqueue [ 660.136547][T14525] gretap0: left promiscuous mode [ 660.164538][T14525] erspan0: left promiscuous mode [ 660.169684][T14525] ip_vti0: left promiscuous mode [ 660.241707][T14525] ip6_vti0: left promiscuous mode [ 660.247022][T14525] sit0: left promiscuous mode [ 660.252725][T14525] ip6tnl0: left promiscuous mode [ 660.257867][T14525] ip6gre0: left promiscuous mode [ 660.272253][T14525] syz_tun: left promiscuous mode [ 660.287652][T14525] ip6gretap0: left promiscuous mode [ 660.293683][T14525] bridge0: left promiscuous mode [ 660.298912][T14525] bond0: left promiscuous mode [ 660.309454][T14525] team0: left promiscuous mode [ 660.314865][T14525] !: left promiscuous mode [ 660.321851][T14525] nlmon0: left promiscuous mode [ 660.332130][T14525] caif0: left promiscuous mode [ 660.337093][T14525] batadv0: left promiscuous mode [ 660.355082][T14525] vxcan0: left promiscuous mode [ 660.360107][T14525] vxcan1: left promiscuous mode [ 660.376884][T14525] veth0: left promiscuous mode [ 660.383487][T14525] veth1: left promiscuous mode [ 660.389371][T14525] wg0: left promiscuous mode [ 660.395243][T14525] wg1: left promiscuous mode [ 660.401036][T14525] wg2: left promiscuous mode [ 660.407533][T14525] veth0_to_bridge: left promiscuous mode [ 660.416545][T14525] bridge_slave_0: left promiscuous mode [ 660.423622][T14525] veth1_to_bridge: left promiscuous mode [ 660.438493][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1530'. [ 660.465940][T14525] bridge_slave_1: left promiscuous mode [ 660.475228][T14525] veth0_to_bond: left promiscuous mode [ 660.483238][T14525] bond_slave_0: left promiscuous mode [ 660.490787][T14525] veth1_to_bond: left promiscuous mode [ 660.498942][T14525] bond_slave_1: left promiscuous mode [ 660.681564][T14525] veth0_to_team: left promiscuous mode [ 660.687335][T14525] team_slave_0: left promiscuous mode [ 660.693127][T14525] veth1_to_team: left promiscuous mode [ 660.698772][T14525] team_slave_1: left promiscuous mode [ 660.811693][T14525] veth0_to_batadv: left promiscuous mode [ 660.823837][T14525] batadv_slave_0: left promiscuous mode [ 660.863611][T14525] veth1_to_batadv: left promiscuous mode [ 660.876638][T14525] batadv_slave_1: left promiscuous mode [ 660.896869][T14525] xfrm0: left promiscuous mode [ 660.950256][T14525] veth0_to_hsr: left promiscuous mode [ 661.381935][T14525] veth1_to_hsr: left promiscuous mode [ 661.390311][T14525] hsr0: left promiscuous mode [ 661.400266][T14525] veth1_virt_wifi: left promiscuous mode [ 661.418863][T14525] veth0_virt_wifi: left promiscuous mode [ 661.434213][T14525] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 661.466805][T14525] vlan0: left promiscuous mode [ 661.483751][T14525] vlan1: left promiscuous mode [ 661.488974][T14525] macvlan0: left promiscuous mode [ 661.496363][T14525] macvlan1: left promiscuous mode [ 661.509245][T14525] ipvlan0: left promiscuous mode [ 661.518127][T14525] ipvlan1: left promiscuous mode [ 661.525601][T14525] macvtap0: left promiscuous mode [ 661.530905][T14525] macsec0: left promiscuous mode [ 661.536130][T14525] geneve0: left promiscuous mode [ 661.543824][T14525] geneve1: left promiscuous mode [ 661.549000][T14525] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 661.556008][T14525] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 661.563763][T14525] ip6erspan0: left promiscuous mode [ 661.569074][T14525] netdevsim netdevsim0 eth0: left promiscuous mode [ 661.575799][T14525] netdevsim netdevsim0 eth1: left promiscuous mode [ 661.582598][T14525] netdevsim netdevsim0 eth2: left promiscuous mode [ 661.589231][T14525] netdevsim netdevsim0 eth3: left promiscuous mode [ 661.595940][T14525] syztnl2: left promiscuous mode [ 662.044400][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 662.141662][T14549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1531'. [ 662.386355][T14555] can: request_module (can-proto-3) failed. [ 663.970110][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1537'. [ 664.088876][T14592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1536'. [ 664.192858][T14553] Bluetooth: hci4: command 0x0405 tx timeout [ 665.440790][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 666.520829][T14611] netlink: 'syz.3.1539': attribute type 27 has an invalid length. [ 666.829520][T14614] lo: entered promiscuous mode [ 666.836305][T14614] tunl0: entered promiscuous mode [ 666.852930][T14614] gre0: entered promiscuous mode [ 666.870929][T14614] gretap0: entered promiscuous mode [ 666.894372][T14614] erspan0: entered promiscuous mode [ 666.911248][T14614] ip_vti0: entered promiscuous mode [ 666.917180][T14614] ip6_vti0: entered promiscuous mode [ 666.933790][T14614] sit0: entered promiscuous mode [ 666.938990][T14614] ip6tnl0: entered promiscuous mode [ 666.946747][T14614] ip6gre0: entered promiscuous mode [ 666.955614][T14614] syz_tun: entered promiscuous mode [ 666.961219][T14614] ip6gretap0: entered promiscuous mode [ 666.969250][T14614] bridge0: entered promiscuous mode [ 666.977686][T14614] bond0: entered promiscuous mode [ 666.985256][T14614] team0: entered promiscuous mode [ 666.990692][T14614] !: entered promiscuous mode [ 666.998494][T14614] nlmon0: entered promiscuous mode [ 667.005909][T14614] caif0: entered promiscuous mode [ 667.011198][T14614] batadv0: entered promiscuous mode [ 667.019424][T14614] vxcan0: entered promiscuous mode [ 667.026583][T14614] vxcan1: entered promiscuous mode [ 667.070330][T14614] veth0: entered promiscuous mode [ 667.148726][T14614] veth1: entered promiscuous mode [ 667.206004][T14614] wg0: entered promiscuous mode [ 667.214712][T14614] wg1: entered promiscuous mode [ 667.219879][T14614] wg2: entered promiscuous mode [ 667.226390][T14614] veth0_to_bridge: entered promiscuous mode [ 667.237380][T14614] bridge_slave_0: entered promiscuous mode [ 667.244470][T14614] veth1_to_bridge: entered promiscuous mode [ 667.251039][T14614] bridge_slave_1: entered promiscuous mode [ 667.263928][T14614] veth0_to_bond: entered promiscuous mode [ 667.270007][T14614] bond_slave_0: entered promiscuous mode [ 667.277930][T14614] veth1_to_bond: entered promiscuous mode [ 667.286334][T14614] bond_slave_1: entered promiscuous mode [ 667.296577][T14614] veth0_to_team: entered promiscuous mode [ 667.305687][T14614] team_slave_0: entered promiscuous mode [ 667.313929][T14614] veth1_to_team: entered promiscuous mode [ 667.319987][T14614] team_slave_1: entered promiscuous mode [ 667.328481][T14614] veth0_to_batadv: entered promiscuous mode [ 667.336574][T14614] batadv_slave_0: entered promiscuous mode [ 667.345409][T14614] veth1_to_batadv: entered promiscuous mode [ 667.353339][T14614] batadv_slave_1: entered promiscuous mode [ 667.359480][T14614] xfrm0: entered promiscuous mode [ 667.367494][T14614] veth0_to_hsr: entered promiscuous mode [ 667.375665][T14614] veth1_to_hsr: entered promiscuous mode [ 667.386716][T14614] hsr0: entered promiscuous mode [ 667.393771][T14614] veth1_virt_wifi: entered promiscuous mode [ 667.400064][T14614] veth0_virt_wifi: entered promiscuous mode [ 667.409363][T14614] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 667.419145][T14614] vlan0: entered promiscuous mode [ 667.436144][T14614] vlan1: entered promiscuous mode [ 667.442176][T14614] macvlan0: entered promiscuous mode [ 667.447790][T14614] macvlan1: entered promiscuous mode [ 667.453427][T14614] ipvlan0: entered promiscuous mode [ 667.458951][T14614] ipvlan1: entered promiscuous mode [ 667.465446][T14614] macvtap0: entered promiscuous mode [ 667.471023][T14614] macsec0: entered promiscuous mode [ 667.476659][T14614] geneve0: entered promiscuous mode [ 667.482203][T14614] geneve1: entered promiscuous mode [ 667.487755][T14614] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 667.495386][T14614] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 667.503020][T14614] ip6erspan0: entered promiscuous mode [ 667.508611][T14614] netdevsim netdevsim0 eth0: entered promiscuous mode [ 667.515700][T14614] netdevsim netdevsim0 eth1: entered promiscuous mode [ 667.523349][T14614] netdevsim netdevsim0 eth2: entered promiscuous mode [ 667.530413][T14614] netdevsim netdevsim0 eth3: entered promiscuous mode [ 667.538286][T14614] syztnl2: entered promiscuous mode [ 667.682164][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1542'. [ 668.233674][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 668.581783][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1545'. [ 669.202682][T14652] can: request_module (can-proto-3) failed. [ 669.701839][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 669.952248][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1548'. [ 671.525797][T14683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1549'. [ 672.250833][T14691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1550'. [ 673.546894][T14705] can: request_module (can-proto-3) failed. [ 673.693287][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 674.847646][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 674.902019][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1555'. [ 675.512534][T14747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1557'. [ 676.507080][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 678.014063][T14769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1559'. [ 678.023830][T14760] can: request_module (can-proto-3) failed. [ 678.297577][T14781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1561'. [ 679.035223][T14780] can: request_module (can-proto-3) failed. [ 679.386843][T14793] can: request_module (can-proto-3) failed. [ 679.766883][T14805] netlink: 'syz.3.1565': attribute type 27 has an invalid length. [ 679.980709][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 681.076726][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 681.271170][T14794] warn_alloc: 1 callbacks suppressed [ 681.271198][T14794] syz.4.1564: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 681.346277][T14794] CPU: 0 UID: 0 PID: 14794 Comm: syz.4.1564 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 681.346330][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 681.346354][T14794] Call Trace: [ 681.346363][T14794] [ 681.346373][T14794] dump_stack_lvl+0x189/0x250 [ 681.346415][T14794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.346444][T14794] ? __pfx__printk+0x10/0x10 [ 681.346465][T14794] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 681.346499][T14794] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 681.346534][T14794] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 681.346568][T14794] warn_alloc+0x214/0x310 [ 681.346603][T14794] ? __pfx_warn_alloc+0x10/0x10 [ 681.346641][T14794] ? __get_vm_area_node+0x1c5/0x2d0 [ 681.346666][T14794] ? __get_vm_area_node+0x25a/0x2d0 [ 681.346699][T14794] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 681.346729][T14794] ? __asan_memset+0x22/0x50 [ 681.346776][T14794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 681.346803][T14794] ? __kasan_kmalloc_large+0x1a/0xa0 [ 681.346831][T14794] ? rcu_is_watching+0x15/0xb0 [ 681.346862][T14794] ? hash_ip_create+0x741/0x1410 [ 681.346885][T14794] ? hash_ip_create+0x741/0x1410 [ 681.346904][T14794] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 681.346931][T14794] ? hash_ip_create+0x741/0x1410 [ 681.346954][T14794] ? hash_ip_create+0x6d5/0x1410 [ 681.346980][T14794] hash_ip_create+0x741/0x1410 [ 681.347020][T14794] ? __pfx_hash_ip_create+0x10/0x10 [ 681.347046][T14794] ? __nla_parse+0x40/0x60 [ 681.347069][T14794] ? __pfx_hash_ip_create+0x10/0x10 [ 681.347093][T14794] ip_set_create+0xa94/0x1940 [ 681.347122][T14794] ? ip_set_create+0x4a2/0x1940 [ 681.347163][T14794] ? __pfx_ip_set_create+0x10/0x10 [ 681.347247][T14794] nfnetlink_rcv_msg+0xb4a/0x1130 [ 681.347277][T14794] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 681.347323][T14794] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 681.347380][T14794] ? __lock_acquire+0xaac/0xd20 [ 681.347423][T14794] netlink_rcv_skb+0x219/0x490 [ 681.347446][T14794] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 681.347474][T14794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.347507][T14794] ? apparmor_capable+0x137/0x1b0 [ 681.347535][T14794] ? bpf_lsm_capable+0x9/0x20 [ 681.347562][T14794] ? security_capable+0x7e/0x2e0 [ 