last executing test programs: 4m15.140799839s ago: executing program 1 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x7820, 0xf, 0x22, {{0x10, 0x4, 0x1, 0x30, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0x7, 0x0, 0x5, [0x5]}, @end, @noop, @end, @timestamp={0x44, 0x1c, 0x74, 0x0, 0x3, [0x6, 0x8001, 0x5, 0x76c, 0xffff, 0x3]}, @timestamp={0x44, 0x4, 0x68, 0x0, 0x6}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', r1, 0x8, 0x40, 0xfffffffd, 0x73, {{0x31, 0x4, 0x2, 0x7, 0xc4, 0x64, 0x0, 0x87, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x2, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x8, [{@private=0xa010101, 0xffff03db}, {@private=0xa010100, 0x1000}, {@local, 0x101}, {@broadcast, 0xfffffff6}]}, @generic={0x86, 0xb, "f44d1cfbce6c3502dd"}, @generic={0x96, 0x2}, @rr={0x7, 0x7, 0x9e, [@local]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x5, [{@remote, 0x1}, {@rand_addr=0x64010100, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0x8, [{@loopback, 0x80}]}, @timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0x8, [{@local, 0x9}, {@empty, 0x10000000}, {@remote, 0x100}, {@private=0xa010100}]}, @timestamp={0x44, 0x20, 0x84, 0x0, 0xe, [0x5, 0xffff, 0x8, 0x800, 0x209, 0x3, 0x3]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r2}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, r3, 0x0, 0x16, 0xfffffffffffffffe}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 4m13.648232431s ago: executing program 1 (id=1488): socketpair(0x1, 0x5, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet_sctp(r1, &(0x7f0000001640)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040800}], 0x1, 0x8040) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}}], 0x1, 0x2002, 0x0) close(r0) epoll_create1(0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='reclaim_retry_zone\x00', r4}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000b00)={@val, @val={0x2, 0x0, 0x0, 0xc8f2, 0xa6f, 0x9}, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x6558, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}}}}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 4m13.157091507s ago: executing program 2 (id=1494): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0x94}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m12.989695827s ago: executing program 0 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000080)=[{r4, 0xc0a9}], 0x1, 0x3) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0xeee}, 0x4) socket$alg(0x26, 0x5, 0x0) 4m12.58707392s ago: executing program 0 (id=1496): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0x0, 0x4101}}}, 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x24000040) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1000000000000186}}], 0x1, 0x44008440) close(0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0xe) close(r6) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r11, r10}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r8, r7}) close(r9) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000b16e2d234eb5531ee6dda322aa395e744aa3797fd59514af2d00000000000000"], &(0x7f0000000200)=0xfffffffffffffd19) socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0) write(r0, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 4m12.58615684s ago: executing program 2 (id=1497): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @any, 0x9, 0x2}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40005) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m12.521324349s ago: executing program 1 (id=1499): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000003000100000000003f000000110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) unshare(0x40040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000ffff000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b0000000000"], 0x28}}, 0x0) 4m12.248407106s ago: executing program 2 (id=1501): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9803", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) 4m12.185607672s ago: executing program 0 (id=1502): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000241}, 0x52cc) 4m11.899075164s ago: executing program 2 (id=1503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$sock(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='NH', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002f40)="cd", 0x1}], 0x1}}], 0x2, 0x8004) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0xffffffffffffff49, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r8 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)=0x100) r9 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000080)={0x6000000a}) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$unix(r12, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="2edc614772dd47fbefb7ec61a187f1398ddc25", 0x13}], 0x1, 0x0, 0x0, 0x890}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000800)="3ec347663c099e51b14f69819afc92c21a425d8e9916373e6e3e341132090609d322970f842051be9cbd920891541ec975011ed4250b6124add2", 0x3a}, {&(0x7f0000000d00)="803e8ab8f616c4fb6c32bb62fd1b65dd749933d8af61c3f0076f94fab4bd88e578d6cca49b2f25fe9629da23c13ba8e7b6c3822c0c2e8e6320285f19cd5951f47928d1a97e051bfe035483fac2dfaf146d45b1d113741b8aac4274341e9067ca2148db84a3ea4d69cf1d5be23d7a56f36b1bc1", 0x73}, {0x0}], 0x3, 0x0, 0x0, 0x20000011}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)="ef3c13d0298e534f80c5946dadd252512eb2", 0x12}], 0x1, 0x0, 0x0, 0x4000000}}], 0x3, 0x24008801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000019580)={0xcc, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, 'devices.allow\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3b52}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004}, 0x4000854) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) 4m11.890072199s ago: executing program 0 (id=1504): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x1, 0x716, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x7830, 0x5, 0x6}}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000001000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000083) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5], 0x4c}}, 0x0) 4m11.244169188s ago: executing program 0 (id=1507): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x3}, @iv={0x18}], 0x30}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001201000a000600000000000000006000"], 0x26}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r6, 0x400454ce, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x44, 0x0, 0xfffffffd, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x80000000, 0xfffffffa, 0x237, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100000, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc, 0x4, 0x82ad5814e3ff5953}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f00000008c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r17, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x14, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0xd, 0x1, 0x1, 0x7fffffffffffffce, 0x1}, @jmp={0x5, 0x0, 0x0, 0x1, 0x9, 0xc, 0x1}, @generic={0x14, 0x5, 0x7, 0x3, 0x9}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f00000002c0)='GPL\x00', 0x8, 0x7b, &(0x7f0000000380)=""/123, 0x40f00, 0x24, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0xffff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r12, r13, r14, r16, r17], &(0x7f0000000880), 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000080000070400005210e8"], 0x10}, 0xe000) 4m10.455471667s ago: executing program 0 (id=1510): socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x2, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x15, 0x5, 0x0) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008080003400000"], 0xc4}}, 0x20050800) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4m9.611297856s ago: executing program 1 (id=1514): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x30a}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20400) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000100)=0xc, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r4, &(0x7f0000000540)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000340)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/252, 0xfc}], 0x4}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f00000017c0)=""/248, 0xf8}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x3, &(0x7f00000028c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x2, 0x2102, &(0x7f0000002980)={0x0, 0x3938700}) 4m9.218370745s ago: executing program 2 (id=1516): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create(0x200008) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x30000000}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000000203010200000500000000867b7f7d00080003400b070000090002009944336d650019a408000440000000000800010001"], 0x40}}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 4m8.559369581s ago: executing program 1 (id=1520): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket(0x10, 0x803, 0x0) accept4(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0xfdc1, 0x0, 0x0, 0x70bd2c, 0x1}, 0x14}}, 0x20000000) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 4m8.059475439s ago: executing program 2 (id=1522): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000003000100000000003f000000110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) unshare(0x40040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000ffff000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b0000000000"], 0x28}}, 0x0) 4m7.507652316s ago: executing program 1 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000700)='3', 0x1}, {&(0x7f00000007c0)="fab2c8d0ee7be96d581fd23f1bb0adbbdce5179c989c45882c9e1f131ca13fa54748ac6a0b212ccbfe8f14b29cf8a1bf039fda34e4a84cb11f729f", 0x3b}], 0x3) 3m55.092848219s ago: executing program 32 (id=1510): socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x2, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x15, 0x5, 0x0) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008080003400000"], 0xc4}}, 0x20050800) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3m52.605238209s ago: executing program 33 (id=1522): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000003000100000000003f000000110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) unshare(0x40040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000ffff000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b0000000000"], 0x28}}, 0x0) 3m52.107264104s ago: executing program 34 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000700)='3', 0x1}, {&(0x7f00000007c0)="fab2c8d0ee7be96d581fd23f1bb0adbbdce5179c989c45882c9e1f131ca13fa54748ac6a0b212ccbfe8f14b29cf8a1bf039fda34e4a84cb11f729f", 0x3b}], 0x3) 2m31.521029484s ago: executing program 5 (id=1801): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @any, 0x9, 0x2}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.936148565s ago: executing program 5 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)={0x18, 0x24, 0x301, 0x70bd2c, 0x0, {0x1}, [@nested={0x3, 0xae, 0x0, 0x1, [@generic="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", @typed={0x0, 0x93, 0x0, 0x0, @u64=0x8}, @nested={0x0, 0x2e, 0x0, 0x1, [@generic="7d022bfb97532fe049f5ca3f3f5d8f8ddde3b2b6db7d7b1d41afa49b150947614c9afdc29a608db826ed421c47beddb9b337960c883b68cc24bf74cd5c136bc55e899e34ba08a4aed8307598058bdeb027e2a5af2ea39c22a5f6cce5a290c36253eec474b12bc19aac843e21424464686d90c92662c8cb13d9eab06d49b7ba7b8c43668b0dab322aa2c8a80c129a262bf31a5671de013f9b7a704c2461e79cc1714c71270dcac05bfa"]}]}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff50}, 0x1002001}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000002b00)=""/4109, 0x100e}], 0x3}, 0xacd2}], 0x2, 0x40010000, 0x0) 2m30.332683381s ago: executing program 5 (id=1809): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @any, 0x9, 0x2}, 0xe) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) r4 = epoll_create1(0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x14}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x4}, 0x10) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x10) r7 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m29.763401462s ago: executing program 5 (id=1812): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000dc0)="f09ec599927624208b4dd3098654e1db0650cf75afcbf5fff233bfb29da4119ade4ec89df5dd1c976f845130a69ccd0264619847212cafbb4b4d786d9d065c1568375f70526ff67997dd1c5e34039dd1e9a8c3eff8457e51", 0x58}, {&(0x7f0000000800)="5b6056bef4204d3d3df6d61734efa3e33c91e8e87250919457132ffeb7937e337fd2a15906f960763e2131378428980ef7fd25e2940debcbee541e51d86943da62ecb02b5eca", 0x46}, {&(0x7f0000000280)="95753a", 0x3}, {&(0x7f0000000400)="0eddbf9a4a780c02116cdc0d68e2ccfd1342f0a0f7608b208356abbb37", 0x1d}, {&(0x7f0000002480)="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", 0x1043}, {&(0x7f0000000880)="a085ad3a0e5568c7f953eebb99c78c363a6ee79b21e6c3bf6922bed51383982a9908d8ca663e0b7bae325eac86edbf5ed90bc8d83400000000", 0x39}], 0x6}, 0x4040004) 2m29.229329926s ago: executing program 5 (id=1816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x100, @vifc_lcl_ifindex, @multicast1}, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x47, @vifc_lcl_ifindex, @remote}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9d6}}], 0x18}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x12, &(0x7f0000000000)="43ea", 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x1, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m27.819374894s ago: executing program 5 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r9, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r6, 0x2180}, {r2, 0x2}, {r5, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2m12.487812292s ago: executing program 35 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r9, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r6, 0x2180}, {r2, 0x2}, {r5, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 7.296919833s ago: executing program 7 (id=2376): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0x94}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.795148436s ago: executing program 7 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x10}, 0x18) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000000)=0x9, 0x4) 6.599118069s ago: executing program 8 (id=2380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r1, 0x3cd30000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x114, r8, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0xfffffffffffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) r9 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2}, 0x0, 0x0) write(r3, &(0x7f0000000000)="fc00", 0x2) socket$nl_generic(0x10, 0x3, 0x10) 6.273430624s ago: executing program 6 (id=2383): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="d58eef98c8f5f3c0", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1, 0x0, 0x500}, 0xf0) 6.101697349s ago: executing program 7 (id=2384): unshare(0x4000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @remote, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x3d) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c3bc2f70800000000000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250e0000004c000180140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0400028004000280"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt(r4, 0x84, 0x82, &(0x7f00000003c0)="1a00000002000100", 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) socket(0x2e, 0x1, 0x1000) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x2, 0x40, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) readv(r7, &(0x7f0000000040), 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8, 0x0, 0x8}, 0x18) sendto$inet6(r1, &(0x7f0000000000)="10c0e8fcb3de", 0x6, 0x4c8c5, 0x0, 0x0) close(r1) 5.910165315s ago: executing program 6 (id=2386): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8) 5.7600621s ago: executing program 7 (id=2387): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x1}}], 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd074ddc28aeaaa686608c5c50538ee", 0xc1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x2000}, &(0x7f00000000c0)=0x90) bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) 5.505412517s ago: executing program 6 (id=2390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0xfffffffd, 0x73, {{0x2a, 0x4, 0x2, 0x7, 0xa8, 0x64, 0x0, 0x87, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x2, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x8, [{@private=0xa010101, 0xffff03db}, {@private=0xa010100, 0x1000}, {@local, 0x101}, {@broadcast, 0xfffffff6}]}, @generic={0x86, 0xa, "f44d1cfbce6c3502"}, @rr={0x7, 0x7, 0x9e, [@local]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x5, [{@remote, 0x1}, {@rand_addr=0x64010100, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0x8, [{@loopback, 0x80}]}, @timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0x8, [{@local, 0x9}, {@empty, 0x10000000}, {@remote, 0x100}, {@private=0xa010100}]}, @timestamp={0x44, 0x4, 0x84, 0x0, 0xe}]}}}}}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 5.471386942s ago: executing program 8 (id=2391): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000dc0)="f09ec599927624208b4dd3098654e1db0650cf75afcbf5fff233bfb29da4119ade4ec89df5dd1c976f845130a69ccd0264619847212cafbb4b4d786d9d065c1568375f70526ff67997dd1c5e34039dd1e9a8c3eff8457e51", 0x58}, {&(0x7f0000000800)="5b6056bef4204d3d3df6d61734efa3e33c91e8e87250919457132ffeb7937e337fd2a15906f960763e2131378428980ef7fd25e2940debcbee541e51d86943da62ecb02b5eca", 0x46}, {&(0x7f0000000280)="95753a", 0x3}, {&(0x7f0000000400)="0eddbf9a4a780c02116cdc0d68e2ccfd1342f0a0f7608b208356", 