681.347589][T14794] nfnetlink_rcv+0x273/0x2530 [ 681.347618][T14794] ? kernel_text_address+0xa5/0xe0 [ 681.347644][T14794] ? __kernel_text_address+0xd/0x40 [ 681.347668][T14794] ? unwind_get_return_address+0x4d/0x90 [ 681.347690][T14794] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 681.347711][T14794] ? arch_stack_walk+0xfc/0x150 [ 681.347747][T14794] ? stack_trace_save+0x9c/0xe0 [ 681.347769][T14794] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 681.347793][T14794] ? stack_depot_save_flags+0x40/0x910 [ 681.347821][T14794] ? kasan_save_track+0x4f/0x80 [ 681.347840][T14794] ? kasan_save_track+0x3e/0x80 [ 681.347868][T14794] ? __lock_acquire+0xaac/0xd20 [ 681.347916][T14794] ? __lock_acquire+0xaac/0xd20 [ 681.347951][T14794] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.347979][T14794] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.347999][T14794] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.348026][T14794] netlink_unicast+0x758/0x8d0 [ 681.348055][T14794] netlink_sendmsg+0x805/0xb30 [ 681.348087][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.348112][T14794] ? aa_sock_msg_perm+0x94/0x160 [ 681.348134][T14794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.348155][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.348183][T14794] __sock_sendmsg+0x219/0x270 [ 681.348217][T14794] ____sys_sendmsg+0x505/0x830 [ 681.348247][T14794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.348281][T14794] ? import_iovec+0x74/0xa0 [ 681.348310][T14794] ___sys_sendmsg+0x21f/0x2a0 [ 681.348337][T14794] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.348398][T14794] ? __fget_files+0x2a/0x420 [ 681.348421][T14794] ? __fget_files+0x3a0/0x420 [ 681.348455][T14794] __x64_sys_sendmsg+0x19b/0x260 [ 681.348482][T14794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.348524][T14794] ? do_syscall_64+0xba/0x210 [ 681.348556][T14794] do_syscall_64+0xf6/0x210 [ 681.348585][T14794] ? clear_bhb_loop+0x45/0xa0 [ 681.348608][T14794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.348626][T14794] RIP: 0033:0x7faa5478e969 [ 681.348644][T14794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.348660][T14794] RSP: 002b:00007faa55642038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.348681][T14794] RAX: ffffffffffffffda RBX: 00007faa549b6160 RCX: 00007faa5478e969 [ 681.348694][T14794] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000006 [ 681.348706][T14794] RBP: 00007faa54810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 681.348718][T14794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.348730][T14794] R13: 0000000000000000 R14: 00007faa549b6160 R15: 00007ffff101c738 [ 681.348760][T14794] [ 681.348768][T14794] Mem-Info: [ 681.793421][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 681.930373][T14794] active_anon:6544 inactive_anon:0 isolated_anon:0 [ 681.930373][T14794] active_file:1416 inactive_file:38545 isolated_file:0 [ 681.930373][T14794] unevictable:768 dirty:215 writeback:0 [ 681.930373][T14794] slab_reclaimable:10091 slab_unreclaimable:98756 [ 681.930373][T14794] mapped:36503 shmem:2882 pagetables:930 [ 681.930373][T14794] sec_pagetables:0 bounce:0 [ 681.930373][T14794] kernel_misc_reclaimable:0 [ 681.930373][T14794] free:1297837 free_pcp:673 free_cma:0 [ 681.977525][T14834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1570'. [ 681.987115][T14794] Node 0 active_anon:27176kB inactive_anon:0kB active_file:5664kB inactive_file:154104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147012kB dirty:860kB writeback:0kB shmem:10992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:3720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 682.069020][T14794] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 682.203274][T14794] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.302364][T14794] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 682.321399][T14794] Node 0 DMA32 free:1257968kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:31968kB inactive_anon:0kB active_file:5664kB inactive_file:154004kB unevictable:1536kB writepending:860kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:3784kB local_pcp:2604kB free_cma:0kB [ 682.338264][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 682.391400][T14794] lowmem_reserve[]: 0 0 0 0 0 [ 682.406448][T14794] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.482931][T14794] lowmem_reserve[]: 0 0 0 0 0 [ 682.487747][T14794] Node 1 Normal free:3910916kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.628051][T14794] lowmem_reserve[]: 0 0 0 0 0 [ 682.641321][T14794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 682.668859][T14794] Node 0 DMA32: 6*4kB (UME) 11*8kB (E) 179*16kB (U) 554*32kB (UE) 1143*64kB (UME) 823*128kB (UME) 618*256kB (UME) 505*512kB (UME) 364*1024kB (UM) 18*2048kB (UME) 55*4096kB (UM) = 1250848kB [ 682.698357][T14794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.771507][T14794] Node 1 Normal: 243*4kB (UE) 73*8kB (UME) 37*16kB (UME) 209*32kB (UME) 102*64kB (UME) 38*128kB (UME) 20*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3910916kB [ 682.841398][T14794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.851010][T14794] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 682.952344][T14794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.991907][T14794] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.001243][T14794] 46419 total pagecache pages [ 683.016354][T14794] 0 pages in swap cache [ 683.020548][T14794] Free swap = 124996kB [ 683.051469][T14794] Total swap = 124996kB [ 683.077037][T14794] 2097051 pages RAM [ 683.080904][T14794] 0 pages HighMem/MovableOnly [ 683.131424][T14794] 424374 pages reserved [ 683.135636][T14794] 0 pages cma reserved [ 683.911400][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 685.071417][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 685.174386][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 685.250267][T14866] can: request_module (can-proto-3) failed. [ 685.461091][T14886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1576'. [ 685.698904][T14891] can: request_module (can-proto-3) failed. [ 685.786483][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.795982][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.279794][T14902] can: request_module (can-proto-3) failed. [ 687.347914][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 687.661976][T14917] netlink: 'syz.0.1580': attribute type 27 has an invalid length. [ 688.191768][T14928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1581'. [ 689.961234][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 690.070417][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 691.127035][T14972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1589'. [ 691.576979][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1591'. [ 693.241917][T14985] netlink: 'syz.4.1592': attribute type 27 has an invalid length. [ 693.466675][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1594'. [ 693.754085][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 693.754155][T14997] can: request_module (can-proto-3) failed. [ 694.921062][T15024] can: request_module (can-proto-3) failed. [ 694.968851][T15027] can: request_module (can-proto-3) failed. [ 695.288983][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 696.081580][T15027] warn_alloc: 1 callbacks suppressed [ 696.081600][T15027] syz.1.1601: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 696.151480][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.1.1601 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 696.151510][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 696.151523][T15027] Call Trace: [ 696.151532][T15027] [ 696.151541][T15027] dump_stack_lvl+0x189/0x250 [ 696.151578][T15027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.151608][T15027] ? __pfx__printk+0x10/0x10 [ 696.151629][T15027] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 696.151672][T15027] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 696.151705][T15027] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 696.151738][T15027] warn_alloc+0x214/0x310 [ 696.151771][T15027] ? __pfx_warn_alloc+0x10/0x10 [ 696.151806][T15027] ? __get_vm_area_node+0x1c5/0x2d0 [ 696.151829][T15027] ? __get_vm_area_node+0x25a/0x2d0 [ 696.151860][T15027] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 696.151906][T15027] ? __asan_memset+0x22/0x50 [ 696.151953][T15027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 696.151981][T15027] ? __kasan_kmalloc_large+0x1a/0xa0 [ 696.152008][T15027] ? rcu_is_watching+0x15/0xb0 [ 696.152040][T15027] ? hash_ip_create+0x741/0x1410 [ 696.152062][T15027] ? hash_ip_create+0x741/0x1410 [ 696.152081][T15027] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 696.152109][T15027] ? hash_ip_create+0x741/0x1410 [ 696.152132][T15027] ? hash_ip_create+0x6d5/0x1410 [ 696.152158][T15027] hash_ip_create+0x741/0x1410 [ 696.152214][T15027] ? __pfx_hash_ip_create+0x10/0x10 [ 696.152257][T15027] ? __nla_parse+0x40/0x60 [ 696.152280][T15027] ? __pfx_hash_ip_create+0x10/0x10 [ 696.152305][T15027] ip_set_create+0xa94/0x1940 [ 696.152334][T15027] ? ip_set_create+0x4a2/0x1940 [ 696.152382][T15027] ? __pfx_ip_set_create+0x10/0x10 [ 696.152450][T15027] nfnetlink_rcv_msg+0xb4a/0x1130 [ 696.152481][T15027] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 696.152530][T15027] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 696.152590][T15027] ? __lock_acquire+0xaac/0xd20 [ 696.152638][T15027] netlink_rcv_skb+0x219/0x490 [ 696.152663][T15027] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 696.152694][T15027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.152728][T15027] ? apparmor_capable+0x137/0x1b0 [ 696.152756][T15027] ? bpf_lsm_capable+0x9/0x20 [ 696.152780][T15027] ? security_capable+0x7e/0x2e0 [ 696.152804][T15027] nfnetlink_rcv+0x273/0x2530 [ 696.152835][T15027] ? kernel_text_address+0xa5/0xe0 [ 696.152863][T15027] ? __kernel_text_address+0xd/0x40 [ 696.152890][T15027] ? unwind_get_return_address+0x4d/0x90 [ 696.152914][T15027] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 696.152937][T15027] ? arch_stack_walk+0xfc/0x150 [ 696.152977][T15027] ? stack_trace_save+0x9c/0xe0 [ 696.153000][T15027] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 696.153026][T15027] ? stack_depot_save_flags+0x40/0x910 [ 696.153055][T15027] ? kasan_save_track+0x4f/0x80 [ 696.153075][T15027] ? kasan_save_track+0x3e/0x80 [ 696.153104][T15027] ? __lock_acquire+0xaac/0xd20 [ 696.153157][T15027] ? __lock_acquire+0xaac/0xd20 [ 696.153194][T15027] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.153224][T15027] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.153246][T15027] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.153275][T15027] netlink_unicast+0x758/0x8d0 [ 696.153307][T15027] netlink_sendmsg+0x805/0xb30 [ 696.153347][T15027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.153387][T15027] ? aa_sock_msg_perm+0x94/0x160 [ 696.153410][T15027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.153433][T15027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.153456][T15027] __sock_sendmsg+0x219/0x270 [ 696.153491][T15027] ____sys_sendmsg+0x505/0x830 [ 696.153522][T15027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.153554][T15027] ? import_iovec+0x74/0xa0 [ 696.153582][T15027] ___sys_sendmsg+0x21f/0x2a0 [ 696.153610][T15027] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.153672][T15027] ? __fget_files+0x2a/0x420 [ 696.153696][T15027] ? __fget_files+0x3a0/0x420 [ 696.153733][T15027] __x64_sys_sendmsg+0x19b/0x260 [ 696.153762][T15027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.153806][T15027] ? do_syscall_64+0xba/0x210 [ 696.153840][T15027] do_syscall_64+0xf6/0x210 [ 696.153871][T15027] ? clear_bhb_loop+0x45/0xa0 [ 696.153896][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.153916][T15027] RIP: 0033:0x7fbeb4b8e969 [ 696.153935][T15027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.153952][T15027] RSP: 002b:00007fbeb2591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.153974][T15027] RAX: ffffffffffffffda RBX: 00007fbeb4db6240 RCX: 00007fbeb4b8e969 [ 696.153989][T15027] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000006 [ 696.154002][T15027] RBP: 00007fbeb4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 