0x1a}, {&(0x7f0000002480)="db19b3668121555f2834c1df0d1f6757267fc76f95294ea33150e6f729dc4bb81aeb77c148291969b867c0405509fc53c5f4d991c024cb76db014c74aec300d3164fbd80ada5c640a850a7a30650c02bd29049a4f155470e7f5e553e985fd6e4cfed291ad024327749cec011c810f10eb327ac756598787bf48376e74547c01326561c192660e8708f6ce703e5e8cce52185149747114b28f36baf01e465902dcd8a144b6ca6f89b3c529f880bab897084f023cd861c5b862f0b34828fce5ed631627c601f65eb9196a24bfbd54c46182c95504c4b60f3518382b640573330dfc5fb57070a68db35718ef4b42fdc4df35c378a15870f7246600c8d4f55e1ae09b8f901b4106b32020603d1b2b14c2137605a6ae05909dc14591867f680c9718dcb4bf7b8ce537f07332d17f8511e3e3dda8fd25158491ba7d6a4a5e8c5a85dec0c55128d1b24587eca9d387dbf895e319c3ced4006dc041922b4792c81814452609ff68945f8eb72427058fbd6150b26bc63ee005b9bd6fea814ad5333c9fe7be5756944ef181c65c575f941f284f7b223e0e96a7117feae0a22e30b247036a0efa8d9f5724e621b9da336a400d79850df6a2f25e54af4c039312fbc1f7b2fdba12b8df1d0ea7ef3ce5038e33ddb1cd743cf69d976879d4a02e91141756c2962776198", 0x1e3}], 0x5}, 0x4040004) 5.216072893s ago: executing program 7 (id=2393): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)=0x800, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x5f}, {{&(0x7f0000000080)=@ax25={{}, [@rose, @netrom, @netrom, @bcast, @netrom, @rose, @rose, @rose]}, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/3}, {&(0x7f0000000140)=""/250}, {&(0x7f0000000240)=""/102}, {&(0x7f00000002c0)=""/126}, {&(0x7f0000000340)=""/14}, {&(0x7f0000000400)=""/67}, {&(0x7f0000000480)=""/194}, {&(0x7f0000000580)=""/224}], 0x0, &(0x7f0000000740)=""/221}, 0xc3a2}], 0x0, 0x20000002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'none\x00', 0x14, 0x139, 0x2}, {@private=0xa010100, 0x4e24, 0x0, 0xfff, 0xc, 0x5}}, 0x44) 5.016993039s ago: executing program 7 (id=2394): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x4b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9e, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x4}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)={r8}, &(0x7f0000000000)=0x8) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r9, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 4.817432165s ago: executing program 6 (id=2396): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$packet(0x11, 0xa, 0x300) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x25b4e59c81b60c2e, @private1, @mcast2, {[], {0x97ff, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "83dec448d120ccb4c196e631f7bbe6bd67e54218a4f0a85bcc933e296ff31f55", "849b54c8f7daa9673e1f68c54cf5d0b6af0153029e120bf7e33050b4fc373e498a270449c64ed871a66359d232d79a1a", "3360e07e043722039e0af95dd0dbfb22697d645a1668a68484b399d4", {"ba19e7a287dbcc083e1396eb8fe1700f", "d2e787e38fbdac415b458c0094d04167"}}}}}}}}, 0x0) 4.56758974s ago: executing program 6 (id=2397): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0x94}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.412287156s ago: executing program 6 (id=2399): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008410}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000002000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 4.340074488s ago: executing program 8 (id=2400): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2dc, 0x30, 0x300, 0x70bd31, 0x25dfdbff, {}, [{0x2c8, 0x1, [@m_skbedit={0xfc, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x7, 0x101}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xfff7}}]}, {0x85, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a168eca666c86a6321ae76cba859e771aa7894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69890f61ef4f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xf8, 0x1b, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa44, 0xbe8b, 0x2, 0x6, 0x8}, 0x6}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x55}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, {0x45, 0x6, "2e52a8e13a46456cb054b36ca51c8d04c40b13d8c717d2f6e6458227ad895e21059311b0d4b066fc3199e5e9db278fbc23372d15a1e06052124286f8f8f8ca5cab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x4c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0x33, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x54, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x2, 0x7, 0x7f, 0x8}, @broadcast, @rand_addr=0x64010101}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2dc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xca9a3b}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.188010772s ago: executing program 4 (id=2402): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)}, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r5 = socket$inet6(0xa, 0x80000, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x104, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x104}}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) close(0xffffffffffffffff) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x22000000) sendmmsg$sock(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000160001040400000000000000fc010000000000000000000000000000e000000200000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0200000000000100000000330000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000004000000000000000000000000000100ffffffff0000000000000082000000000000000000000000e58d0000000000000000000000000000000000e2ffffffff07000000ffffffff04001b0000000000000000003f8bafe452ea1e423adcddeb58d1c31fda855b863ce6b9336fbf067bc3b5dff9540b555fd344e2cda2baa2d8c9c2e5768829f0081cc3e0be8bcd8aa5fe37"], 0xfc}}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x4, @loopback}], 0x1c) 3.138176601s ago: executing program 4 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe703, &(0x7f0000000200)={&(0x7f00000003c0)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x8, 0xfa, 0xa, 0x1}}, @void, @void, @val={0x25, 0x3, {0x1, 0x88, 0x5}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xfe, 0x1, 0x0, 0x8b, 0x8}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) 2.988775344s ago: executing program 8 (id=2406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0xfffffffd, 0x73, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x64, 0x0, 0x87, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x2, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @generic={0x86, 0xb, "f44d1cfbce6c3502dd"}, @rr={0x7, 0x7, 0x9e, [@local]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x5, [{@remote, 0x1}, {@rand_addr=0x64010100, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0x8, [{@loopback, 0x80}]}, @timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0x8, [{@local, 0x9}, {@empty, 0x10000000}, {@remote, 0x100}, {@private=0xa010100}]}, @timestamp={0x44, 0x4, 0x84, 0x0, 0xe}]}}}}}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 2.803611261s ago: executing program 3 (id=2408): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c00028001"], 0x20}}, 0x44850) listen(r0, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4000, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r4, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[], 0x5) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, 0x0, 0x8) listen(r3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180256c6df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000000000000150000000000000045000000ffffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES16, @ANYRES8=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0050200000000002177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) socket$inet6_sctp(0xa, 0x5, 0x84) 1.980782111s ago: executing program 4 (id=2409): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'tunl0\x00', @broadcast}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x6, &(0x7f00000004c0)=[{}, {@none}, {@none}, {@fixed}, {@fixed}, {}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x5c, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0x40, {[@mptcp=@ack={0x1e, 0x16, 0x40, 0x1}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0xd, 0xf989, "4a6223542e21ba4ca30d00f1e6c0328d"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@ack={0x1e, 0x8, 0x0, 0x4, "00000700d29cce539b866f6b366efde63bc90000"}, @exp_fastopen={0xfe, 0x8, 0xf989, "7ea7238d"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.791111654s ago: executing program 4 (id=2410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x100, @vifc_lcl_ifindex, @multicast1}, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x47, @vifc_lcl_ifindex, @remote}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9d6}}], 0x18}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x12, &(0x7f0000000000)='C', 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x1, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.763676107s ago: executing program 3 (id=2411): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2d8, 0x168, 0x9, 0x0, 0xb, 0x3e8, 0x250, 0x250, 0x3e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x7f00007f], [], 'batadv_slave_1\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x9}, 0x6000000, 0x290, 0x2d8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0xff, 0xffffffff, 0xff000000], @ipv4=@broadcast, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x1000, 0x4, 0x77, 0x4e23, 0x4e21, 0x4e20, 0x4e23, 0x140, 0x280}, 0x180, 0x3006, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}, @common=@unspec=@comment={{0x120}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {0xff}, 0x1, 0x8, 0x4, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa, 0x6, 0x10000, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="0ffa990500", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 1.468936341s ago: executing program 3 (id=2412): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @any, 0x9, 0x2}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40005) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.076835078s ago: executing program 3 (id=2413): epoll_create1(0x0) (async) epoll_create1(0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000300)=@deltaction={0x4c, 0x31, 0x1, 0x4, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6db}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea0a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000300)=@deltaction={0x4c, 0x31, 0x1, 0x4, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6db}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea0a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d8700000000000000001c000000000000000000000084001e"], 0xa0}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d8700000000000000001c000000000000000000000084001e"], 0xa0}}, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0xa, [@enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xe, 0x2}, {0x1, 0x1}]}, @enum64={0x3, 0x4, 0x0, 0x13, 0x0, 0x2, [{0xa, 0x0, 0xd}, {0xe, 0xc, 0xffffffff}, {0x11, 0xcc, 0x9f4}, {0x3, 0x51, 0x8}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x10, 0x3}, {0x1, 0x1}]}, @float={0x1, 0x0, 0x0, 0x10, 0xc}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x4, [{0xc, 0x8, 0x9}, {0xf, 0x1}]}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x5f, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000480)=""/210, 0xea, 0xd2, 0x0, 0x9, 0x0, @void, @value}, 0x28) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) read(r2, 0x0, 0x0) read$alg(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004000800b4130180b01310809b00", @ANYRES32=r3], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 658.66391ms ago: executing program 4 (id=2414): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x12, 0x0, &(0x7f0000000200)=0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x4, 0x7f}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_proto_private(r10, 0x89e7, &(0x7f0000001100)='U:') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @str='\a\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 617.145294ms ago: executing program 3 (id=2415): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @any, 0x9, 0x2}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0xfd, 0x8], 0x0, [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x40005) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 512.089335ms ago: executing program 8 (id=2416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003a00)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000200)="2cb024ae71679dc5f18f671d4533902e9ea973ca231388e0d1da6bd559664929b7977f894fed335a2cc9accc0680091933011ac8845cd2678bccc35cd63834520a4e7c776c78a037a20b4d2117105ad7db664c9caf8af68d10b6499e41fab3387722cba70e9a0c7701fd23624a224109ec079cb86aa75f72a2d584a9dbf831efe8dc992962a62f5ac36c8b", 0x8b}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="7c0f084a73da660cb279161438cb84da64297496aa7e6ba7161db87d788fdd1a95479a00cd32e973a79d6a23377ad427c7a649862cfd40d399fa6cf29a5d67485eb4720935998bf698d208a6b4516a311745bf2b32a58106e183a7c95ccef3cce6814646c02a6bad2371ff900039b7f8d7443a675c4b1ce7acd136901cfc2b1ed4a263c04da0fefbf4731189425e9ee18d1cb62606d3ae4d477c95945ed6674981c8ba293a7d1abb", 0xa8}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="01e037f51c132d4f83c1b65bdafdb0b75a2a53fbaf76c7c521efaff18a005225a30893bd04a35e3558928f4829a0b21a023d1d8859c50cc5ccccfdaf3a54238f0ea6a843160033070363d48d9ce6979baba525db64f002cc07065abea77aa464ca3e3d29ff3272cb98af8425b4979dccbe8b8a9402c088bea45f09cf9713d7514615d238c06db3d979d01f8db98e90200321420a45f1c644a10143b7d5cbc0969623ada3a5ae11abc7a8fe2f3d674488e1cd8ab5582910a3c62a5e547fcebf632ccb31", 0xc3}, {&(0x7f00000014c0)="9545ad407fcafc331b7b630b89fff16801cc5819a570b811bc5af818fa49d67fc1808016283d1be5122a96ec541e72c68f9345bea5c412153f47c0132ed0b3787630ca51fc37eae58372365afcaab33e0e99dfc473c8b3d2c384d73f", 0x5c}], 0x6, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r1, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}], 0x78, 0x881}}, {{&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001780)="664ba34a85f22998bd96edf20f241c82033abf3c16b62e410d4b", 0x1a}, {&(0x7f00000017c0)="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", 0xfb}], 0x2, 0x0, 0x0, 0x804}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001980)="ac1c42aba49efd7ce800acec7b1cf58c84d1081810c4d0cade300a1f996bbcd1c545fc8f2c6df3c845c59513af0cbc966d43d133", 0x34}, {&(0x7f00000019c0)="ef96273aebe5bf", 0x7}, {&(0x7f0000001a00)="e4c541523b88b66d30c4cf84f91127bae548affaac8f6c63945f2303a953f3f451bd73f5649e19857a4154541dc40e990b05371fcfc7c86ec8b5b30480438c5e64ccdb931977de0b5496d6531f28aee4458e50eabf5c4f670e1949f62dd2b1d0a7c3f471e5bfa0f85f9b21a78cffbcf0df62", 0x72}, {&(0x7f0000001a80)="9f5cec3ca8fc601d21f2c07a097c8f65ebc8b69ae19e2f22cd60980ef4996f1526", 0x21}, {&(0x7f0000001ac0)="45a0884c6c69c8528329a25faa24bb58684b9cf61ec5b53ce2c389d253ac11cf44a371eb2a04300fe51c04f799927ada892a9d37450a762614365976ffec8f191ac653c6c0401276faa1d5a6b1c3d9034c8c23d42af8e77b733d9d779a0ac3f3d224ae23a2243b28dbb88694a64be683a171ec674f4f2d9353b0a7d5c80d1955cbd8c43b18eb154f56c0062ef841ad341fbbab2767da1e70fd5f7482bc6da5b811a9329986763021b040fe497b68f23b0b597d6f2504d62161839f2b602315e3ce252868d214a0", 0xc7}], 0x5, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x50, 0x4000000}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003180)="2d6b9054eb16ff2440ccb0c53d0704fe87c1cbc5fc0eb0c597f29d9927db09ae660a6bb86cadf72d2948cafd7168f3d64b2f195abf9fdffe39e32411f081bcab4177cf18a72bba02d165170cde009ce21c6d5338e94111f02103", 0x5a}, {&(0x7f0000003200)="9aa87c66c4a21fda5b4a803ace5a6df19992816a274fa185e5b00814f44ec6b5bf2543e49ecb7129d10f1a106b50bc48e518b7f16e2df578360b0c4a00d93aa7eb3b9b676cd3a52925b1300228", 0x4d}, {&(0x7f00000032c0)="03c052fd0d1d4b911464d6a458be33ac668e5309852a941159556bc90004059161d1c58175ec4ee0452985968a6d96fbdc76e67517e2cd947f4e3a5555d63fc7b047de9e0c0bf0769ff738357f4da37d434b894fc10fd89644a359ed362002cff405975287484c08b6ec25381f5dfd0ead481e8cd0928d9b99be6f18bd18ac43d480a1133deac655025816b2176e8a78aafa513dc960b8fd26a97d27f781bcaa730a", 0xa2}, {&(0x7f00000033c0)="13add723afa10ab0dd5ee628207130fda8814df3e5e49fc7084ca0df80af2386150f8216d8044cf4795984b7eb812147519da35e9ee0de2bfc3b49efac398dce93623883ad6b6dab132212b2a4d8a90deef8f2746c38dffc2e051f3b9cd0847a5c28e4e5519ed128eac3c4b80bbeb2e3ee9403a497b30ef7c68f0053a52d30cdcf7ae48f60c4be189d381eb6116504cf223a15b146a64d9b5889a94a84060a5bb2d41edd2f081da9a33303f98640fae26c", 0xb1}, {&(0x7f0000003480)="d09d6de3ba779c05a8b70b1b92ad2b2fb63a507eedf3df032ecaecacaffe29fa3fe6d4610013bfa24e28a4c53c759755681242abcead2990435f24a522f148614c1c60ce6256618fd2210a2c7ddb56e4cd048715e7fab4a87a40f3f96e5c92f0daa11037a55595f2356a7109384f6d888e4d50726d3171520f83d7c815510a652665fb3f38bc68861a0cf4161dc67ed78316ae23250b6b3b92e6cc8d", 0x9c}, {&(0x7f0000003540)="99ab072cffd996e935fa3b4bff55bb9fe858490ff160bae60a32f5a96660e936e25ebc1cb9ff279a5c637de690552256ad1cdea3081fe56b1ca632365e304baa11d6b00df8e261a44d9bd39acbffb1fc275d881a30d7d8e39fd9dc4a22", 0x5d}], 0x6, 0x0, 0x0, 0x24004054}}], 0x4, 0x0) 285.269765ms ago: executing program 8 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)={0x90, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b33ab20d0a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d17b00305f"}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x90}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000070005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c0001800800f33fe000000208000a400000000205000300020000000900420073797a31000000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x2, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0x40}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 220.482058ms ago: executing program 3 (id=2418): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4f0000001c000100001841c52e00000007000000", @ANYRES32=r0, @ANYBLOB="1e00a2000a000200aaaaaaaaaabb00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x5, 0x0, 0xb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="36b8bfefaf07"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket(0x8000000010, 0x2, 0x0) write(r10, &(0x7f00000002c0), 0x0) r11 = socket(0x840000000002, 0x3, 0x100) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) 0s ago: executing program 4 (id=2419): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}}}) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r2, &(0x7f0000000080)="2c9ac1a94c6afd43bdd61fca6bd403f0d500e7e653b3fe6eeafa3097c1b69acf84e75f495d17bc24d1e1625677dea68867dc97dcddbb945a13baf81594cb6a84b1e6547cc95cf33f0ad1261a242bc19363", 0x51, 0x458e32f54096c57, &(0x7f0000000300)={0x11, 0xf7, r3, 0x1, 0x5, 