696.154014][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.154026][T15027] R13: 0000000000000000 R14: 00007fbeb4db6240 R15: 00007ffd416d1428 [ 696.154076][T15027] [ 696.158197][T15027] Mem-Info: [ 696.291903][T15051] netlink: 'syz.4.1603': attribute type 27 has an invalid length. [ 696.364722][T15027] active_anon:16442 inactive_anon:0 isolated_anon:0 [ 696.364722][T15027] active_file:1416 inactive_file:38551 isolated_file:0 [ 696.364722][T15027] unevictable:768 dirty:379 writeback:0 [ 696.364722][T15027] slab_reclaimable:10208 slab_unreclaimable:100740 [ 696.364722][T15027] mapped:43844 shmem:12859 pagetables:897 [ 696.364722][T15027] sec_pagetables:0 bounce:0 [ 696.364722][T15027] kernel_misc_reclaimable:0 [ 696.364722][T15027] free:1286195 free_pcp:1425 free_cma:0 [ 696.717140][T15027] Node 0 active_anon:58168kB inactive_anon:0kB active_file:5664kB inactive_file:154128kB unevictable:4636kB isolated(anon):0kB isolated(file):0kB mapped:175376kB dirty:1512kB writeback:0kB shmem:42200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11008kB pagetables:3588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 696.751565][T15027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 696.807427][T15027] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.881476][T15027] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 696.887333][T15027] Node 0 DMA32 free:1215448kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:58140kB inactive_anon:0kB active_file:5664kB inactive_file:154028kB unevictable:8512kB writepending:1512kB present:3129332kB managed:2564076kB mlocked:7096kB bounce:0kB free_pcp:6864kB local_pcp:4076kB free_cma:0kB [ 696.926699][T15027] lowmem_reserve[]: 0 0 0 0 0 [ 696.931633][T15027] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.962422][T15027] lowmem_reserve[]: 0 0 0 0 0 [ 696.967449][T15027] Node 1 Normal free:3910916kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.002820][T15027] lowmem_reserve[]: 0 0 0 0 0 [ 697.007699][T15027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 697.038698][T15027] Node 0 DMA32: 5*4kB (UME) 827*8kB (UE) 455*16kB (UE) 82*32kB (UE) 1040*64kB (UME) 772*128kB (UE) 649*256kB (UM) 525*512kB (UME) 376*1024kB (UM) 6*2048kB (UME) 49*4096kB (UM) = 1214876kB [ 697.081854][T15027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 697.111371][T15027] Node 1 Normal: 243*4kB (UE) 73*8kB (UME) 37*16kB (UME) 209*32kB (UME) 102*64kB (UME) 38*128kB (UME) 20*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3910916kB [ 697.141907][T15027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.175860][T15027] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 697.195995][T15027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.229809][T15027] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 697.251813][T15027] 50875 total pagecache pages [ 697.256572][T15027] 0 pages in swap cache [ 697.260751][T15027] Free swap = 124996kB [ 697.273789][T15027] Total swap = 124996kB [ 697.283464][T15027] 2097051 pages RAM [ 697.296056][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1604'. [ 697.308288][T15027] 0 pages HighMem/MovableOnly [ 697.313070][T15027] 424374 pages reserved [ 697.317249][T15027] 0 pages cma reserved [ 697.887402][T15069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1606'. [ 698.064537][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 698.573062][T15085] can: request_module (can-proto-3) failed. [ 699.859601][T15106] can: request_module (can-proto-3) failed. [ 700.223994][T15103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1610'. [ 700.625727][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 701.466555][T15131] netlink: 'syz.4.1614': attribute type 27 has an invalid length. [ 701.784655][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 701.966385][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 703.660152][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 704.386723][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1621'. [ 704.504264][T15190] lo: left promiscuous mode [ 704.508998][T15190] tunl0: left promiscuous mode [ 704.519984][T15179] can: request_module (can-proto-3) failed. [ 704.670032][T15190] gre0: left promiscuous mode [ 704.695365][T15190] gretap0: left promiscuous mode [ 704.740343][T15190] erspan0: left promiscuous mode [ 704.785222][T15190] ip_vti0: left promiscuous mode [ 704.812931][T15190] ip6_vti0: left promiscuous mode [ 704.850961][T15190] sit0: left promiscuous mode [ 704.871646][T15190] ip6tnl0: left promiscuous mode [ 704.900874][T15190] ip6gre0: left promiscuous mode [ 704.940060][T15190] syz_tun: left promiscuous mode [ 704.978455][T15190] ip6gretap0: left promiscuous mode [ 705.004564][T15190] bridge0: left promiscuous mode [ 705.050413][T15190] bond0: left promiscuous mode [ 705.080835][T15190] team0: left promiscuous mode [ 705.121555][T15190] !: left promiscuous mode [ 705.126367][T15190] nlmon0: left promiscuous mode [ 705.181568][T15190] caif0: left promiscuous mode [ 705.207259][T15190] batadv0: left promiscuous mode [ 705.241553][T15190] vxcan0: left promiscuous mode [ 705.287268][T15190] vxcan1: left promiscuous mode [ 705.321478][T15190] veth0: left promiscuous mode [ 705.368646][T15190] veth1: left promiscuous mode [ 705.401567][T15190] wg0: left promiscuous mode [ 705.439577][T15190] wg1: left promiscuous mode [ 705.462252][T15190] wg2: left promiscuous mode [ 705.480165][T15190] veth0_to_bridge: left promiscuous mode [ 705.540997][T15190] bridge_slave_0: left promiscuous mode [ 705.551075][T15190] veth1_to_bridge: left promiscuous mode [ 705.620031][T15190] bridge_slave_1: left promiscuous mode [ 705.640253][T15190] veth0_to_bond: left promiscuous mode [ 705.667018][T15190] bond_slave_0: left promiscuous mode [ 705.704166][T15190] veth1_to_bond: left promiscuous mode [ 705.709874][T15190] bond_slave_1: left promiscuous mode [ 705.772741][T15190] veth0_to_team: left promiscuous mode [ 705.781865][T15190] team_slave_0: left promiscuous mode [ 705.787440][T15190] veth1_to_team: left promiscuous mode [ 705.832539][T15190] team_slave_1: left promiscuous mode [ 705.838151][T15190] veth0_to_batadv: left promiscuous mode [ 705.869929][T15190] batadv_slave_0: left promiscuous mode [ 705.885635][T15190] veth1_to_batadv: left promiscuous mode [ 705.905397][T15190] batadv_slave_1: left promiscuous mode [ 705.918004][T15190] xfrm0: left promiscuous mode [ 705.928327][T15190] veth0_to_hsr: left promiscuous mode [ 705.934350][T15190] veth1_to_hsr: left promiscuous mode [ 705.940270][T15190] hsr0: left promiscuous mode [ 705.950320][T15190] veth1_virt_wifi: left promiscuous mode [ 705.956687][T15190] veth0_virt_wifi: left promiscuous mode [ 705.967880][T15190] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 705.975983][T15190] vlan0: left promiscuous mode [ 705.985754][T15190] vlan1: left promiscuous mode [ 705.991415][T15190] macvlan0: left promiscuous mode [ 705.996921][T15190] macvlan1: left promiscuous mode [ 706.006381][T15190] ipvlan0: left promiscuous mode [ 706.011751][T15190] ipvlan1: left promiscuous mode [ 706.018191][T15190] macvtap0: left promiscuous mode [ 706.027844][T15190] macsec0: left promiscuous mode [ 706.033806][T15190] geneve0: left promiscuous mode [ 706.039264][T15190] geneve1: left promiscuous mode [ 706.044785][T15190] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 706.052457][T15190] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 706.059888][T15190] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 706.068491][T15190] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 706.075914][T15190] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 706.083291][T15190] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 706.090443][T15190] ip6erspan0: left promiscuous mode [ 706.096354][T15190] syztnl2: left promiscuous mode [ 706.118389][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1623'. [ 706.262989][T14553] Bluetooth: hci4: command 0x0405 tx timeout [ 706.672731][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 706.770751][T15216] can: request_module (can-proto-3) failed. [ 707.778193][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 707.818740][T15228] netlink: 'syz.1.1626': attribute type 27 has an invalid length. [ 708.031160][T15233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1628'. [ 708.272589][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 708.322999][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 708.530506][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 709.275139][T15266] lo: entered promiscuous mode [ 709.301741][T15266] tunl0: entered promiscuous mode [ 709.341174][T15266] gre0: entered promiscuous mode [ 709.355042][T15266] gretap0: entered promiscuous mode [ 709.394870][T15266] erspan0: entered promiscuous mode [ 709.421565][T15266] ip_vti0: entered promiscuous mode [ 709.438360][T15266] ip6_vti0: entered promiscuous mode [ 709.487981][T15266] sit0: entered promiscuous mode [ 709.501756][T15266] ip6tnl0: entered promiscuous mode [ 709.507140][T15266] ip6gre0: entered promiscuous mode [ 709.541629][T15266] syz_tun: entered promiscuous mode [ 709.564146][T15266] ip6gretap0: entered promiscuous mode [ 709.569844][T15266] bridge0: entered promiscuous mode [ 709.596332][T15266] bond0: entered promiscuous mode [ 709.612590][T15266] team0: entered promiscuous mode [ 709.638275][T15266] !: entered promiscuous mode [ 709.649066][T15266] nlmon0: entered promiscuous mode [ 709.658801][T15266] caif0: entered promiscuous mode [ 709.671812][T15266] batadv0: entered promiscuous mode [ 709.687516][T15266] vxcan0: entered promiscuous mode [ 709.699432][T15266] vxcan1: entered promiscuous mode [ 709.715585][T15266] veth0: entered promiscuous mode [ 709.720832][T15266] veth1: entered promiscuous mode [ 709.736527][T15266] wg0: entered promiscuous mode [ 709.751579][T15266] wg1: entered promiscuous mode [ 709.767174][T15266] wg2: entered promiscuous mode [ 709.777621][T15266] veth0_to_bridge: entered promiscuous mode [ 709.787215][T15266] bridge_slave_0: entered promiscuous mode [ 709.797604][T15266] veth1_to_bridge: entered promiscuous mode [ 709.807713][T15266] bridge_slave_1: entered promiscuous mode [ 709.827362][T15266] veth0_to_bond: entered promiscuous mode [ 709.844210][T15266] bond_slave_0: entered promiscuous mode [ 709.860329][T15266] veth1_to_bond: entered promiscuous mode [ 709.870532][T15266] bond_slave_1: entered promiscuous mode [ 709.888752][T15266] veth0_to_team: entered promiscuous mode [ 709.898181][T15266] team_slave_0: entered promiscuous mode [ 709.915048][T15266] veth1_to_team: entered promiscuous mode [ 709.921088][T15266] team_slave_1: entered promiscuous mode [ 709.942280][T15266] veth0_to_batadv: entered promiscuous mode [ 709.948758][T15266] batadv_slave_0: entered promiscuous mode [ 709.954965][T15266] veth1_to_batadv: entered promiscuous mode [ 709.973864][T15266] batadv_slave_1: entered promiscuous mode [ 709.980077][T15266] xfrm0: entered promiscuous mode [ 709.994867][T15266] veth0_to_hsr: entered promiscuous mode [ 710.007867][T15266] veth1_to_hsr: entered promiscuous mode [ 710.021870][T15266] hsr0: entered promiscuous mode [ 710.027153][T15266] veth1_virt_wifi: entered promiscuous mode [ 710.033459][T15266] veth0_virt_wifi: entered promiscuous mode [ 710.039743][T15266] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 710.047621][T15266] vlan0: entered promiscuous mode [ 710.057004][T15266] vlan1: entered promiscuous mode [ 710.063117][T15266] macvlan0: entered promiscuous mode [ 710.068736][T15266] macvlan1: entered promiscuous mode [ 710.083240][T15266] ipvlan0: entered promiscuous mode [ 710.088791][T15266] ipvlan1: entered promiscuous mode [ 710.097853][T15266] macvtap0: entered promiscuous mode [ 710.105383][T15266] macsec0: entered promiscuous mode [ 710.110928][T15266] geneve0: entered promiscuous mode [ 710.119200][T15266] geneve1: entered promiscuous mode [ 710.140704][T15266] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 710.165699][T15266] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 710.176483][T15266] netdevsim netdevsim2 eth0: entered promiscuous mode [ 710.189702][T15266] netdevsim netdevsim2 eth1: entered promiscuous mode [ 710.196811][T15266] netdevsim netdevsim2 eth2: entered