0x6, @random="8dc5a55fbd8b"}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f0000000180)={@local, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0xf, 0xe0, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_prespec={0x44, 0x14, 0x41, 0x3, 0x4, [{@multicast2}, {@rand_addr=0x64010101, 0x40000000}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1b, 0x4, 0x3ff, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @eol, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xd, "54df942f7e09586180bbb0"}, @timestamp={0x8, 0xa, 0xe, 0x4}, @sack={0x5, 0x1a, [0x5, 0x5, 0x3, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x4d, 0x0, &(0x7f00000009c0)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): ? snprintf+0xda/0x120 [ 290.245700][T10839] should_fail_ex+0x40a/0x550 [ 290.245726][T10839] _copy_to_user+0x31/0xb0 [ 290.245747][T10839] simple_read_from_buffer+0xca/0x150 [ 290.245772][T10839] proc_fail_nth_read+0x1e9/0x250 [ 290.245795][T10839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.245819][T10839] ? rw_verify_area+0x243/0x630 [ 290.245842][T10839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.245864][T10839] vfs_read+0x1f8/0xb40 [ 290.245888][T10839] ? fdget_pos+0x254/0x320 [ 290.245910][T10839] ? __pfx___mutex_lock+0x10/0x10 [ 290.245929][T10839] ? __pfx_vfs_read+0x10/0x10 [ 290.245942][T10839] ? do_sys_openat2+0x17a/0x1d0 [ 290.245965][T10839] ? __fget_files+0x2a/0x410 [ 290.245986][T10839] ? __fget_files+0x395/0x410 [ 290.246004][T10839] ? __fget_files+0x2a/0x410 [ 290.246034][T10839] ksys_read+0x18f/0x2b0 [ 290.246052][T10839] ? __pfx_ksys_read+0x10/0x10 [ 290.246068][T10839] ? do_syscall_64+0x100/0x230 [ 290.246091][T10839] ? do_syscall_64+0xb6/0x230 [ 290.246112][T10839] do_syscall_64+0xf3/0x230 [ 290.246131][T10839] ? clear_bhb_loop+0x35/0x90 [ 290.246156][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.246190][T10839] RIP: 0033:0x7f471938b7fc [ 290.246206][T10839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.246220][T10839] RSP: 002b:00007f471a18b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.246238][T10839] RAX: ffffffffffffffda RBX: 00007f47195a5fa0 RCX: 00007f471938b7fc [ 290.246251][T10839] RDX: 000000000000000f RSI: 00007f471a18b0a0 RDI: 0000000000000004 [ 290.246261][T10839] RBP: 00007f471a18b090 R08: 0000000000000000 R09: 0000000000000000 [ 290.246271][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.246281][T10839] R13: 0000000000000000 R14: 00007f47195a5fa0 R15: 00007ffedfbe3b38 [ 290.246306][T10839] [ 291.241883][T10859] __nla_validate_parse: 1 callbacks suppressed [ 291.241903][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 291.293859][T10861] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1774'. [ 291.423374][T10861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 292.408445][T10866] geneve3: entered promiscuous mode [ 292.420851][T10866] geneve3: entered allmulticast mode [ 293.679880][T10898] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1789'. [ 293.712370][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 293.745931][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 293.818763][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1788'. [ 294.736671][ C0] net_ratelimit: 11110 callbacks suppressed [ 294.736693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.754976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.767535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.780306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 294.792997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.805325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.818352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.831102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 294.843789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.856147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.164952][T10916] FAULT_INJECTION: forcing a failure. [ 295.164952][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 295.232460][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.6.1796 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 295.232496][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.232506][T10916] Call Trace: [ 295.232512][T10916] [ 295.232520][T10916] dump_stack_lvl+0x241/0x360 [ 295.232547][T10916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.232565][T10916] ? __pfx__printk+0x10/0x10 [ 295.232582][T10916] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 295.232605][T10916] ? __pfx___might_resched+0x10/0x10 [ 295.232630][T10916] should_fail_ex+0x40a/0x550 [ 295.232657][T10916] should_failslab+0xac/0x100 [ 295.232679][T10916] kmem_cache_alloc_node_noprof+0x77/0x380 [ 295.232699][T10916] ? __alloc_skb+0x1c3/0x440 [ 295.232723][T10916] __alloc_skb+0x1c3/0x440 [ 295.232749][T10916] ? __pfx___alloc_skb+0x10/0x10 [ 295.232778][T10916] netlink_dump+0x239/0xe10 [ 295.232804][T10916] ? __mutex_lock+0x397/0x1010 [ 295.232829][T10916] ? __pfx_netlink_dump+0x10/0x10 [ 295.232866][T10916] ? __pfx_lock_acquire+0x10/0x10 [ 295.232897][T10916] __netlink_dump_start+0x5a2/0x790 [ 295.232930][T10916] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 295.232952][T10916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.232968][T10916] ? __pfx_inet6_dump_ifaddr+0x10/0x10 [ 295.232997][T10916] ? ref_tracker_free+0x643/0x7e0 [ 295.233026][T10916] netlink_rcv_skb+0x206/0x480 [ 295.233049][T10916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.233067][T10916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.233111][T10916] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.233137][T10916] netlink_unicast+0x7f6/0x990 [ 295.233166][T10916] ? __pfx_netlink_unicast+0x10/0x10 [ 295.233185][T10916] ? __virt_addr_valid+0x45f/0x530 [ 295.233210][T10916] ? __phys_addr_symbol+0x2f/0x70 [ 295.233230][T10916] ? __check_object_size+0x47a/0x730 [ 295.233254][T10916] netlink_sendmsg+0x8de/0xcb0 [ 295.233281][T10916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.233301][T10916] ? aa_sock_msg_perm+0x91/0x160 [ 295.233328][T10916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.233342][T10916] __sock_sendmsg+0x221/0x270 [ 295.233363][T10916] ____sys_sendmsg+0x53a/0x860 [ 295.233392][T10916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.233415][T10916] ? __fget_files+0x2a/0x410 [ 295.233439][T10916] ? __fget_files+0x2a/0x410 [ 295.233474][T10916] __sys_sendmsg+0x269/0x350 [ 295.233500][T10916] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.233534][T10916] ? do_sys_openat2+0x17a/0x1d0 [ 295.233581][T10916] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.233604][T10916] ? do_syscall_64+0x100/0x230 [ 295.233627][T10916] ? do_syscall_64+0xb6/0x230 [ 295.233648][T10916] do_syscall_64+0xf3/0x230 [ 295.233667][T10916] ? clear_bhb_loop+0x35/0x90 [ 295.233692][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.233713][T10916] RIP: 0033:0x7f471938cde9 [ 295.233728][T10916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.233743][T10916] RSP: 002b:00007f471a18b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.233761][T10916] RAX: ffffffffffffffda RBX: 00007f47195a5fa0 RCX: 00007f471938cde9 [ 295.233773][T10916] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 295.233784][T10916] RBP: 00007f471a18b090 R08: 0000000000000000 R09: 0000000000000000 [ 295.233794][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.233804][T10916] R13: 0000000000000000 R14: 00007f47195a5fa0 R15: 00007ffedfbe3b38 [ 295.233830][T10916] [ 296.482442][T10929] dvmrp0: entered allmulticast mode [ 296.523744][T10929] dvmrp0: left allmulticast mode [ 296.733899][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 296.748697][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 296.847152][T10935] erspan0: entered promiscuous mode [ 296.897556][T10935] macvtap1: entered promiscuous mode [ 296.939625][T10935] macvtap1: entered allmulticast mode [ 296.970560][T10935] erspan0: entered allmulticast mode [ 297.056733][T10939] macvtap1: left promiscuous mode [ 297.112802][T10939] macvtap1: left allmulticast mode [ 297.143199][T10939] erspan0: left allmulticast mode [ 297.172913][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1805'. [ 297.430322][T10947] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1806'. [ 298.053495][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1811'. [ 298.286793][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1811'. [ 298.468978][T10967] tipc: Invalid UDP bearer configuration [ 298.469022][T10967] tipc: Enabling of bearer rejected, failed to enable media [ 298.763715][T10979] dvmrp0: entered allmulticast mode [ 298.816610][T10983] dvmrp0: left allmulticast mode [ 298.990299][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1816'. [ 299.307239][T10996] tipc: Started in network mode [ 299.323866][T10996] tipc: Node identity _, cluster identity 4711 [ 299.346578][T10996] tipc: Enabling of bearer rejected, failed to enable media [ 299.391020][T10996] FAULT_INJECTION: forcing a failure. [ 299.391020][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.449909][T10998] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 299.486588][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.7.1820 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 299.486617][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 299.486628][T10996] Call Trace: [ 299.486634][T10996] [ 299.486641][T10996] dump_stack_lvl+0x241/0x360 [ 299.486668][T10996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.486686][T10996] ? __pfx__printk+0x10/0x10 [ 299.486708][T10996] ? snprintf+0xda/0x120 [ 299.486733][T10996] should_fail_ex+0x40a/0x550 [ 299.486759][T10996] _copy_to_user+0x31/0xb0 [ 299.486788][T10996] simple_read_from_buffer+0xca/0x150 [ 299.486812][T10996] proc_fail_nth_read+0x1e9/0x250 [ 299.486836][T10996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.486860][T10996] ? rw_verify_area+0x243/0x630 [ 299.486883][T10996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.486904][T10996] vfs_read+0x1f8/0xb40 [ 299.486921][T10996] ? fdget_pos+0x254/0x320 [ 299.486943][T10996] ? __pfx___mutex_lock+0x10/0x10 [ 299.486961][T10996] ? __pfx_vfs_read+0x10/0x10 [ 299.486980][T10996] ? __fget_files+0x2a/0x410 [ 299.487002][T10996] ? __fget_files+0x395/0x410 [ 299.487021][T10996] ? __fget_files+0x2a/0x410 [ 299.487044][T10996] ksys_read+0x18f/0x2b0 [ 299.487060][T10996] ? __pfx_ksys_read+0x10/0x10 [ 299.487077][T10996] ? do_syscall_64+0x100/0x230 [ 299.487099][T10996] ? do_syscall_64+0xb6/0x230 [ 299.487120][T10996] do_syscall_64+0xf3/0x230 [ 299.487139][T10996] ? clear_bhb_loop+0x35/0x90 [ 299.487163][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.487183][T10996] RIP: 0033:0x7f4e9b38b7fc [ 299.487198][T10996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.487213][T10996] RSP: 002b:00007f4e9c2c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.487231][T10996] RAX: ffffffffffffffda RBX: 00007f4e9b5a5fa0 RCX: 00007f4e9b38b7fc [ 299.487243][T10996] RDX: 000000000000000f RSI: 00007f4e9c2c90a0 RDI: 0000000000000004 [ 299.487253][T10996] RBP: 00007f4e9c2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 299.487263][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.487272][T10996] R13: 0000000000000000 R14: 00007f4e9b5a5fa0 R15: 00007ffc76593928 [ 299.487299][T10996] [ 299.746488][ C0] net_ratelimit: 11543 callbacks suppressed [ 299.746507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.764777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.777444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 299.783654][T11000] FAULT_INJECTION: forcing a failure. [ 299.783654][T11000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.790049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.802657][T11000] CPU: 1 UID: 0 PID: 11000 Comm: syz.3.1823 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 299.802680][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 299.802691][T11000] Call Trace: [ 299.802699][T11000] [ 299.802706][T11000] dump_stack_lvl+0x241/0x360 [ 299.802731][T11000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.802755][T11000] ? __pfx__printk+0x10/0x10 [ 299.802773][T11000] ? __pfx_lock_release+0x10/0x10 [ 299.802795][T11000] ? __lock_acquire+0x1397/0x2100 [ 299.802822][T11000] should_fail_ex+0x40a/0x550 [ 299.802847][T11000] _copy_from_user+0x2d/0xb0 [ 299.802867][T11000] kstrtouint_from_user+0xc6/0x190 [ 299.802892][T11000] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 299.802918][T11000] ? __pfx_lock_acquire+0x10/0x10 [ 299.802948][T11000] proc_fail_nth_write+0xaa/0x2d0 [ 299.802968][T11000] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 299.802987][T11000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.803012][T11000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.803033][T11000] vfs_write+0x29f/0xd10 [ 299.803051][T11000] ? fdget_pos+0x254/0x320 [ 299.803070][T11000] ? __mutex_unlock_slowpath+0x227/0x800 [ 299.803091][T11000] ? __pfx_vfs_write+0x10/0x10 [ 299.803105][T11000] ? do_sys_openat2+0x17a/0x1d0 [ 299.803128][T11000] ? __fget_files+0x2a/0x410 [ 299.803149][T11000] ? __fget_files+0x395/0x410 [ 299.803167][T11000] ? __fget_files+0x2a/0x410 [ 299.803194][T11000] ksys_write+0x18f/0x2b0 [ 299.803212][T11000] ? __pfx_ksys_write+0x10/0x10 [ 299.803229][T11000] ? do_syscall_64+0x100/0x230 [ 299.803250][T11000] ? do_syscall_64+0xb6/0x230 [ 299.803271][T11000] do_syscall_64+0xf3/0x230 [ 299.803288][T11000] ? clear_bhb_loop+0x35/0x90 [ 299.803312][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.803331][T11000] RIP: 0033:0x7fa19758b89f [ 299.803347][T11000] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 299.803361][T11000] RSP: 002b:00007fa1953f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 299.803378][T11000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa19758b89f [ 299.803389][T11000] RDX: 0000000000000001 RSI: 00007fa1953f60a0 RDI: 0000000000000004 [ 299.803399][T11000] RBP: 00007fa1953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.803410][T11000] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 299.803419][T11000] R13: 0000000000000000 R14: 00007fa1977a5fa0 R15: 00007ffd2f40cde8 [ 299.803445][T11000] [ 299.839502][T10998] Bluetooth: MGMT ver 1.23 [ 299.842042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.078064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.090783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 300.103425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.115716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.128083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.201348][T11011] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1824'. [ 300.902666][T11011] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.910387][T11011] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.017800][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1834'. [ 301.594824][T11011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.667089][T11011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.678338][T11040] trusted_key: syz.4.1838 sent an empty control message without MSG_MORE. [ 302.739542][T11011] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.779260][T11011] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.810299][T11011] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.832063][T11011] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.015799][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.023014][T11016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.045173][T11016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.061903][T11016] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.087261][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.162900][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1846'. [ 304.489786][T11084] FAULT_INJECTION: forcing a failure. [ 304.489786][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 304.504302][T11086] x_tables: duplicate underflow at hook 2 [ 304.535113][T11084] CPU: 1 UID: 0 PID: 11084 Comm: syz.7.1850 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 304.535141][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 304.535152][T11084] Call Trace: [ 304.535158][T11084] [ 304.535166][T11084] dump_stack_lvl+0x241/0x360 [ 304.535191][T11084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.535209][T11084] ? __pfx__printk+0x10/0x10 [ 304.535228][T11084] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 304.535250][T11084] ? __pfx___might_resched+0x10/0x10 [ 304.535275][T11084] should_fail_ex+0x40a/0x550 [ 304.535300][T11084] should_failslab+0xac/0x100 [ 304.535328][T11084] kmem_cache_alloc_node_noprof+0x77/0x380 [ 304.535349][T11084] ? __alloc_skb+0x1c3/0x440 [ 304.535372][T11084] __alloc_skb+0x1c3/0x440 [ 304.535396][T11084] ? __pfx___alloc_skb+0x10/0x10 [ 304.535415][T11084] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.535435][T11084] ? netlink_ack_tlv_len+0x6e/0x200 [ 304.535459][T11084] netlink_ack+0x145/0xa60 [ 304.535479][T11084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.535501][T11084] ? ref_tracker_free+0x643/0x7e0 [ 304.535528][T11084] netlink_rcv_skb+0x294/0x480 [ 304.535552][T11084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.535569][T11084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.535612][T11084] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.535637][T11084] netlink_unicast+0x7f6/0x990 [ 304.535667][T11084] ? __pfx_netlink_unicast+0x10/0x10 [ 304.535685][T11084] ? __virt_addr_valid+0x45f/0x530 [ 304.535709][T11084] ? __phys_addr_symbol+0x2f/0x70 [ 304.535731][T11084] ? __check_object_size+0x47a/0x730 [ 304.535756][T11084] netlink_sendmsg+0x8de/0xcb0 [ 304.535782][T11084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.535802][T11084] ? aa_sock_msg_perm+0x91/0x160 [ 304.535829][T11084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.535843][T11084] __sock_sendmsg+0x221/0x270 [ 304.535864][T11084] ____sys_sendmsg+0x53a/0x860 [ 304.535892][T11084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.535912][T11084] ? __fget_files+0x2a/0x410 [ 304.535935][T11084] ? __fget_files+0x2a/0x410 [ 304.535964][T11084] __sys_sendmsg+0x269/0x350 [ 304.535990][T11084] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.536022][T11084] ? do_sys_openat2+0x17a/0x1d0 [ 304.536070][T11084] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.536094][T11084] ? do_syscall_64+0x100/0x230 [ 304.536117][T11084] ? do_syscall_64+0xb6/0x230 [ 304.536138][T11084] do_syscall_64+0xf3/0x230 [ 304.536156][T11084] ? clear_bhb_loop+0x35/0x90 [ 304.536181][T11084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.536201][T11084] RIP: 0033:0x7f4e9b38cde9 [ 304.536216][T11084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.536231][T11084] RSP: 002b:00007f4e9c2c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.536249][T11084] RAX: ffffffffffffffda RBX: 00007f4e9b5a5fa0 RCX: 00007f4e9b38cde9 [ 304.536261][T11084] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 304.536271][T11084] RBP: 00007f4e9c2c9090 R08: 0000000000000000 R09: 0000000000000000 [ 304.536281][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.536289][T11084] R13: 0000000000000000 R14: 00007f4e9b5a5fa0 R15: 00007ffc76593928 [ 304.536309][T11084] [ 304.756540][ C0] net_ratelimit: 11173 callbacks suppressed [ 304.756568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 304.872787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.885110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.897568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.910256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 304.922883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.935204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.947594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.960302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 304.972963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.138442][T11096] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1854'. [ 305.500025][T11105] netlink: 'syz.3.1853': attribute type 4 has an invalid length. [ 305.563933][T11106] ip6t_srh: unknown srh invflags 4000 [ 309.766503][ C0] net_ratelimit: 14661 callbacks suppressed [ 309.766525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.784919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 309.797422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.809796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.822027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.834482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 309.846923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.859432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.871875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.884377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 314.776451][ C0] net_ratelimit: 16425 callbacks suppressed [ 314.776471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.794643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.807151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 314.819938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 314.832188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.844388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.856764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.869558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 314.882067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 314.894545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.773058][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1860'. [ 315.924522][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.943306][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.952155][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.960475][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.973605][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 315.981337][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.611771][T11125] netlink: 'syz.3.1862': attribute type 2 has an invalid length. [ 317.232417][T11137] netlink: 'syz.3.1866': attribute type 11 has an invalid length. [ 317.264420][T11137] netlink: 'syz.3.1866': attribute type 10 has an invalid length. [ 317.272566][T11137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1866'. [ 317.347531][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1865'. [ 317.410253][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1865'. [ 317.487325][T11135] netlink: 'syz.6.1865': attribute type 18 has an invalid length. [ 317.612629][T11121] chnl_net:caif_netlink_parms(): no params data found [ 318.051908][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 318.076723][ T55] Bluetooth: hci1: command tx timeout [ 318.087228][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 318.443450][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.469789][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.512628][T11121] bridge_slave_0: entered allmulticast mode [ 318.532107][T11121] bridge_slave_0: entered promiscuous mode [ 318.779622][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.824489][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.846683][T11121] bridge_slave_1: entered allmulticast mode [ 318.855703][T11121] bridge_slave_1: entered promiscuous mode [ 319.271897][T11186] FAULT_INJECTION: forcing a failure. [ 319.271897][T11186] name failslab, interval 1, probability 0, space 0, times 0 [ 319.370391][T11186] CPU: 1 UID: 0 PID: 11186 Comm: syz.3.1879 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 319.370419][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.370430][T11186] Call Trace: [ 319.370436][T11186] [ 319.370444][T11186] dump_stack_lvl+0x241/0x360 [ 319.370471][T11186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.370493][T11186] ? __pfx__printk+0x10/0x10 [ 319.370511][T11186] ? __kmalloc_noprof+0xb5/0x4c0 [ 319.370533][T11186] ? __pfx___might_resched+0x10/0x10 [ 319.370558][T11186] should_fail_ex+0x40a/0x550 [ 319.370584][T11186] should_failslab+0xac/0x100 [ 319.370606][T11186] __kmalloc_noprof+0xdd/0x4c0 [ 319.370625][T11186] ? security_sk_alloc+0x53/0x360 [ 319.370646][T11186] security_sk_alloc+0x53/0x360 [ 319.370666][T11186] sk_prot_alloc+0xfa/0x210 [ 319.370686][T11186] ? sk_alloc+0x26/0x370 [ 319.370708][T11186] sk_alloc+0x38/0x370 [ 319.370727][T11186] ? __pfx_genl_release+0x10/0x10 [ 319.370749][T11186] __netlink_create+0x65/0x260 [ 319.370772][T11186] ? __pfx_genl_release+0x10/0x10 [ 319.370790][T11186] netlink_create+0x3ab/0x560 [ 319.370808][T11186] ? __pfx_genl_unbind+0x10/0x10 [ 319.370825][T11186] ? __pfx_genl_bind+0x10/0x10 [ 319.370844][T11186] __sock_create+0x4c0/0xa30 [ 319.370870][T11186] __sys_socket+0x150/0x3c0 [ 319.370890][T11186] ? __pfx___sys_socket+0x10/0x10 [ 319.370908][T11186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.370930][T11186] ? exc_page_fault+0x590/0x8b0 [ 319.370951][T11186] __x64_sys_socket+0x7a/0x90 [ 319.370969][T11186] do_syscall_64+0xf3/0x230 [ 319.370989][T11186] ? clear_bhb_loop+0x35/0x90 [ 319.371012][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.371033][T11186] RIP: 0033:0x7fa19758ed07 [ 319.371048][T11186] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.371062][T11186] RSP: 002b:00007fa1953f4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 319.371080][T11186] RAX: ffffffffffffffda RBX: 00007fa1977a5fa0 RCX: 00007fa19758ed07 [ 319.371093][T11186] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 319.371103][T11186] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 319.371113][T11186] R10: 0000400000000280 R11: 0000000000000286 R12: 0000000000000001 [ 319.371124][T11186] R13: 0000000000000000 R14: 00007fa1977a5fa0 R15: 00007ffd2f40cde8 [ 319.371149][T11186] [ 319.684165][T11177] netlink: 'syz.4.1874': attribute type 49 has an invalid length. [ 319.749136][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.761692][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.786499][ C0] net_ratelimit: 12461 callbacks suppressed [ 319.786519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 319.805157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 319.817525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.829870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.842254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.854913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 319.867663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 319.880032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.892360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.904798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.165737][ T55] Bluetooth: hci1: command tx timeout [ 320.284281][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 320.565547][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 320.606838][T11121] team0: Port device team_slave_0 added [ 320.664475][T11121] team0: Port device team_slave_1 added [ 321.058346][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1888'. [ 321.107914][T11227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1888'. [ 321.335679][T11231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1891'. [ 321.352216][T11231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1891'. [ 321.678183][T11231] dummy0: entered promiscuous mode [ 321.715170][T11231] dummy0: left promiscuous mode [ 321.872083][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.903992][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.967177][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.168356][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.175347][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.250543][ T55] Bluetooth: hci1: command tx timeout [ 322.328420][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.575208][ T1145] bridge_slave_1: left allmulticast mode [ 322.591087][ T1145] bridge_slave_1: left promiscuous mode [ 322.604782][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.627606][ T1145] bridge_slave_0: left allmulticast mode [ 322.633368][ T1145] bridge_slave_0: left promiscuous mode [ 322.655925][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.321289][ T55] Bluetooth: hci1: command tx timeout [ 324.469321][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.503803][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.538416][ T1145] bond0 (unregistering): Released all slaves [ 324.583247][T11121] hsr_slave_0: entered promiscuous mode [ 324.652402][T11121] hsr_slave_1: entered promiscuous mode [ 324.674968][T11121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.703403][T11121] Cannot create hsr debugfs directory [ 324.796431][ C0] net_ratelimit: 10799 callbacks suppressed [ 324.796450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 324.814708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.827026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.839897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.852522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 324.865263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 324.877610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.889923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.902865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.915475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 325.909112][T11302] netlink: 'syz.6.1917': attribute type 9 has an invalid length. [ 325.967725][T11302] netlink: 'syz.6.1917': attribute type 6 has an invalid length. [ 326.208872][ T1145] hsr_slave_0: left promiscuous mode [ 326.226462][ T1145] hsr_slave_1: left promiscuous mode [ 326.232508][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.297095][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.391104][T11309] FAULT_INJECTION: forcing a failure. [ 326.391104][T11309] name failslab, interval 1, probability 0, space 0, times 0 [ 326.430724][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.6.1920 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 326.430752][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 326.430763][T11309] Call Trace: [ 326.430769][T11309] [ 326.430776][T11309] dump_stack_lvl+0x241/0x360 [ 326.430803][T11309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.430821][T11309] ? __pfx__printk+0x10/0x10 [ 326.430852][T11309] should_fail_ex+0x40a/0x550 [ 326.430879][T11309] should_failslab+0xac/0x100 [ 326.430902][T11309] __kmalloc_cache_noprof+0x70/0x390 [ 326.430922][T11309] ? sctp_add_bind_addr+0x89/0x3a0 [ 326.430947][T11309] sctp_add_bind_addr+0x89/0x3a0 [ 326.430971][T11309] sctp_copy_local_addr_list+0x311/0x500 [ 326.430994][T11309] ? sctp_copy_local_addr_list+0xab/0x500 [ 326.431015][T11309] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 326.431037][T11309] ? sctp_v6_is_any+0x60/0x70 [ 326.431058][T11309] ? sctp_copy_one_addr+0x94/0x360 [ 326.431083][T11309] sctp_bind_addr_copy+0xad/0x3b0 [ 326.431102][T11309] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 326.431124][T11309] sctp_connect_new_asoc+0x2f3/0x6c0 [ 326.431151][T11309] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 326.431172][T11309] ? sctp_sendmsg+0xf1a/0x35d0 [ 326.431200][T11309] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 326.431221][T11309] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 326.431248][T11309] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 326.431273][T11309] sctp_sendmsg+0x1f64/0x35d0 [ 326.431312][T11309] ? __pfx_sctp_sendmsg+0x10/0x10 [ 326.431338][T11309] ? aa_sk_perm+0x96d/0xab0 [ 326.431375][T11309] ? inet_sendmsg+0x330/0x390 [ 326.431400][T11309] __sock_sendmsg+0x1a6/0x270 [ 326.431421][T11309] __sys_sendto+0x363/0x4c0 [ 326.431446][T11309] ? __pfx___sys_sendto+0x10/0x10 [ 326.431480][T11309] ? __fget_files+0x2a/0x410 [ 326.431510][T11309] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.431536][T11309] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.431564][T11309] __x64_sys_sendto+0xde/0x100 [ 326.431587][T11309] do_syscall_64+0xf3/0x230 [ 326.431607][T11309] ? clear_bhb_loop+0x35/0x90 [ 326.431631][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.431651][T11309] RIP: 0033:0x7f471938cde9 [ 326.431667][T11309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.431681][T11309] RSP: 002b:00007f471a18b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 326.431700][T11309] RAX: ffffffffffffffda RBX: 00007f47195a5fa0 RCX: 00007f471938cde9 [ 326.431716][T11309] RDX: 000000000000fee4 RSI: 0000400000847fff RDI: 0000000000000003 [ 326.431727][T11309] RBP: 00007f471a18b090 R08: 000040000005ffe4 R09: 000000000000001c [ 326.431738][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.431747][T11309] R13: 0000000000000000 R14: 00007f47195a5fa0 R15: 00007ffedfbe3b38 [ 326.431775][T11309] [ 329.411204][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 329.561330][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 329.806629][ C0] net_ratelimit: 10507 callbacks suppressed [ 329.806651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 329.824763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.836910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.849806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.862435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 329.874851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 329.887061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.899421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.911999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.924414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 330.941068][T11311] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1922'. [ 330.972947][T11312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1922'. [ 331.246483][T11351] FAULT_INJECTION: forcing a failure. [ 331.246483][T11351] name failslab, interval 1, probability 0, space 0, times 0 [ 331.322807][T11351] CPU: 1 UID: 0 PID: 11351 Comm: syz.4.1935 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 331.322847][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 331.322859][T11351] Call Trace: [ 331.322865][T11351] [ 331.322873][T11351] dump_stack_lvl+0x241/0x360 [ 331.322901][T11351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.322919][T11351] ? __pfx__printk+0x10/0x10 [ 331.322949][T11351] should_fail_ex+0x40a/0x550 [ 331.322976][T11351] should_failslab+0xac/0x100 [ 331.322999][T11351] __kmalloc_cache_noprof+0x70/0x390 [ 331.323019][T11351] ? sctp_add_bind_addr+0x89/0x3a0 [ 331.323045][T11351] sctp_add_bind_addr+0x89/0x3a0 [ 331.323069][T11351] sctp_copy_local_addr_list+0x311/0x500 [ 331.323092][T11351] ? sctp_copy_local_addr_list+0xab/0x500 [ 331.323112][T11351] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 331.323135][T11351] ? sctp_v6_is_any+0x60/0x70 [ 331.323156][T11351] ? sctp_copy_one_addr+0x94/0x360 [ 331.323180][T11351] sctp_bind_addr_copy+0xad/0x3b0 [ 331.323200][T11351] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 331.323222][T11351] sctp_connect_new_asoc+0x2f3/0x6c0 [ 331.323248][T11351] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 331.323269][T11351] ? sctp_sendmsg+0xf1a/0x35d0 [ 331.323297][T11351] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 331.323318][T11351] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 331.323342][T11351] sctp_sendmsg+0x1f64/0x35d0 [ 331.323383][T11351] ? __pfx_sctp_sendmsg+0x10/0x10 [ 331.323409][T11351] ? aa_sk_perm+0x96d/0xab0 [ 331.323447][T11351] ? inet_sendmsg+0x330/0x390 [ 331.323471][T11351] __sock_sendmsg+0x1a6/0x270 [ 331.323493][T11351] __sys_sendto+0x363/0x4c0 [ 331.323518][T11351] ? __pfx___sys_sendto+0x10/0x10 [ 331.323550][T11351] ? __fget_files+0x2a/0x410 [ 331.323581][T11351] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 331.323607][T11351] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.323636][T11351] __x64_sys_sendto+0xde/0x100 [ 331.323659][T11351] do_syscall_64+0xf3/0x230 [ 331.323679][T11351] ? clear_bhb_loop+0x35/0x90 [ 331.323703][T11351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.323723][T11351] RIP: 0033:0x7fc22fd8cde9 [ 331.323738][T11351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.323753][T11351] RSP: 002b:00007fc230c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.323771][T11351] RAX: ffffffffffffffda RBX: 00007fc22ffa5fa0 RCX: 00007fc22fd8cde9 [ 331.323784][T11351] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000003 [ 331.323794][T11351] RBP: 00007fc230c29090 R08: 0000400000000100 R09: 000000000000001c [ 331.323804][T11351] R10: 000000000000c0fe R11: 0000000000000246 R12: 0000000000000002 [ 331.323819][T11351] R13: 0000000000000000 R14: 00007fc22ffa5fa0 R15: 00007ffcc5f1bb58 [ 331.323853][T11351] [ 331.681380][T11121] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 331.741433][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 334.816440][ C0] net_ratelimit: 13151 callbacks suppressed [ 334.816461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.834515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.846998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.859571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 334.871979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 334.884197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.896445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.909351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.921880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 334.934267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 339.826581][ C0] net_ratelimit: 15289 callbacks suppressed [ 339.826602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 339.844873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.857170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.870104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.882768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 339.895476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 339.907866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.920221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.933189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.945927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 340.076437][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 340.145384][T11379] can: request_module (can-proto-4) failed. [ 341.213335][T11121] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 341.246809][T11121] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 341.332020][T11121] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 341.676905][T11396] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.1950'. [ 341.915363][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.076799][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.131461][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.138685][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.212084][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.219328][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.420988][T11121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.860864][T11411] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 342.912954][T11411] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 343.318371][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.358418][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 343.519252][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.567864][T11420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.700244][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.850200][T11420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.956723][T11420] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 344.027873][T11420] batman_adv: batadv0: Removing interface: ip6gretap1 [ 344.314386][T11432] team0: entered allmulticast mode [ 344.324626][T11432] team_slave_0: entered allmulticast mode [ 344.335343][T11432] team_slave_1: entered allmulticast mode [ 344.836889][ C0] net_ratelimit: 11117 callbacks suppressed [ 344.836907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.856750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 344.869164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.881550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.894313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 344.906736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.919084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.932044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.944698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 344.957050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.016021][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 345.332663][T11461] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1971'. [ 345.880000][T11461] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1971'. [ 346.127961][T11121] veth0_vlan: entered promiscuous mode [ 346.212922][T11121] veth1_vlan: entered promiscuous mode [ 346.315942][T11472] geneve3: entered promiscuous mode [ 346.346597][T11472] geneve3: entered allmulticast mode [ 346.689825][T11479] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.805760][T11121] veth0_macvtap: entered promiscuous mode [ 346.838778][T11121] veth1_macvtap: entered promiscuous mode [ 346.904232][T11479] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.997762][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.014026][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.025932][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.063802][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.093873][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.137462][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.209182][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.305513][T11493] netlink: 4228 bytes leftover after parsing attributes in process `syz.7.1981'. [ 347.340594][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1981'. [ 347.372560][T11493] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1981'. [ 347.938670][T11489] syz.4.1979 (11489) used greatest stack depth: 17104 bytes left [ 347.948805][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1980'. [ 348.103136][T11479] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.194267][T11491] bond3: entered promiscuous mode [ 348.203226][T11491] bond3: entered allmulticast mode [ 348.218239][T11491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.362686][T11506] FAULT_INJECTION: forcing a failure. [ 348.362686][T11506] name failslab, interval 1, probability 0, space 0, times 0 [ 348.406603][T11506] CPU: 1 UID: 0 PID: 11506 Comm: syz.6.1983 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 348.406631][T11506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.406641][T11506] Call Trace: [ 348.406647][T11506] [ 348.406654][T11506] dump_stack_lvl+0x241/0x360 [ 348.406680][T11506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.406698][T11506] ? __pfx__printk+0x10/0x10 [ 348.406717][T11506] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 348.406740][T11506] ? __pfx___might_resched+0x10/0x10 [ 348.406765][T11506] should_fail_ex+0x40a/0x550 [ 348.406792][T11506] should_failslab+0xac/0x100 [ 348.406814][T11506] kmem_cache_alloc_node_noprof+0x77/0x380 [ 348.406835][T11506] ? __alloc_skb+0x1c3/0x440 [ 348.406859][T11506] __alloc_skb+0x1c3/0x440 [ 348.406884][T11506] ? __pfx___alloc_skb+0x10/0x10 [ 348.406913][T11506] _sctp_make_chunk+0x58/0x460 [ 348.406938][T11506] sctp_make_datafrag_empty+0x154/0x2a0 [ 348.406961][T11506] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 348.406983][T11506] ? __kasan_kmalloc+0x98/0xb0 [ 348.407001][T11506] ? __kmalloc_cache_noprof+0x243/0x390 [ 348.407021][T11506] ? sctp_auth_send_cid+0x69/0x250 [ 348.407050][T11506] sctp_datamsg_from_user+0x740/0xf20 [ 348.407090][T11506] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 348.407115][T11506] ? __asan_memcpy+0x40/0x70 [ 348.407146][T11506] ? sctp_assoc_add_peer+0xcc0/0x1360 [ 348.407182][T11506] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 348.407202][T11506] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 348.407227][T11506] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 348.407248][T11506] ? sctp_sendmsg+0xf1a/0x35d0 [ 348.407274][T11506] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 348.407295][T11506] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 348.407316][T11506] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 348.407339][T11506] sctp_sendmsg+0x242e/0x35d0 [ 348.407379][T11506] ? __pfx_sctp_sendmsg+0x10/0x10 [ 348.407405][T11506] ? aa_sk_perm+0x96d/0xab0 [ 348.407441][T11506] ? inet_sendmsg+0x330/0x390 [ 348.407464][T11506] __sock_sendmsg+0x1a6/0x270 [ 348.407493][T11506] __sys_sendto+0x363/0x4c0 [ 348.407518][T11506] ? __pfx___sys_sendto+0x10/0x10 [ 348.407551][T11506] ? __fget_files+0x2a/0x410 [ 348.407582][T11506] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 348.407608][T11506] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.407636][T11506] __x64_sys_sendto+0xde/0x100 [ 348.407659][T11506] do_syscall_64+0xf3/0x230 [ 348.407679][T11506] ? clear_bhb_loop+0x35/0x90 [ 348.407703][T11506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.407724][T11506] RIP: 0033:0x7f471938cde9 [ 348.407739][T11506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.407753][T11506] RSP: 002b:00007f471a18b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 348.407772][T11506] RAX: ffffffffffffffda RBX: 00007f47195a5fa0 RCX: 00007f471938cde9 [ 348.407784][T11506] RDX: 0000000000000001 RSI: 0000400000000180 RDI: 0000000000000003 [ 348.407794][T11506] RBP: 00007f471a18b090 R08: 0000400000000140 R09: 000000000000001c [ 348.407805][T11506] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 348.407815][T11506] R13: 0000000000000000 R14: 00007f47195a5fa0 R15: 00007ffedfbe3b38 [ 348.407843][T11506] [ 348.824244][T11479] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.844664][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.856725][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.867035][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.888827][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.899164][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.910393][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.931608][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.941779][T11121] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.950607][T11121] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.966436][T11121] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.975252][T11121] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.261790][T11479] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.320732][T11479] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.395013][T11479] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.424672][ T354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.436516][ T354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.492963][T11479] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.605854][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.626361][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.770421][T11524] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 349.827208][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1992'. [ 349.846316][ C0] net_ratelimit: 11201 callbacks suppressed [ 349.846338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.864651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.877425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 349.889847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.902227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.915198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.927871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 349.940238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.952649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.965461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 351.023448][T11559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1997'. [ 351.220444][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 351.261785][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 351.324448][T11562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2004'. [ 351.549197][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2006'. [ 353.042011][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2018'. [ 353.543269][T10406] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/1 [ 353.578780][T10406] hid-generic 0005:0C45:1010.0003: probe with driver hid-generic failed with error -22 [ 353.647436][T11612] geneve2: entered promiscuous mode [ 353.661254][T11612] geneve2: entered allmulticast mode [ 354.457786][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 354.499705][T11627] netlink: 356 bytes leftover after parsing attributes in process `syz.7.2027'. [ 354.711283][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 354.856443][ C0] net_ratelimit: 10238 callbacks suppressed [ 354.856488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.875150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.888073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 354.900535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.913049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.926240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.939137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 354.951581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.964024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.976962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 355.442544][T11656] tipc: Started in network mode [ 355.464152][T11656] tipc: Node identity _, cluster identity 4711 [ 355.492860][T11656] tipc: Enabling of bearer rejected, failed to enable media [ 355.607158][T11660] FAULT_INJECTION: forcing a failure. [ 355.607158][T11660] name failslab, interval 1, probability 0, space 0, times 0 [ 355.686443][T11660] CPU: 1 UID: 0 PID: 11660 Comm: syz.4.2039 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 355.686472][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 355.686482][T11660] Call Trace: [ 355.686489][T11660] [ 355.686496][T11660] dump_stack_lvl+0x241/0x360 [ 355.686523][T11660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.686540][T11660] ? __pfx__printk+0x10/0x10 [ 355.686570][T11660] should_fail_ex+0x40a/0x550 [ 355.686608][T11660] should_failslab+0xac/0x100 [ 355.686630][T11660] ? skb_clone+0x20c/0x390 [ 355.686650][T11660] kmem_cache_alloc_noprof+0x70/0x380 [ 355.686676][T11660] skb_clone+0x20c/0x390 [ 355.686701][T11660] __netlink_deliver_tap+0x3c4/0x7f0 [ 355.686739][T11660] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.686761][T11660] netlink_deliver_tap+0x19d/0x1b0 [ 355.686786][T11660] netlink_unicast+0x7c4/0x990 [ 355.686815][T11660] ? __pfx_netlink_unicast+0x10/0x10 [ 355.686834][T11660] ? __virt_addr_valid+0x45f/0x530 [ 355.686857][T11660] ? __phys_addr_symbol+0x2f/0x70 [ 355.686879][T11660] ? __check_object_size+0x47a/0x730 [ 355.686905][T11660] netlink_sendmsg+0x8de/0xcb0 [ 355.686933][T11660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.686952][T11660] ? aa_sock_msg_perm+0x91/0x160 [ 355.686980][T11660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.686994][T11660] __sock_sendmsg+0x221/0x270 [ 355.687015][T11660] ____sys_sendmsg+0x53a/0x860 [ 355.687044][T11660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.687064][T11660] ? __fget_files+0x2a/0x410 [ 355.687088][T11660] ? __fget_files+0x2a/0x410 [ 355.687117][T11660] __sys_sendmsg+0x269/0x350 [ 355.687144][T11660] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.687178][T11660] ? do_sys_openat2+0x17a/0x1d0 [ 355.687226][T11660] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.687250][T11660] ? do_syscall_64+0x100/0x230 [ 355.687271][T11660] ? do_syscall_64+0xb6/0x230 [ 355.687292][T11660] do_syscall_64+0xf3/0x230 [ 355.687311][T11660] ? clear_bhb_loop+0x35/0x90 [ 355.687336][T11660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.687356][T11660] RIP: 0033:0x7fc22fd8cde9 [ 355.687371][T11660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.687386][T11660] RSP: 002b:00007fc230c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.687404][T11660] RAX: ffffffffffffffda RBX: 00007fc22ffa5fa0 RCX: 00007fc22fd8cde9 [ 355.687416][T11660] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 355.687427][T11660] RBP: 00007fc230c29090 R08: 0000000000000000 R09: 0000000000000000 [ 355.687437][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.687448][T11660] R13: 0000000000000000 R14: 00007fc22ffa5fa0 R15: 00007ffcc5f1bb58 [ 355.687475][T11660] [ 356.271860][T11667] FAULT_INJECTION: forcing a failure. [ 356.271860][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 356.284995][T11667] CPU: 1 UID: 0 PID: 11667 Comm: syz.4.2044 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 356.285018][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.285029][T11667] Call Trace: [ 356.285035][T11667] [ 356.285044][T11667] dump_stack_lvl+0x241/0x360 [ 356.285070][T11667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.285088][T11667] ? __pfx__printk+0x10/0x10 [ 356.285117][T11667] should_fail_ex+0x40a/0x550 [ 356.285144][T11667] should_failslab+0xac/0x100 [ 356.285166][T11667] __kmalloc_cache_noprof+0x70/0x390 [ 356.285185][T11667] ? nsim_fib_event_nb+0x17c/0x10b0 [ 356.285210][T11667] nsim_fib_event_nb+0x17c/0x10b0 [ 356.285230][T11667] ? __pfx_lock_release+0x10/0x10 [ 356.285254][T11667] ? fib6_purge_rt+0x7d7/0x890 [ 356.285280][T11667] notifier_call_chain+0x1a5/0x3f0 [ 356.285307][T11667] ? atomic_notifier_call_chain+0x26/0x180 [ 356.285328][T11667] atomic_notifier_call_chain+0xdb/0x180 [ 356.285350][T11667] call_fib_notifiers+0x31/0x60 [ 356.285369][T11667] fib6_del+0x1064/0x1600 [ 356.285392][T11667] ? fib6_del+0x1101/0x1600 [ 356.285430][T11667] ? __pfx_fib6_del+0x10/0x10 [ 356.285447][T11667] ? do_raw_spin_lock+0x14f/0x370 [ 356.285466][T11667] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 356.285497][T11667] ? __ip6_del_rt+0x8c/0x180 [ 356.285532][T11667] __ip6_del_rt+0x97/0x180 [ 356.285556][T11667] ip6_del_rt+0xe1/0x140 [ 356.285576][T11667] ? __pfx_ip6_del_rt+0x10/0x10 [ 356.285599][T11667] ? nlmsg_notify+0xfb/0x1c0 [ 356.285620][T11667] ? nlmsg_notify+0x15a/0x1c0 [ 