promiscuous mode [ 710.204432][T15266] netdevsim netdevsim2 eth3: entered promiscuous mode [ 710.211474][T15266] ip6erspan0: entered promiscuous mode [ 710.217192][T15266] syztnl2: entered promiscuous mode [ 710.443949][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 711.263658][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 711.283336][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1636'. [ 712.541849][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 712.670272][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1641'. [ 713.182621][T15329] lo: left promiscuous mode [ 713.187357][T15329] tunl0: left promiscuous mode [ 713.196672][T15329] gre0: left promiscuous mode [ 713.201950][T15329] gretap0: left promiscuous mode [ 713.207263][T15329] erspan0: left promiscuous mode [ 713.216299][T15329] ip_vti0: left promiscuous mode [ 713.222106][T15329] ip6_vti0: left promiscuous mode [ 713.227414][T15329] sit0: left promiscuous mode [ 713.236006][T15329] ip6tnl0: left promiscuous mode [ 713.291485][T15329] ip6gre0: left promiscuous mode [ 713.296624][T15329] syz_tun: left promiscuous mode [ 713.331557][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 713.374772][T15329] ip6gretap0: left promiscuous mode [ 713.380189][T15329] bridge0: left promiscuous mode [ 713.421554][T15329] bond0: left promiscuous mode [ 713.452905][T15329] team0: left promiscuous mode [ 713.462320][T15329] !: left promiscuous mode [ 713.492092][T15329] nlmon0: left promiscuous mode [ 713.499135][T15329] caif0: left promiscuous mode [ 713.514682][T15329] batadv0: left promiscuous mode [ 713.560701][T15329] vxcan0: left promiscuous mode [ 713.572742][T15329] vxcan1: left promiscuous mode [ 713.588213][T15329] veth0: left promiscuous mode [ 713.601542][T15329] veth1: left promiscuous mode [ 713.617164][T15329] wg0: left promiscuous mode [ 713.630039][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 713.631591][T15329] wg1: left promiscuous mode [ 713.694696][T15329] wg2: left promiscuous mode [ 713.699511][T15329] veth0_to_bridge: left promiscuous mode [ 713.771599][T15329] bridge_slave_0: left promiscuous mode [ 713.794655][T15329] veth1_to_bridge: left promiscuous mode [ 713.810913][T15329] bridge_slave_1: left promiscuous mode [ 713.830824][T15329] veth0_to_bond: left promiscuous mode [ 713.841144][T15329] bond_slave_0: left promiscuous mode [ 713.851994][T15329] veth1_to_bond: left promiscuous mode [ 713.858919][T15329] bond_slave_1: left promiscuous mode [ 713.867763][T15329] veth0_to_team: left promiscuous mode [ 713.875284][T15329] team_slave_0: left promiscuous mode [ 713.881206][T15329] veth1_to_team: left promiscuous mode [ 713.891179][T15329] team_slave_1: left promiscuous mode [ 713.898566][T15329] veth0_to_batadv: left promiscuous mode [ 713.907859][T15329] batadv_slave_0: left promiscuous mode [ 713.914808][T15329] veth1_to_batadv: left promiscuous mode [ 713.920913][T15329] batadv_slave_1: left promiscuous mode [ 713.930088][T15329] xfrm0: left promiscuous mode [ 713.936049][T15329] veth0_to_hsr: left promiscuous mode [ 713.945155][T15329] veth1_to_hsr: left promiscuous mode [ 713.951059][T15329] hsr0: left promiscuous mode [ 713.956901][T15329] veth1_virt_wifi: left promiscuous mode [ 713.965873][T15329] veth0_virt_wifi: left promiscuous mode [ 713.972842][T15329] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 713.980377][T15329] vlan0: left promiscuous mode [ 713.988937][T15329] vlan1: left promiscuous mode [ 713.995198][T15329] macvlan0: left promiscuous mode [ 714.000508][T15329] macvlan1: left promiscuous mode [ 714.010813][T15329] ipvlan0: left promiscuous mode [ 714.017719][T15329] ipvlan1: left promiscuous mode [ 714.026529][T15329] macvtap0: left promiscuous mode [ 714.033295][T15329] macsec0: left promiscuous mode [ 714.038434][T15329] geneve0: left promiscuous mode [ 714.048501][T15329] geneve1: left promiscuous mode [ 714.054702][T15329] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 714.063553][T15329] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 714.070468][T15329] ip6erspan0: left promiscuous mode [ 714.076613][T15329] netdevsim netdevsim0 eth0: left promiscuous mode [ 714.083638][T15329] netdevsim netdevsim0 eth1: left promiscuous mode [ 714.090322][T15329] netdevsim netdevsim0 eth2: left promiscuous mode [ 714.097094][T15329] netdevsim netdevsim0 eth3: left promiscuous mode [ 714.103937][T15329] syztnl2: left promiscuous mode [ 714.197019][T15333] lo: left promiscuous mode [ 714.202177][T15333] tunl0: left promiscuous mode [ 714.207330][T15333] gre0: left promiscuous mode [ 714.217646][T15333] gretap0: left promiscuous mode [ 714.224003][T15333] erspan0: left promiscuous mode [ 714.229385][T15333] ip_vti0: left promiscuous mode [ 714.235048][T15333] ip6_vti0: left promiscuous mode [ 714.240451][T15333] sit0: left promiscuous mode [ 714.246909][T15333] ip6tnl0: left promiscuous mode [ 714.252523][T15333] ip6gre0: left promiscuous mode [ 714.257697][T15333] syz_tun: left promiscuous mode [ 714.263552][T15333] ip6gretap0: left promiscuous mode [ 714.268992][T15333] bridge0: left promiscuous mode [ 714.274703][T15333] bond0: left promiscuous mode [ 714.279644][T15333] team0: left promiscuous mode [ 714.285007][T15333] !: left promiscuous mode [ 714.289759][T15333] nlmon0: left promiscuous mode [ 714.295286][T15333] caif0: left promiscuous mode [ 714.300241][T15333] batadv0: left promiscuous mode [ 714.305602][T15333] vxcan0: left promiscuous mode [ 714.310710][T15333] vxcan1: left promiscuous mode [ 714.315949][T15333] veth0: left promiscuous mode [ 714.321065][T15333] veth1: left promiscuous mode [ 714.326403][T15333] wg0: left promiscuous mode [ 714.331238][T15333] wg1: left promiscuous mode [ 714.336055][T15333] wg2: left promiscuous mode [ 714.340883][T15333] veth0_to_bridge: left promiscuous mode [ 714.347330][T15333] bridge_slave_0: left promiscuous mode [ 714.353236][T15333] veth1_to_bridge: left promiscuous mode [ 714.359193][T15333] bridge_slave_1: left promiscuous mode [ 714.365096][T15333] veth0_to_bond: left promiscuous mode [ 714.370770][T15333] bond_slave_0: left promiscuous mode [ 714.376420][T15333] veth1_to_bond: left promiscuous mode [ 714.382311][T15333] bond_slave_1: left promiscuous mode [ 714.387833][T15333] veth0_to_team: left promiscuous mode [ 714.393647][T15333] team_slave_0: left promiscuous mode [ 714.399163][T15333] veth1_to_team: left promiscuous mode [ 714.405114][T15333] team_slave_1: left promiscuous mode [ 714.410605][T15333] veth0_to_batadv: left promiscuous mode [ 714.416559][T15333] batadv_slave_0: left promiscuous mode [ 714.422573][T15333] veth1_to_batadv: left promiscuous mode [ 714.428393][T15333] batadv_slave_1: left promiscuous mode [ 714.434232][T15333] xfrm0: left promiscuous mode [ 714.439127][T15333] veth0_to_hsr: left promiscuous mode [ 714.444907][T15333] veth1_to_hsr: left promiscuous mode [ 714.450576][T15333] hsr0: left promiscuous mode [ 714.455550][T15333] veth1_virt_wifi: left promiscuous mode [ 714.461399][T15333] veth0_virt_wifi: left promiscuous mode [ 714.467256][T15333] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 714.474862][T15333] vlan0: left promiscuous mode [ 714.480159][T15333] vlan1: left promiscuous mode [ 714.485296][T15333] macvlan0: left promiscuous mode [ 714.490505][T15333] macvlan1: left promiscuous mode [ 714.495794][T15333] ipvlan0: left promiscuous mode [ 714.500868][T15333] ipvlan1: left promiscuous mode [ 714.506327][T15333] macvtap0: left promiscuous mode [ 714.511840][T15333] macsec0: left promiscuous mode [ 714.516917][T15333] geneve0: left promiscuous mode [ 714.522149][T15333] geneve1: left promiscuous mode [ 714.527226][T15333] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 714.534212][T15333] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 714.541050][T15333] netdevsim netdevsim2 eth0: left promiscuous mode [ 714.547908][T15333] netdevsim netdevsim2 eth1: left promiscuous mode [ 714.554704][T15333] netdevsim netdevsim2 eth2: left promiscuous mode [ 714.561432][T15333] netdevsim netdevsim2 eth3: left promiscuous mode [ 714.568081][T15333] ip6erspan0: left promiscuous mode [ 714.573575][T15333] syztnl2: left promiscuous mode [ 714.752966][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 715.710050][T15359] lo: entered promiscuous mode [ 715.729464][T15359] tunl0: entered promiscuous mode [ 715.749727][T15359] gre0: entered promiscuous mode [ 715.769893][T15359] gretap0: entered promiscuous mode [ 715.788844][T15359] erspan0: entered promiscuous mode [ 715.808853][T15359] ip_vti0: entered promiscuous mode [ 715.852432][T15359] ip6_vti0: entered promiscuous mode [ 715.863593][T15359] sit0: entered promiscuous mode [ 715.876222][T15359] ip6tnl0: entered promiscuous mode [ 715.892260][T15359] ip6gre0: entered promiscuous mode [ 715.902271][T15359] syz_tun: entered promiscuous mode [ 715.908208][T15359] ip6gretap0: entered promiscuous mode [ 715.914926][T15359] bridge0: entered promiscuous mode [ 715.920942][T15359] bond0: entered promiscuous mode [ 715.927732][T15359] team0: entered promiscuous mode [ 715.933975][T15359] !: entered promiscuous mode [ 715.939296][T15359] nlmon0: entered promiscuous mode [ 715.945398][T15359] caif0: entered promiscuous mode [ 715.953383][T15359] batadv0: entered promiscuous mode [ 715.958998][T15359] vxcan0: entered promiscuous mode [ 715.964903][T15359] vxcan1: entered promiscuous mode [ 715.970679][T15359] veth0: entered promiscuous mode [ 715.976513][T15359] veth1: entered promiscuous mode [ 715.982346][T15359] wg0: entered promiscuous mode [ 715.987828][T15359] wg1: entered promiscuous mode [ 715.993426][T15359] wg2: entered promiscuous mode [ 715.998904][T15359] veth0_to_bridge: entered promiscuous mode [ 716.007169][T15359] bridge_slave_0: entered promiscuous mode [ 716.013728][T15359] veth1_to_bridge: entered promiscuous mode [ 716.023547][T15359] bridge_slave_1: entered promiscuous mode [ 716.029790][T15359] veth0_to_bond: entered promiscuous mode [ 716.036942][T15359] bond_slave_0: entered promiscuous mode [ 716.047130][T15359] veth1_to_bond: entered promiscuous mode [ 716.053552][T15359] bond_slave_1: entered promiscuous mode [ 716.059838][T15359] veth0_to_team: entered promiscuous mode [ 716.070376][T15359] team_slave_0: entered promiscuous mode [ 716.076606][T15359] veth1_to_team: entered promiscuous mode [ 716.093482][T15359] team_slave_1: entered promiscuous mode [ 716.099457][T15359] veth0_to_batadv: entered promiscuous mode [ 716.108806][T15359] batadv_slave_0: entered promiscuous mode [ 716.116849][T15359] veth1_to_batadv: entered promiscuous mode [ 716.125681][T15359] batadv_slave_1: entered promiscuous mode [ 716.133616][T15359] xfrm0: entered promiscuous mode [ 716.139003][T15359] veth0_to_hsr: entered promiscuous mode [ 716.147262][T15359] veth1_to_hsr: entered promiscuous mode [ 716.156246][T15359] hsr0: entered promiscuous mode [ 716.161837][T15359] veth1_virt_wifi: entered promiscuous mode [ 716.167913][T15359] veth0_virt_wifi: entered promiscuous mode [ 716.174266][T15359] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 716.184785][T15359] vlan0: entered promiscuous mode [ 716.190052][T15359] vlan1: entered promiscuous mode [ 716.195645][T15359] macvlan0: entered promiscuous mode [ 716.201054][T15359] macvlan1: entered promiscuous mode [ 716.206817][T15359] ipvlan0: entered promiscuous mode [ 716.212303][T15359] ipvlan1: entered promiscuous mode [ 716.217859][T15359] macvtap0: entered promiscuous mode [ 716.223360][T15359] macsec0: entered promiscuous mode [ 716.228730][T15359] geneve0: entered promiscuous mode [ 716.234137][T15359] geneve1: entered promiscuous mode [ 716.239469][T15359] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 716.246624][T15359] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 716.253742][T15359] ip6erspan0: entered promiscuous mode [ 716.259322][T15359] netdevsim netdevsim0 eth0: entered promiscuous mode [ 716.266392][T15359] netdevsim netdevsim0 eth1: entered promiscuous mode [ 716.273547][T15359] netdevsim netdevsim0 eth2: entered promiscuous mode [ 716.280626][T15359] netdevsim netdevsim0 eth3: entered promiscuous mode [ 716.287683][T15359] syztnl2: entered promiscuous mode [ 716.783129][T15373] lo: entered promiscuous mode [ 716.790600][T15373] tunl0: entered promiscuous mode [ 716.901537][T15373] gre0: entered promiscuous mode [ 716.906711][T15373] gretap0: entered promiscuous mode [ 716.924206][T15373] erspan0: entered promiscuous mode [ 716.945542][T15373] ip_vti0: entered promiscuous mode [ 716.950969][T15373] ip6_vti0: entered promiscuous mode [ 716.966046][T15373] sit0: entered promiscuous mode [ 716.971196][T15373] ip6tnl0: entered promiscuous mode [ 716.977157][T15373] ip6gre0: entered promiscuous mode [ 716.982884][T15373] syz_tun: entered promiscuous mode [ 716.988381][T15373] ip6gretap0: entered promiscuous mode [ 717.002925][T15373] bridge0: entered promiscuous mode [ 717.013705][T15373] bond0: entered promiscuous mode [ 717.023701][T15373] team0: entered promiscuous mode [ 717.039496][T15373] !: entered promiscuous mode [ 717.071678][T15373] nlmon0: entered promiscuous mode [ 717.111818][T15373] caif0: entered promiscuous mode [ 717.149675][T15373] batadv0: entered promiscuous mode [ 717.159870][T15373] vxcan0: entered promiscuous mode [ 717.194012][T15373] vxcan1: entered promiscuous mode [ 717.199304][T15373] veth0: entered promiscuous mode [ 717.248159][T15373] veth1: entered promiscuous mode [ 717.277183][T15373] wg0: entered promiscuous mode [ 717.288725][T15373] wg1: entered promiscuous mode [ 717.295728][T15373] wg2: entered promiscuous mode [ 717.300939][T15373] veth0_to_bridge: entered promiscuous mode [ 717.316928][T15373] bridge_slave_0: entered promiscuous mode [ 717.343439][T15373] veth1_to_bridge: entered promiscuous mode [ 717.356311][T15373] bridge_slave_1: entered promiscuous mode [ 717.386332][T15373] veth0_to_bond: entered promiscuous mode [ 717.406558][T15373] bond_slave_0: entered promiscuous mode [ 717.420220][T15373] veth1_to_bond: entered promiscuous mode [ 717.431513][T15373] bond_slave_1: entered promiscuous mode [ 717.462336][T15373] veth0_to_team: entered promiscuous mode [ 717.471921][T15373] team_slave_0: entered promiscuous mode [ 717.479698][T15373] veth1_to_team: entered promiscuous mode [ 717.511781][T15373] team_slave_1: entered promiscuous mode [ 717.517655][T15373] veth0_to_batadv: entered promiscuous mode [ 717.541535][T15373] batadv_slave_0: entered promiscuous mode [ 717.547597][T15373] veth1_to_batadv: entered promiscuous mode [ 717.582271][T15373] batadv_slave_1: entered promiscuous mode [ 717.588454][T15373] xfrm0: entered promiscuous mode [ 717.601554][T15373] veth0_to_hsr: entered promiscuous mode [ 717.607560][T15373] veth1_to_hsr: entered promiscuous mode [ 717.644708][T15373] hsr0: entered promiscuous mode [ 717.649916][T15373] veth1_virt_wifi: entered promiscuous mode [ 717.681514][T15373] veth0_virt_wifi: entered promiscuous mode [ 717.687645][T15373] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 717.714262][T15373] vlan0: entered promiscuous mode [ 717.720150][T15373] vlan1: entered promiscuous mode [ 717.748641][T15373] macvlan0: entered promiscuous mode [ 717.754450][T15373] macvlan1: entered promiscuous mode [ 717.759941][T15373] ipvlan0: entered promiscuous mode [ 717.772104][T15373] ipvlan1: entered promiscuous mode [ 717.777827][T15373] macvtap0: entered promiscuous mode [ 717.791998][T15373] macsec0: entered promiscuous mode [ 717.797454][T15373] geneve0: entered promiscuous mode [ 717.821518][T15373] geneve1: entered promiscuous mode [ 717.831835][T15373] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 717.851603][T15373] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 717.880323][T15373] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 717.887947][T15373] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 717.904338][T15373] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 717.931564][T15373] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 717.938947][T15373] ip6erspan0: entered promiscuous mode [ 717.954860][T15373] syztnl2: entered promiscuous mode [ 717.999995][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 718.112689][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 718.324934][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1656'. [ 719.193421][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 719.466275][T15428] netlink: 'syz.0.1659': attribute type 27 has an invalid length. [ 720.935553][T15441] lo: left promiscuous mode [ 720.940293][T15441] tunl0: left promiscuous mode [ 720.948801][T15441] gre0: left promiscuous mode [ 720.953929][T15441] gretap0: left promiscuous mode [ 720.958973][T15441] erspan0: left promiscuous mode [ 720.967426][T15441] ip_vti0: left promiscuous mode [ 720.973500][T15441] ip6_vti0: left promiscuous mode [ 720.978861][T15441] sit0: left promiscuous mode [ 720.985170][T15441] ip6tnl0: left promiscuous mode [ 720.990407][T15441] ip6gre0: left promiscuous mode [ 720.995594][T15441] syz_tun: left promiscuous mode [ 721.000865][T15441] ip6gretap0: left promiscuous mode [ 721.006886][T15441] bridge0: left promiscuous mode [ 721.012419][T15441] bond0: left promiscuous mode [ 721.017347][T15441] team0: left promiscuous mode [ 721.023653][T15441] !: left promiscuous mode [ 721.028356][T15441] nlmon0: left promiscuous mode [ 721.033832][T15441] caif0: left promiscuous mode [ 721.038796][T15441] batadv0: left promiscuous mode [ 721.044552][T15441] vxcan0: left promiscuous mode [ 721.049568][T15441] vxcan1: left promiscuous mode [ 721.055149][T15441] veth0: left promiscuous mode [ 721.060121][T15441] veth1: left promiscuous mode [ 721.065555][T15441] wg0: left promiscuous mode [ 721.070354][T15441] wg1: left promiscuous mode [ 721.075688][T15441] wg2: left promiscuous mode [ 721.080471][T15441] veth0_to_bridge: left promiscuous mode [ 721.089325][T15441] bridge_slave_0: left promiscuous mode [ 721.095665][T15441] veth1_to_bridge: left promiscuous mode [ 721.104127][T15441] bridge_slave_1: left promiscuous mode [ 721.109900][T15441] veth0_to_bond: left promiscuous mode [ 721.117468][T15441] bond_slave_0: left promiscuous mode [ 721.125716][T15441] veth1_to_bond: left promiscuous mode [ 721.131764][T15441] bond_slave_1: left promiscuous mode [ 721.137437][T15441] veth0_to_team: left promiscuous mode [ 721.147453][T15441] team_slave_0: left promiscuous mode [ 721.153384][T15441] veth1_to_team: left promiscuous mode [ 721.159178][T15441] team_slave_1: left promiscuous mode [ 721.168908][T15441] veth0_to_batadv: left promiscuous mode [ 721.175265][T15441] batadv_slave_0: left promiscuous mode [ 721.181005][T15441] veth1_to_batadv: left promiscuous mode [ 721.191011][T15441] batadv_slave_1: left promiscuous mode [ 721.197575][T15441] xfrm0: left promiscuous mode [ 721.206735][T15441] veth0_to_hsr: left promiscuous mode [ 721.212858][T15441] veth1_to_hsr: left promiscuous mode [ 721.218621][T15441] hsr0: left promiscuous mode [ 721.227455][T15441] veth1_virt_wifi: left promiscuous mode [ 721.233777][T15441] veth0_virt_wifi: left promiscuous mode [ 721.239577][T15441] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 721.251094][T15441] vlan0: left promiscuous mode [ 721.256575][T15441] vlan1: left promiscuous mode [ 721.265783][T15441] macvlan0: left promiscuous mode [ 721.270953][T15441] macvlan1: left promiscuous mode [ 721.276233][T15441] ipvlan0: left promiscuous mode [ 721.281400][T15441] ipvlan1: left promiscuous mode [ 721.286723][T15441] macvtap0: left promiscuous mode [ 721.292290][T15441] macsec0: left promiscuous mode [ 721.297390][T15441] geneve0: left promiscuous mode [ 721.302783][T15441] geneve1: left promiscuous mode [ 721.307911][T15441] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 721.315037][T15441] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 721.321952][T15441] ip6erspan0: left promiscuous mode [ 721.327280][T15441] netdevsim netdevsim0 eth0: left promiscuous mode [ 721.334164][T15441] netdevsim netdevsim0 eth1: left promiscuous mode [ 721.340814][T15441] netdevsim netdevsim0 eth2: left promiscuous mode [ 721.347538][T15441] netdevsim netdevsim0 eth3: left promiscuous mode [ 721.354473][T15441] syztnl2: left promiscuous mode [ 721.733765][T15445] can: request_module (can-proto-3) failed. [ 721.983647][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 722.030101][T15461] lo: entered promiscuous mode [ 722.132677][T15461] tunl0: entered promiscuous mode [ 722.196387][T15461] gre0: entered promiscuous mode [ 722.273535][T15461] gretap0: entered promiscuous mode [ 722.372928][T15461] erspan0: entered promiscuous mode [ 722.403983][T15461] ip_vti0: entered promiscuous mode [ 722.493529][T15461] ip6_vti0: entered promiscuous mode [ 722.621473][T15461] sit0: entered promiscuous mode [ 722.626643][T15461] ip6tnl0: entered promiscuous mode [ 722.679844][T15461] ip6gre0: entered promiscuous mode [ 722.715229][T15461] syz_tun: entered promiscuous mode [ 722.720793][T15461] ip6gretap0: entered promiscuous mode [ 722.748258][T15461] bridge0: entered promiscuous mode [ 722.784562][T15461] bond0: entered promiscuous mode [ 722.789797][T15461] team0: entered promiscuous mode [ 722.835916][T15461] !: entered promiscuous mode [ 722.859825][T15461] nlmon0: entered promiscuous mode [ 722.907486][T15461] caif0: entered promiscuous mode [ 722.936863][T15461] batadv0: entered promiscuous mode [ 722.965418][T15461] vxcan0: entered promiscuous mode [ 722.996419][T15461] vxcan1: entered promiscuous mode [ 723.014352][T15461] veth0: entered promiscuous mode [ 723.019617][T15461] veth1: entered promiscuous mode [ 723.043234][T15461] wg0: entered promiscuous mode [ 723.058651][T15461] wg1: entered promiscuous mode [ 723.068785][T15461] wg2: entered promiscuous mode [ 723.081528][T15461] veth0_to_bridge: entered promiscuous mode [ 723.097952][T15461] bridge_slave_0: entered promiscuous mode [ 723.111884][T15461] veth1_to_bridge: entered promiscuous mode [ 723.129226][T15461] bridge_slave_1: entered promiscuous mode [ 723.148740][T15461] veth0_to_bond: entered promiscuous mode [ 723.158888][T15461] bond_slave_0: entered promiscuous mode [ 723.174487][T15461] veth1_to_bond: entered promiscuous mode [ 723.190846][T15461] bond_slave_1: entered promiscuous mode [ 723.204555][T15461] veth0_to_team: entered promiscuous mode [ 723.220698][T15461] team_slave_0: entered promiscuous mode [ 723.237362][T15461] veth1_to_team: entered promiscuous mode [ 723.251610][T15461] team_slave_1: entered promiscuous mode [ 723.265126][T15461] veth0_to_batadv: entered promiscuous mode [ 723.284764][T15461] batadv_slave_0: entered promiscuous mode [ 723.290797][T15461] veth1_to_batadv: entered promiscuous mode [ 723.311565][T15461] batadv_slave_1: entered promiscuous mode [ 723.327919][T15461] xfrm0: entered promiscuous mode [ 723.344683][T15461] veth0_to_hsr: entered promiscuous mode [ 723.361006][T15461] veth1_to_hsr: entered promiscuous mode [ 723.387337][T15461] hsr0: entered promiscuous mode [ 723.403807][T15461] veth1_virt_wifi: entered promiscuous mode [ 723.433822][T15461] veth0_virt_wifi: entered promiscuous mode [ 723.450406][T15461] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 723.470776][T15461] vlan0: entered promiscuous mode [ 723.478747][T15461] vlan1: entered promiscuous mode [ 723.486025][T15461] macvlan0: entered promiscuous mode [ 723.494659][T15461] macvlan1: entered promiscuous mode [ 723.501979][T15461] ipvlan0: entered promiscuous mode [ 723.507367][T15461] ipvlan1: entered promiscuous mode [ 723.516882][T15461] macvtap0: entered promiscuous mode [ 723.524128][T15461] macsec0: entered promiscuous mode [ 723.529613][T15461] geneve0: entered promiscuous mode [ 723.539039][T15461] geneve1: entered promiscuous mode [ 723.544795][T15461] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 723.557048][T15461] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 723.564822][T15461] netdevsim netdevsim2 eth0: entered promiscuous mode [ 723.576637][T15461] netdevsim netdevsim2 eth1: entered promiscuous mode [ 723.583884][T15461] netdevsim netdevsim2 eth2: entered promiscuous mode [ 723.591157][T15461] netdevsim netdevsim2 eth3: entered promiscuous mode [ 723.602620][T15461] ip6erspan0: entered promiscuous mode [ 723.608527][T15461] syztnl2: entered promiscuous mode [ 723.891193][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1669'. [ 724.184363][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 725.428722][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1671'. [ 