356.285645][T11667] __ipv6_ifa_notify+0x8e3/0x1010 [ 356.285665][T11667] ? __timer_delete+0x5e/0x390 [ 356.285690][T11667] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 356.285711][T11667] ? mark_lock+0x9a/0x360 [ 356.285731][T11667] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.285756][T11667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.285784][T11667] ? __cancel_work+0x24a/0x390 [ 356.285805][T11667] ? lockdep_hardirqs_on+0x99/0x150 [ 356.285824][T11667] ? __cancel_work+0x2ee/0x390 [ 356.285851][T11667] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 356.285879][T11667] ipv6_del_addr+0x760/0x9b0 [ 356.285906][T11667] ? __pfx_ipv6_del_addr+0x10/0x10 [ 356.285937][T11667] inet6_addr_del+0x47e/0x610 [ 356.285967][T11667] addrconf_del_ifaddr+0x146/0x1c0 [ 356.285986][T11667] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 356.286008][T11667] ? tomoyo_path_number_perm+0x209/0x770 [ 356.286030][T11667] ? __pfx_lock_release+0x10/0x10 [ 356.286056][T11667] inet6_ioctl+0x10d/0x280 [ 356.286077][T11667] ? __pfx_inet6_ioctl+0x10/0x10 [ 356.286099][T11667] ? tomoyo_path_number_perm+0x65d/0x770 [ 356.286118][T11667] ? __lock_acquire+0x1397/0x2100 [ 356.286151][T11667] sock_do_ioctl+0x158/0x460 [ 356.286174][T11667] ? __pfx_sock_do_ioctl+0x10/0x10 [ 356.286211][T11667] sock_ioctl+0x626/0x8e0 [ 356.286229][T11667] ? __pfx_sock_ioctl+0x10/0x10 [ 356.286246][T11667] ? __fget_files+0x2a/0x410 [ 356.286272][T11667] ? __fget_files+0x2a/0x410 [ 356.286293][T11667] ? __pfx_sock_ioctl+0x10/0x10 [ 356.286309][T11667] __se_sys_ioctl+0xf5/0x170 [ 356.286328][T11667] do_syscall_64+0xf3/0x230 [ 356.286348][T11667] ? clear_bhb_loop+0x35/0x90 [ 356.286372][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.286393][T11667] RIP: 0033:0x7fc22fd8cde9 [ 356.286409][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.286423][T11667] RSP: 002b:00007fc230c29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.286442][T11667] RAX: ffffffffffffffda RBX: 00007fc22ffa5fa0 RCX: 00007fc22fd8cde9 [ 356.286454][T11667] RDX: 0000400000000000 RSI: 0000000000008936 RDI: 0000000000000006 [ 356.286465][T11667] RBP: 00007fc230c29090 R08: 0000000000000000 R09: 0000000000000000 [ 356.286475][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.286485][T11667] R13: 0000000000000000 R14: 00007fc22ffa5fa0 R15: 00007ffcc5f1bb58 [ 356.286514][T11667] [ 357.200916][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 357.248356][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 357.527075][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2046'. [ 357.548366][T11683] mac80211_hwsim hwsim14 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.313066][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 358.703359][T11712] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2055'. [ 359.019156][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 359.183590][T11718] bond4: entered promiscuous mode [ 359.236731][T11718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.866653][ C0] net_ratelimit: 10680 callbacks suppressed [ 359.866673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.885609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 359.898109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.910635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.923383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.936383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 359.948798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.961312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.974320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 359.986835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.244803][ T354] wlan0: Trigger new scan to find an IBSS to join [ 360.756527][T11738] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2063'. [ 362.802838][T11736] lo: entered promiscuous mode [ 362.824000][T11736] tunl0: entered promiscuous mode [ 362.844238][T11736] gre0: entered promiscuous mode [ 362.857436][T11736] gretap0: entered promiscuous mode [ 362.875922][T11736] erspan0: entered promiscuous mode [ 362.893995][T11736] ip_vti0: entered promiscuous mode [ 362.910248][T11736] ip6_vti0: entered promiscuous mode [ 362.972813][T11736] sit0: entered promiscuous mode [ 363.007730][T11736] ip6tnl0: entered promiscuous mode [ 363.034210][T11736] ip6gre0: entered promiscuous mode [ 363.083993][T11736] syz_tun: entered promiscuous mode [ 363.109437][T11736] ip6gretap0: entered promiscuous mode [ 363.124430][T11746] netlink: 'syz.6.2065': attribute type 2 has an invalid length. [ 363.139382][T11736] vcan0: entered promiscuous mode [ 363.164258][T11736] bond0: entered promiscuous mode [ 363.187437][T11736] dummy0: entered promiscuous mode [ 363.213680][T11736] nlmon0: entered promiscuous mode [ 363.257815][T11736] caif0: entered promiscuous mode [ 363.293822][T11741] FAULT_INJECTION: forcing a failure. [ 363.293822][T11741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.323072][T11741] CPU: 1 UID: 0 PID: 11741 Comm: syz.4.2064 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 363.323100][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 363.323111][T11741] Call Trace: [ 363.323116][T11741] [ 363.323123][T11741] dump_stack_lvl+0x241/0x360 [ 363.323147][T11741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.323164][T11741] ? __pfx__printk+0x10/0x10 [ 363.323181][T11741] ? __pfx_lock_release+0x10/0x10 [ 363.323210][T11741] should_fail_ex+0x40a/0x550 [ 363.323234][T11741] _copy_from_user+0x2d/0xb0 [ 363.323254][T11741] ethtool_set_channels+0x17b/0xaf0 [ 363.323276][T11741] ? aa_get_newest_label+0xff/0x6f0 [ 363.323298][T11741] ? __mutex_lock+0x602/0x1010 [ 363.323321][T11741] ? __pfx_aa_get_newest_label+0x10/0x10 [ 363.323343][T11741] ? __pfx_ethtool_set_channels+0x10/0x10 [ 363.323375][T11741] ? bpf_lsm_capable+0x9/0x10 [ 363.323396][T11741] ? security_capable+0x7e/0x2d0 [ 363.323424][T11741] dev_ethtool+0x1247/0x1bc0 [ 363.323454][T11741] ? __pfx_dev_ethtool+0x10/0x10 [ 363.323473][T11741] ? tomoyo_path_number_perm+0x5dd/0x770 [ 363.323506][T11741] ? dev_load+0x21/0x1f0 [ 363.323532][T11741] dev_ioctl+0x785/0x1340 [ 363.323559][T11741] sock_do_ioctl+0x240/0x460 [ 363.323582][T11741] ? __pfx_sock_do_ioctl+0x10/0x10 [ 363.323617][T11741] sock_ioctl+0x626/0x8e0 [ 363.323636][T11741] ? __pfx_sock_ioctl+0x10/0x10 [ 363.323652][T11741] ? __fget_files+0x2a/0x410 [ 363.323675][T11741] ? __fget_files+0x2a/0x410 [ 363.323699][T11741] ? __pfx_sock_ioctl+0x10/0x10 [ 363.323717][T11741] __se_sys_ioctl+0xf5/0x170 [ 363.323736][T11741] do_syscall_64+0xf3/0x230 [ 363.323756][T11741] ? clear_bhb_loop+0x35/0x90 [ 363.323780][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.323801][T11741] RIP: 0033:0x7fc22fd8cde9 [ 363.323815][T11741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.323830][T11741] RSP: 002b:00007fc230c08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.323848][T11741] RAX: ffffffffffffffda RBX: 00007fc22ffa6080 RCX: 00007fc22fd8cde9 [ 363.323861][T11741] RDX: 0000400000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 363.323872][T11741] RBP: 00007fc230c08090 R08: 0000000000000000 R09: 0000000000000000 [ 363.323882][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.323892][T11741] R13: 0000000000000001 R14: 00007fc22ffa6080 R15: 00007ffcc5f1bb58 [ 363.323919][T11741] [ 364.876415][ C0] net_ratelimit: 12419 callbacks suppressed [ 364.876436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.894921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.907358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 364.919737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.931933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.944357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.956928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 364.969319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.981632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.994235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.202950][ T11] wlan0: Trigger new scan to find an IBSS to join [ 366.111757][ T1112] wlan0: Creating new IBSS network, BSSID a2:a9:ea:2a:bd:00 [ 366.908647][T11772] netlink: 428 bytes leftover after parsing attributes in process `syz.7.2074'. [ 366.950988][T11772] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2074'. [ 367.837550][T11781] syzkaller0: entered promiscuous mode [ 367.889679][T11781] syzkaller0: entered allmulticast mode [ 368.580762][T11803] netlink: 'syz.7.2084': attribute type 9 has an invalid length. [ 368.626556][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2084'. [ 369.886554][ C0] net_ratelimit: 12825 callbacks suppressed [ 369.886574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.904812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.917207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.929875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 369.942239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.954546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.967490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.980135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 369.992448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.004727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.091323][T11817] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2087'. [ 374.896423][ C0] net_ratelimit: 13725 callbacks suppressed [ 374.896443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 374.914690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.926847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.939206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.951599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 374.963811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.975949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.988348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.000960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 375.013189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.586989][T11817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2087'. [ 376.637050][T11850] netlink: 'syz.4.2098': attribute type 3 has an invalid length. [ 377.430632][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 378.216516][T11880] netlink: 'syz.4.2107': attribute type 2 has an invalid length. [ 378.260892][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'. [ 379.320689][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2116'. [ 379.448532][T11910] dvmrp0: entered allmulticast mode [ 379.492889][T11912] dvmrp0: left allmulticast mode [ 379.538121][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2118'. [ 379.906486][ C0] net_ratelimit: 11221 callbacks suppressed [ 379.906507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.925336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 379.937773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.950183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.963583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.976491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 379.988919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.001334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.013732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.026689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 380.652583][T11930] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2126'. [ 380.799629][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2126'. [ 380.867737][T11930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.875226][T11930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.011844][T11930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.064915][T11930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.972505][T11953] netpci0: tun_chr_ioctl cmd 1074025672 [ 382.006793][T11953] netpci0: ignored: set checksum disabled [ 382.737111][T11962] dvmrp0: entered allmulticast mode [ 382.774029][T11963] dvmrp0: left allmulticast mode [ 383.083341][T11966] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.092184][T11966] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.100524][T11966] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.109738][T11966] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.119929][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 383.302042][T11966] vxlan1: entered promiscuous mode [ 383.335768][T11966] vxlan1: entered allmulticast mode [ 383.452449][T11979] netlink: 'syz.3.2139': attribute type 39 has an invalid length. [ 383.512883][T11966] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.522514][T11966] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.531600][T11966] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.540081][T11966] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.916360][ C0] net_ratelimit: 11872 callbacks suppressed [ 384.916378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.934643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.947587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.960328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 384.972692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.985012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.997374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.010100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 385.022433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.034778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.890422][T12014] dvmrp0: entered allmulticast mode [ 386.939114][T12017] dvmrp0: left allmulticast mode [ 387.057734][T12018] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2151'. [ 387.091806][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2150'. [ 387.117548][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2151'. [ 387.152185][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2151'. [ 387.183771][T12018] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2151'. [ 389.926297][ C0] net_ratelimit: 14650 callbacks suppressed [ 389.926318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.944534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.956892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.969575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 389.981929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.994116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.006922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.019377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 390.031654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.043805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.111344][T12023] pim6reg: entered allmulticast mode [ 393.126733][T12023] pim6reg: left allmulticast mode [ 393.266166][T12033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2157'. [ 393.477045][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2158'. [ 393.572087][T12039] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.581060][T12039] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.589883][T12039] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.598680][T12039] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.682675][T12044] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2162'. [ 393.738237][T12039] vxlan1: entered promiscuous mode [ 393.749198][T12039] vxlan1: entered allmulticast mode [ 393.801443][T12039] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.810627][T12039] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.819828][T12039] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.829922][T12039] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.765374][T12066] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2166'. [ 394.936498][ C0] net_ratelimit: 16853 callbacks suppressed [ 394.936518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 394.954864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.967360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.979756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.992584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 395.004982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.017364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.026234][T12068] dvmrp0: entered allmulticast mode [ 395.035712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.047991][T12069] dvmrp0: left allmulticast mode [ 395.048575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 395.065316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.211628][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 398.066746][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2171'. [ 399.059314][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2177'. [ 399.204570][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2177'. [ 399.545824][T12090] macvlan2: entered allmulticast mode [ 399.618053][T12090] dummy0: entered allmulticast mode [ 399.657919][T12090] dummy0: left allmulticast mode [ 399.795922][T12105] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2178'. [ 399.854538][T12105] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2178'. [ 399.872014][T12093] geneve2: entered promiscuous mode [ 399.894403][T12093] geneve2: entered allmulticast mode [ 399.946322][ C0] net_ratelimit: 11637 callbacks suppressed [ 399.946342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.964960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 399.977314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.989634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.002105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.014865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 400.027207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.039499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.052481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.065171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 400.153619][T12111] netlink: 428 bytes leftover after parsing attributes in process `syz.7.2180'. [ 400.203426][T12095] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2177'. [ 400.226362][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2180'. [ 400.864134][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2183'. [ 401.108753][T12114] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.319770][T12114] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.568727][T12114] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.774960][T12141] FAULT_INJECTION: forcing a failure. [ 401.774960][T12141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.790208][T12114] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.852170][T12141] CPU: 1 UID: 0 PID: 12141 Comm: syz.3.2189 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 401.852198][T12141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 401.852227][T12141] Call Trace: [ 401.852234][T12141] [ 401.852242][T12141] dump_stack_lvl+0x241/0x360 [ 401.852270][T12141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.852287][T12141] ? __pfx__printk+0x10/0x10 [ 401.852305][T12141] ? __pfx_lock_release+0x10/0x10 [ 401.852325][T12141] ? __local_bh_enable_ip+0x168/0x200 [ 401.852344][T12141] ? copy_fpstate_to_sigframe+0x184/0xe20 [ 401.852369][T12141] should_fail_ex+0x40a/0x550 [ 401.852394][T12141] copy_fpstate_to_sigframe+0xb29/0xe20 [ 401.852427][T12141] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 401.852461][T12141] ? __dequeue_signal+0x4a6/0x5d0 [ 401.852486][T12141] ? fpu__alloc_mathframe+0xab/0x130 [ 401.852508][T12141] get_sigframe+0x5d9/0x800 [ 401.852535][T12141] ? __pfx_get_sigframe+0x10/0x10 [ 401.852551][T12141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 401.852575][T12141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.852604][T12141] x64_setup_rt_frame+0x17e/0xd20 [ 401.852621][T12141] ? lockdep_hardirqs_on+0x99/0x150 [ 401.852641][T12141] ? _raw_spin_unlock_irq+0x2e/0x50 [ 401.852673][T12141] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 401.852702][T12141] arch_do_signal_or_restart+0x458/0x860 [ 401.852724][T12141] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 401.852741][T12141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 401.852774][T12141] ? syscall_exit_to_user_mode+0xa3/0x340 [ 401.852795][T12141] syscall_exit_to_user_mode+0xce/0x340 [ 401.852817][T12141] do_syscall_64+0x100/0x230 [ 401.852836][T12141] ? clear_bhb_loop+0x35/0x90 [ 401.852859][T12141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.852879][T12141] RIP: 0033:0x7fa19758cde9 [ 401.852899][T12141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.852913][T12141] RSP: 002b:00007fa1953f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 401.852931][T12141] RAX: fffffffffffffff4 RBX: 00007fa1977a5fa0 RCX: 00007fa19758cde9 [ 401.852944][T12141] RDX: 00000000000100a6 RSI: 0000400000000180 RDI: 0000000000000004 [ 401.852955][T12141] RBP: 00007fa1953f6090 R08: 0000400000000140 R09: 0000000000000014 [ 401.852966][T12141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.852976][T12141] R13: 0000000000000000 R14: 00007fa1977a5fa0 R15: 00007ffd2f40cde8 [ 401.853003][T12141] [ 402.537968][T12114] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.720391][T12114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.818600][T12114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.956099][T12114] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.144740][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2196'. [ 403.363912][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2196'. [ 403.536765][T12168] veth5: entered promiscuous mode [ 403.569356][T12168] veth5: entered allmulticast mode [ 403.621801][T12177] veth5: left promiscuous mode [ 403.665976][T12177] veth5: left allmulticast mode [ 404.242015][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 404.749024][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2207'. [ 404.788358][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2207'. [ 404.826727][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2207'. [ 404.956413][ C0] net_ratelimit: 10933 callbacks suppressed [ 404.956433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.975316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.987961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 405.000341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.012713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.025088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.037796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 405.050172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.062530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.075479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.121551][T12203] nbd2: detected capacity change from 0 to 256 [ 405.150626][ T5845] block nbd2: Receive control failed (result -32) [ 406.327444][T12231] netlink: 'syz.4.2216': attribute type 4 has an invalid length. [ 406.633155][T12240] dvmrp0: entered allmulticast mode [ 406.664746][T12240] dvmrp0: left allmulticast mode [ 406.790439][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2221'. [ 406.839698][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2219'. [ 406.916681][T12249] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 406.950518][T12247] team_slave_0: entered promiscuous mode [ 406.956717][T12247] team_slave_1: entered promiscuous mode [ 407.009270][T12247] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 407.161018][T12247] team_slave_0: left promiscuous mode [ 407.166590][T12247] team_slave_1: left promiscuous mode [ 409.966623][ C0] net_ratelimit: 11992 callbacks suppressed [ 409.966642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 409.984897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.997169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.009601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.022265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 410.034591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.046863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.059740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.072371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 410.084788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.285671][T12266] netlink: 428 bytes leftover after parsing attributes in process `syz.7.2228'. [ 410.298272][T12266] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2228'. [ 410.639251][T12274] netlink: 428 bytes leftover after parsing attributes in process `syz.7.2232'. [ 410.695281][T12276] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.793032][T12274] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2232'. [ 411.029964][T12276] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.214617][T12276] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.382581][T12276] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.623941][T12276] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.707216][T12276] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.812461][T12276] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.854378][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2240'. [ 411.905624][T12276] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.315410][T12308] xt_socket: unknown flags 0x4 [ 412.349510][T12308] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 412.391492][T12308] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2245'. [ 412.483734][T12313] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2247'. [ 412.891697][T12313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2247'. [ 412.965683][T12307] netdevsim netdevsim6: Direct firmware load for / [ 412.965683][T12307] failed with error -2 [ 412.994460][T12307] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 412.994460][T12307] [ 413.168354][T12321] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2249'. [ 413.367268][T12323] dvmrp0: entered allmulticast mode [ 413.398217][T12323] dvmrp0: left allmulticast mode [ 413.545467][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 414.518751][T12352] : renamed from bond0 (while UP) [ 414.976578][ C0] net_ratelimit: 11484 callbacks suppressed [ 414.976601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.995735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.008573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 415.021227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.033668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.046139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.058889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 415.071297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.083688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.096714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.363550][T12369] netlink: 'syz.4.2262': attribute type 10 has an invalid length. [ 416.878880][ T5845] Bluetooth: hci7: command 0x0405 tx timeout [ 416.993480][T12382] dvmrp0: entered allmulticast mode [ 417.056617][T12382] dvmrp0: left allmulticast mode [ 417.282155][T12389] __nla_validate_parse: 1 callbacks suppressed [ 417.282174][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2265'. [ 417.680991][T12367] IPv6: NLM_F_REPLACE set, but no existing node found! [ 419.089291][T12408] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 419.251242][T12412] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2273'. [ 419.335884][T12412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2273'. [ 419.986352][ C0] net_ratelimit: 11613 callbacks suppressed [ 419.986374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.004680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.017653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.030922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 420.043308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.055639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.068051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.080776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 420.093147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.105471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.376316][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 420.966726][ T55] Bluetooth: hci1: command tx timeout [ 421.179058][T12451] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2284'. [ 421.393272][T12451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2284'. [ 421.540240][T12454] netlink: 'syz.7.2285': attribute type 10 has an invalid length. [ 421.727717][T12454] veth0_macvtap: left promiscuous mode [ 421.778280][T12454] veth0_macvtap: entered promiscuous mode [ 421.854468][T12454] team0: Device macvtap0 failed to register rx_handler [ 421.935345][T12454] veth0_macvtap: left promiscuous mode [ 422.644187][T12477] dvmrp0: entered allmulticast mode [ 422.711548][T12478] dvmrp0: left allmulticast mode [ 422.935710][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 422.999153][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 423.896599][T12506] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 424.102714][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2302'. [ 424.398588][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 424.449787][T12519] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 424.996401][ C0] net_ratelimit: 11671 callbacks suppressed [ 424.996421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.999717][T12531] dvmrp0: entered allmulticast mode [ 425.002673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.032481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.045185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 425.057558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.060335][T12532] dvmrp0: left allmulticast mode [ 425.069863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.070202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.099518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 425.111872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.124218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.477537][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2310'. [ 426.891411][T12560] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 427.015506][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2319'. [ 428.727594][T12583] netlink: 'syz.6.2324': attribute type 10 has an invalid length. [ 428.805928][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2324'. [ 428.891812][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.900658][T12583] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.017805][T12583] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.025020][T12583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.032540][T12583] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.039729][T12583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.196664][T12583] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 429.524396][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2327'. [ 430.006602][ C0] net_ratelimit: 11425 callbacks suppressed [ 430.006622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 430.024985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.037283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.049672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.062386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 430.074718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.087020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.100189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.112841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 430.125178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.733219][T12619] FAULT_INJECTION: forcing a failure. [ 430.733219][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 430.810238][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.7.2336 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 430.810267][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.810278][T12619] Call Trace: [ 430.810284][T12619] [ 430.810291][T12619] dump_stack_lvl+0x241/0x360 [ 430.810318][T12619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.810335][T12619] ? __pfx__printk+0x10/0x10 [ 430.810365][T12619] should_fail_ex+0x40a/0x550 [ 430.810392][T12619] should_failslab+0xac/0x100 [ 430.810414][T12619] __kmalloc_cache_noprof+0x70/0x390 [ 430.810434][T12619] ? sctp_add_bind_addr+0x89/0x3a0 [ 430.810458][T12619] sctp_add_bind_addr+0x89/0x3a0 [ 430.810482][T12619] sctp_copy_local_addr_list+0x311/0x500 [ 430.810512][T12619] ? sctp_copy_local_addr_list+0xab/0x500 [ 430.810533][T12619] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 430.810556][T12619] ? sctp_v6_is_any+0x60/0x70 [ 430.810578][T12619] ? sctp_copy_one_addr+0x94/0x360 [ 430.810615][T12619] sctp_bind_addr_copy+0xad/0x3b0 [ 430.810635][T12619] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 430.810667][T12619] sctp_connect_new_asoc+0x2f3/0x6c0 [ 430.810693][T12619] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 430.810715][T12619] ? sctp_sendmsg+0xf1a/0x35d0 [ 430.810741][T12619] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 430.810762][T12619] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 430.810783][T12619] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 430.810807][T12619] sctp_sendmsg+0x1f64/0x35d0 [ 430.810847][T12619] ? __pfx_sctp_sendmsg+0x10/0x10 [ 430.810873][T12619] ? aa_sk_perm+0x96d/0xab0 [ 430.810911][T12619] ? inet_sendmsg+0x330/0x390 [ 430.810935][T12619] __sock_sendmsg+0x1a6/0x270 [ 430.810956][T12619] __sys_sendto+0x363/0x4c0 [ 430.810990][T12619] ? __pfx___sys_sendto+0x10/0x10 [ 430.811024][T12619] ? __fget_files+0x2a/0x410 [ 430.811055][T12619] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.811080][T12619] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.811109][T12619] __x64_sys_sendto+0xde/0x100 [ 430.811132][T12619] do_syscall_64+0xf3/0x230 [ 430.811152][T12619] ? clear_bhb_loop+0x35/0x90 [ 430.811177][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.811197][T12619] RIP: 0033:0x7f4e9b38cde9 [ 430.811213][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.811227][T12619] RSP: 002b:00007f4e9c2c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.811246][T12619] RAX: ffffffffffffffda RBX: 00007f4e9b5a5fa0 RCX: 00007f4e9b38cde9 [ 430.811258][T12619] RDX: 000000000000fee4 RSI: 0000400000847fff RDI: 0000000000000003 [ 430.811268][T12619] RBP: 00007f4e9c2c9090 R08: 000040000005ffe4 R09: 000000000000001c [ 430.811279][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.811289][T12619] R13: 0000000000000000 R14: 00007f4e9b5a5fa0 R15: 00007ffc76593928 [ 430.811316][T12619] [ 431.259864][T12627] ip6gretap0: entered promiscuous mode [ 431.266395][T12627] batadv_slave_0: entered promiscuous mode [ 431.461334][T12631] netlink: 'syz.6.2342': attribute type 1 has an invalid length. [ 431.564633][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2340'. [ 431.602387][T12631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.722851][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2342'. [ 432.863394][T12631] vlan0: entered promiscuous mode [ 432.889896][T12631] bond1: entered promiscuous mode [ 432.913830][T12646] bridge0: port 3(gretap0) entered blocking state [ 433.029764][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2346'. [ 433.071197][T12646] bridge0: port 3(gretap0) entered disabled state [ 433.169904][T12646] gretap0: entered allmulticast mode [ 433.188389][T12646] gretap0: entered promiscuous mode [ 433.285346][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2347'. [ 434.589355][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 434.806855][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2362'. [ 435.016491][ C0] net_ratelimit: 12721 callbacks suppressed [ 435.016511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.034776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.047499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 435.059798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.072026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.084627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.097072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 