726.716238][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 727.016296][T15519] can: request_module (can-proto-3) failed. [ 727.095552][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 727.865162][T15533] can: request_module (can-proto-3) failed. [ 728.409580][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1678'. [ 729.146333][T15556] lo: entered promiscuous mode [ 729.166363][T15556] tunl0: entered promiscuous mode [ 729.186552][T15556] gre0: entered promiscuous mode [ 729.221667][T15556] gretap0: entered promiscuous mode [ 729.227104][T15556] erspan0: entered promiscuous mode [ 729.271289][T15556] ip_vti0: entered promiscuous mode [ 729.287410][T15556] ip6_vti0: entered promiscuous mode [ 729.324604][T15556] sit0: entered promiscuous mode [ 729.362780][T15556] ip6tnl0: entered promiscuous mode [ 729.385121][T15556] ip6gre0: entered promiscuous mode [ 729.421874][T15556] syz_tun: entered promiscuous mode [ 729.427417][T15556] ip6gretap0: entered promiscuous mode [ 729.457360][T15556] bridge0: entered promiscuous mode [ 729.464243][T15556] bond0: entered promiscuous mode [ 729.489949][T15556] team0: entered promiscuous mode [ 729.500151][T15556] !: entered promiscuous mode [ 729.520378][T15556] nlmon0: entered promiscuous mode [ 729.581637][T15556] caif0: entered promiscuous mode [ 729.586906][T15556] batadv0: entered promiscuous mode [ 729.600191][T15556] vxcan0: entered promiscuous mode [ 729.605724][T15556] vxcan1: entered promiscuous mode [ 729.623207][T15556] veth0: entered promiscuous mode [ 729.628498][T15556] veth1: entered promiscuous mode [ 729.635940][T15556] wg0: entered promiscuous mode [ 729.641017][T15556] wg1: entered promiscuous mode [ 729.650897][T15556] wg2: entered promiscuous mode [ 729.657395][T15556] veth0_to_bridge: entered promiscuous mode [ 729.663698][T15556] bridge_slave_0: entered promiscuous mode [ 729.669712][T15556] veth1_to_bridge: entered promiscuous mode [ 729.676066][T15556] bridge_slave_1: entered promiscuous mode [ 729.682604][T15556] veth0_to_bond: entered promiscuous mode [ 729.689006][T15556] bond_slave_0: entered promiscuous mode [ 729.698741][T15556] veth1_to_bond: entered promiscuous mode [ 729.717508][T15556] bond_slave_1: entered promiscuous mode [ 729.727193][T15556] veth0_to_team: entered promiscuous mode [ 729.746083][T15556] team_slave_0: entered promiscuous mode [ 729.762818][T15556] veth1_to_team: entered promiscuous mode [ 729.779232][T15556] team_slave_1: entered promiscuous mode [ 729.789350][T15556] veth0_to_batadv: entered promiscuous mode [ 729.803718][T15556] batadv_slave_0: entered promiscuous mode [ 729.816578][T15556] veth1_to_batadv: entered promiscuous mode [ 729.835574][T15556] batadv_slave_1: entered promiscuous mode [ 729.851544][T15556] xfrm0: entered promiscuous mode [ 729.865117][T15556] veth0_to_hsr: entered promiscuous mode [ 729.873816][T15556] veth1_to_hsr: entered promiscuous mode [ 729.879823][T15556] hsr0: entered promiscuous mode [ 729.885614][T15556] veth1_virt_wifi: entered promiscuous mode [ 729.892043][T15556] veth0_virt_wifi: entered promiscuous mode [ 729.898360][T15556] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 729.906639][T15556] vlan0: entered promiscuous mode [ 729.913455][T15556] vlan1: entered promiscuous mode [ 729.918705][T15556] macvlan0: entered promiscuous mode [ 729.924235][T15556] macvlan1: entered promiscuous mode [ 729.929662][T15556] ipvlan0: entered promiscuous mode [ 729.935249][T15556] ipvlan1: entered promiscuous mode [ 729.940777][T15556] macvtap0: entered promiscuous mode [ 729.946419][T15556] macsec0: entered promiscuous mode [ 729.951923][T15556] geneve0: entered promiscuous mode [ 729.957252][T15556] geneve1: entered promiscuous mode [ 729.962660][T15556] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 729.969741][T15556] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 729.976920][T15556] ip6erspan0: entered promiscuous mode [ 729.982654][T15556] netdevsim netdevsim0 eth0: entered promiscuous mode [ 729.989564][T15556] netdevsim netdevsim0 eth1: entered promiscuous mode [ 729.996550][T15556] netdevsim netdevsim0 eth2: entered promiscuous mode [ 730.003553][T15556] netdevsim netdevsim0 eth3: entered promiscuous mode [ 730.010460][T15556] syztnl2: entered promiscuous mode [ 730.269185][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 730.301865][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1681'. [ 732.398534][T15603] can: request_module (can-proto-3) failed. [ 732.627095][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 733.941573][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 733.960860][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 734.111551][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 734.293038][T15657] FAULT_INJECTION: forcing a failure. [ 734.293038][T15657] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 734.326396][T15657] CPU: 1 UID: 0 PID: 15657 Comm: syz.1.1693 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 734.326423][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 734.326436][T15657] Call Trace: [ 734.326444][T15657] [ 734.326452][T15657] dump_stack_lvl+0x189/0x250 [ 734.326483][T15657] ? __lock_acquire+0xaac/0xd20 [ 734.326512][T15657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.326539][T15657] ? __pfx__printk+0x10/0x10 [ 734.326558][T15657] ? __might_fault+0xb0/0x130 [ 734.326592][T15657] should_fail_ex+0x414/0x560 [ 734.326627][T15657] _copy_from_user+0x2d/0xb0 [ 734.326653][T15657] ___sys_sendmsg+0x158/0x2a0 [ 734.326680][T15657] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.326736][T15657] ? __fget_files+0x2a/0x420 [ 734.326759][T15657] ? __fget_files+0x3a0/0x420 [ 734.326793][T15657] __x64_sys_sendmsg+0x19b/0x260 [ 734.326819][T15657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.326858][T15657] ? do_syscall_64+0xba/0x210 [ 734.326890][T15657] do_syscall_64+0xf6/0x210 [ 734.326918][T15657] ? clear_bhb_loop+0x45/0xa0 [ 734.326940][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.326958][T15657] RIP: 0033:0x7fbeb4b8e969 [ 734.326974][T15657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.326990][T15657] RSP: 002b:00007fbeb29f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.327011][T15657] RAX: ffffffffffffffda RBX: 00007fbeb4db5fa0 RCX: 00007fbeb4b8e969 [ 734.327025][T15657] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 734.327037][T15657] RBP: 00007fbeb29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 734.327049][T15657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.327060][T15657] R13: 0000000000000000 R14: 00007fbeb4db5fa0 R15: 00007ffd416d1428 [ 734.327089][T15657] [ 734.817377][T15660] FAULT_INJECTION: forcing a failure. [ 734.817377][T15660] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 734.852304][T15660] CPU: 0 UID: 0 PID: 15660 Comm: syz.1.1694 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 734.852334][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 734.852347][T15660] Call Trace: [ 734.852356][T15660] [ 734.852365][T15660] dump_stack_lvl+0x189/0x250 [ 734.852412][T15660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.852439][T15660] ? __pfx__printk+0x10/0x10 [ 734.852459][T15660] ? fs_reclaim_acquire+0x7d/0x100 [ 734.852493][T15660] should_fail_ex+0x414/0x560 [ 734.852527][T15660] prepare_alloc_pages+0x213/0x610 [ 734.852579][T15660] __alloc_frozen_pages_noprof+0x123/0x370 [ 734.852614][T15660] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 734.852654][T15660] ? policy_nodemask+0x27c/0x720 [ 734.852679][T15660] ? __lock_acquire+0xaac/0xd20 [ 734.852710][T15660] alloc_pages_mpol+0x232/0x4a0 [ 734.852741][T15660] vma_alloc_folio_noprof+0xe4/0x200 [ 734.852789][T15660] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 734.852829][T15660] folio_prealloc+0x30/0x180 [ 734.852858][T15660] __handle_mm_fault+0x2b28/0x5380 [ 734.852882][T15660] ? __lock_acquire+0xaac/0xd20 [ 734.852927][T15660] ? __pfx___handle_mm_fault+0x10/0x10 [ 734.852951][T15660] ? lock_vma_under_rcu+0xf8/0x710 [ 734.852986][T15660] ? lock_vma_under_rcu+0xf8/0x710 [ 734.853010][T15660] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 734.853042][T15660] handle_mm_fault+0x3f6/0x8c0 [ 734.853078][T15660] do_user_addr_fault+0xa81/0x1390 [ 734.853106][T15660] ? rcu_is_watching+0x15/0xb0 [ 734.853137][T15660] ? trace_irq_disable+0x37/0x110 [ 734.853163][T15660] exc_page_fault+0x68/0x110 [ 734.853195][T15660] asm_exc_page_fault+0x26/0x30 [ 734.853222][T15660] RIP: 0033:0x7fbeb4a5a35b [ 734.853240][T15660] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 734.853258][T15660] RSP: 002b:00007fbeb29f4fb0 EFLAGS: 00010202 [ 734.853277][T15660] RAX: 0000000000000000 RBX: 00007fbeb4db5fa0 RCX: 0000000000000000 [ 734.853290][T15660] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000100 [ 734.853304][T15660] RBP: 00007fbeb29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 734.853317][T15660] R10: 0000200000000100 R11: 0000000000000000 R12: 0000000000000001 [ 734.853330][T15660] R13: 0000000000000000 R14: 00007fbeb4db5fa0 R15: 00007ffd416d1428 [ 734.853361][T15660] [ 734.853556][T15660] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 735.630814][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'. [ 737.415681][T15682] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1697'. [ 737.500326][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 737.522376][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 737.700483][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 737.786117][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 738.652916][T15722] dvmrp8: entered allmulticast mode [ 738.926901][T15720] dvmrp8: left allmulticast mode [ 739.521742][T15728] netlink: 'syz.4.1705': attribute type 19 has an invalid length. [ 739.843531][T15730] syzkaller1: entered promiscuous mode [ 739.849230][T15730] syzkaller1: entered allmulticast mode [ 740.563771][T15738] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.727773][T15743] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 741.044095][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 741.119217][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 741.209700][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1715'. [ 741.545845][T15784] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 741.735114][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 742.164232][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 742.204461][T15796] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.502670][T15822] FAULT_INJECTION: forcing a failure. [ 744.502670][T15822] name failslab, interval 1, probability 0, space 0, times 1 [ 744.530554][T15822] CPU: 1 UID: 0 PID: 15822 Comm: syz.2.1724 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 744.530584][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 744.530597][T15822] Call Trace: [ 744.530606][T15822] [ 744.530615][T15822] dump_stack_lvl+0x189/0x250 [ 744.530652][T15822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.530681][T15822] ? __pfx__printk+0x10/0x10 [ 744.530707][T15822] ? __pfx___might_resched+0x10/0x10 [ 744.530726][T15822] ? fs_reclaim_acquire+0x7d/0x100 [ 744.530761][T15822] should_fail_ex+0x414/0x560 [ 744.530798][T15822] should_failslab+0xa8/0x100 [ 744.530827][T15822] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 744.530854][T15822] ? __get_vm_area_node+0x131/0x2d0 [ 744.530884][T15822] __get_vm_area_node+0x131/0x2d0 [ 744.530916][T15822] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 744.530946][T15822] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.530994][T15822] ? aa_get_newest_label+0xf7/0x5d0 [ 744.531019][T15822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 744.531047][T15822] ? _parse_integer_limit+0x1ae/0x1f0 [ 744.531071][T15822] ? rcu_is_watching+0x15/0xb0 [ 744.531111][T15822] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.531136][T15822] __vmalloc_noprof+0x7a/0x90 [ 744.531163][T15822] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.531191][T15822] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.531223][T15822] bpf_prog_alloc+0x3c/0x1a0 [ 744.531256][T15822] bpf_prog_load+0x735/0x1930 [ 744.531290][T15822] ? __lock_acquire+0xaac/0xd20 [ 744.531319][T15822] ? __pfx_bpf_prog_load+0x10/0x10 [ 744.531368][T15822] ? bpf_lsm_bpf+0x9/0x20 [ 744.531394][T15822] ? security_bpf+0x7e/0x300 [ 744.531415][T15822] __sys_bpf+0x5f1/0x860 [ 744.531443][T15822] ? __pfx___sys_bpf+0x10/0x10 [ 744.531481][T15822] ? ksys_write+0x1f0/0x250 [ 744.531525][T15822] __x64_sys_bpf+0x7c/0x90 [ 744.531560][T15822] do_syscall_64+0xf6/0x210 [ 744.531586][T15822] ? clear_bhb_loop+0x45/0xa0 [ 744.531608][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.531624][T15822] RIP: 0033:0x7fc14ff8e969 [ 744.531640][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.531655][T15822] RSP: 002b:00007fc150df2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.531674][T15822] RAX: ffffffffffffffda RBX: 00007fc1501b5fa0 RCX: 00007fc14ff8e969 [ 744.531686][T15822] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 744.531698][T15822] RBP: 00007fc150df2090 R08: 0000000000000000 R09: 0000000000000000 [ 744.531709][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.531719][T15822] R13: 0000000000000001 R14: 00007fc1501b5fa0 R15: 00007fff040b4418 [ 744.531746][T15822] [ 744.810795][T15822] warn_alloc: 3 callbacks suppressed [ 744.810814][T15822] syz.2.1724: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 744.839762][T15822] CPU: 0 UID: 0 PID: 15822 Comm: syz.2.1724 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 744.839791][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 744.839804][T15822] Call Trace: [ 744.839813][T15822] [ 744.839822][T15822] dump_stack_lvl+0x189/0x250 [ 744.839860][T15822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.839890][T15822] ? __pfx__printk+0x10/0x10 [ 744.839911][T15822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 744.839946][T15822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 744.839991][T15822] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 744.840035][T15822] warn_alloc+0x214/0x310 [ 744.840071][T15822] ? __pfx_warn_alloc+0x10/0x10 [ 744.840110][T15822] ? __get_vm_area_node+0x27f/0x2d0 [ 744.840144][T15822] __vmalloc_node_range_noprof+0x316/0x12c0 [ 744.840223][T15822] ? aa_get_newest_label+0xf7/0x5d0 [ 744.840248][T15822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 744.840282][T15822] ? _parse_integer_limit+0x1ae/0x1f0 [ 744.840308][T15822] ? rcu_is_watching+0x15/0xb0 [ 744.840340][T15822] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.840366][T15822] __vmalloc_noprof+0x7a/0x90 [ 744.840394][T15822] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.840421][T15822] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 744.840453][T15822] bpf_prog_alloc+0x3c/0x1a0 [ 744.840481][T15822] bpf_prog_load+0x735/0x1930 [ 744.840515][T15822] ? __lock_acquire+0xaac/0xd20 [ 744.840545][T15822] ? __pfx_bpf_prog_load+0x10/0x10 [ 744.840595][T15822] ? bpf_lsm_bpf+0x9/0x20 [ 744.840620][T15822] ? security_bpf+0x7e/0x300 [ 744.840642][T15822] __sys_bpf+0x5f1/0x860 [ 744.840669][T15822] ? __pfx___sys_bpf+0x10/0x10 [ 744.840707][T15822] ? ksys_write+0x1f0/0x250 [ 744.840743][T15822] __x64_sys_bpf+0x7c/0x90 [ 744.840770][T15822] do_syscall_64+0xf6/0x210 [ 744.840802][T15822] ? clear_bhb_loop+0x45/0xa0 [ 744.840827][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.840847][T15822] RIP: 0033:0x7fc14ff8e969 [ 744.840866][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.840884][T15822] RSP: 002b:00007fc150df2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.840905][T15822] RAX: ffffffffffffffda RBX: 00007fc1501b5fa0 RCX: 00007fc14ff8e969 [ 744.840921][T15822] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 744.840934][T15822] RBP: 00007fc150df2090 R08: 0000000000000000 R09: 0000000000000000 [ 744.840947][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.840960][T15822] R13: 0000000000000001 R14: 00007fc1501b5fa0 R15: 00007fff040b4418 [ 744.840991][T15822] [ 744.841069][T15822] Mem-Info: [ 745.073652][T15833] FAULT_INJECTION: forcing a failure. [ 745.073652][T15833] name failslab, interval 1, probability 0, space 0, times 0 [ 745.113482][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 745.115179][T15833] CPU: 1 UID: 0 PID: 15833 Comm: syz.0.1729 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 745.115208][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 745.115222][T15833] Call Trace: [ 745.115231][T15833] [ 745.115242][T15833] dump_stack_lvl+0x189/0x250 [ 745.115281][T15833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.115312][T15833] ? __pfx__printk+0x10/0x10 [ 745.115347][T15833] ? __pfx___might_resched+0x10/0x10 [ 745.115372][T15833] should_fail_ex+0x414/0x560 [ 745.115411][T15833] should_failslab+0xa8/0x100 [ 745.115442][T15833] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 745.115469][T15833] ? __alloc_skb+0x112/0x2d0 [ 745.115499][T15833] __alloc_skb+0x112/0x2d0 [ 745.115526][T15833] netlink_sendmsg+0x5c6/0xb30 [ 745.115561][T15833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.115589][T15833] ? aa_sock_msg_perm+0x94/0x160 [ 745.115613][T15833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 745.115637][T15833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.115661][T15833] __sock_sendmsg+0x219/0x270 [ 745.115697][T15833] ____sys_sendmsg+0x505/0x830 [ 745.115729][T15833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.115766][T15833] ? import_iovec+0x74/0xa0 [ 745.115798][T15833] ___sys_sendmsg+0x21f/0x2a0 [ 745.115827][T15833] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.115892][T15833] ? __fget_files+0x2a/0x420 [ 745.115917][T15833] ? __fget_files+0x3a0/0x420 [ 745.115955][T15833] __x64_sys_sendmsg+0x19b/0x260 [ 745.115985][T15833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.116030][T15833] ? do_syscall_64+0xba/0x210 [ 745.116066][T15833] do_syscall_64+0xf6/0x210 [ 745.116096][T15833] ? clear_bhb_loop+0x45/0xa0 [ 745.116123][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.116142][T15833] RIP: 0033:0x7f55ec98e969 [ 745.116161][T15833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.116179][T15833] RSP: 002b:00007f55ed7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.116202][T15833] RAX: ffffffffffffffda RBX: 00007f55ecbb5fa0 RCX: 00007f55ec98e969 [ 745.116218][T15833] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 745.116232][T15833] RBP: 00007f55ed7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 745.116245][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.116257][T15833] R13: 0000000000000000 R14: 00007f55ecbb5fa0 R15: 00007ffd59bbfd68 [ 745.116290][T15833] [ 745.143808][T15822] active_anon:4885 inactive_anon:0 isolated_anon:0 [ 745.143808][T15822] active_file:1621 inactive_file:38571 isolated_file:0 [ 745.143808][T15822] unevictable:768 dirty:379 writeback:0 [ 745.143808][T15822] slab_reclaimable:10130 slab_unreclaimable:101079 [ 745.143808][T15822] mapped:28988 shmem:1417 pagetables:935 [ 745.143808][T15822] sec_pagetables:0 bounce:0 [ 745.143808][T15822] kernel_misc_reclaimable:0 [ 745.143808][T15822] free:1299350 free_pcp:268 free_cma:0 [ 745.471438][T15822] Node 0 active_anon:19540kB inactive_anon:0kB active_file:6584kB inactive_file:154208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115952kB dirty:1112kB writeback:100kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10712kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 745.571402][T15822] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 745.671491][T15822] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 745.731585][T15822] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 745.752711][T15822] Node 0 DMA32 free:1266004kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21732kB inactive_anon:0kB active_file:6684kB inactive_file:154108kB unevictable:1536kB writepending:1212kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:2136kB local_pcp:812kB free_cma:0kB [ 745.806532][T15856] FAULT_INJECTION: forcing a failure. [ 745.806532][T15856] name failslab, interval 1, probability 0, space 0, times 0 [ 745.816634][T15822] lowmem_reserve[]: 0 0 0 0 0 [ 745.821654][T15856] CPU: 0 UID: 0 PID: 15856 Comm: syz.1.1733 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 745.821684][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 745.821698][T15856] Call Trace: [ 745.821707][T15856] [ 745.821716][T15856] dump_stack_lvl+0x189/0x250 [ 745.821756][T15856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.821787][T15856] ? __pfx__printk+0x10/0x10 [ 745.821810][T15856] ? __pfx___might_resched+0x10/0x10 [ 745.821831][T15856] ? fs_reclaim_acquire+0x7d/0x100 [ 745.821866][T15856] should_fail_ex+0x414/0x560 [ 745.821907][T15856] should_failslab+0xa8/0x100 [ 745.821937][T15856] kmem_cache_alloc_noprof+0x73/0x3c0 [ 745.821962][T15856] ? security_inode_alloc+0x39/0x330 [ 745.821992][T15856] security_inode_alloc+0x39/0x330 [ 745.822028][T15856] inode_init_always_gfp+0x9ed/0xdc0 [ 745.822061][T15856] ? __pfx_sock_alloc_inode+0x10/0x10 [ 745.822094][T15856] alloc_inode+0x82/0x1b0 [ 745.822121][T15856] __sock_create+0x12d/0x9f0 [ 745.822139][T15856] ? fput+0xa0/0xd0 [ 745.822179][T15856] __sys_socket+0xd7/0x1b0 [ 745.822206][T15856] __x64_sys_socket+0x7a/0x90 [ 745.822228][T15856] do_syscall_64+0xf6/0x210 [ 745.822260][T15856] ? clear_bhb_loop+0x45/0xa0 [ 745.822287][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.822307][T15856] RIP: 0033:0x7fbeb4b8e969 [ 745.822325][T15856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.822343][T15856] RSP: 002b:00007fbeb29d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 745.822365][T15856] RAX: ffffffffffffffda RBX: 00007fbeb4db6080 RCX: 00007fbeb4b8e969 [ 745.822380][T15856] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 745.822394][T15856] RBP: 00007fbeb29d5090 R08: 0000000000000000 R09: 0000000000000000 [ 745.822407][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.822420][T15856] R13: 0000000000000001 R14: 00007fbeb4db6080 R15: 00007ffd416d1428 [ 745.822463][T15856] [ 745.822495][T15856] socket: no more sockets [ 745.828256][T15822] Node 0 [ 746.009059][T15853] syzkaller1: entered promiscuous mode [ 746.016573][T15822] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.030651][T15853] syzkaller1: entered allmulticast mode [ 746.032018][T15822] lowmem_reserve[]: 0 0 0 0 0 [ 746.039821][T15845] syzkaller1: entered promiscuous mode [ 746.040425][T15822] Node 1 Normal free:3910916kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.141380][T15845] syzkaller1: entered allmulticast mode [ 746.141419][T15822] lowmem_reserve[]: 0 0 0 0 0 [ 746.159241][T15822] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 746.176653][T15822] Node 0 DMA32: 337*4kB (UME) 708*8kB (UME) 690*16kB (UME) 574*32kB (UME) 1213*64kB (UME) 899*128kB (UME) 661*256kB (UM) 561*512kB (UME) 396*1024kB (UM) 21*2048kB (UME) 32*4096kB (UM) = 1265156kB [ 746.209161][T15822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 746.231824][T15822] Node 1 Normal: 243*4kB (UE) 73*8kB (UME) 37*16kB (UME) 209*32kB (UME) 102*64kB (UME) 38*128kB (UME) 20*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3910916kB [ 746.262099][T15822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.281329][T15822] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.290748][T15822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.311045][T15822] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 746.321156][T15822] 43599 total pagecache pages [ 746.336550][T15822] 0 pages in swap cache [ 746.340746][T15822] Free swap = 124996kB [ 746.351325][T15822] Total swap = 124996kB [ 746.355520][T15822] 2097051 pages RAM [ 746.370711][T15822] 0 pages HighMem/MovableOnly [ 746.380914][T15822] 424374 pages reserved [ 746.401122][T15822] 0 pages cma reserved [ 746.694226][T15870] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.709629][T15874] FAULT_INJECTION: forcing a failure. [ 746.709629][T15874] name failslab, interval 1, probability 0, space 0, times 0 [ 746.732568][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.4.1741 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 746.732596][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 746.732607][T15874] Call Trace: [ 746.732615][T15874] [ 746.732623][T15874] dump_stack_lvl+0x189/0x250 [ 746.732658][T15874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.732684][T15874] ? __pfx__printk+0x10/0x10 [ 746.732717][T15874] ? __pfx___might_resched+0x10/0x10 [ 746.732739][T15874] should_fail_ex+0x414/0x560 [ 