435.109381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.121522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.133688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.300884][T12692] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 439.740765][T12714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2369'. [ 439.958804][T12719] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 440.026674][ C0] net_ratelimit: 14865 callbacks suppressed [ 440.026696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 440.045088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.057431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.070431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.083140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 440.095525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.107904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 440.120315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.133093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 440.145491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.187930][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2370'. [ 440.417252][T12719] bond2: entered promiscuous mode [ 440.424101][T12719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.455574][T12735] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 440.469620][T12735] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2375'. [ 440.508554][T12723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.527728][T12723] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 440.562732][T12723] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 440.584575][T12723] bond2: (slave ip6gre1): making interface the new active one [ 440.593549][T12723] ip6gre1: entered promiscuous mode [ 440.606697][T12723] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 441.195546][T12745] ip6tnl1: entered promiscuous mode [ 441.387359][T12748] xt_l2tp: unknown flags: 10 [ 442.286471][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 442.590369][T12788] IPVS: set_ctl: invalid protocol: 58 172.30.0.8:20001 [ 443.713257][T12814] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2401'. [ 443.760246][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 443.942358][T12820] FAULT_INJECTION: forcing a failure. [ 443.942358][T12820] name failslab, interval 1, probability 0, space 0, times 0 [ 443.957618][T12820] CPU: 1 UID: 0 PID: 12820 Comm: syz.3.2403 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 443.957645][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 443.957656][T12820] Call Trace: [ 443.957663][T12820] [ 443.957670][T12820] dump_stack_lvl+0x241/0x360 [ 443.957697][T12820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.957715][T12820] ? __pfx__printk+0x10/0x10 [ 443.957734][T12820] ? __kmalloc_noprof+0xb5/0x4c0 [ 443.957755][T12820] ? __pfx___might_resched+0x10/0x10 [ 443.957781][T12820] should_fail_ex+0x40a/0x550 [ 443.957808][T12820] should_failslab+0xac/0x100 [ 443.957829][T12820] __kmalloc_noprof+0xdd/0x4c0 [ 443.957849][T12820] ? sock_kmalloc+0xd7/0x160 [ 443.957875][T12820] sock_kmalloc+0xd7/0x160 [ 443.957900][T12820] ____sys_sendmsg+0x231/0x860 [ 443.957928][T12820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.957948][T12820] ? __fget_files+0x2a/0x410 [ 443.957972][T12820] ? __fget_files+0x2a/0x410 [ 443.958001][T12820] __sys_sendmsg+0x269/0x350 [ 443.958026][T12820] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.958059][T12820] ? do_sys_openat2+0x17a/0x1d0 [ 443.958105][T12820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.958128][T12820] ? do_syscall_64+0x100/0x230 [ 443.958149][T12820] ? do_syscall_64+0xb6/0x230 [ 443.958169][T12820] do_syscall_64+0xf3/0x230 [ 443.958187][T12820] ? clear_bhb_loop+0x35/0x90 [ 443.958210][T12820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.958230][T12820] RIP: 0033:0x7fa19758cde9 [ 443.958245][T12820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.958259][T12820] RSP: 002b:00007fa1953f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.958277][T12820] RAX: ffffffffffffffda RBX: 00007fa1977a5fa0 RCX: 00007fa19758cde9 [ 443.958289][T12820] RDX: 0000000000000000 RSI: 0000400000001180 RDI: 0000000000000003 [ 443.958300][T12820] RBP: 00007fa1953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.958310][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.958319][T12820] R13: 0000000000000000 R14: 00007fa1977a5fa0 R15: 00007ffd2f40cde8 [ 443.958345][T12820] [ 444.265333][T12822] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 444.278298][T12822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2404'. [ 444.522399][T12806] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.036476][ C0] net_ratelimit: 11478 callbacks suppressed [ 445.036497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.043575][T12838] netlink: 'syz.3.2408': attribute type 2 has an invalid length. [ 445.054773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.075132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 445.087528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.099885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.112471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.124872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:17:01:65:96:a7, vlan:0) [ 445.137248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.149564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.161936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.561930][T12806] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.821479][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 446.153143][T12844] xt_CT: No such helper "pptp" [ 446.366341][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 446.735740][T12806] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.908007][T12861] netlink: 'syz.3.2413': attribute type 30 has an invalid length. [ 446.954020][T12860] netlink: 'syz.3.2413': attribute type 30 has an invalid length. [ 447.146408][T12806] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.385261][T12865] netlink: 'syz.4.2414': attribute type 1 has an invalid length. [ 447.743961][T12806] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.842098][T12806] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.967146][T12806] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.013399][T12880] netlink: 'syz.8.2417': attribute type 5 has an invalid length. [ 448.174347][T12878] ------------[ cut here ]------------ [ 448.180351][T12878] WARNING: CPU: 1 PID: 12878 at net/mac80211/driver-ops.c:467 drv_link_info_changed+0x153/0x8b0 [ 448.191579][T12878] Modules linked in: [ 448.195511][T12878] CPU: 1 UID: 0 PID: 12878 Comm: syz.3.2418 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 448.206575][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 448.216985][T12878] RIP: 0010:drv_link_info_changed+0x153/0x8b0 [ 448.223092][T12878] Code: 83 fd 01 75 1f e8 dd 4a 52 f6 eb 32 e8 d6 4a 52 f6 eb 2b 83 fd 03 74 21 83 fd 05 75 07 e8 c5 4a 52 f6 eb 1a e8 be 4a 52 f6 90 <0f> 0b 90 e9 c3 01 00 00 e8 b0 4a 52 f6 eb 05 e8 a9 4a 52 f6 4d 8d [ 448.244410][T12878] RSP: 0018:ffffc9000d386c28 EFLAGS: 00010283 [ 448.251340][T12878] RAX: ffffffff8b6f6ca2 RBX: 0000000000000001 RCX: 0000000000080000 [ 448.259795][T12878] RDX: ffffc9000f279000 RSI: 0000000000000631 RDI: 0000000000000632 [ 448.268144][T12878] RBP: 0000000080000000 R08: 0000000000000005 R09: ffffffff8b6f6c70 [ 448.276153][T12878] R10: 0000000000000004 R11: ffff888026875a00 R12: 0000000000000000 [ 448.284515][T12878] R13: 0000000000000200 R14: ffff888028d44d80 R15: ffff8880275f0e40 [ 448.292906][T12878] FS: 00007fa1953b46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 448.302212][T12878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.309167][T12878] CR2: 00007fc02cbf2d58 CR3: 000000005a4a2000 CR4: 00000000003526f0 [ 448.317716][T12878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.325721][T12878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.334024][T12878] Call Trace: [ 448.338356][T12878] [ 448.341318][T12878] ? __warn+0x165/0x4d0 [ 448.345504][T12878] ? drv_link_info_changed+0x153/0x8b0 [ 448.351752][T12878] ? report_bug+0x2b3/0x500 [ 448.356575][T12878] ? drv_link_info_changed+0x153/0x8b0 [ 448.362075][T12878] ? handle_bug+0x60/0x90 [ 448.366669][T12878] ? exc_invalid_op+0x1a/0x50 [ 448.371381][T12878] ? asm_exc_invalid_op+0x1a/0x20 [ 448.376709][T12878] ? drv_link_info_changed+0x120/0x8b0 [ 448.382204][T12878] ? drv_link_info_changed+0x152/0x8b0 [ 448.387983][T12878] ? drv_link_info_changed+0x153/0x8b0 [ 448.393479][T12878] ? drv_link_info_changed+0x152/0x8b0 [ 448.400406][T12878] ? ieee80211_link_info_change_notify+0x1a5/0x330 [ 448.407257][T12878] ieee80211_offchannel_stop_vifs+0x25c/0x590 [ 448.413368][T12878] __ieee80211_start_scan+0x1ac7/0x1e80 [ 448.419330][T12878] ? genl_rcv_msg+0xb1f/0xec0 [ 448.424039][T12878] ? netlink_rcv_skb+0x206/0x480 [ 448.429381][T12878] ? genl_rcv+0x28/0x40 [ 448.433609][T12878] ? __pfx___ieee80211_start_scan+0x10/0x10 [ 448.440532][T12878] rdev_scan+0x155/0x300 [ 448.444826][T12878] cfg80211_conn_scan+0xa4a/0xdb0 [ 448.450611][T12878] cfg80211_connect+0x1948/0x22f0 [ 448.455704][T12878] ? __pfx_cfg80211_connect+0x10/0x10 [ 448.461539][T12878] ? __asan_memset+0x23/0x50 [ 448.466173][T12878] ? nl80211_crypto_settings+0xb6d/0xf10 [ 448.472324][T12878] nl80211_connect+0x19ec/0x2140 [ 448.477418][T12878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.483437][T12878] ? __pfx_nl80211_connect+0x10/0x10 [ 448.488795][T12878] ? trace_contention_end+0x3c/0x120 [ 448.494181][T12878] genl_rcv_msg+0xb1f/0xec0 [ 448.498794][T12878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.503908][T12878] ? __pfx_lock_acquire+0x10/0x10 [ 448.509036][T12878] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 448.514437][T12878] ? __pfx_nl80211_connect+0x10/0x10 [ 448.519806][T12878] ? __pfx_nl80211_post_doit+0x10/0x10 [ 448.525300][T12878] ? __pfx___might_resched+0x10/0x10 [ 448.530678][T12878] netlink_rcv_skb+0x206/0x480 [ 448.535478][T12878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.541341][T12878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.547238][T12878] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 448.552749][T12878] genl_rcv+0x28/0x40 [ 448.557030][T12878] netlink_unicast+0x7f6/0x990 [ 448.561840][T12878] ? __pfx_netlink_unicast+0x10/0x10 [ 448.567194][T12878] ? __virt_addr_valid+0x45f/0x530 [ 448.572343][T12878] ? __phys_addr_symbol+0x2f/0x70 [ 448.577472][T12878] ? __check_object_size+0x47a/0x730 [ 448.582793][T12878] netlink_sendmsg+0x8de/0xcb0 [ 448.587688][T12878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.593021][T12878] ? aa_sock_msg_perm+0x91/0x160 [ 448.598070][T12878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.603380][T12878] __sock_sendmsg+0x221/0x270 [ 448.608156][T12878] ____sys_sendmsg+0x53a/0x860 [ 448.612969][T12878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.618448][T12878] ? __fget_files+0x2a/0x410 [ 448.623079][T12878] ? __fget_files+0x2a/0x410 [ 448.627790][T12878] __sys_sendmsg+0x269/0x350 [ 448.632417][T12878] ? vma_end_read+0x18/0x170 [ 448.637226][T12878] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.643177][T12878] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.649774][T12878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.656146][T12878] ? exc_page_fault+0x590/0x8b0 [ 448.661142][T12878] ? do_syscall_64+0xb6/0x230 [ 448.665858][T12878] do_syscall_64+0xf3/0x230 [ 448.670469][T12878] ? clear_bhb_loop+0x35/0x90 [ 448.675183][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.681173][T12878] RIP: 0033:0x7fa19758cde9 [ 448.685615][T12878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.705342][T12878] RSP: 002b:00007fa1953b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.713844][T12878] RAX: ffffffffffffffda RBX: 00007fa1977a6160 RCX: 00007fa19758cde9 [ 448.722196][T12878] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 000000000000000b [ 448.730244][T12878] RBP: 00007fa19760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 448.738336][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.747131][T12878] R13: 0000000000000001 R14: 00007fa1977a6160 R15: 00007ffd2f40cde8 [ 448.755179][T12878] [ 448.758845][T12878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.766153][T12878] CPU: 1 UID: 0 PID: 12878 Comm: syz.3.2418 Not tainted 6.14.0-rc2-syzkaller-00487-gdbcbec81c9b8 #0 [ 448.776940][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 448.787018][T12878] Call Trace: [ 448.790319][T12878] [ 448.793269][T12878] dump_stack_lvl+0x241/0x360 [ 448.797973][T12878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.803192][T12878] ? __pfx__printk+0x10/0x10 [ 448.807798][T12878] ? _printk+0xd5/0x120 [ 448.811976][T12878] ? __init_begin+0x41000/0x41000 [ 448.817019][T12878] ? vscnprintf+0x5d/0x90 [ 448.821373][T12878] panic+0x349/0x880 [ 448.825295][T12878] ? __warn+0x174/0x4d0 [ 448.829471][T12878] ? __pfx_panic+0x10/0x10 [ 448.833938][T12878] __warn+0x344/0x4d0 [ 448.837949][T12878] ? drv_link_info_changed+0x153/0x8b0 [ 448.843434][T12878] report_bug+0x2b3/0x500 [ 448.847780][T12878] ? drv_link_info_changed+0x153/0x8b0 [ 448.853265][T12878] handle_bug+0x60/0x90 [ 448.857455][T12878] exc_invalid_op+0x1a/0x50 [ 448.861990][T12878] asm_exc_invalid_op+0x1a/0x20 [ 448.866877][T12878] RIP: 0010:drv_link_info_changed+0x153/0x8b0 [ 448.872972][T12878] Code: 83 fd 01 75 1f e8 dd 4a 52 f6 eb 32 e8 d6 4a 52 f6 eb 2b 83 fd 03 74 21 83 fd 05 75 07 e8 c5 4a 52 f6 eb 1a e8 be 4a 52 f6 90 <0f> 0b 90 e9 c3 01 00 00 e8 b0 4a 52 f6 eb 05 e8 a9 4a 52 f6 4d 8d [ 448.892608][T12878] RSP: 0018:ffffc9000d386c28 EFLAGS: 00010283 [ 448.898713][T12878] RAX: ffffffff8b6f6ca2 RBX: 0000000000000001 RCX: 0000000000080000 [ 448.906701][T12878] RDX: ffffc9000f279000 RSI: 0000000000000631 RDI: 0000000000000632 [ 448.914728][T12878] RBP: 0000000080000000 R08: 0000000000000005 R09: ffffffff8b6f6c70 [ 448.922729][T12878] R10: 0000000000000004 R11: ffff888026875a00 R12: 0000000000000000 [ 448.930732][T12878] R13: 0000000000000200 R14: ffff888028d44d80 R15: ffff8880275f0e40 [ 448.938774][T12878] ? drv_link_info_changed+0x120/0x8b0 [ 448.944264][T12878] ? drv_link_info_changed+0x152/0x8b0 [ 448.949763][T12878] ? drv_link_info_changed+0x152/0x8b0 [ 448.955246][T12878] ? ieee80211_link_info_change_notify+0x1a5/0x330 [ 448.961785][T12878] ieee80211_offchannel_stop_vifs+0x25c/0x590 [ 448.967900][T12878] __ieee80211_start_scan+0x1ac7/0x1e80 [ 448.973472][T12878] ? genl_rcv_msg+0xb1f/0xec0 [ 448.978178][T12878] ? netlink_rcv_skb+0x206/0x480 [ 448.983145][T12878] ? genl_rcv+0x28/0x40 [ 448.987359][T12878] ? __pfx___ieee80211_start_scan+0x10/0x10 [ 448.993283][T12878] rdev_scan+0x155/0x300 [ 448.997556][T12878] cfg80211_conn_scan+0xa4a/0xdb0 [ 449.002618][T12878] cfg80211_connect+0x1948/0x22f0 [ 449.007707][T12878] ? __pfx_cfg80211_connect+0x10/0x10 [ 449.013102][T12878] ? __asan_memset+0x23/0x50 [ 449.017731][T12878] ? nl80211_crypto_settings+0xb6d/0xf10 [ 449.023395][T12878] nl80211_connect+0x19ec/0x2140 [ 449.028367][T12878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.034384][T12878] ? __pfx_nl80211_connect+0x10/0x10 [ 449.039695][T12878] ? trace_contention_end+0x3c/0x120 [ 449.045294][T12878] genl_rcv_msg+0xb1f/0xec0 [ 449.049893][T12878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.054977][T12878] ? __pfx_lock_acquire+0x10/0x10 [ 449.060031][T12878] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 449.065436][T12878] ? __pfx_nl80211_connect+0x10/0x10 [ 449.070751][T12878] ? __pfx_nl80211_post_doit+0x10/0x10 [ 449.076245][T12878] ? __pfx___might_resched+0x10/0x10 [ 449.081565][T12878] netlink_rcv_skb+0x206/0x480 [ 449.086366][T12878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.091413][T12878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.096739][T12878] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 449.102243][T12878] genl_rcv+0x28/0x40 [ 449.106242][T12878] netlink_unicast+0x7f6/0x990 [ 449.111051][T12878] ? __pfx_netlink_unicast+0x10/0x10 [ 449.116362][T12878] ? __virt_addr_valid+0x45f/0x530 [ 449.121500][T12878] ? __phys_addr_symbol+0x2f/0x70 [ 449.126546][T12878] ? __check_object_size+0x47a/0x730 [ 449.131857][T12878] netlink_sendmsg+0x8de/0xcb0 [ 449.136659][T12878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.141966][T12878] ? aa_sock_msg_perm+0x91/0x160 [ 449.146933][T12878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.152233][T12878] __sock_sendmsg+0x221/0x270 [ 449.156936][T12878] ____sys_sendmsg+0x53a/0x860 [ 449.161731][T12878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.167037][T12878] ? __fget_files+0x2a/0x410 [ 449.171655][T12878] ? __fget_files+0x2a/0x410 [ 449.176367][T12878] __sys_sendmsg+0x269/0x350 [ 449.180979][T12878] ? vma_end_read+0x18/0x170 [ 449.185596][T12878] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.190767][T12878] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.196787][T12878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 449.203144][T12878] ? exc_page_fault+0x590/0x8b0 [ 449.208018][T12878] ? do_syscall_64+0xb6/0x230 [ 449.212718][T12878] do_syscall_64+0xf3/0x230 [ 449.217239][T12878] ? clear_bhb_loop+0x35/0x90 [ 449.221945][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.227865][T12878] RIP: 0033:0x7fa19758cde9 [ 449.232301][T12878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.251932][T12878] RSP: 002b:00007fa1953b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.260378][T12878] RAX: ffffffffffffffda RBX: 00007fa1977a6160 RCX: 00007fa19758cde9 [ 449.268373][T12878] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 000000000000000b [ 449.276368][T12878] RBP: 00007fa19760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 449.284364][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.292355][T12878] R13: 0000000000000001 R14: 00007fa1977a6160 R15: 00007ffd2f40cde8 [ 449.300367][T12878] [ 449.303677][T12878] Kernel Offset: disabled [ 449.308075][T12878] Rebooting in 86400 seconds..