746.732772][T15874] should_failslab+0xa8/0x100 [ 746.732816][T15874] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 746.732843][T15874] ? __alloc_skb+0x112/0x2d0 [ 746.732877][T15874] __alloc_skb+0x112/0x2d0 [ 746.732914][T15874] netlink_sendmsg+0x5c6/0xb30 [ 746.732945][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.732968][T15874] ? aa_sock_msg_perm+0x94/0x160 [ 746.732989][T15874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.733009][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.733031][T15874] __sock_sendmsg+0x219/0x270 [ 746.733062][T15874] ____sys_sendmsg+0x505/0x830 [ 746.733090][T15874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.733122][T15874] ? import_iovec+0x74/0xa0 [ 746.733150][T15874] ___sys_sendmsg+0x21f/0x2a0 [ 746.733176][T15874] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.733233][T15874] ? __fget_files+0x2a/0x420 [ 746.733256][T15874] ? __fget_files+0x3a0/0x420 [ 746.733289][T15874] __x64_sys_sendmsg+0x19b/0x260 [ 746.733315][T15874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.733354][T15874] ? do_syscall_64+0xba/0x210 [ 746.733385][T15874] do_syscall_64+0xf6/0x210 [ 746.733412][T15874] ? clear_bhb_loop+0x45/0xa0 [ 746.733434][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.733451][T15874] RIP: 0033:0x7faa5478e969 [ 746.733467][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.733483][T15874] RSP: 002b:00007faa55684038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.733503][T15874] RAX: ffffffffffffffda RBX: 00007faa549b5fa0 RCX: 00007faa5478e969 [ 746.733516][T15874] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 746.733528][T15874] RBP: 00007faa55684090 R08: 0000000000000000 R09: 0000000000000000 [ 746.733539][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.733550][T15874] R13: 0000000000000000 R14: 00007faa549b5fa0 R15: 00007ffff101c738 [ 746.733578][T15874] [ 747.241642][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.248152][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.282661][T15882] warning: `syz.4.1742' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 747.322088][T15882] netlink: 'syz.4.1742': attribute type 4 has an invalid length. [ 747.474833][T15888] FAULT_INJECTION: forcing a failure. [ 747.474833][T15888] name failslab, interval 1, probability 0, space 0, times 0 [ 747.532642][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.0.1744 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 747.532672][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 747.532684][T15888] Call Trace: [ 747.532693][T15888] [ 747.532701][T15888] dump_stack_lvl+0x189/0x250 [ 747.532740][T15888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.532768][T15888] ? __pfx__printk+0x10/0x10 [ 747.532794][T15888] ? __pfx___might_resched+0x10/0x10 [ 747.532817][T15888] should_fail_ex+0x414/0x560 [ 747.532854][T15888] should_failslab+0xa8/0x100 [ 747.532882][T15888] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 747.532908][T15888] ? __alloc_skb+0x112/0x2d0 [ 747.532934][T15888] __alloc_skb+0x112/0x2d0 [ 747.532960][T15888] netlink_sendmsg+0x5c6/0xb30 [ 747.533003][T15888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.533028][T15888] ? aa_sock_msg_perm+0x94/0x160 [ 747.533051][T15888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 747.533073][T15888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.533096][T15888] __sock_sendmsg+0x219/0x270 [ 747.533129][T15888] ____sys_sendmsg+0x505/0x830 [ 747.533160][T15888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.533194][T15888] ? import_iovec+0x74/0xa0 [ 747.533224][T15888] ___sys_sendmsg+0x21f/0x2a0 [ 747.533251][T15888] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.533311][T15888] ? __fget_files+0x2a/0x420 [ 747.533336][T15888] ? __fget_files+0x3a0/0x420 [ 747.533371][T15888] __x64_sys_sendmsg+0x19b/0x260 [ 747.533398][T15888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 747.533440][T15888] ? do_syscall_64+0xba/0x210 [ 747.533473][T15888] do_syscall_64+0xf6/0x210 [ 747.533503][T15888] ? clear_bhb_loop+0x45/0xa0 [ 747.533527][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.533546][T15888] RIP: 0033:0x7f55ec98e969 [ 747.533563][T15888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.533581][T15888] RSP: 002b:00007f55ed7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.533602][T15888] RAX: ffffffffffffffda RBX: 00007f55ecbb5fa0 RCX: 00007f55ec98e969 [ 747.533617][T15888] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 747.533630][T15888] RBP: 00007f55ed7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 747.533642][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.533654][T15888] R13: 0000000000000000 R14: 00007f55ecbb5fa0 R15: 00007ffd59bbfd68 [ 747.533684][T15888] [ 747.902164][T15894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1747'. [ 747.911174][T15894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1747'. [ 747.994529][T15898] ------------[ cut here ]------------ [ 748.000048][T15898] memcpy: detected field-spanning write (size 27) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 748.015164][T15898] WARNING: CPU: 1 PID: 15898 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 748.025062][T15898] Modules linked in: [ 748.029013][T15898] CPU: 1 UID: 0 PID: 15898 Comm: syz.1.1749 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 748.036335][T15894] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 748.041387][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 748.062111][T15898] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 748.068498][T15898] Code: cc e8 a0 56 b2 f7 c6 05 1e cd 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 cd b2 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 6e 56 b2 f7 44 89 e6 48 c7 c7 c0 10 [ 748.088258][T15898] RSP: 0018:ffffc90003fff920 EFLAGS: 00010246 [ 748.094503][T15898] RAX: eb499d6c59dcfa00 RBX: ffff8880290ef468 RCX: 0000000000080000 [ 748.094606][T15894] hsr1: Slave B (0!) is not up; please bring it up to get a fully working HSR network [ 748.102546][T15898] RDX: ffffc9000c0b9000 RSI: 00000000000055cf RDI: 00000000000055d0 [ 748.102570][T15898] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 748.102584][T15898] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 000000000000001b [ 748.102600][T15898] R13: 1ffff920007fff4e R14: ffffc90003fffa94 R15: 000000000000001b [ 748.102617][T15898] FS: 00007fbeb29f66c0(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 748.102637][T15898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.102653][T15898] CR2: 0000200000002e00 CR3: 0000000088e5a000 CR4: 00000000003526f0 [ 748.102683][T15898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.102697][T15898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 748.184549][T15898] Call Trace: [ 748.187858][T15898] [ 748.190814][T15898] ip6_route_info_create+0x629/0xa70 [ 748.196200][T15898] ip6_route_add+0x29/0x2f0 [ 748.200785][T15898] ? ipv6_route_ioctl+0x313/0x480 [ 748.205922][T15898] ipv6_route_ioctl+0x35c/0x480 [ 748.210815][T15898] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 748.216346][T15898] inet6_ioctl+0x219/0x280 [ 748.220813][T15898] ? __pfx_inet6_ioctl+0x10/0x10 [ 748.225849][T15898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 748.231936][T15898] sock_do_ioctl+0xd9/0x300 [ 748.236498][T15898] ? __pfx_sock_do_ioctl+0x10/0x10 [ 748.241757][T15898] ? __lock_acquire+0xaac/0xd20 [ 748.246679][T15898] sock_ioctl+0x576/0x790 [ 748.251059][T15898] ? __pfx_sock_ioctl+0x10/0x10 [ 748.256034][T15898] ? __fget_files+0x3a0/0x420 [ 748.260753][T15898] ? __fget_files+0x2a/0x420 [ 748.265463][T15898] ? bpf_lsm_file_ioctl+0x9/0x20 [ 748.270443][T15898] ? __pfx_sock_ioctl+0x10/0x10 [ 748.275394][T15898] __se_sys_ioctl+0xf9/0x170 [ 748.280031][T15898] do_syscall_64+0xf6/0x210 [ 748.284654][T15898] ? clear_bhb_loop+0x45/0xa0 [ 748.289375][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.295343][T15898] RIP: 0033:0x7fbeb4b8e969 [ 748.299796][T15898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.319529][T15898] RSP: 002b:00007fbeb29f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.328027][T15898] RAX: ffffffffffffffda RBX: 00007fbeb4db5fa0 RCX: 00007fbeb4b8e969 [ 748.336292][T15898] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003 [ 748.344331][T15898] RBP: 00007fbeb4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 748.352373][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.360373][T15898] R13: 0000000000000000 R14: 00007fbeb4db5fa0 R15: 00007ffd416d1428 [ 748.368479][T15898] [ 748.371608][T15898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 748.378910][T15898] CPU: 1 UID: 0 PID: 15898 Comm: syz.1.1749 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 748.390995][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 748.401074][T15898] Call Trace: [ 748.404377][T15898] [ 748.407318][T15898] dump_stack_lvl+0x99/0x250 [ 748.411933][T15898] ? __asan_memcpy+0x40/0x70 [ 748.416542][T15898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.421761][T15898] ? __pfx__printk+0x10/0x10 [ 748.426392][T15898] panic+0x2db/0x790 [ 748.430324][T15898] ? __pfx_panic+0x10/0x10 [ 748.434767][T15898] ? show_trace_log_lvl+0x4fb/0x550 [ 748.439990][T15898] __warn+0x31b/0x4b0 [ 748.443991][T15898] ? ipv6_addr_prefix+0x124/0x1d0 [ 748.449061][T15898] ? ipv6_addr_prefix+0x124/0x1d0 [ 748.454114][T15898] report_bug+0x2be/0x4f0 [ 748.458453][T15898] ? ipv6_addr_prefix+0x124/0x1d0 [ 748.463505][T15898] ? ipv6_addr_prefix+0x124/0x1d0 [ 748.468562][T15898] ? ipv6_addr_prefix+0x126/0x1d0 [ 748.473599][T15898] handle_bug+0x84/0x160 [ 748.477863][T15898] exc_invalid_op+0x1a/0x50 [ 748.482377][T15898] asm_exc_invalid_op+0x1a/0x20 [ 748.487243][T15898] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 748.492900][T15898] Code: cc e8 a0 56 b2 f7 c6 05 1e cd 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 cd b2 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 6e 56 b2 f7 44 89 e6 48 c7 c7 c0 10 [ 748.512517][T15898] RSP: 0018:ffffc90003fff920 EFLAGS: 00010246 [ 748.518597][T15898] RAX: eb499d6c59dcfa00 RBX: ffff8880290ef468 RCX: 0000000000080000 [ 748.526601][T15898] RDX: ffffc9000c0b9000 RSI: 00000000000055cf RDI: 00000000000055d0 [ 748.534598][T15898] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 748.542588][T15898] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 000000000000001b [ 748.550570][T15898] R13: 1ffff920007fff4e R14: ffffc90003fffa94 R15: 000000000000001b [ 748.558576][T15898] ip6_route_info_create+0x629/0xa70 [ 748.563895][T15898] ip6_route_add+0x29/0x2f0 [ 748.568404][T15898] ? ipv6_route_ioctl+0x313/0x480 [ 748.573440][T15898] ipv6_route_ioctl+0x35c/0x480 [ 748.578304][T15898] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 748.583730][T15898] inet6_ioctl+0x219/0x280 [ 748.588187][T15898] ? __pfx_inet6_ioctl+0x10/0x10 [ 748.593160][T15898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 748.599181][T15898] sock_do_ioctl+0xd9/0x300 [ 748.603726][T15898] ? __pfx_sock_do_ioctl+0x10/0x10 [ 748.608863][T15898] ? __lock_acquire+0xaac/0xd20 [ 748.613748][T15898] sock_ioctl+0x576/0x790 [ 748.618100][T15898] ? __pfx_sock_ioctl+0x10/0x10 [ 748.622977][T15898] ? __fget_files+0x3a0/0x420 [ 748.627685][T15898] ? __fget_files+0x2a/0x420 [ 748.632293][T15898] ? bpf_lsm_file_ioctl+0x9/0x20 [ 748.637237][T15898] ? __pfx_sock_ioctl+0x10/0x10 [ 748.642096][T15898] __se_sys_ioctl+0xf9/0x170 [ 748.646696][T15898] do_syscall_64+0xf6/0x210 [ 748.651216][T15898] ? clear_bhb_loop+0x45/0xa0 [ 748.655925][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.661839][T15898] RIP: 0033:0x7fbeb4b8e969 [ 748.666275][T15898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.685892][T15898] RSP: 002b:00007fbeb29f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.694320][T15898] RAX: ffffffffffffffda RBX: 00007fbeb4db5fa0 RCX: 00007fbeb4b8e969 [ 748.702302][T15898] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003 [ 748.710299][T15898] RBP: 00007fbeb4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 748.718301][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.726290][T15898] R13: 0000000000000000 R14: 00007fbeb4db5fa0 R15: 00007ffd416d1428 [ 748.734290][T15898] [ 748.737657][T15898] Kernel Offset: disabled [ 748.741995][T15898] Rebooting in 86400 seconds..